56796 matches found
Cisco PIX TCP SYN Packet Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15525/info Cisco PIX is susceptible to a remote denial-of-service vulnerability when handling certain TCP SYN packets. This issue allows attackers to temporarily block network traffic to arbitrarily targeted TCP services...
CacheFlow CacheOS 3.1.x/4.0.x/4.1 Unresolved Domain Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5305/info CacheOS is the firmware designed and distributed with CacheFlow web cache systems. It is maintained and distributed by CacheFlow. User supplied data is not sanitized before being included in an unresolved host...
Check Point Software Firewall-1 4.0/1 4.1 Fragmented Packets DoS
No description provided by source. source: http://www.securityfocus.com/bid/1312/info By sending illegally fragmented packets directly to or routed through Check Point FireWall-1, it is possible to force the firewall to use 100% of available processor time logging these packets. The FireWall-1...
Joomla Component com_caddy - Vulnerability
No description provided by source. Exploit Title: Vulnerability in Joomla Component comcaddy Date: 2010-04-22 Author: SuBz3r0 Software Link: Joomla Component: comcaddy Tested on: CVE : if exists Code : Just use for example the firefox addon tamper data while adding a product to the cart. Then loo...
CuteNews 1.4.6 index.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/36971/info CuteNews and UTF-8 CuteNews are prone to multiple vulnerabilities, including cross-site scripting, HTML-injection, information-disclosure, arbitrary-script-injection, and security-bypass issues. Note that...
FrontPage 97/98 Server Image Mapper Buffer Overflow
No description provided by source. source: http://www.securityfocus.com/bid/1117/info The htimage.exe and imagemap.exe files included with FrontPage handle server-side image mapping functions. Under normal operations, it would be passed a map name and a set of coordinates in the format http:...
EFileGo 3.0 - Multiple Input Validation Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/16124/info eFileGo is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to retrieve...
DGNews 2.1 Footer.PHP Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/24200/info DGNews is prone to a cross-site scripting vulnerability. Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected website...
BigAnt Server 2.2 - Buffer Overflow
No description provided by source. $Id: bigantserver.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
CubeCart 3.x - Remote File Upload Vulnerability
No description provided by source...
Lynx 2.8.x Command Line URL CRLF Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5499/info A CRLF injection vulnerability has been reported for Lynx that may allow an attacker to include extra HTTP headers when viewing web pages. If Lynx is called from the command line, carriage return and line feed...
Key Focus Web Server 3.1 Index.WKF Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/24623/info Key Focus Web Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code...
izicontents <= rc6 (rfi/lfi) Multiple Vulnerabilities
No description provided by source. o bug /. . . . .-' -...-'/ o o , . o -...--.\ vuln.: iziContents = RC6 RFI/LFI Multiple Remote Vulnerabilities author: [email protected] download: http://www.izicontents.com/download/iziContents1RC6.zip greetz: cOndemned, kacper ; remote file inclusion:...
JanaServer 2 Multiple Remote Denial of Service Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/11780/info JanaServer 2 is a commercially available proxy server designed for the Microsoft Windows platform. It contains support for services such as HTTP, FTP, email, and RealPlayer streaming. Multiple remote denial of...
tiki wiki cms groupware 5.2 - Multiple Vulnerabilities
No description provided by source. Source: http://www.securityfocus.com/bid/43507/info Tiki Wiki CMS Groupware is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the local...
System V Derived /bin/login Extraneous Arguments Buffer Overflow
No description provided by source. $Id: manyargs.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
SSH Communications Security SSH 1.2.27 Authentication Socket File Creation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/660/info A vulnerability in SSH's creation of the authentication agent UNIX domain socket allows local users to create a UNIX domain socket with an arbitrary file name in the system. SSH has the concept of authentication...
Shareplex 2.1.3 .9/2.2.2 beta Arbitary Local File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2535/info Shareplex is a database replication tool from Quest Software. Versions of the product contain a vulnerability which can permit local unprivileged users to read arbitrary files. The Qview component of Shareplex...
Affix Bluetooth Protocol Stack 3.1/3.2 Signed Buffer Index Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/13347/info A local signed buffer index vulnerability affects Affix Bluetooth Protocol Stack. This issue is due to a failure of the affected utility to properly handle user-supplied buffer size parameters. This issue may b...
elgg (xss/csrf/change password) Multiple Vulnerabilities
No description provided by source. + CMS Elgg 1.00 XSS;CSRF;Cambia PasswordMultiple Remote Vulnerabilities + Discovered By ThE Lorddemon [email protected] + Vendor:http://elgg.org/ + Greetings: Project MEMI-Bolivia, OpTix, RTM security Group http://zonartm.og Change Password Remotely:...
Telekorn Signkorn Guestbook 1.x includes/admin.inc.php dir_path Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/19977/info Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. This may allow the attacker to compromise the application and t...
WM-News 0.5 Print.PHP Local File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19968/info WM-News is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to compromise the application and the underlyin...
OpenSSH <= 4.3 p1 (Duplicated Block) Remote Denial of Service Exploit
No description provided by source. !/bin/bash OpenSSH CRC compensation attack detection DoS PoC. Tavis Ormandy [email protected] Yes, I really did implement crc-32 in bash. usage: script hostname victim hostname hostname=$1:-localhost port=$2:-22 where the fifo is created to communicate with netc...
mojoportal - Multiple Vulnerabilities
No description provided by source. ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ ''' Abysssec Inc Public Advisory Title : mojoportal Multiple Remote Vulnerabilities Affected Version : mojoPortal 2-3-4-3 Discovery :...
RoundCube 0.3.1 XRF/SQL injection
No description provided by source. Exploit Title: RoundCube 0.3.1 SQL injection Date: 10/10/2011 Author: Smith Falcon Software Link: http://roundcube.net/download Version: 0.3.1 Tested on: Linux timezone= is vulnerable to SQL Union Injection. POST data in http://site.com/roundcube/index.php...
Magic Winmail Server 4.0 (Build 1112) upload.php Traversal Arbitrary File Upload
No description provided by source. source: http://www.securityfocus.com/bid/12388/info Magic Winmail Server is reportedly affected by multiple vulnerabilities. There are two distinct directory traversal vulnerabilities in the Webmail interface allowing both arbitrary file downloads and uploads...
HP HP-UX 10.20/11.0,IBM AIX <= 4.3,SCO Unixware 7.0,Sun Solaris <= 2.6
No description provided by source. source: http://www.securityfocus.com/bid/131/info Due to improper checking of ownership, the dtappgather utility shipped with the Common Desktop Environment allows arbitrary users to overwrite any file present on the filesystem, regardless of the owner of the...
Kazaa Altnet Download Manager ActiveX Control Buffer Overflow
No description provided by source. $Id: kazaaaltnetheap.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
Linux Kernel <= 2.6.17.4 - (proc) Local Root Exploit
No description provided by source. / Author: h00lyshit Vulnerable: Linux 2.6 ALL Type of Vulnerability: Local Race Tested On : various distros Vendor Status: unknown Disclaimer: In no event shall the author be liable for any damages whatsoever arising out of or in connection with the use or sprea...
Exim 4.63 - Remote Root Exploit
No description provided by source. Exim 4.63 RedHat/Centos/Debian Remote Root Exploit by Kingcope Modified perl version of metasploit module =for comment use this connect back shell as trojanurl and be sure to setup a netcat, ---snip--- $system = '/bin/sh'; $ARGC=@ARGV; if $ARGC!=2 print Usage: $...
phpPgAdmin <= 4.2.1 (_language) Local File Inclusion Vulnerability
No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP YmmMMMM MMM YM Discovered by dun \ dunatstrcpy.pl phpPgAdmin = 4.2.1 Local File Inclusion Vulnerability Script: phpPgAdmin is a web-based administratio...
Joomla Jobprofile Component (com_jobprofile) - SQL Injection
No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register import re class TestPOCPOCBase: vulID = '72384' ssvid version = '1.0' author = 'kikay' vulDate = '2011-12-02' createDate ...
MusicBox 2.3 Type Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16030/info MusicBox is prone to an SQL injection vulnerability. Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit...
myNewsletter 1.1.2 UserName SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18287/info myNewsletter is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could...
JobHut 1.2 - Remote Password Change/Delete/Activate User Vulnerability
No description provided by source. -------------------------------------------------- JobHut = 1.2 manageUsers Remote password change Vulnerability ---------------------------------------------------- founder : ThE g0bL!N Script Download: http://jobhut.spranger.us/ version:= 1.2 thx: to K-159 for...
Kerio Personal Firewall <= 4.1.1 - Multiple IP Options DoS Exploit
No description provided by source. / HOD-kerio-firewall-DoS-expl.c: 2004-11-10 Copyright c 2004 houseofdabus Kerio Personal Firewall Multiple IP Options Denial of Service PoC Coded by .:: houseofdabus ::. Bug discoveried by eEye: http://www.eeye.com/html/research/advisories/AD20041109.html...
Sam Hawker wmcdplay 1.0 beta1-2 Buffer Overflow Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/1047/info wmcdplay is cdplayer generally used with the WindowMaker X11 window-manager on unix systems. While wmcdplay is rarely installed at all by default, when it is installed it is typically set setuid root. wmcdplay i...
ViArt CMS forum.php forum_id Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/36003/info ViArt CMS is prone to multiple cross site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context ...
Wordpress Plugin audio gallery playlist <= 0.12 - SQL Injection
No description provided by source. Exploit Title: WordPress wp audio gallery playlist plugin = 0.12 SQL Injection Vulnerability Date: 2011-08-30 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/wp-audio-gallery-playlist.0.12.zip...
cPanel 5/6/7/8/9 dir Parameter Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9853/info It has been reported that cPanel may be prone to a cross-site scripting vulnerability that may allow a remote attacker to execute HTML or script code in a user's browser. The issue presents itself due to...
PHP-Fusion Database Backup Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10974/info It is reported that PHP-Fusion is susceptible to a database backup information disclosure vulnerability. An anonymous remote attacker may be able to download a complete database backup from the server...
NetWin DBabble 2.5 i Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8637/info A cross-site scripting problem has been reported in NetWin DBabble. This could make it possible for an attacker to potentially execute code in the security context of a site using the vulnerable software. This...
PHP-Nuke 6.0 Modules.PHP Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6465/info A denial of service vulnerability has been reported for the modules.php script used by PHP-Nuke. The vulnerability occurs because the modules.php script does not properly validate some URI parameters. An attacke...
Opera + Mozilla Firefox 3.6 - Long String Crash Exploit (0day)
No description provided by source. ======================================================================= Mozilla Firefox 3.6 plenitude String Crash0day Exploit Opera plenitude String Denial of Service Exploit ======================================================================= by Asheesh Kum...
Webfroot Shoutbox 2.32 Expanded.PHP Remote Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7772/info Shoutbox is prone to an issue that may result in the execution of attacker-supplied code. The vulnerability exists due to insufficient sanitization of input into the expanded.php script...
Joomla Component (com_huruhelpdesk) SQL Injection Vulnerability
No description provided by source...
Firefox 3.6.8 - 3.6.11 Interleaving document.write and appendChild Exploit (From the Wild)
No description provided by source. !-- WARNING! This is exploit code from the wild. The original first 2 unicode chars at 'id=sun8' were ub8acu1029. Use, as always, at your own risk. body div style=visibility:hidden;width:0px;height:0px div...
e107 <= 0.75 - (e107language_e107cookie) Local File Include Exploit
No description provided by source. ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+...
ADN Forum <= 1.0b Insecure Cookie Handling Vulnerability
No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- adnforum = 1.0b / Insecure Cookie Handling Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- $ Program: adnforum $ Version: = 1.0b $ File affected: index.php $ Download:...
Pre Survey Generator 'default.asp' SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30349/info Pre Survey Generator is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to compromise the application, access or...