ActFax 5.01 RAW Server Buffer Overflow

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

HP NNM CGI webappmon.exe execvp Buffer Overflow

No description provided by source. $Id: hpnnmwebappmonexecvp.rb 12086 2011-03-23 03:38:46Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

ultrize timesheet 1.2.2 - Remote File Inclusion Vulnerability

No description provided by source. ===================================================================================== o Ultrize TimeSheet 1.2.2 Remote File Inclusion Vulnerability Software : Ultrize TimeSheet version 1.2.2 Vendor : http://www.ultrize.com/ Download :...

JustPORTAL 1.0 - 'site' Parameter Multiple SQL Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/29426/info JustPORTAL is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...

ActiveCampaign 1-2-All Broadcast Email 4.0 Admin Control Panel Username SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15400/info ActiveCampaign 1-2-All Broadcast Email is prone to an SQL-injection vulnerability. This is an input-validation issue related to data that will be used in SQL queries, allowing a remote user to influence the...

Solaris 2.5.1/2.6/7/8 rlogin /bin/login - Buffer Overflow Exploit (SPARC)

No description provided by source. / $Id: raptorrlogin.c,v 1.1 2004/12/04 14:44:38 raptor Exp $ raptorrlogin.c - rlogin, Solaris/SPARC 2.5.1/2.6/7/8 Copyright c 2004 Marco Ivaldi [email protected] Buffer overflow in login in various System V based operating systems allows remote attackers to...

PHPKick 0.8 - statistics.php SQL Injection Exploit

No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import Output, POCBase from pocsuite.utils import register class TestPOCPOCBase: vulID = '69551' version = '1' author = 'RickGray' vulDate = '2010-08-08' createDate = '2015-10-15'...

Ignition 1.2 - Multiple Local File Inclusion Vulnerabilities

No description provided by source. Ignition 1.2 Multiple Local File Inclusion Vulnerabilities disclosed by cOndemned download: http://launchpadlibrarian.net/27567060/ignition1.2.zip note: magicquotesgpc should be turned off in order to exploit this vulnerability greetz: all friends, SecurityReaso...

Poplar Gedcom Viewer <= 2.0 (common.php) Remote Inclusion Vuln

No description provided by source. /\ Poplar Gedcom Viewer v2.0 final ========================================================= Published : 2007-01-00 Remote: Yes Site:ftp://ftp1.comscripts.com/PHP/689poplarge-20.zip Author: GolDM = Mahmoodali Contact: [email protected]...

Joomla component com_universal Remote File Inclusion Vulnerability exploit

No description provided by source. Joomla component comuniversal = Remote File Inclusion Vulnerability exploit +Software: Joomla component comuniversal UWCMS Universal Web CMS +Version: 1.0.0 +License: http://www.gnu.org/copyleft/gpl.html GNU/GPL +Source: http://uwcms.sourceforge.net +CWE ID : 98...

DeWeS 0.4.2 - Directory Traversal Vulnerability

0 0 0 0...

SIESTTA 2.0 (LFI/XSS) Multiple Vulnerabilities

No description provided by source. SIESTTA 2.0 LFI/XSS Multiple Vulnerabilities download: http://ramoncastro.es/siesttaold/ Author: Jose Luis Gongora Fernandez 'aka' JosS mail: sys-projectathotmaildotcom site: http://www.hack0wn.com/ team: Spanish Hackers Team - SHT Hack0wn Security Project!! Thi...

OpenLinux 2.3/2.4,RedHat 6.0/6.1,SCO eServer 2.3 - Denial of Service

No description provided by source. source: http://www.securityfocus.com/bid/1377/info gpm is a program that allows Linux users to use the mouse in virtual consoles. It communicates with a device, /dev/gpmctl, via unix domain STREAM sockets and is vulnerable to a locally exploitable denial of...

coppermine 1.5.18 - Multiple Vulnerabilities

No description provided by source. waraxe-2012-SA081 - Multiple Vulnerabilities in Coppermine 1.5.18 ============================================================================== Author: Janek Vind waraxe Date: 29. March 2012 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-81.html...

LinPHA <= 1.3.1 (new_images.php) Remote Blind SQL Injection Exploit

No description provided by source. ?php / LinPHA = 1.3.1 newimages.php Remote Blind SQL Injection Hash Fishing Exploit / BENCHMARK method author...: EgiX mail.....: n0b0d1esathotmaildotcom link.....: http://linpha.sourceforge.net/ dork.....: LinPHA Version 1.3.x or The LinPHA developers vulnerabl...

ABCPP 1.3 Directive Handler Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/12021/info abcpp is prone to a buffer overflow vulnerability. This issue is exposed when the program is used to handle directives in ABC music notation files. Since the ABC files may originate from an external or untruste...

FilePocket 1.2 - Local Proxy Password Disclosure Exploit

No description provided by source. / FilePocket v1.2 Local Proxy Password Disclosure Exploit by Kozan Application: FilePocket 1.2 probably prior versions Vendor: ExoticSoft - www.exoticsoft.com Vulnerable Description: FilePocket v1.2 discloses proxy passwords to local users. Discovered & Coded by...

Windows Media Player 7.1 <= 10 - BMP Heap Overflow PoC (MS06-005)

No description provided by source. / For Remote Exploration hint: http://www.spyinstructors.com/atmaca/research/wmpremotepoc.asx / / Windows Media Player BMP Heap Overflow MS06-005 Bug discovered by eEye - http://www.eeye.com/html/research/advisories/AD20060214.html Exploit coded by ATmaCA Web:...

lastRSS autoposting bot MOD 0.1.3 'phpbb_root_path' Parameter Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/33843/info lastRSS autoposting bot MOD is prone to a remote file-include vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote...

Multiple Products 'banner.swf' Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/38732/info Multiple products are prone to a cross-site scripting vulnerability because the applications fail to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code i...

Ciamos CMS <= 0.9.6b (config.php) Remote File Include Exploit

No description provided by source. !/usr/bin/perl use LWP::UserAgent; ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+...

Openads (phpAdsNew) <=c 2.0.8 'lib-remotehost.inc.php' Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/25277/info Openads formerly known as phpAdsNew is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the...

WikiNi 0.4.x Waka.PHP Multiple HTML-Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/20688/info WikiNi is prone to multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input data before using it in dynamically generated content. An attacker may leverage these...

CMScout 2.09 CSRF Vulnerability

No description provided by source. Vulnerability ID: HTB22719 Reference: http://www.htbridge.ch/advisory/xsrfcsrfincmscout.html Product: CMScout Vendor: CMScout Team http://www.cmscout.co.za/ Vulnerable Version: 2.09 and probably prior versions Vendor Notification: 25 November 2010 Vulnerability...

SNewsCMS 2.x - 'search.php' Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/28262/info SNewsCMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage this issue to execu...

SazCart 1.5.1 - Multiple Remote File Inclusion Vulnerabilities

No description provided by source. -========================================== ViVa Islam + YeMeN ====================================- Name : SazCart 1.5.1 Multiple Remote File Include Vulnerability Download From : http://www.sazcart.com/site/download.php?id=16 Found By : RoMaNcYxHaCkEr...

ICUII 7.0 - Local Password Disclosure Exploit

No description provided by source. / ICUII 7.0 Local Password Disclosure Exploit by Kozan Application: ICUII 7.0 and probably prior versions Procuder: Cybration - www.icuii.com Vulnerable Description: ICUII 7.0 discloses passwords to local users. Discovered & Coded by Kozan Credits to ATmaCA...

Envolution <= 1.1.0 (PNSVlang) Remote Code Execution Exploit

No description provided by source. ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+...

JiRo's Upload System 1.0 Login.ASP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13833/info JiRo's Upload System is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitati...

D.R. Software Audio Converter 8.1 - DEP Bypass Exploit

No description provided by source...

Sudo <= 1.6.9p18 - (Defaults setenv) Local Privilege Escalation Exploit

No description provided by source. !/bin/sh Sudo = 1.6.9p18 local r00t exploit by Kingcope/2008/www.com-winner.com Most lame exploit EVER! Needs a special configuration in the sudoers file: --- Defaults setenv so environ vars are preserved : --- May also need the current users password to be type...

Grayscale BandSite CMS 1.1 pastshows_content.php the_band Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/20137/info Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data. These issues may allow an attacker to access sensitive informatio...

PHPAuction 'profile.php' SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/29856/info PHPAuction is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise th...

AllMyGuests <= 0.3.0 (AMG_serverpath) Remote Inclusion Vulnerabilities

No description provided by source. AllMyGuests 3.0 Remote File Inclusion Vulnerability Software: AllMyGuests Version: 3.0 Download: http://download.php-resource.net/AllMyGuests/AllMyGuests0.3.0.zip Found By: beks Bug In: /include/submit.inc.php /admin/index.php /include/cmsubmit.inc.php...

Azaronline Design SQL Injection Vulnerability

No description provided by source. Name: Azaronline Design SQL Injection Vulnerability Vendor: http://azaronline.com Date: 2010-11-02 Author: XroGuE Thanks to: Inj3ct0r.com,Exploit-DB.com,SecurityReason.com,Hack0wn.com ! Contact: Xroguep3rsi4nhack3ratHotmailDotcom Home: Inj3ct0r.com + Dork:...

Apache JackRabbit 2.0.0 webapp XPath Injection

No description provided by source. Title: Apache JackRabbit webapp XPath Injection Author: ADEO Security Published: 11/08/2010 Version: 2.0.0 Possible all versions Vendor: http://www.apache.org Download: http://www.apache.org/dyn/closer.cgi/jackrabbit/2.0.0/jackrabbit-2.0.0-src.zip Description:...

NC LinkList 1.3.1 - Remote Command Injection Exploit

No description provided by source. -------------------------------------------------------------- NC LinkList 1.3.1 Remote Command injection Exploit --------------------------------------------------------------- Founder :ThE g0bL!N Vendor:http://www.php-linkverzeichnis.de Thank You Very Much...

FTP Now <= 2.6.14 Local Password Disclosure Exploit

No description provided by source. / FTP Now v2.6.14 Local Password Disclosure Exploit by Kozan Application: FTP Now v2.6.14 and prior versions Vendor:www.network-client.com Vulnerable Description: FTP Now v2.6.14 discloses passwords to local users. Discovered & Coded by: Kozan Credits to ATmaCA...

iPool <= 1.6.81 Local Password Disclosure Exploit

No description provided by source. / iPool = v1.6.81 Local Password Disclosure Exploit by Kozan Application: iPool 1.6.81 Vendor: Memir Software - memirsoftware.com and The Pool Club - thepoolclub.com Vulnerable Description: iPool 1.6.81 discloses passwords to local users. Discovered & Coded by...

Icona SpA C6 Messenger DownloaderActiveX Control Arbitrary File Download and Execute

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

PHP Links <= 1.3 smarty.php Remote File Inclusion Vulnerability

No description provided by source. ------------------------------------------------------------- ----- H-T Team HouSSaMix + ToXiC350 from MoroCCo -------- ------------------------------------------------------------- = Author : Houssamix From H-T Team = Script : PHP Links from DeltaScripts = 1.3 ...

IBM AIX 3.2/4.1,SCO Unixware <= 7.1.1,SGI IRIX <= 5.3,Sun Solaris <= 2.5.1

No description provided by source. source: http://www.securityfocus.com/bid/127/info Statd is the RPC NFS status daemon. It is used to communicate status information to other services or host. The version of statd shipped with many unix implementations contains a buffer overflow condition. This...

Joomla Component ZiMB Manager com_zimbcore Local File Inclusion Vulnerability

No description provided by source. ============================================================================================================== o Joomla Component ZiMB Manager Local File Inclusion Vulnerability Software : comzimbcore version 0.1 Vendor : http://www.zimbllc.com/ Author :...

QuickPayPro 3.1 subscribers.tracking.edit.php subtrackingid Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/15863/info QuickPayPro is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities...

Joomla Component com_K2 -q 1.0.1b (category) SQL Injection Vuln

No description provided by source. ---------------------------------------------------------------------- Joomla Component comk2 sectionid SQL injection Vulnerability ---------------------------------------------------------------------- + Author : Chip D3 Bi0s + Email : chipdebiosalt+64gmail.com...

PrivateWire Gateway 3.7 - Remote Buffer Overflow Exploit (win32)

No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...

Sophos Web Protection Appliance 3.7.8.1 - Multiple Vulnerabilities

No description provided by source...

Winn Guestbook 2.4.8c - Stored XSS Vulnerability

No description provided by source. Exploit Title: Winn Guestbook v2.4.8c Stored XSS Date: 12/29/11 Author: G13 Software Link: http://code.google.com/p/winn-guestbook/, http://www.winn.ws Version: 2.4.8c Category: webapps php CVE: 2011-5026 Vulnerability There is no sanitation on the input of the...

BoastMachine 3.1 Index.PHP Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/24156/info BoastMachine is prone to a cross-site scripting vulnerability. Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected...

JSFTemplating, Mojarra Scales, GlassFish File Disclosure Vulnerabilities

No description provided by source. SEC Consult Security Advisory 20090901-0 ======================================================================= title: File disclosure vulnerability in JSFTemplating, Mojarra Scales and GlassFish Application Server v3 Admin console products: JSFTemplating...