Lucene search
+L
SeebugRecent

56796 matches found

seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•16 views

Quagga Routing Software Suite 0.9x - RIPd RIPv1 Request Routing Table Disclosure

No description provided by source. source: http://www.securityfocus.com/bid/17808/info Quagga is susceptible to remote information-disclosure and route-injection vulnerabilities. The application fails to properly ensure that required authentication and protocol configuration options are enforced...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•15 views

OneHTTPD 0.6 Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/39757/info OneHTTPD is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting the issue may allow an attacker to obtain sensitive information that could...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•27 views

Cisco CallManager 3.x/4.x Web Interface ccmuser/logon.asp XSS

No description provided by source. source: http://www.securityfocus.com/bid/18504/info Cisco CallManager is prone to a cross-site scripting vulnerability. This issue is due to a failure in the web-interface to properly sanitize user-supplied input. An attacker may leverage this issue to have...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•25 views

Netopia Timbuktu Pro for Macintosh 6.0.1 - Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3918/info Timbuktu is a remote administration tool. It is available for the Microsoft Window's family of operating systems and Power PC based Macintosh computers. It supports a variety of administrative tasks, including...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•19 views

UMI.CMS 2.9 - CSRF Vulnerability

No description provided by source. 添加一个管理员用户:csrfuser|||password document.main.submit;...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•20 views

OneOrZero 1.6.3 Helpdesk Index.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/17298/info OneOrZero Helpdesk is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•22 views

WebCortex WebStores2000 SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7766/info This vulnerability is reportedly caused by a lack of sufficient sanitization of user-supplied data contained in URI parameters supplied to WebStores2000. Successful exploitation may allow for modification of the...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•14 views

IGeneric Free Shopping Cart 1.4 - SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9771/info It has been reported that iGeneric Free Shopping Cart is prone to an SQL injection vulnerability. This issue is due to a failure of the application to properly sanitize user supplied URI parameters As a result o...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•32 views

DoubleTake/HP StorageWorks Storage Mirroring Service Authentication Overflow

No description provided by source. $Id: doubletake.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•25 views

Hummingbird HostExplorer 6.2/8.0 ActiveX Control 'PlainTextPassword()' Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/31783/info Hummingbird HostExplorer ActiveX control is prone to a buffer-overflow vulnerability because the application fails to adequately check boundaries on user-supplied input. An attacker can exploit this issue to...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•18 views

AlienVault OSSIM av-centerd Command Injection

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rexml/document' class Metasploit3 Msf::Exploit::Remote Rank = ExcellentRanking include...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•24 views

MySQL MaxDB 7.5 WAHTTP Server Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11843/info A remote denial of service vulnerability has been reported to affect the MySQL MaxDB WAHTTP server. This issue is due to a failure of the server to handle malformed requests. An attacker may leverage this issue...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•17 views

MailEnable Professional/Enterprise <= 2.37 Denial of Service Exploit

No description provided by source. !/usr/bin/perl maildisable-v7.pl Mail Enable Professional/Enterprise v2.32-7 win32 by mu-b - Wed Feb 14 2007 - Tested on: Mail Enable Professional v2.37 win32 use Getopt::Std; getopts't:', %arg; use Socket; use MIME::Base64; my $target; if defined$arg't' $target...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•17 views

ActiveWeb Contentserver 5.6.2929 Picture_Real_Edit.ASP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/24894/info activeWeb contentserver is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•39 views

Mambo Component Ricette 1.0 - Remote SQL Injection Vulnerability

No description provided by source. joomla SQL Injectioncomricette AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORK 1 : allinurl: comricette DORK 2 : allinurl: comricetteid EXPLOIT :...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•22 views

NETGEAR N600 WIRELESS DUAL BAND WNDR3400 - Multiple Vulnerabilities

No description provided by source. Title: Multiple vulnerabilities in NETGEAR N600 WIRELESS DUAL BAND WNDR3400 ==================================================================================== Notification Date: 4/14/2014 Affected Vendor: NETGEAR N600 WIRELESS DUAL BAND WNDR3400 Firmware...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•20 views

BosDates 4.0 - Multiple SQL Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/15632/info BosDates is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitatio...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•16 views

PostNuke 0.6/0.7 web_links Module TTitle Cross-site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8374/info It has been reported that a cross site scripting vulnerability exists in the Downlaods and WebLinks modules of PostNuke. It is possible that an attacker may construct a link containing malicious script code that...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•18 views

PostNuke 0.6/0.7 Downloads Module TTitle Cross-site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8374/info It has been reported that a cross site scripting vulnerability exists in the Downlaods and WebLinks modules of PostNuke. It is possible that an attacker may construct a link containing malicious script code that...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•21 views

CF Image Host 1.1 - Remote File Inclusion Vulnerability

No description provided by source. Download: http://codefuture.co.uk/counter/?id=22 Title : CF Image Host Remote File Inclusion Vulnerability Author: The.Morpheus Contact: - Thanks: Herkese : Greetz: Megaturks.Net | Spyturks.Com demo :http://codefuture.co.uk/projects/imagehost1.1/demo/...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•32 views

interphoto gallery - Multiple Vulnerabilities

No description provided by source. ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | Day 6 0day | | | | || / \ || | | | || ||// \/|/ ''' - Title : InterPhoto Gallery Multiple Remote Vulnerabilities - Affected Version : = 2.4.0 - Vendor Site :...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•39 views

Joomla Component com_jcalpro 1.5.3.6 - Remote File Inclusion

No description provided by source. Author : kaMtiEz [email protected] Homepage:http://www.indonesiancoder.com Software Information + Vendor : http://www.anything-digital.com + version : 1.5.3.6 Stable or upper / lower maybe also affected + Dork : inurl:comjcalpro Vulnerable File...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•20 views

MailEnable Pro/Ent <= 2.37 (APPEND) Remote Buffer Overflow Exploit

No description provided by source. !/usr/bin/perl maildisable-v4.pl Mail Enable Professional/Enterprise v2.32-4 win32 remote exploit by mu-b - Wed Nov 29 2006 - Tested on: Mail Enable Professional v2.32 win32 - with HOTFIX Mail Enable Professional v2.33 win32 Mail Enable Professional v2.35 win32...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•26 views

Microsoft Internet Connection Signup Wizard DLL Hijacking Exploit (smmscrpt.dll)

No description provided by source. Greetz to :b0nd, Fbih2s,r45c4l,Charles ,j4ckh4x0r, punter,eberly, Charles , Dinesh Arora Site : www.BeenuArora.com / Exploit Title: Microsoft Internet Connection Signup Wizard DLL Hijacking Date: 25/08/2010 Author: Beenu Arora Tested on: Windows XP SP3 Vulnerabl...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•28 views

Creato Script SQL Injection Vulnerability

No description provided by source. Title: Creato Script SQL Injection Vulnerability Version: 2.1 Author: Mr.P3rfekT Software Site: http://www.creato.biz Tested on Lunix CVE : N/A Founded By Mr.P3rfekT Dork : created by creato.biz Helllo Allz. Exploit : http://site/mainpage.php?id=SQLi Poc Usernam...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•26 views

PHPTB Topic Board 2.0 file_o.php absolutepath Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/14592/info PHPTB is prone to multiple remote file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•25 views

Vastal I-Tech Agent Zone SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/36503/info Agent Zone is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise th...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•21 views

WikkiTikkiTavi 0.x Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3946/info WikkiTikkiTavi is a freely available engine for running a Wiki site. Wiki sites are web communities which are based on the idea that every webpage is editable by users of the website. WikkiTikkiTavi is back-ende...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•17 views

Jarida 1.0 - Multiple Vulnerabilities

No description provided by source. Exploit Title: Jarida 1.0 SQL Injection Date : 26 September 2011 Author : Ptrace Security Gianni Gnesa gnix Contact : researchatptrace-securitydotcom Software Link: http://sourceforge.net/projects/jarida/ Version : 1.0 Tested on : CentOS 5.6 01 ./article.php:28:...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•12 views

Podcast Generator <= 1.0 BETA 2 RFI / File Disclosure Vulnerabilities

No description provided by source. Podcast Generator = 1.0 BETA 2 RFI / File Disclosure Remote Vulnerabilities http://sourceforge.net/project/showfiles.php?groupid=163847 POC : I- Remote File Inclusion Vulnerabilities /podcastgen1.0beta2/components/xmlparser/loadparser.php?absoluteurl=shell...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•27 views

PHP 3.0/4.0 Error Logging Format String Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1786/info PHP is a scripting language designed for CGI applications that is used on many websites. There exists a remotely exploitable format string vulnerability in all versions of PHP below PHP 4.0.3. The vulnerability...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•26 views

Qualcomm Eudora 6.0.1/6.1.1 Attachment LaunchProtect Warning Bypass Weakness (1)

No description provided by source. source: http://www.securityfocus.com/bid/9101/info A problem has been identified in the implementation of LaunchProtect within Eudora. Because of this, it may be possible to trick users into performing dangerous actions. May 21, 2004 - Eudora version 6.1.1 has...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•29 views

Traceroute-nanog 6 Local Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6166/info A vulnerability has been discovered in Traceroute-nanog. It has been reported that Traceroute-nanog contains a buffer overflow condition. The overflow occurs in the 'getorigin' function in the 'traceroute.c' fil...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•23 views

Microsoft Windows 2003/XP ReadDirectoryChangesW Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/22664/info Microsoft Windows is prone to a local information-disclosure vulnerability. A local attacker may leverage this issue to gain access to potentially sensitive information about user permissions and accessed files...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•14 views

Linux Kernel 2.6.x - 'make_indexed_dir()' Local Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/33618/info The Linux kernel is prone to a local denial-of-service vulnerability because it fails to properly handle malformed filesystem images. Attackers can exploit this issue to cause the kernel to crash, denying servi...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•26 views

Wordpress Plugin Better WP Security - Stored XSS

No description provided by source. ======= Summary ======= Name: Bit51 Better WP Security Plugin - Unauthenticated Stored XSS to RCE Release Date: 30 July 2013 Reference: NGS00500 Discoverer: Richard Warren [email protected] Vendor: Bit51 Vendor Reference: Systems Affected: Bit51 Better...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•19 views

OSCommerce 2.1/2.2 Info_Message Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7153/info It has been reported that osCommerce does not sufficiently filter URI parameters supplied to multiple osCommerce scripts. As a result of this deficiency, it is possible for a remote attacker to create a maliciou...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•25 views

Claroline 1.8.9 phpbb/reply.php URL XSS

No description provided by source. source: http://www.securityfocus.com/bid/30269/info Claroline is prone to multiple input-validation vulnerabilities: 1. Multiple cross-site scripting vulnerabilities. 2. A remote URI-redirection vulnerability. An attacker may leverage these issues to execute...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•54 views

Joomla JE Auto Component (com_jeauto) LFI Vulnerability

Joomla JE Auto Component 支持Joomla1.5 Joomla1.6版本,view参数没做好处理,造成了包含漏洞,但是受到php版本的限制,php版本5.3.4以下。 1.漏洞分析 下载不到源码,推测漏洞的成因 php $view = $GET'view'; 然后不经过处理 直接包含了文件 include$view."inc.php"; 这种需要截断才能利用的LFI受到了php版本限制,在PHP 5.3.4以上中已经修复了%00截断的漏洞。 2.漏洞利用 http://host/jeauto/index.php?option=comjeauto&view=LFI%...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•28 views

DriveCrypt <= 5.3 - Local Kernel ring0 SYSTEM Exploit

No description provided by source. / drivecrypt-dcr.c Copyright c 2009 by [email protected] DriveCrypt = 5.3 local kernel ring0 SYSTEM exploit by mu-b - Sun 16 Aug 2009 - Tested on: DCR.sys Compile: MinGW + -lntdll - Private Source Code -DO NOT DISTRIBUTE - http://www.digit-labs.org/ --...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•24 views

phUploader 2 - Remote File Upload Vulnerability

No description provided by source. Exploit Title: phUploader Remote File Upload Vulnerability Date: 20-12-2009 Author: wlhaan-hacker Version: v2 CVE : N/A ========================================================================== Script Name : phUploader Language : php email: [email protected]...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•30 views

GoAhead WebServer 2.1 - Remote Arbitrary Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5464/info GoAhead WebServer is an Open Source embedded web server which supports Active Server Pages, embedded javascript, and SSL authentication and encryption. It is available for a variety of platforms including...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•27 views

Microsoft Internet Explorer 5/6 XML Redirect File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5560/info A flaw in Microsoft Internet Explorer may reveal the entire contents of XML files and partial contents of other files to attackers. This vulnerability allows an attacker to read the entire contents of XML files,...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•24 views

Orkut Clone profile_social.php id Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/32600/info Orkut Clone is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•29 views

Microsoft Windows XP/VISTA/2000/2003/2008 - Kernel Usermode Callback Local Privilege Escalation Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/28554/info Microsoft Windows is prone to a local privilege-escalation vulnerability. The vulnerability resides in the Windows kernel. A locally logged-in user can exploit this issue to gain kernel-level access to the...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•28 views

Joomla Component RSfiles <= 1.0.2 (path) File Download Vulnerability

No description provided by source. Title : Joomla Component RSfiles = 1.0.2 path Remote File Download Vulnerability Author : ajann Contact : : S.Page : http://www.rsjoomla.com $$ : 10 $ Dork : inurl:/index.php?option=comrsfiles DorkEx :...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•26 views

Exjune Guestbook 2.0 - Remote Database Disclosure Exploit

No description provided by source. !/usr/bin/perl By AlpHaNiX NullArea.Net alphaathacker.bz Made in Tunisia script : Exjune Guestbook v2 download : http://www.exjune.com/downloads/downloads/exJuneguestbook.asp Vulnerable : database path : /admin/exdb.mdb Real Life Example : OOO OOO OO OO OO OO O ...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•17 views

Adaptive Website Framework 1.11 Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/18386/info Adaptive Website Framework is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•23 views

City Directory Review and Rating Script (search.php) SQL Injection Vulnerability

No description provided by source. Exploit Title: City Directory Review and Rating Script SQL Injection Vulnerability Date: 22.12.2012 Author: 3spi0n Script Vendor or Software Link: http://b-scripts.com/en/18-city-reviewer-yelp-clone.html Category: WebApps Type: SQL Injection MySQLi Tested On:...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•12 views

Microsoft Windows 2000/XP Registry Access Local Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/18995/info Microsoft Windows is prone to a denial-of-service vulnerability. This issue occurs when a program calls certain API calls for manipulating Windows registry keys. This may crash the affected computer. NOTE: This...

7.1AI score
SaveExploits0
Total number of security vulnerabilities56796