Lucene search
+L
SeebugRecent

56796 matches found

seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•14 views

Oracle 8.x/9.x/10.x Database Multiple SQL Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/13144/info Oracle database is reported prone to multiple SQL injection vulnerabilities. These issues exist due to insufficient sanitization of user-supplied data. These issues can be exploited using malformed PL/SQL...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•21 views

Microsoft Internet Explorer 5 \'INPUT TYPE=FILE\' Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2045/info One of the ways users submit information to remote websites is through the INPUT type form options. Users can upload files to remote webservers with the input type=FILE option. Due to a design error in the...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•10 views

Doop Content Management System 1.3.x Multiple Input Validation Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/23482/info Doop Content Management System is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. Exploiting these issues could allow an attacker to...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•41 views

Mitsubishi MC-WorkX 8.02 ActiveX Control (IcoLaunch) File Execution

No description provided by source. html object classid='clsid:C28A127E-4A85-11D3-A5FF-00A0249E352D' id='target'/object !-- Mitsubishi MC-WorkX Suite Insecure ActiveX Control - IcoLaunch.dll Vendor: http://www.meau.com Version: MC-WorkX 8.02 Tested on: Windows XP SP3 / IE 6 Download:...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•17 views

Working Resources BadBlue 1.7 EXT.DLL Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5086/info BadBlue is a P2P file sharing application distributed by Working Resources. The ext.dll ISAPI does not sufficiently sanitize input. Because of this, it is possible for a user to create a custom URL containing...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•8 views

4CMS SQL Injection and Local File Include Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/34355/info 4CMS is prone to multiple SQL-injection vulnerabilities and a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting the SQL-injection issues could allow an...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•31 views

Microsoft Windows XP/2000/2003 Graphical Device Interface Plus Library Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/19221/info Reportedly, the Microsoft Windows GDI+ library 'gdiplus.dll' is prone to a denial-of-service vulnerability because the software fails to handle malformed image files properly. An attacker may leverage this issu...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•15 views

PY Software Active Webcam 4.3 Webserver Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9260/info It has been reported that Active Webcam webserver may be prone to a directory traversal vulnerability that may allow a remote attacker to gain access to sensitive information, which may be used to launch further...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•19 views

Oracle XDB.XDB_PITRIG_PKG.PITRIG_DROPMETADATA Procedure Exploit

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•14 views

ParsBlogger 'blog.asp' Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/32529/info ParsBlogger is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of ...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•23 views

Simple DNS Plus <= 5.0/4.1 - Remote Denial of Service Exploit

No description provided by source. !/usr/bin/perl Simple DNS Plus 5.0/4.1 remote Denial of Service exploit usage: sdns-dos.pl dns server dns source port num of packets Exploit written by Exodus. http://www.blackhat.org.il use IO::Socket; if@ARGV 3 printsdns-dos.pl dns server dns source port num o...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•90 views

rpcbind (CALLIT Procedure) UDP Crash PoC

No description provided by source. !/usr/bin/ruby rpcbindudpcrashpoc.rb 07/15/2013 Sean Verity veritysr1980 at gmail.com CVE 2013-1950 rpcbind CALLIT Procedure UDP Crash PoC Affected Software Package: rpcbind-0.2.0-19 Tested on: Fedora 17 3.9.8-100.fc17.x8664 1 SMP CentOS 6.3 Final...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•11 views

Apple Mac OS X 10.5.x 'ptrace' Mutex Handling Local Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/36915/info Apple Mac OS X is prone to a local denial-of-service vulnerability that is caused by a race condition. Exploiting this issue allows local, unprivileged users to crash affected kernels, denying further service t...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•20 views

Microsoft Internet Explorer 5 XML Page Object Type Validation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8565/info Internet Explorer does not properly handle object types, when rendering XML based web sites. This may result in the possibility of the execution of malicious software. The problem occurs when Internet Explorer...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•18 views

xine-lib <= 1.1.12 NSF demuxer Stack Overflow Vulnerability PoC

No description provided by source. xine-lib = 1.1.12 is prone to a stack-based buffer overflow in the NES Sound Format demuxerdemuxnsf.c. - Code opennsffile: 109: this-title = strdup&header0x0E; demuxnsfsendchunk: 122: char title100; 162: sprintftitle, %s, song %d/%d, this-title, this-currentsong...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•19 views

Archlinux x86-64 3.3.x-3.7.x x86-64 sock_diag_handlers[] Local Root

No description provided by source. // archer.c // // 2012 [email protected] // // Works reliably against x86-64 3.3-3.7 arch. // // Tested against: // // Linux XXX 3.3.1-1-ARCH 1 SMP PREEMPT Tue Apr 3 06:46:17 UTC 2012 x8664 GNU/Linux // Linux XXX 3.4.7-1-ARCH 1 SMP PREEMPT Sun Jul 29 22:02:56 CES...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•13 views

opera web browser 7.54 java implementation Multiple Vulnerabilities (2)

No description provided by source. source: http://www.securityfocus.com/bid/11712/info Multiple remote vulnerabilities reportedly affect the Opera Web Browser Java implementation. These issues are due to the insecure proprietary design of the Web browser's Java implementation. These issues may...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•24 views

SSH 1.2.x Secure-RPC Weak Encrypted Authentication Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2222/info SSH is a package designed to encrypt traffic between two end points using the IETF specified SSH protocol. The SSH1 package is distributed and maintained by SSH Communications Security. A problem exists which...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•14 views

Ubuntu 12.10 64-Bit sock_diag_handlers - Local Root Exploit

No description provided by source. include unistd.h include sys/socket.h include linux/netlink.h include netinet/tcp.h include errno.h include linux/if.h include linux/filter.h include string.h include stdio.h include stdlib.h include linux/sockdiag.h include linux/inetdiag.h include...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•13 views

Internet Explorer 6.0,Firefox 0.8/0.9.x JavaScript Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10998/info Web browsers from various vendors are reported prone to a JavaScript denial-of-service vulnerability. The specified JavaScript code will consume 100% of the CPU resources of the affected computer, crashing the...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•14 views

ManageEngine Security Manager Plus <= 5.5 build 5505 Remote SYSTEM SQLi (MSF)

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•18 views

IBM Lotus Notes 6.5.x 'names.nsf' Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/38880/info IBM Lotus Notes is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•26 views

Tektronix Phaser 740/750/850/930 Network Printer Administration Interface Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2659/info A remote vulnerability exists in Tektronix Phaser network printers in the 7xx, 8xx, and 9xx series. An attacker with access to the printer's local network or, if no firewall is in place, any attacker can reach t...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•40 views

Mozilla Firefox <= 1.5.0.4 - Javascript Navigator Object Code Execution PoC

No description provided by source. !-- Firefox = 1.5.0.4 Javascript navigator Object Code Execution PoC http://browserfun.blogspot.com/ The following bug mfsa2006-45 was tested on the Firefox 1.5.0.4 running on Windows 2000 SP4, Windows XP SP4, and a recently updated Gentoo Linux system. This bug...

7.5CVSS6.5AI score0.78359EPSS
SaveExploits13
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•17 views

JobHut 1.2 - Remote Password Change/Delete/Activate User Vulnerability

No description provided by source. -------------------------------------------------- JobHut = 1.2 manageUsers Remote password change Vulnerability ---------------------------------------------------- founder : ThE g0bL!N Script Download: http://jobhut.spranger.us/ version:= 1.2 thx: to K-159 for...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•17 views

J! Reactions 1.8.1 comPath Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/25198/info J! Reactions is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise the application and the...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•64 views

Dotproject 2.0 /includes/db_connect.php baseDir Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/16648/info Dotproject is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to includ...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•23 views

XtremeASP PhotoGallery 2.0 Adminlogin.ASP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9438/info XtremeASP PhotoGallery is prone to an SQL injection vulnerability. The issue is reported to exist in the administration login interface, which does not sufficiently sanitize user-supplied input for username and...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•14 views

Lootan 'login.asp' SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/33439/info Lootan is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•18 views

Mac OS X 10,HP-UX 9/10/11,Mandriva 6/7,RedHat 5/6,SCO 5,IRIX 6 Shell Redirection Race Condition

No description provided by source. source: http://www.securityfocus.com/bid/2006/info bash, tcsh, cash, ksh and sh are all variations of the Unix shell distributed with many Unix and Unix clone operating systems. A vulnerability exists in these shells that could allow an attacker to arbitrarily...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•14 views

SoftMaker Shop 0 Multiple Cross-Site Scripting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/16471/info SoftMaker Shop is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input. An attacker may leverage these issues to have arbitrary...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•16 views

Scout Portal Toolkit 1.3.1 - SPT-AdvancedSearch.php Multiple Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/15818/info Scout Portal Toolkit is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. A successful exploit could allow an attacker to compromise the...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•29 views

cpCommerce <= 1.1.0 (category.php id_category) SQL Injection Exploit

No description provided by source. ?/ Exploit Name: cpCommerce = 1.1.0 category.php idcategory Remote SQL Injection Exploit Autor: Kacper Contact: [email protected] Homepage: http://www.rahim.webd.pl/ Irc: irc.milw0rm.com:6667 devilteam Pozdro dla wszystkich z kanalu IRC oraz forum DEVIL TEAM...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•13 views

WordPress Plugin DZS Video Gallery 3.1.3 - Remote and Local File Disclosure Vulnerability

No description provided by source. Exploit Title: WordPress DZS Video Gallery dzs-videogallery 3.1.3 Plugins Remote and Local File Disclosure Vulnerability only .SWF Google Dork: inurl:/wp-content/plugins/dzs-videogallery/ Vendor Homepage: http://digitalzoomstudio.net/ Version: ALL Affected File:...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•15 views

Subscribe to Comments 2.0 WordPress Plugin Multiple Cross Site Scripting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/37105/info The Subscribe to Comments plugin for WordPress is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•17 views

PHPOpenChat 2.3.4/3.0.1 PoC_loginform.php phpbb_root_path Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/12817/info PHPOpenChat is prone to multiple remote file-include vulnerabilities. An attacker may leverage these issues to execute arbitrary server-side script code on an affected computer with the privileges of the...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•15 views

ClipShare 4.1.1 (gmembers.php, gid param) - Blind SQL Injection Vulnerability

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•17 views

HP OpenView OmniBack II Command Execution

No description provided by source. $Id: openviewomnibackexec.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and ter...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•19 views

Microsoft IIS 4.0 ISAPI Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1911/info The ASP ISAPI file parser does not properly execute certain malformed ASP files that contain scripts with the LANGUAGE parameter containing a buffer of over 2200 characters and have the RUNAT value set as...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•37 views

Liquid XML Studio 2010 <= 8.061970 - (LtXmlComHelp8.dll) OpenFile() Remote 0day Overflow Exploit

No description provided by source. html !-- |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | |...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•22 views

GlobalSCAPE Secure FTP Server Input Overflow

No description provided by source. $Id: globalscapeftpinput.rb 10559 2010-10-05 23:41:17Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and term...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•12 views

D-LINK DKVM-IP8 XSS Vulnerability

No description provided by source. Exploit Title: D-LINK DKVM-IP8 XSS Vulnerability Date: 01-06-2010 Author: POPCORN Software Link: http://www.dlink.ru/ Version: 2282dlinkA4p820071213 Tested on: Windows Sp 2 Site : http://Hacking.ge Code : POST http://site.com80/auth.asp HTTP/1.0 Accept: /...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•12 views

Flat Calendar 1.1 - Multiple Administrative Scripts Authentication Bypass Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/29662/info Flat Calendar is prone to multiple authentication-bypass vulnerabilities because it fails to perform adequate authentication checks. An attacker can exploit these issues to gain unauthorized access to the...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•167 views

TFM MMPlayer (m3u/ppl File) Buffer Overflow

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•19 views

PHP-Nuke 5.x/6.0 Avatar HTML Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6750/info A problem with PHP-Nuke could allow remote users to execute arbitrary code in the context of the web site. The problem is in the lack of sanitization of some types of input. PHP-Nuke does not sanitize code...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•19 views

BK Forum <= 4.0 (member.asp) Remote SQL Injection Vulnerability

No description provided by source. BK Forum = 4.0 Remote SQL Injection by n0m3rcy Copyright c 2006 n0m3rcy [email protected] Exploit: First you must be logged in Then type this in your browser...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•25 views

freebsd 4.2-stable ftpd glob() Buffer Overflow Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/2548/info The BSD ftp daemon and derivatives such as IRIX ftpd or the ftp daemon shipped with Kerberos 5 contain a number of buffer overflows that may lead to a compromise of root access to malicious users. During parsing...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•24 views

Xlink FTP Client Buffer Overflow

No description provided by source. $Id: xlinkclient.rb 10998 2010-11-11 22:43:22Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•10 views

FileExecutive 1 - Multiple Vulnerabilities

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•24 views

ECardPro 2.0 Search.ASP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/20080/info ECardPro is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...

7.1AI score
SaveExploits0
Total number of security vulnerabilities56796