56796 matches found
Travel Portal Script Admin Password Change - CSRF Vulnerability
No description provided by source. ===================================================== Travel PORTAL = Admin Password Change CSRF Exploit ===================================================== My + Author : KnocKout Contact : [email protected] Software info |Web App. : Travel PORTAL |Price : 299...
PHPhotoalbum 0.5 - Multiple Remote SQL Injection Vulnerabilities
No description provided by source. Name : PHPhotoalbum v0.5 Multiple Remote SQL Injection Vulnerabilities Author : cOndemned Dork : intext:PHPhotoalbum v0.5 Greetz : ZaBeaTy, str0ke, TBH, Hawk, doctor, Sandtalker, Avantura ; Proof of Concept :...
RedHat 4.x/5.x/6.x,RedHat man 1.5,Turbolinux man 1.5,Turbolinux 3.5/4.x man Buffer Overrun (2)
No description provided by source. / source: http://www.securityfocus.com/bid/1011/info RedHat 4.0/4.1/4.2/5.0/5.1/5.2/6.0/6.2,RedHat man 1.5,Turbolinux man 1.5,Turbolinux 3.5/4.2/4.4 man Buffer Overrun Vulnerability A buffer overflow exists in the implementation of the 'man' program shipped with...
HP LaserJet Pro P1606dn - Webadmin Password Reset
No description provided by source. !/usr/bin/python Exploit Title: HP LaserJet Pro P1606dn Webadmin password reset Date: 20.05.2013 Exploit Author: m3tamantra http://m3tamantra.wordpress.com/blog Vendor Homepage: http://www8.hp.com/de/de/products/printers/product-detail.html?oid=4110411 Firmware...
AspxCommerce 2.0 - Arbitrary File Upload Vulnerability
No description provided by source. Exploit Title: AspxCommerce v2.0 - Arbitrary File Upload Vulnerability Exploit Author: SANTHO Vendor Homepage: http://www.aspxcommerce.com/ Version: Version 2.0 and below Introduction: AspxCommerce is a complete e-Commerce solution for setting up a fully...
Qualiteam X-Cart 4.0.8 search.php mode Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/13817/info X-Cart is prone to SQL injection and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. These vulnerabilities could permit remot...
ZipScan 2.2c SEH
No description provided by source. !/usr/bin/perl Software : ZipScan 2.2c .zip Bug found by : Lincoln Author : Lincoln & corelanc0d3r OS : Windows Tested on : XP SP3 En VirtualBox Type of vuln : SEH Greetz to : Corelan Security Team...
Kiasabz Article News CMS Magazine SQL Injection Vulnerability
No description provided by source...
videodb <= 3.0.3 - Multiple Vulnerabilities
No description provided by source. Exploit Title: VideoDB Multiple Vulnerabilities Date: 09.10.2010 Author: Valentin Category: webapps/0day Version: 3.0.3 and earlier Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information...
Multiple Vendors (Firefox/Evince/EOG/Gimp) - (.SVG) Denial of Service PoC
No description provided by source. Malicious SVG file DoS The following applications were tested in their latest revisions: Firefox's browse for file, preview object on linux: affected evince on linux: affected eog on linux: affected gimp on linux: affected inkscape on linux: unaffected Microsoft...
impleo music collection 2.0 (sql/xss) Multiple Vulnerabilities
No description provided by source. + Impleo Music Collection 2.0 SQL/XSS Multiple Remote Vulnerabilities + Download: http://sappy.dk/impleo/download-impleo + Discovered By SirGod + www.mortal-team.org + SQL Injection Auth Bypass - Requirements : magicquotesgpc = off - Vulnerable code in...
WEBgais 1.0 - Remote Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2058/info WEBgais is a script that provides a web interface to the gais Global Area Intelligent Search search engine tool. All versions up to 1.0B2 are vulnerable. The vulnerable script is /cgi-bin/webgais: due to imprope...
A.I-Pifou 1.8 Choix_langue.PHP Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/20120/info A.I-Pifou is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable...
firefly media server (mt-daapd) 2.4.1 / svn 1699 - Multiple Vulnerabilities
No description provided by source. Luigi Auriemma Application: Firefly Media Server mt-daapd http://www.fireflymediaserver.org Versions: = 2.4.1 and SVN = 1699 Platforms: nix, Windows, Mac and others Bugs: A partial directory traversal on Windows B authentication bypass on Windows C duplicated HT...
IISProtect 2.1/2.2 Authentication Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7661/info http://www.example.com/%70rotected/secret.html http://www.example.com/protected%2fsecret.html...
My Postcards 6.0 MagicCard.CGI Arbitrary File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5029/info My Postcards is a commercial available eletronic postcard system. It is available for Unix and Linux Operating Systems. The magiccard.cgi script does not properly handle some types of input. As a result, it may ...
HP-UX FTPD <= 1.1.214.4 "REST" Remote Brute Force Exploit
No description provided by source. / Author: phased /str0ke / include sys/types.h include sys/socket.h include netinet/in.h include arpa/inet.h include netdb.h include stdio.h include unistd.h int main int argc, char argv int sock, rc; long int i; struct sockaddrin saddr; struct hostent h; char...
Ubisoft Rayman Legends 1.2.103716 - Remote Stack Buffer Overflow Vulnerability
No description provided by source. !/usr/bin/perl Ubisoft Rayman Legends v1.2.103716 Remote Stack Buffer Overflow Vulnerability Vendor: Ubisoft Entertainment S.A. Product web page: http://www.ubi.com Affected version: 1.2.103716, 1.1.100477 and 1.0.95278 Summary: Rayman Legends is a 2013 platform...
qmailadmin 1.0.x Local Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5404/info The qmailadmin utility, developed by Inter7, is vulnerable to a buffer overflow condition. It is meant to run as a CGI program and is typically installed setuid owned by root on some systems, regular users on...
Tr Forum 2.0 - SQL Injection / Bypass Security Restriction Exploit
No description provided by source. !/usr/bin/perl Affected.scr..: Tr Forum V2.0 Poc.ID........: 10060903 Type..........: SQL Injection, Bypass Security Restriction Risk.level....: Medium Vendor.Status.: Unpatched Src.download..: comscripts.com/scripts/php.tr-forum.1579.html Poc.link......:...
W2B phpHotResources - 'cat.php' SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28736/info W2B phpHotResources is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...
Billwerx RC5.2.2 PL2 'primary_number' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/39867/info Billwerx is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...
Mediacoder 0.7.5.4710 "Universal" SEH Buffer Overflow Exploit
No description provided by source. !/usr/bin/env python Mediacoder 0.7.5.4710 Universal SEH Buffer Overflow Exploit Coded By: DrIDE Found By: abhishek lyall Usage: Load the evil .m3u file and click on it. Download: http://www.exploit-db.com/application/14612 Tested On: Windows XPSP3 windows/exec ...
Cisco EPC3925 - Persistent Cross Site Scripting
No description provided by source...
phpwebnews 0.1 bukutamu.php m_txt Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/23448/info The 'phpwebnews' package is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script co...
Quagga Routing Software Suite 0.9x - RIPd RIPv1 Request Routing Table Disclosure
No description provided by source. source: http://www.securityfocus.com/bid/17808/info Quagga is susceptible to remote information-disclosure and route-injection vulnerabilities. The application fails to properly ensure that required authentication and protocol configuration options are enforced...
OneHTTPD 0.6 Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/39757/info OneHTTPD is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting the issue may allow an attacker to obtain sensitive information that could...
Cisco CallManager 3.x/4.x Web Interface ccmuser/logon.asp XSS
No description provided by source. source: http://www.securityfocus.com/bid/18504/info Cisco CallManager is prone to a cross-site scripting vulnerability. This issue is due to a failure in the web-interface to properly sanitize user-supplied input. An attacker may leverage this issue to have...
Netopia Timbuktu Pro for Macintosh 6.0.1 - Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3918/info Timbuktu is a remote administration tool. It is available for the Microsoft Window's family of operating systems and Power PC based Macintosh computers. It supports a variety of administrative tasks, including...
UMI.CMS 2.9 - CSRF Vulnerability
No description provided by source. 添加一个管理员用户：csrfuser|||password document.main.submit;...
OneOrZero 1.6.3 Helpdesk Index.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17298/info OneOrZero Helpdesk is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit...
WebCortex WebStores2000 SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7766/info This vulnerability is reportedly caused by a lack of sufficient sanitization of user-supplied data contained in URI parameters supplied to WebStores2000. Successful exploitation may allow for modification of the...
IGeneric Free Shopping Cart 1.4 - SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9771/info It has been reported that iGeneric Free Shopping Cart is prone to an SQL injection vulnerability. This issue is due to a failure of the application to properly sanitize user supplied URI parameters As a result o...
DoubleTake/HP StorageWorks Storage Mirroring Service Authentication Overflow
No description provided by source. $Id: doubletake.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Hummingbird HostExplorer 6.2/8.0 ActiveX Control 'PlainTextPassword()' Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/31783/info Hummingbird HostExplorer ActiveX control is prone to a buffer-overflow vulnerability because the application fails to adequately check boundaries on user-supplied input. An attacker can exploit this issue to...
AlienVault OSSIM av-centerd Command Injection
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rexml/document' class Metasploit3 Msf::Exploit::Remote Rank = ExcellentRanking include...
MySQL MaxDB 7.5 WAHTTP Server Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11843/info A remote denial of service vulnerability has been reported to affect the MySQL MaxDB WAHTTP server. This issue is due to a failure of the server to handle malformed requests. An attacker may leverage this issue...
MailEnable Professional/Enterprise <= 2.37 Denial of Service Exploit
No description provided by source. !/usr/bin/perl maildisable-v7.pl Mail Enable Professional/Enterprise v2.32-7 win32 by mu-b - Wed Feb 14 2007 - Tested on: Mail Enable Professional v2.37 win32 use Getopt::Std; getopts't:', %arg; use Socket; use MIME::Base64; my $target; if defined$arg't' $target...
ActiveWeb Contentserver 5.6.2929 Picture_Real_Edit.ASP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/24894/info activeWeb contentserver is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an...
Mambo Component Ricette 1.0 - Remote SQL Injection Vulnerability
No description provided by source. joomla SQL Injectioncomricette AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORK 1 : allinurl: comricette DORK 2 : allinurl: comricetteid EXPLOIT :...
NETGEAR N600 WIRELESS DUAL BAND WNDR3400 - Multiple Vulnerabilities
No description provided by source. Title: Multiple vulnerabilities in NETGEAR N600 WIRELESS DUAL BAND WNDR3400 ==================================================================================== Notification Date: 4/14/2014 Affected Vendor: NETGEAR N600 WIRELESS DUAL BAND WNDR3400 Firmware...
BosDates 4.0 - Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/15632/info BosDates is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitatio...
PostNuke 0.6/0.7 web_links Module TTitle Cross-site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8374/info It has been reported that a cross site scripting vulnerability exists in the Downlaods and WebLinks modules of PostNuke. It is possible that an attacker may construct a link containing malicious script code that...
PostNuke 0.6/0.7 Downloads Module TTitle Cross-site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8374/info It has been reported that a cross site scripting vulnerability exists in the Downlaods and WebLinks modules of PostNuke. It is possible that an attacker may construct a link containing malicious script code that...
CF Image Host 1.1 - Remote File Inclusion Vulnerability
No description provided by source. Download: http://codefuture.co.uk/counter/?id=22 Title : CF Image Host Remote File Inclusion Vulnerability Author: The.Morpheus Contact: - Thanks: Herkese : Greetz: Megaturks.Net | Spyturks.Com demo :http://codefuture.co.uk/projects/imagehost1.1/demo/...
interphoto gallery - Multiple Vulnerabilities
No description provided by source. ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | Day 6 0day | | | | || / \ || | | | || ||// \/|/ ''' - Title : InterPhoto Gallery Multiple Remote Vulnerabilities - Affected Version : = 2.4.0 - Vendor Site :...
Joomla Component com_jcalpro 1.5.3.6 - Remote File Inclusion
No description provided by source. Author : kaMtiEz [email protected] Homepage:http://www.indonesiancoder.com Software Information + Vendor : http://www.anything-digital.com + version : 1.5.3.6 Stable or upper / lower maybe also affected + Dork : inurl:comjcalpro Vulnerable File...
MailEnable Pro/Ent <= 2.37 (APPEND) Remote Buffer Overflow Exploit
No description provided by source. !/usr/bin/perl maildisable-v4.pl Mail Enable Professional/Enterprise v2.32-4 win32 remote exploit by mu-b - Wed Nov 29 2006 - Tested on: Mail Enable Professional v2.32 win32 - with HOTFIX Mail Enable Professional v2.33 win32 Mail Enable Professional v2.35 win32...
Microsoft Internet Connection Signup Wizard DLL Hijacking Exploit (smmscrpt.dll)
No description provided by source. Greetz to :b0nd, Fbih2s,r45c4l,Charles ,j4ckh4x0r, punter,eberly, Charles , Dinesh Arora Site : www.BeenuArora.com / Exploit Title: Microsoft Internet Connection Signup Wizard DLL Hijacking Date: 25/08/2010 Author: Beenu Arora Tested on: Windows XP SP3 Vulnerabl...
Creato Script SQL Injection Vulnerability
No description provided by source. Title: Creato Script SQL Injection Vulnerability Version: 2.1 Author: Mr.P3rfekT Software Site: http://www.creato.biz Tested on Lunix CVE : N/A Founded By Mr.P3rfekT Dork : created by creato.biz Helllo Allz. Exploit : http://site/mainpage.php?id=SQLi Poc Usernam...