56796 matches found
Orca Ringmaker 2.3 Ringmaker.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15639/info Orca Ringmaker is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation cou...
Subscribe to Comments 2.0 WordPress Plugin Multiple Cross Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/37105/info The Subscribe to Comments plugin for WordPress is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or...
Bluetooth Photo-File Share 2.1 iOS - Multiple Vulnerabilities
No description provided by source. Document Title: =============== Bluetooth Photo-File Share v2.1 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1270 Release Date: ============= 2014-05-30 Vulnerability Laboratory ID...
WMAPM 3.1 Privilege Escalation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8995/info wmapm has been reported prone to a local privilege escalation vulnerability. The vulnerability has been conjectured to result from a lack of relative path usage while the vulnerable dock app is invoking a third...
MiNBank 1.5.0 - Remote Command Execution Exploit
No description provided by source. !/usr/bin/perl MiNBank 1.5.0 Remote Command Execution Exploit download: http://downloads.sourceforge.net/minbank/ Author: Jose Luis Gongora Fernandez 'aka' JosS mail: sys-projectathotmaildotcom site: http://www.hack0wn.com/ team: Spanish Hackers Team - SHT Hack0...
OS4E LOGIN.ASP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13804/info os4e is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'login.asp' script before using it in an SQL query. Successful...
Tugux CMS 1.2 (pid) Arbitrary File Deletion Vulnerability
No description provided by source. Tugux CMS 1.2 pid Remote Arbitrary File Deletion Vulnerability Vendor: Tugux Studios Product web page: http://www.tugux.com Affected version: 1.2 Summary: Tugux CMS is a free, open-source content Management system CMS and application that powers the entire web...
asg-sentry <= 7.0.0 - Multiple Vulnerabilities
No description provided by source. Luigi Auriemma Application: ASG-Sentry http://www.asg-sentry.com Versions: = 7.0.0 Platforms: Windows and Unix Bugs: A arbitrary files deleting B heap-overflow in FxAgent C termination of FxIAList D buffer-overflow in FxIAList Exploitation: remote Date: 10 Mar...
HP OpenView Network Node Manager ov.dll _OVBuildPath Buffer Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
HP OpenView Network Node Manager OvWebHelp.exe CGI Buffer Overflow
No description provided by source. $Id: hpnnmovwebhelp.rb 10998 2010-11-11 22:43:22Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
ATutor 1.5.x documentation/admin/index.php XSS
No description provided by source. source: http://www.securityfocus.com/bid/18857/info ATutor is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to...
Forum Rank System 6 - 'settings['locale']' Parameter Multiple Local File Include Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/29077/info Forum Rank System is prone to local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities using directory-traversal strings to vie...
Global Centre Aplomb Poll 1.1 vote.php Madoa Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/25138/info Aplomb Poll is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote...
4images <= 1.7.7 (image_utils.php) Remote Command Execution Vulnerability
No description provided by source. || || | || o,7 || . o7 || 4||| ow, : / / . +----------------------------------------------------------------------- -+ | ....... | | ..''xxxxxxxxxxxxxxx'... | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxx.. | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'. | |...
Motorola SB4200 Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/20309/info Motorola SB4200 is prone to a remote denial-of-service vulnerability. This may permit an attacker to crash affected devices, denying further network services to legitimate users. !/usr/bin/perl -w Remote Motoro...
NOCC 1.0 error.php html_error_occurred Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/16793/info NOCC Webmail is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to inject...
PHP 5.2.9 cURL 'safe_mode' and 'open_basedir' Restriction-Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/34475/info PHP is prone to a 'safemode' and 'openbasedir' restriction-bypass vulnerability. Successful exploits could allow an attacker to access files in unauthorized locations. This vulnerability would be an issue in...
Opera 10.10 (XML parser) Denial of Service PoC
No description provided by source. From tiny islands of maldivies d3b4g.info Tested: version 10.10 Tested on windows XP SP3 20-01-2010 special thanks to peter Van Eeckhoutte after opening the opera.html broswer hang for a while and crush.same bug in firefox too :d This vulnerability cause a denia...
Joomla Component Picasa 2.0 LFI Vulnerability
No description provided by source...
Simple PHP Blog (sphpblog) <= 0.5.1 - Multiple Vulnerabilities
No description provided by source. Title: Simple PHP Blog sphpblog = 0.5.1 Multiple Vulnerabilities Vendor: http://sourceforge.net/projects/sphpblog/ Advisory: http://acid-root.new.fr/?0:15 Author: DarkFig gmdarkfig at gmail dot com Released on: 2007/10/21 Changelog: ---------- L M H T Summary: I...
greeting card Remote Upload Vulnerability
No description provided by source. Exploit Title: greeting card Remote Upload Vulnerability Date: 04/06/2010 Author: Mr.Benladen Software Link: N/A Version: 2004/2008 Tested on: Linux/unix CVE : if exists Code : N/A Email : [email protected] Mr.Benladen cr3w Dork : Send amazing greetings to yo...
HP OpenView Network Node Manager 7.x - (OV NNM) OpenView5.exe Action Parameter Traversal Arbitrary File Access
No description provided by source. source: http://www.securityfocus.com/bid/28745/info HP OpenView Network Node Manager is prone to multiple vulnerabilities affecting the 'ovalarmsrv.exe' and 'ovtopmd.exe' processes. These issues include a directory-traversal issue and multiple denial-of-service...
WSMP3 0.0.1/0.0.2 - Multiple Buffer Overflow Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/6239/info Several buffer overflow conditions have been reported for WSMP3. The vulnerability is due to improper bounds checking when copying data to local buffers. An attacker can exploit this vulnerability by sending an...
PHPCMS 1.1/1.2 Cross-Site Scripting Vulnerability
No description provided by source...
EazyPortal <= 1.0 (COOKIE) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Vendor url: http://www.eazyportal.com/ by Iron - http://www.randombase.com exploit goes through $COOKIE use LWP::UserAgent; use MIME::Base64; print EazyPortal = 1.0 SQL Injection Exploit By Iron - www.randombase.com Greets to everyone at RootShell...
Zimbra Collaboration Server - LFI
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rexml/document' class Metasploit3 Msf::Exploit::Remote include Msf::Exploit::Remote::HttpClient include...
Microsoft Internet Explorer 5.0 HTML Form Control DoS
No description provided by source. Microsoft Internet Explorer 5.0 for Windows 95/Windows 98/Windows NT 4 HTML Form Control DoS source: http://www.securityfocus.com/bid/606/info Certain Microsoft applications IE5, Outlook Express 5 are unable to display large HTML form fields within HTML tables...
Campsite 2.6.1 Article.php g_documentRoot Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/23874/info Campsite is prone to multiple remote file-include vulnerabilities. Exploiting this issue allows remote attackers to execute code in the context of the webserver. This issue affects Campsite 2.6.1. Earlier...
photokorn 1.53/1.54 print.php cat Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/17683/info Photokorn is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker ...
Nakid CMS (fckeditor) Remote Arbitrary File Upload Exploit
No description provided by source. ?php / Title: Nakid CMS fckeditor Remote Arbitrary File Upload Exploit Developers: www.nakid.org Download : https://sourceforge.net/projects/nakidcms/files/Nakid%20CMS%20v052.rar/download Version: 0.5.2 exploited by ..: eidelweiss details..: works with an Apache...
Joomla (JBDiary) BLIND SQL Injection Vulnerabilities
No description provided by source...
SonicWALL SSL VPN 1.3 3 WebCacheCleaner ActiveX FileDelete Method Traversal Arbitrary File Deletion
No description provided by source. source: http://www.securityfocus.com/bid/26288/info SonicWALL SSL VPN Client is prone to multiple remote vulnerabilities. The issues occur in different ActiveX controls and include arbitrary-file-deletion and multiple stack-based buffer-overflow vulnerabilities...
FarsiNews 2.5.3 - Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/17701/info FarsiNews is prone to multiple cross-site scripting vulnerabilities. These issues are due to the application's failure to properly sanitize user-supplied input. An attacker may leverage these issues to have...
Venalsur Booking Centre 2.01 Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/32530/info Venalsur Booking Centre is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script cod...
Rosoft Media Player 4.2.1 - Local Buffer Overflow Exploit
No description provided by source. Rosoft Media Player 4.2.1 Local Buffer Overflow Exploit0-day By:Encrypt3d.M!nd Well,There is a buffer overflow in the program were all the supported types are Affectedm3u,rml,txt,Also Rosoft Media Player treat all the other types as txt so all the types are...
Multiple File Attachments Mail Form Pro 2.0 - WebShell upload
No description provided by source. Exploit Title: Multiple File Attachments Mail Form Pro v2 - WebShell upload Date: 16/02/2010 Author: EgoPL Mail: [email protected]:[email protected] Software Link: http://activeden.net/item/multiple-file-attachments-mail-form-prov2/31262 17$ but It's now on ...
LibTIFF 'td_stripbytecount' NULL Pointer Dereference Remote Denial of Service Vulnerability
No description provided by source. From: http://www.securityfocus.com/bid/41480/ LibTIFF is prone to a denial-of-service vulnerability because it fails to properly validate user-supplied input. An attacker can exploit this issue to crash an application that uses the vulnerable library, denying...
IBM DB2 Semaphore Signaling Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11403/info A denial of service vulnerability has been reported in IBM DB2. This vulnerability is reported to only exist when DB2 is installed on Microsoft Windows operating systems. This issue is due to a failure of the...
12Planet Chat Server 2.5 Error Message Installation Path Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7355/info When certain malformed URL requests are sent to a 12Planet Chat Server, the server's installation path may be revealed in the returned error message. This information could be used by a remote attacker to launch...
GGZ Gaming Zone 0.0.12 Multiple Denial of Service Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/17094/info GGZ Gaming Zone is prone to multiple remote denial-of-service vulnerabilities. These issues are due to improper input sanitization. An attacker may cause the victim's connection to the server to terminate,...
Borland InterBase 2007 - ibserver.exe Buffer Overflow PoC
No description provided by source. POC.pl !/usr/bin/perl -w Author: Liu Zhen Hua alau at 163.com use IO::Socket; use strict; my $host=$ARGV0; sub usage print usage: perl poc.pl serverip\n; if $ARGV 0 usage; exit; my $victim = IO::Socket::INET-newProto='tcp', PeerAddr=$host, PeerPort=3050; my $pad...
Syzygy CMS <= 0.3 (Auth Bypass) SQL Injection Vulnerability
No description provided by source. --+++=========================================================================+++-- --+++====== Syzygy CMS = 0.3 Auth Bypass SQL Injection Vulnerability ======+++-- --+++=========================================================================+++-- + Syzygy CMS ...
TFTP Server 1.3 - Remote Buffer Overflow Denial of Service Exploit
No description provided by source. Name : TFTPServerMT v 1.3 Remote Buffer Overflow Dos Exploit Author: Umesh Wanve Date: 01-03-2007 Desc: This is latest version of TFTP server. EDI gets overwritten at 246. So code execution may be possible Someone can better write it. Sending a long file name on...
PhpMyAdmin 2.x db_operations.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/21137/info phpMyAdmin is prone to multiple input-validation vulnerabilities, including an HTML-injection vulnerability, cross-site scripting vulnerabilities, and information-disclosure vulnerabilities. An attacker could...
Jupiter CMS 1.1.4/1.1.5 modules/search.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/20048/info Jupiter CMSA is prone to multiple input-validation vulnerabilities, including cross-site scripting, SQL-injection, and arbitrary file-upload issues, because the application fails to sanitize user-supplied input...
CU Village CMS Site 1.0 (print_view) Blind SQL Injection Vulnerability
No description provided by source...
Ultimate PHP Board 1.0 final beta ViewTopic.PHP Directory Contents Browsing
No description provided by source. source: http://www.securityfocus.com/bid/6334/info Ultimate PHP Board UPB is a freely available, open source PHP Bulletin Board. It is available for the Unix and Linux operating systems. Under some circumstances, it may be possible to disclose the contents of...
tellmatic 1.0.7 - Multiple Remote File Inclusion Vulnerabilities
No description provided by source. tellmatic 1.0.7 RFI --------------------- Author : ShAy6oOoN --------------------- Group : PitBull Crew --------------------- Script : tellmatic 1.0.7 --------------------- Download :...
photovideotube 1.11 Multiple Vulnerabilities
No description provided by source. / | \ | | / \ \ | |/ /\ / // \ \ \ Y // | \ /| | / | / /| //\ \ | / / / / / :: Egy Coders Team Researcher /- PhotoVideoTube v 1.1 = Multiple Vulnerabilities /- Insecure Cookie Handling & Cookie Grabber & Upload Shell /- http://photovideotube.com/ /- see...
Linux Kernel 2.4.x/2.6.x Local Denial of Service And Memory Disclosure Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/11754/info The Linux kernel is reported prone to multiple local vulnerabilities: - A handcrafted 'a.out' file may be used to trigger a local denial-of-service condition. A local attacker may exploit this vulnerability to...