56796 matches found
ECShop Search.php SQL Injection Exploit
No description provided by source...
PHP Classifieds 6.0.5 Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5022/info PHP Classifieds has been reported to be prone to cross-site scripting attacks. Attackers may inject arbitrary HTML or script code into URI parameters in a malicious link. When the malicious link is visited, the...
SchuldnerBeratung SQL injection Vulnerability
No description provided by source...
Apple Mac OS X Lion Kernel <= xnu-1699.32.7 except xnu-1699.24.8 NFS Mount - Privilege Escalation Exploit
No description provided by source. / Apple Mac OS X Lion Kernel = xnu-1699.32.7 except xnu-1699.24.8 NFS Mount Privilege Escalation Exploit CVE None by Kenzley Alphonse kenzley dot alphonse at gmail dot com Notes: This exploit leverage a stack overflow vulnerability to escalate privileges. The...
phpmychat plus 1.93 - Multiple Vulnerabilities
No description provided by source. ------------------------------------------------------------------------ Software................phpMyChat Plus 1.93 Vulnerability...........Blind SQL Injection Threat Level............Serious 3/5 Download................http://sourceforge.net/projects/phpmychat...
CubeCart 3.0.x Arbitrary File Upload Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16796/info CubeCart is prone to an arbitrary file-upload vulnerability. An attacker can exploit this vulnerability to upload arbitrary code and execute it in the context of the webserver process. This may facilitate...
Joomla Component com_jepoll (pollid) SQL Injection Vulnerability
No description provided by source...
Realtor Real Estate Agent (news.php) SQL Injection Vulnerability
No description provided by source...
3Com 3CRADSL72 ADSL Wireless Router Information Disclosure and Authentication Bypass Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/11408/info 3Com 3CRADSL72 is reported prone to an information disclosure, and an authentication bypass vulnerability. This issue can allow a remote attacker to disclose sensitive information such as the router name, prima...
Microsoft Windows Help program (WinHlp32.exe) Crash PoC
No description provided by source. !/usr/bin/perl Title : Microsoft Windows Help programWinHlp32.exememory corruption Version : 5.1.2600 Date : 2012-10-24 Vendor : http://www.microsoft.com Crash : http://img69.imageshack.us/img69/7652/helpview.jpg Impact : Med/High Contact : coolkaveh at...
XLight FTP Server 1.x Long Directory Request Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9585/info A problem in the handling of large requests has been reported to result in service instability in XLight FTP Server under some circumstances. Because of this, it may be possible for a remote attacker to deny...
AuraCMS 2.1 - Remote File Attachment / LFI Vulnerabilities
No description provided by source. AuraCMS 2.1 - Remote File Attachment - Local File Inclusion Vendor : http://www.auracms.org/ Download : http://www.auracms.org/dljump.php?id=42 Ditemukan oleh : k1tk4t - k1tk4t4tnewhack.org Lokasi : Indonesia -- newhackdotorg @ irc.dal.net...
Ji-takz Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18474/info Ji-takz is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input to the application. An attacker may leverage this issue to have an arbitrary remote file...
websitebaker add-on concert calendar 2.1.4 - Multiple Vulnerabilities
No description provided by source. Advisory: Websitebaker Add-on 'Concert Calendar 2.1.4' XSS & SQLi vulnerability Advisory ID: SSCHADV2013-001 Author: Stefan Schurtz Affected Software: Successfully tested on Concert Calendar 2.1.4 Vendor URL:...
Microsoft Outlook Web Access (OWA) 8.2.254.0 - Information Disclosure vulnerability
No description provided by source. $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ Microsoft Outlook Web Access OWA version 8.2.254.0 OS: Windows Server 2003 Internet Explorer 7 $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ There is an information disclosure vulnerability in Microsoft...
Wireshark 1.4.1-1.4.4 - SEH Overflow Exploit
No description provided by source. !/usr/bin/env python Vulnerable app: Wireshark 1.4.1-1.4.4 Author: sickness Download : OS: Tested it on Windows XP SP2 and SP3 but it should work on every Windows with DEP off still working on a ROP exploit DATE : 17.04.2011 Fixed in latest version 1.4.5 DO NOT...
Prometeo 1.0.65 - SQL Injection Vulnerability
No description provided by source. // / ////// //////// /// / / / / // / / / / /// //////// / / // / / / // / // /// //////// // ================================= Prometeo vers. 1.0.65 -SQLi Vulnerability- ================================= -Vulnerability ID: LD3-Product: Prometeo-Vendor: Prometeo...
iOS SideBooks 1.0 - Directory Traversal
No description provided by source. Exploit Title: SideBooks v1.0 for iPhone / iPod touch, Directory Traversal Date: 02/22/2011 Author: R3d@l3rt, Sp@2K, Sunlight, Hackkey Software Link: http://itunes.apple.com/kr/app/sidebooks/id409777225?mt=8 Version: 1.0 Tested on: iPhone, iPod 3GS with 4.2.1...
Webeveyn Whomp! Real Estate Manager 2005 Login SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16544/info Whomp! Real Estate Manager is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...
Cisco IOS 12.x Firewall Authentication Proxy Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14770/info Cisco IOS Firewall Authentication Proxy is prone to a buffer overflow condition. Successful exploitation of this issue could cause a denial of service or potential execution of arbitrary code. This issue affect...
okul siteleri 'com_mezun' Component SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27755/info 'okul siteleri' is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromi...
YapBB <= 1.2 Beta2 (yapbb_session.php) Remote File Include Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+:...
aradblog - Multiple Vulnerabilities
No description provided by source. ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub10-aradblog-multiple-remote-vulnerabilities/ ''' Abysssec Inc Public Advisory Title : aradBlog Multiple...
Unreal Tournament 2004 "secure" Overflow (Win32)
No description provided by source. $Id: ut2004secure.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of us...
Microsoft Outlook Express 6.0 URI Obfuscation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10345/info Microsoft Outlook Express has been reported prone to a URI obfuscation vulnerability. This issue is reported to affect version 6.0 of the affected software, other versions might also be affected. An attacker...
ibPhotohost 1.1.2 - SQL Injection
No description provided by source. + + Title: ibPhotohost 1.1.2 SQL Injection + Author: fred777 - fred777.5x.to + Link: http://mods.invisionize.com/index.php/f/7609 + Vuln: index.php?autocom=photohost&CODE=04&img=SQL Injection + Greetzz to: back2hack,free-hack,hackbase,c-c + Contact:...
PHP 4.3 socket_iovec_alloc() Integer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7187/info A vulnerability has been reported in PHP versions 4.3.1 and earlier. The problem occurs in the socketiovecalloc and may allow an attacker to corrupt memory. Specifically, the affected function fails to carry out...
Ascend R 4.5 Ci12 Denial of Service Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/1855/info A vulnerability exists in the operating system of some Ascend routers. If an invalid TCP packet of zero length is sent to the administration port of Ascend Routers 4.5Ci12 or earlier, the result will be a crash...
sphider 1.3.5 - Remote File Inclusion Vulnerability
No description provided by source. --------------------------------------------------------------------------| ----------------------------------------------------------------------------------| --------------------------------------------------------------------|...
Geeklog 1.3.5 - Multiple Cross Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/4969/info Geeklog does not filter script code from URL parameters, making it prone to cross-site scripting attacks. Attacker-supplied script code may be included in a malicious link to the 'index.php' or 'comment.php'...
John O'Fallon Responder.cgi 1.0 DoS Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3155/info responder.cgi' is a free CGI shell script, written in C, for MacHTTP Server and other MacOS webserver products. It is possible to cause a denial of service to MacHTTP webserver due to improper bounds checking in...
Altiris Client 6.0.88 Service Local Privilege Escalation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13409/info A local privilege escalation vulnerability affects the Altiris Client Service. This issue is due to a failure of the application to properly secure access to privileged interfaces. An attacker may leverage this...
Endpoint Protector 4.0.4.0 - Multiple Vulnerabilities
No description provided by source...
Opsview pre 4.4.1 - Blind SQL Injection
No description provided by source. CVE-2013-5694 Blind SQL Injection in Ops View Versions: Opsview pre 4.4.1 Author: J. Oquendo joquendo at e-fensive dot net I. ADVISORY Title: Blind SQL Injection in OpsView Date published: 2013-10-28 Vendor contacted: 2013-09-04 II. BACKGROUND Opsview is a syste...
FreeBSD 5.x I386_Set_LDT() Multiple Local Denial of Service Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/20158/info FreeBSD is prone to multiple local denial-of-service vulnerabilities. These issues occur because of input-validation flaws related to the handling of integers. An attacker may leverage these issues to cause the...
Nero MediaHome 4.5.8.0 - Denial of Service Vulnerability
No description provided by source...
Apache Tomcat 4.0.3 - Requests Containing MS-DOS Device Names Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28484/info Apache Tomcat is prone to an information-disclosure vulnerability when handling requests that contain MS-DOS device names. Attackers can leverage this issue to obtain potentially sensitive data that could aid i...
Juniper Junos 8.5/9.0 J-Web Interface /configuration Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/36537/info Juniper Networks JUNOS is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data to J-Web Juniper Web Management. Attacker-supplie...
CMS 4.x.x Zorder (SQL Injection Vul)
No description provided by source. + Exploit Title : CMS 4.x.x Zorder SQL Injection Vul + Author : Kr4L BeNiM + Contact : www.facebook.com/kr4l.hacker + Date : November 13, 2011 + Software Link: http://mambo-developer.org + Category: Web Apps Vulnerability: SQL injection Vulnerability Exploit : -...
sugar crm 5.5.0.rc2 and 5.2.0j Multiple Vulnerabilities
No description provided by source. Author: Janek Vind 'waraxe' Vulnerable: SugarCRM SugarCRM 5.5.0.RC2 SugarCRM SugarCRM 5.2.0j Product: http://www.sugarcrm.com/crm/ Description: SugarCRM is prone to multiple remote vulnerabilities, including: 1. Multiple SQL-injection vulnerabilities 2. Multiple...
Cisco ATA-186 HTTP Device Configuration Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4711/info The Cisco ATA-186 Analog Telephone Adapter is a hardware device designed to interface between analog telephones and Voice over IP VoIP. It includes support for web based configuration. Reportedly, HTTP requests...
Oto Galery 1.0 - Multiple SQL Injection Vulnerabilities
No description provided by source...
FreeBSD <= 5.0,NetBSD <= 1.4.2,OpenBSD <= 2.7 setsockopt() Dos
No description provided by source. source: http://www.securityfocus.com/bid/622/info A denial of service attack exists that affects FreeBSD, NetBSD and OpenBSD, and potentially other operating systems based in some part on BSD. It is believed that all versions of these operating systems are...
linux/x86 execve("/bin/ash",0,0); 21 bytes
No description provided by source. / 21 byte execve/bin/ash,0,0; shellcode for linux x86 by zasta zasta at darkircop.org / include unistd.h include stdio.h char shellcode = \x31\xc9\xf7\xe1\x04\x0b\x52\x68 \x2f\x61\x73\x68\x68\x2f\x62\x69 \x6e\x89\xe3\xcd\x80; void code asm xor %ecx,%ecx mul %ecx...
Chupix CMS Contact Module 0.1 'index.php' Multiple Local File Include Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/30564/info The Contact module for Chupix CMS is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues using directory-traversa...
WBR-3406 Wireless Broadband NAT Router Web-Console - Password Change Bypass & CSRF Vulnerability
No description provided by source. ----------------------------------------------------------- WBR-3406 Wireless Broadband NAT Router Web-Console Password Change Bypass & CSRF Vulnerability This PoC code should do two main things: 1. Cross Site Request Forgery For more information, just google it...
Pre Ads Portal SQL Bypass Vulnerability
No description provided by source. In The Name Of GOD + Exploit Title: PRE ADS PORTAL SQL Bypass Vulnerability + Date: 2010-11-13 + Author : Cru3l.b0y + Software Link: http://www.preproject.com/ads.asp + Price : 125.00$ + Contact : [email protected] + Website : WwW.PenTesters.IR + Greeting:...
phpCOIN 1.2.1 (mod.php) LFI Vulnerability
No description provided by source...
Joomla Component Matamko com_matamko Local File Inclusion Vulnerability
No description provided by source. ============================================================================================================= o Joomla Component Matamko Local File Inclusion Vulnerability Software : commatamko version 1.01 Vendor : http://www.matamko.com/ Author : AntiSecurity...
DSLogin 1.0 Index.PHP Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/17262/info DSLogin is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit...