56796 matches found
Debian GNU/Linux 3.1 top Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1895/info top is a program used to display system usage statistics in real time written by GoupSys Consulting but shipped by default as a core component with many operating systems. On BSD systems, top is installed setgid...
netOffice Dwins 1.3 - Authentication Bypass Vulnerability and Arbitrary File Upload Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28051/info netOffice Dwins is prone to a vulnerability that allows attackers to bypass authentication as well as a vulnerability that allows attackers to upload arbitrary files. These issues occur because the application...
IrfanView TIFF Image Processing Buffer Overflow Vulnerability
No description provided by source. Application: IrfanView TIFF Image Processing Buffer Overflow Vulnerability Platforms: Windows Exploitation: Remote code execution Secunia Number: SA47065 PRL: 2011-10 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/...
Microsoft Windows XP .Manifest Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3942/info To enable desktop skinning, Microsoft Windows XP uses '.manifest' files 'filename.exe.manifest'. This file contains XML code that tells Windows XP to use the XP controls. Due to a flaw, Windows XP fails to...
Samsung ml85p Printer Driver 1.0 Insecure Temporary File Creation Vulnerability (3)
No description provided by source. source: http://www.securityfocus.com/bid/3008/info ml85p is a Linux driver for Samsung ML-85G series printers. It may be bundled with distributions of Ghostscript. ml85p does not check for symbolic links when creating image output files. These files are created ...
MyWebServer 1.0.2 Long HTTP Request HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5470/info MyWebServer is an application and web server for Microsoft Windows operating systems. If an oversized HTTP request is received by MyWebServer, some content provided as a URL is included in the page generated. An...
Asterisk 1.4 SIP T.38 SDP - Parsing Remote Stack Buffer Overflow Vulnerabilities (2)
No description provided by source. source: http://www.securityfocus.com/bid/23648/info Asterisk is prone to multiple remote stack-based buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied data before copying it to insufficiently sized buffers...
Ecometry SGDynamo 5.32/6.1/7.0 Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4720/info SGDynamo is a web application engine for Microsoft Windows operating systems. Script code is not filtered from URL parameters that are used as output by the SGDynamo program. This may enable an attacker to injec...
MDaemon WorldClient 5.0.x Folder Creation Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4689/info MDaemon is an integrated mail transport agent, webmail, and mail anti-virus package. It is available for Microsoft Windows operating systems. It may be possible for a remote user to take advantage of a buffer...
Alien Arena 2007 6.10 - Multiple Remote Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/25559/info Alien Arena 2007 is prone to multiple remote vulnerabilities, including a denial-of-service vulnerability and a format-string vulnerability. Successfully exploiting these issues will allow an attacker to execut...
My Web Server 1.0.1/1.0.2 Long Get Request Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5954/info My Web Server is a web server software package distributed and maintained by MyWebServer LLC. It is designed for the Microsoft Windows operating system. It has been reported that My Web Server does not properly...
Geeklog 1.3.5 HTML Attribute Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5270/info A cross site scripting vulnerability has been reported for Geeklog. Reportedly, Geeklog does not properly sanitize user supplied input before being included when posting comments or writing stories. Geeklog make...
Microsoft Outlook Express 6.0 MHTML Forced File Execution Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/9105/info A vulnerability has been discovered in Microsoft Outlook Express when handling MHTML file and res URIs that could lead to an unexpected file being downloaded and executed. The problem occurs due to the component...
Symantec ConsoleUtilities ActiveX Control Buffer Overflow
No description provided by source. $Id: symantecconsoleutilitiesbrowseandsavefile.rb 10998 2010-11-11 22:43:22Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information...
Yahoo! Messenger 8.1 KDU_V32M.DLL - Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/25330/info Yahoo! Messenger is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to crash the affected application, denying service to legitimate users. This issue affects Yahoo!...
Nortel Networks Optivity NETarchitect 2.0 PATH Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/907/info NETarchitect is an application for simplifying the task of designing and deploying complex switched network system configurations, produced by Nortel Networks and usually shipped with the Optivity Network...
CGI Script Center Account Manager 1.0 LITE / PRO Administrative Password Alteration (1)
No description provided by source. source: http://www.securityfocus.com/bid/1604/info Regardless of privilege level, any remote user can modify the administrative password for CGI Script Centers' Account Manager. In order to accomplish this, a user would access the following URL with a POST...
Mercury Mail SMTP AUTH CRAM-MD5 Buffer Overflow
No description provided by source. $Id: mercurycrammd5.rb 9583 2010-06-22 19:11:05Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of us...
OpenDocMan 1.2.5 add.php last_message Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/36777/info OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an...
BoutikOne CMS 'search_query' Parameter Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/32321/info BoutikOne CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser o...
CA eSCC r8/1.0,eTrust Audit r8/1.5 Unspecified Arbitrary File Manipulation
No description provided by source. source: http://www.securityfocus.com/bid/20139/info CA eTrust Security Command Center eSCC and eTrust Audit are prone to multiple vulnerabilities, including: - an information-disclosure issue - an arbitrary-file-deletion issue - a replay issue. These...
iOS <= 5.1.1 Safari Browser - JS match(), search() Crash PoC
No description provided by source. !/usr/bin/env ruby - Title iOS = v5.1.1 Safari Browser JS match, search Crash PoC - Author Alberto Ortega @a0rtega [email protected] - Summary A vulnerability has been discovered in Apple Safari Browser included in the last version of iOS 5.1.1. Previous...
VWar 1.5 stats.php vwar_root Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/19387/info VWar is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file...
Cyclope Internet Filtering Proxy 4.0 - CEPMServer.exe DoS (Poc)
No description provided by source. !/usr/bin/python Title: Cyclope Internet Filtering Proxy 4.0 - CEPMServer.exe DoS Poc. From: The eh?-Team || The Great White Fuzz we're not sure yet Found by: loneferret Software link: http://www.cyclope-series.com/download/index.aspx?p=2 Date Found: Oct 20th 20...
php Help Agent <= 1.1 (content) Local File Inclusion Vulnerability
No description provided by source. Author : BeyazKurt Contact : [email protected] Script : php Help Agent v1.1 Full & 1.0 Risk : Local File Include Download : http://sourceforge.net/projects/phphelpagent/ File : include/headchat.inc.php Code : ?php iffileexists$content include$content; ? Exploi...
jmd-cms - Multiple Vulnerabilities
No description provided by source. ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-19-jmd-cms-multiple-remote-vulnerabilities/ ''' Abysssec Inc Public Advisory Title : JMD-CMS Multiple Remote...
Xerox Workcenter 4150 Remote Buffer Overflow
No description provided by source. Application: Xerox Workcenter 4150 Remote Buffer Overflow Platforms: Xerox Workcenter 4150 Discover Date: 2009-12-21 Author: Francis Provencher Protek Research Lab's Blog: http://www.Protekresearchlab.com 1 Introduction 2 Report Timeline 3 Technical details 4 Th...
PHPReactor 1.2.7 pl1 Browse.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5939/info phpReactor is prone to cross-site scripting attacks. An attacker may create a malicious link to a phpReactor site which contains malicious HTML and script code. If this link is visited by a web user, the...
Total Commander 6.x - (unacev2.dll) Buffer Overflow PoC Exploit
No description provided by source. / -- /\ / Total Commander unacev2.dll Buffer Overflow PoC Exploit /\ by Darkeagle of Unl0ck Research Team / http://unl0ck.net /\ / when file will be created, try to open archive in TotalCmd and then unpack it ; /\ / -- / include string.h include stdio.h...
SmartMail Server 1.0 BETA 10 Oversized Request Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6075/info SmartMail Server is reported to be prone to a remote denial of service condition. It is possible to trigger this condition by sending large amounts 5MB+ of data to the server via TCP port 25 or 110. SmartMail...
DmxReady Links Manager 1.2 - SQL Injection Vulnerability
No description provided by source. Exploit Title: DmxReady Links Manager v1.2 SQL Injection Vulnerability Google Dork: inurl:inclinksmanager.asphttp://demo.dmxready.com/applications/CatalogManager/inccatalogmanager.asp Date: 03.07.2011 Author: Bellatrix Software Link:...
Vt-Forum Lite 1.3 vf_info.asp StrMes Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/21428/info Vt-Forum Lite is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in...
Linux Kernel 2.6.x - Ext4 'move extents' ioctl Local Privilege Escalation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/37277/info Linux kernel is prone to a local privilege-escalation vulnerability because the software fails to verify access permissions. Exploits may allow attackers to execute arbitrary code with kernel-level privileges a...
FreeType TTF File Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18329/info FreeType is prone to a denial-of-service vulnerability. This issue is due to a flaw in the library that causes a NULL-pointer dereference. This issue allows remote attackers to crash applications that use the...
KDE LibkHTML 4.2 NodeType Function Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/21662/info KDE libkhtml is prone to a denial-of-service vulnerability. This issue is triggered when an attacker convinces a victim user to open a malicious HTML document via an affected application such as kmail or...
M3U/M3L to ASX/WPL 1.1 (ASX,M3U,M3L) Local BOF PoC
No description provided by source. !/usr/bin/perl M3U/M3L to ASX/WPL v1.1 asx,m3u,m3l Local Stack Overflow POC Download: http://proletsoft.freeservers.com/mmb/m3utoasx.html Welcom Back Milw0rm my $crash=\x41 x 5000 ; openmyfile,'PoC.m3u';asx,m3u,m3l print myfile $crash; By ThE g0bL!N Ismail Fiha...
Apple Mac OS X Server 10.0 Overload Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/306/info A vulnerability in the MacOS X Server may crash it while under heavy load. The vulnerability appears while stress testing a server running the Apache web server and 32 or more process are concurntly doing HTTP GE...
cms buzz (xss/pc/hi) Multiple Vulnerabilities
No description provided by source. + CMS Buzz xss/Change PasswordMultiple Remote Vulnerabilities + Discovered By ThE g0bL!N + Vendor:cmsbuzz.com + Note : If you are The S3r!0uS I say To Fuck you Because You are Hacked Site Of My Best Friends dz-boys.com + Demo:http://demo.cmsbuzz.com/ + Greeting ...
Flat Calendar 1.1 - Multiple Administrative Scripts Authentication Bypass Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/29662/info Flat Calendar is prone to multiple authentication-bypass vulnerabilities because it fails to perform adequate authentication checks. An attacker can exploit these issues to gain unauthorized access to the...
BRU 17.0 XBRU Insecure Temporary File Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5708/info BRU is a backup and restore utility distributed by The Tolis Group. This problem affects the utility on the Linux platform. xbru does not properly check for the existence of temporary files prior to execution...
Web Slider 0.6 - 'slide' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/29296/info Web Slider is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise th...
Mini-Stream RM-MP3 Converter 3.1.2.1 - (.pls) Stack Buffer Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
FileExecutive 1 - Multiple Vulnerabilities
No description provided by source...
CGI Script Center Account Manager 1.0 LITE / PRO Administrative Password Alteration (2)
No description provided by source. source: http://www.securityfocus.com/bid/1604/info Regardless of privilege level, any remote user can modify the administrative password for CGI Script Centers' Account Manager. In order to accomplish this, a user would access the following URL with a POST...
Matt Wright guestbook.pl Arbitrary Command Execution
No description provided by source. $Id: guestbookssiexec.rb 9671 2010-07-03 06:21:31Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
Moreover CGI script 0 File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1762/info The 'cachedfeed' CGI script supplied by newsfeed vendor Moreover.com contains a file-disclosure vulnerability. The script's 'obtainfile' function, designed to return the contents of a specified file for display ...
CGI Script Center Auction Weaver 1.0.2 - Remote Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1645/info CGI Script Center's Auction Weaver does not verify the validity of the value in the variable 'fromfile'. Therefore it is possible to perform arbitrary commands on a remote system under the UID of the http daemon...
iSupport 1.8 - SQL Injection Vulnerability
No description provided by source. iSupport 1.8 SQL Injection Vulnerability Date: 2011-06-23 Author: Brendan Coles [email protected] Advisory: http://itsecuritysolutions.org/2011-06-23-iSupport-1.8-SQL-Injection-Vulnerability/ Software: iSupport Version: = 1.8 Homepage:...
Sygate Personal Firewall 5.6 build 2808 ActiveX with DEP bypass
No description provided by source. html !-- |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | |...
Joomla Component GameQ <= 4.0 - Remote SQL injection Vulnerability
No description provided by source. /---------------------------------------------------------------\ \ / / Joomla Component GameQ Remote SQL injection \ \ / ---------------------------------------------------------------/ Author : His0k4 ALGERIAN HaCkEr POC :...