56796 matches found
MySmartBB 1.7 Multiple Cross Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/38385/info MySmartBB is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the...
phpBB Knowledge Base 2.0.2 Mod KB_constants.PHP Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17763/info Knowledge Base Mod for phpbb is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to...
WebKit 'parent/top' Cross Domain Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/35441/info WebKit is prone to a cross-domain scripting vulnerability. A remote attacker can exploit this vulnerability to bypass the same-origin policy and obtain potentially sensitive information or launch spoofing attac...
ZippHo 3.0.6 (.zip) 0day stack buffer overflow PoC exploit
No description provided by source. !/usr/bin/python ZippHo 3.0.6 .zip 0day stack buffer overflow PoC exploit Author: mrme - http://net-ninja.net/ & http://twitter.com/StevenSeeley Download: http://www.brothersoft.com/zippho-71295.html Platform: Windows XP sp3 En Greetz to: Corelan Security Team &...
Uploader & Downloader 3.0 (id_user) Remote SQL Injection Vulnerability
No description provided by source. uploader&downloader v3 Remote SQL Injection Vulnerability Download: ftp://ftp1.comscripts.com/PHP/1892uploader-30.zip Found By: the master exploit:...
HP System Management Homepage Local Privilege Escalation
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' require...
Netcat v1.1 - "-e" Switch Remote Buffer Overflow Exploit
No description provided by source. / Netcat v1.1, -e Switch, Remote Buffer Overflow Exploit v0.1 Homepage..........: http://www.securityfocus.com/tools/139/scoreit Affected versions.: v1.1 Fix...............: Actually none, Hobbit is warned 1 month+ ago, and looks like to not act, we let him to...
Tutos 1.1 .20031017 note_overview.php id Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/10129/info Multiple vulnerabilities have been identified in various modules of TUTOS. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, and...
CUPS <= 1.3.7 'HP-GL/2' Filter Remote Code Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/31688/info CUPS is prone to a remote code-execution vulnerability caused by an error in the 'HP-GL/2 filter. Attackers can exploit this issue to execute arbitrary code within the context of the affected application. Faile...
Metinfo 3.0 - Multiple Vulnerabilities
No description provided by source. Exploit Title: metinfo3.0 Mullti Vulnerability Date : 10-11-2010 Author : anT!-Tr0J4n Version : 3.0 DorK : Powered by MetInfo 3.0 Home : www.Dev-PoinT.com : http://milw0rm.ws Email : D3v-PoinTathotmaild0tcom & C1EHatHotmaild0tcom Vendor� : http://www.metinfo.cn/...
Java RMI Server Insecure Default Configuration Java Code Execution
No description provided by source. $Id: javarmiserver.rb 13186 2011-07-15 20:44:08Z egypt $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
Joomla 1.5 com_virtuemart <= 1.1.7 - Blind time-based SQL Injection (MSF)
No description provided by source. Exploit Title: Joomla 1.5 comvirtuemart = 1.1.7 blind time-based sql injection MSF module Date: Thu Jul 28, 2011 Author: TecR0c - tecr0c.mythsec @ gmail.com Version: = 1.1.7 Download: http://dev.virtuemart.net/projects/virtuemart/files Greetz: mythsec team, Jame...
cotonti cms 0.9.4 - Multiple Vulnerabilities
No description provided by source. Cotonti CMS v0.9.4 Multiple Remote Vulnerabilities Vendor: Cotonti Team Product web page: http://www.cotonti.com Affected version: 0.9.4 Siena Summary: Cotonti is a powerful open-source web development framework and content manager with a focus on security, spee...
Basic PHP Events Lister 1.0 - Remote SQL Injection Vulnerability
No description provided by source. / \ /\ /\ / \ / \ | | | | \ / / ||| | | | | | | | | | \ / \ | | | | | | || | / \ \ | | || | / / /\ \ |/ / / / Basic PHP Events Lister Remote SQL Injection Author: 0x90 HomePage: www.0x90.com.ar Contact: Gunsat0x90dotcomdotar Script: Basic PHP Events Lister...
PHP Invoice 2.2 Home.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/20221/info PHP Invoice is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in...
PECL 3.0.x - Alternative PHP Cache Extension 'apc_search_paths()' Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28457/info PECL Alternative PHP Cache APC extension is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. Attackers may leverage this issue to execute...
Vanilla 1.1.4 HTML Injection and Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/30748/info Vanilla is prone to multiple HTML-injection vulnerabilities and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...
SimpleBlog <= 2.3 (id) Remote SQL Injection Vulnerability
No description provided by source. | | \ \ / / | ' / | / | \ V /| | | \ \ || | | / || ./|/\,| || AnD | | | | | | | ' | | | | '/ |/ \ '/ | |/ / | | | / | | | | | | || | | | | | / | \ \ | | | |/ / || || ||,|| ,||| |/|\||/| +-----------------------------------------------------------------+ |...
Masir Camp E-Shop Module <= 3.0 (ordercode) SQL Injection Vuln
No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: Masir Camp E-Shop Module = 3.0 SQL Injection Vendor: www.masir.net Vulnerable Version: 3.0 and prior versions Exploit: Available Impact: Medium Fix: N/A Original Advisory: http://bugreport.ir/index52.htm 1...
IPNetSentryX / IPNetMonitorX Unauthorized Network Reconnaissance Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8365/info It has been reported that helper applications that are shipped with IPNetSentryX and IPNetMonitorX may be harnessed by a local attacker to provide for unauthorized network reconnaissance. bash-2.05a$ id...
Red Hat TUX 2.1 .0-2 HTTP Server Oversized Host Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3506/info TUX is a kernel based HTTP server released under the GNU General Public License. It is able to serve static content, cache dynamic content, and coordinate with other HTTP servers to produce dynamic content. An...
phusion webserver 1.0 - Directory Traversal vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/4117/info Phusion Webserver is a commercial HTTP server that runs on Microsoft Windows 9x/NT/2000 operating systems. Phusion Webserver is prone to directory traversal attacks. It is possible to break out of wwwroot using...
Emesene 2.12.5 Password Disclosure
No description provided by source...
Joomla Component prayercenter <= 1.4.9 (id) SQL Injection Vulnerability
No description provided by source. /---------------------------------------------------------------\ \ / / Joomla Component prayercenter Remote SQL injection \ \ / ---------------------------------------------------------------/ Author : His0k4 ALGERIAN HaCkEr Dork : inurl:comprayercenter POC :...
RMSOFT Downloads Plus (rmdp) 1.5/1.7 Module for XOOPS search.php key Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/30620/info RMSOFT Downloads Plus is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code ...
Atlant Pro 8.0.9 Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/15886/info Atlant Pro is prone to cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrar...
ScriptMagix Photo Rating <= 2.0 - Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Script Name: ScriptMagix Photo Rating = 2.0 viewcomments.php Remote Blind SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.scriptmagix.com $$ : 75$ .. : ajann,Turkey use IO::Socket; if@ARGV 1 print...
faust informatics freestyle chat 4.1 sr2 - Directory Traversal vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2776/info Freestyle Chat server from Faust Informatics incorporates interactive chat functionality into websites. Versions of Freestyle Chat are vulnerable to directory traversal attacks. This can allow a remote user to...
IBM Tivoli Netcool Service Quality Manager Cross Site Scripting And HTML Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/32233/info IBM Tivoli Netcool Service Quality Manager is prone to multiple cross-site scripting and an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or...
Integramod Portal <= 2.0 rc2 (phpbb_root_path) Remote File Include
No description provided by source. matasanos Integramod Portal 2.x File Inclusion Vulnerabilities affected software: Integramod Portal vendor: Integramod . you can donwload it from http://www.integramod.com level: Highly Critical muy critico...
Hunkaray Okul Portali 1.1 Duyuruoku.ASP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/25185/info Hunkaray Okul Portali is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...
SiteWare 2.5/3.0/3.1 Editor Desktop Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2868/info Screaming Media is a provider for custom web content. SiteWare Editor Desktop is the web-based administration tool for managing Screaming Media content. SiteWare Editor Desktop is prone to directory traversal...
Group Logic ExtremeZ-IP File and Print Servers 5.1.2 x15 Multiple Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/27718/info ExtremeZ-IP File and Print servers are prone to multiple vulnerabilities including denial-of-service and information-disclosure issues. Attackers can exploit these issues to cause denial-of-service conditions o...
Jabber Server 2.0 - Multiple Remote Buffer Overflow Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/11741/info Multiple remote buffer overflow vulnerabilities affect the Jabber Server. These issues are due to a failure of the application to properly validate the length of user-supplied strings prior to copying them into...
Joomla JE Awd Song Component Persistent XSS Vulnerability
No description provided by source. Critical Level : HIGH Vendor Url : http://joomlaextensions.co.in/component/awdsong/ Google Dork: inurl:comawdsong Price:$37.00 Author : Sid3^effects aKa HaRi shellc99atyahoo.com special thanks to : r0073r inj3ct0r.com,L0rd...
GetGo Download Manager 4.9.0.1982 - HTTP Response Header Buffer Overflow Remote Code Execution
No description provided by source. !/usr/bin/python Exploit Title: GetGo Download Manager HTTP Response Header Buffer Overflow Remote Code Execution Version: v4.9.0.1982 CVE: CVE-2014-2206 Date: 2014-03-09 Author: Julien Ahrens @MrTuxracer Homepage: http://www.rcesecurity.com Software Link:...
Microsoft Internet Explorer Option Element Use-After-Free
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
OpenConf <= 4.11 (author/edit.php) Remote Blind SQL Injection Exploit
No description provided by source. ?php / --------------------------------------------------------------------- OpenConf = 4.11 author/edit.php Remote Blind SQL Injection Exploit --------------------------------------------------------------------- author...............: Egidio Romano aka EgiX...
Plogger 1.0 (RC1) - Multiple Vulnerabilities
No description provided by source. Exploit Title: Multiply vulnerabilites in plogger 1.0 RC1 Date: 03/02/2014 Exploit Author: [email protected] Vendor Homepage: http://www.plogger.org/ Software Link: http://www.plogger.org/download/ Version: 1.0 RC1 Tested on: Virtualbox debian and Apache...
Freelancers Marketplace Script Persistent XSS Vulnerability
No description provided by source. Name : Freelancers Marketplace Script Persistent XSS Vulnerability Date : july 17,2010 Critical Level : HIGH vendor URL :http://www.guruscript.com/ google dork:Powered by Guruscript.com Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd...
Opera Web Browser 7.54 KDE KFMCLIENT Remote Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11901/info It is reported that Opera for Linux is susceptible to a remote command execution vulnerability. This issue is due to a default configuration setting in Opera that utilizes the KDE 'kfmclient' utility to open...
Bloq 0.5.4 rss2.php page[path] Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/20512/info Bloq is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to compromise the application and the...
Noname CMS 1.0 - Multiple SQL Injection Vulnerabilities
No description provided by source. Author: !DoktOR! Date found: 30.09.08 Product: NonameCMS Version: 1.0 URL: noname-cms.org Vulnerability Class: SQL Injection Condition: magicquotesgpc = Off Exploit 1:...
1024 CMS 1.1.0 Beta force_download.php Local File Inclusion
No description provided by source. Exploit Title: 1024 CMS Version 1.1.0 beta/complete-modules/modules/forcedownload/forcedownload.php Local File Inclusion Vulnerability Date: 2011/10/19 Author: Sangyun YOOI2SEC Email: yoosy0302 at naver dot com Software Link: http://1024cms.org/ Version: 1024 CM...
PHP-Fusion Mod Members CV (job) 1.0 - SQL Injection Vulnerability
No description provided by source. PHP-Fusion Mod Members Bewerb Sql Injection AUTHOR : Sina Yazdanmehr R3d.W0rm Discovered by : Sina Yazdanmehr R3d.W0rm Our Site : Http://IRCRASH.COM IRCRASH Team Members : Khashayar Fereidani - R3d.w0rm Sina Yazdanmehr - Hadi Kiamarsi Download :...
1024 CMS <= 1.4.4 - Remote Command Execution with RFI (c99) Exploit
No description provided by source. !/usr/bin/perl 1024 CMS = 1.4.4 Remote Command Execution with RFI c99 Exploit download: http://www.trebledesigns.com/1024cms.zip Author: JosS mail: sys-projectathotmaildotcom site: http://www.hack0wn.com/ team: Spanish Hackers Team - SHT Hack0wn Security Project...
1024 cms 1.3.1 (lfi/sql) Multiple Vulnerabilities
No description provided by source. vuln.: 1024 CMS 1.3.1 LFI/SQL Multiple Vulnerabilities script info and download: http://www.1024cms.com author: irk4zatyahoo.pl greets to: str0ke, wacky '-----------------------------------------------------------------------------' sql-injection: code:...
Tcpdump 3.x L2TP Parser Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9263/info A vulnerability has been reported to exist in the software that may allow a remote attacker to cause a denial of service condition in tcpdump. The issue presents itself when an attacker sends a maliciously...
BizDesign ImageFolio 2.x/3.0.1 nph-build.cgi XSS
No description provided by source. source: http://www.securityfocus.com/bid/6265/info Reportedly, ImageFolio is prone to cross site scripting attacks due to insufficient sanitization of user-supplied input. The vulnerability exists in various cgi scripts included with ImageFolio. As a result, it ...
SiSplet CMS <= 2008-01-24 Multiple Remote File Include Exploit
No description provided by source. SiSplet CMS = 2008-01-24 Multiple Remote File Include Exploit 3rr0r 1: ./SiSplet-2008-01-24/main/anketa/new.php line 3 ?php requireonce$sitepath.'main/anketa/class.php'; ? 3rr0r 2: ./SiSplet-2008-01-24/main/forum/komentar.php line 3 ?php...