56796 matches found
Solaris <= 7.0 ufsdump Local Buffer Overflow Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/680/info A buffer overflow vulnerability in the /usr/lib/fs/ufs/ufsdump setuid program allows local users to obtain root and tty group access. The vulnerability is the result of 'ufsdump' not being able to handle device...
DeltaScripts PHP Classifieds <= 7.5 - SQL Injection Vulnerability
No description provided by source. deltascripts phpclassifieds Remote Sql inj. detail.php siteid ---------------------------------------------------------- Discovered By: ZoRLu Date: 06.11.2008 Home: www.z0rlu.blogspot.com contact: [email protected] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIM...
GNUBoard 4.31.04 (09.01.30) Multiple Local/Remote Vulnerabilities
No description provided by source. GNUBoard V4.31.04 09.01.30 Multiple Local/Remote Vulnerability bY [email protected] / SIR GNUBoard VERSION 4.31.04 09.01.30is a widely used bulletin board system of Korea. It is freely available for all platforms that supports PHP and MySQL. But we find a file...
SpitFire Photo Pro 'pages.php' SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/32012/info SpitFire Photo Pro is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...
Apple Mac OS X 10.4 Weblog Server Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/14569/info Apple Mac OS X Weblog Server is prone to cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issue...
VamCart 0.9 CMS - Multiple Vulnerabilities
No description provided by source. Title: ====== VamCart v0.9 CMS - Multiple Web Vulnerabilities Date: ===== 2012-06-25 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=622 VL-ID: ===== 622 Common Vulnerability Scoring System: ==================================== 4...
X7 Chat <= 2.0.1A1 Local File Inclusion Vulnerability (original find)
No description provided by source. ------------------------------------------------------------------------- -- JIKI Team JIKO + KIl1er + merwan-neo --- ------------------------------------------------------------------------- Author : jiko email : [email protected] Home : www.no-exploit.Com...
VUPlayer 2.49 - (.M3U) Universal Buffer Overflow (DEP Bypass)
No description provided by source. VUPlayer 2.49 .M3U ExploitUniversal buffer overflow/DEP bypass Download: http://vuplayer.com/ Tested on Wind0ws XP SP3 DEP:OptOut Author: Lucfer ------ [email protected] free to tell me your ideas!! : All the Gadgets are from APP's DLLsI could only use the...
Google Chrome 1.0.154.36 - FTP Client PASV Port Scan Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/33112/info Google Chrome is prone to an information-disclosure vulnerability because it fails to adequately validate server-issued instructions while in PASV passive mode. Attackers can exploit this issue to port-scan...
Real Server 7/8/9 Remote Root Exploit (Windows & Linux)
No description provided by source. / / THCREALbad 0.4 - Wind0wZ & Linux remote root exploit / Exploit by: Johnny Cyberpunk thehackerschoice / THC PUBLIC SOURCE MATERIALS / / http://www.service.real.com/help/faq/security/rootexploit082203.html / / After successful exploitation of a Linux box just...
Mediacoder 0.7.5.4792 - Buffer Overflow Exploit (SEH)
No description provided by source. Exploit Title: Mediacoder 0.7.5.4792 SEH Buffer Overflow Exploit Date: 11/29/2010 Author: 0v3r Software Link: http://www.mediacoderhq.com/mirrors.htm?file=MediaCoder-0.7.5.4792.exe Version: 0.7.5.4792 Tested on: Windows XP SP3 EN CVE: N/A !/usr/bin/python...
TinyWebGallery 1.8.3 - Remote Command Execution
No description provided by source. 1 -------------- filefunctions.inc : function executecommand $command global $useshellexec; obstart; seterrorhandler"onerrornooutput"; i f substr@phpuname, 0, 7 == "Windows" // Make a new instance of the COM object $WshShell = new COM"WScript.Shell"; // Make the...
Dexter (CasinoLoader) - SQL Injection
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::HttpClient def...
Oreans WinLicense 2.1.8.0 - XML File Handling Unspecified Memory Corruption
No description provided by source. !/usr/bin/perl Oreans WinLicense v2.1.8.0 XML File Handling Unspecified Memory Corruption Vendor: Oreans Technologies Product web page: http://www.oreans.com Affected version: 2.1.8.0 32/64bit Summary: WinLicense combines the same protection-level as Themida wit...
SGI IRIX <= 6.2 eject Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/351/info A vulnerability exists in the eject program shipped with Irix 6.2 from Silicon Graphics. By supplying a long argument to the eject program, it is possible to overwrite the return address on the stack, and execute...
WorldClient 5.0.x Arbitrary File Deletion Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4687/info WorldClient is a web interface packaged with MDaemon, an email server for Microsoft Windows. An input validation vulnerability exists in WorldClient that allows for an attacker to delete an arbitrary file on the...
TOPO 1.41 Remote Path Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6768/info It has been reported that TOPo may return information to users that is sensitive in nature. Under some circumstances, it is possible to produce an error message that reveals information about web directory...
InstaBoard 1.3 Index.CFM SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7338/info It has been reported that multiple input validation errors exist in the index.cfm file included with InstaBoard. Because of this issue, remote attackers may launch SQL injection attacks through the software. The...
Easy Banner Pro 2.8 info.PHP Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/21967/info Easy Banner Pro is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the...
WHMCS 4.x (invoicefunctions.php, id param) - SQL Injection Vulnerability
No description provided by source. Title: WHMCS 4.x SQL Injection Vulnerability Google Dork: intext:Powered by WHMCompleteSolution OR inurl:submitticket.php?? Author: Ahmed Aboul-Ela Contact: Ahmed.Aboul3laatgmaildotcom Date: 14/5/2013 Vendor: http://www.whmcs.com Version: 4.5.2 and perior versio...
Claroline 1.x Rqmkhtml.PHP Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17343/info Claroline is prone to an information-disclosure vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve...
Qpopper 4.0.x - poppassd Local Root Exploit
No description provided by source. / Title: Qpopper v4.0.x poppassd local root exploit. Exploit code: 0x82-Local.Qp0ppa55d.c -- ./0x82-Local.Qp0ppa55d -u x82 -p mypasswd Qpopper v4.0.x poppassd local root exploit. by Xpl017Elz / include stdio.h include stdlib.h include unistd.h include sys/stat.h...
UNICOS 9/MAX 1.3/mk 1.5,AIX <= 4.2,libc <= 5.2.18,RedHat 4,IRIX 6,Slackware 3 NLS Vuln(2)
No description provided by source. / source: http://www.securityfocus.com/bid/711/info Cray UNICOS 9.0/9.2/MAX 1.3/mk 1.5,AIX = 4.2,Linux libc = 5.2.18,RedHat 4.0,IRIX 6.2,Slackware 3.1 Natural Language Service NLS Vulnerability 2 A buffer overflow condition affects libraries using the Natural...
Microsoft SQL Server sp_replwritetovarbin Memory Corruption via SQL Injection
No description provided by source. $Id: ms09004spreplwritetovarbinsqli.rb 11730 2011-02-08 23:31:44Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensi...
auraCMS 1.5 - Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/12708/info auraCMS is affected by multiple cross-site scripting vulnerabilities. These issues exist because the application fails to properly sanitize user-supplied input. Because of these vulnerabilities, an attacker may...
Netquery 4.0 NQUser.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/20837/info Netquery is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the...
Managed Workplace Service Center 4.x/5.x/6.x Installation Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27702/info Managed Workplace Service Center is prone to an information-disclosure vulnerability because the application fails to protect private information. Attackers may exploit this issue to retrieve sensitive...
php weather 2.2.2 (lfi/xss) Multiple Vulnerabilities
No description provided by source. Lfi/xss script: phpweather-2.2.2 download from:http://downloads.sourceforge.net/phpweather/phpweather-2.2.2.zip?modtime=1087430400&bigmirror=0 vul: /test.php line 48: requirePHPWEATHERBASEDIR . /output/pwtext$language.php; xpl:...
Wordpress Fancy Gallery Plugin 1.2.4 - Arbitrary File Upload
No description provided by source. Description : Wordpress Plugins - Fancy Gallery Arbitrary File Upload Vulnerability Version : 1.2.4 link : http://codecanyon.net/item/fancy-gallery-wordpress-plugin/400535 Price : 18$ Date : 22-06-2012 Google Dork : inurl:/wp-content/plugins/radykal-fancy-galler...
PHPBB 1.x/2.0.x Search.PHP Search_Results Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9883/info A vulnerability has been reported to exist in the software that may allow a remote user to inject malicious SQL syntax into database queries. The problem reportedly exists in one of the parameters of the...
LEADTOOLS 11.5.0.9 (ltdlg11n.ocx) - GetColorRes() Access Violation DoS
No description provided by source. html Test Exploit Page object classid='clsid:00110060-B1BA-11CE-ABC6-F5B2E79D9E3F' id='target' //object script language='vbscript' targetFile = C:\Program Files\Rational\common\ltdlg11n.ocx prototype = Function GetColorRes ByVal hWnd As Long As Integer memberNam...
Greeting card 1.1 - SQL Injection Vulnerability
No description provided by source...
Network Weathermap 0.97a (editor.php) - Persistent XSS
No description provided by source. Network Weathermap 0.97a - Persistent XSS Earlier versions are also possibly vulnerable. INFORMATION Product: Network Weathermap 0.97a Remote-exploit: yes Vendor-URL: http://www.network-weathermap.com/ Discovered by: Daniel Ricardo dos Santos CVE Request -...
Linux 2.6.37-3.x.x PERF_EVENTS - Local Root Exploit
No description provided by source. / linux 2.6.37-3.x.x x8664, 100 LOC gcc-4.6 -O2 semtex.c && ./a.out 2010 [email protected], salut! update may 2013: seems like centos 2.6.32 backported the perf bug, lol. jewgold to 115T6jzGrVMgQ2Nt1Wnua7Ch1EuL9WXT2g if you insist. / define GNUSOURCE 1 include...
Halon Security Router (SR) 3.2-winter-r1 - Multiple Security Vulnerabilities
No description provided by source. ADVISORY INFORMATION Advisory Name: Multiple Security Vulnerabilities in Halon Security Router Date published: 2014-04-07 Vendors contacted: Halon Security http://www.halon.se Researcher: Juan Manuel Garcia http://www.linkedin.com/in/juanmagarcia VULNERABILITIES...
SolarWinds TFTP Server Standard Edition 5.0.55 Large UDP Packet Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6043/info A problem in SolarWinds TFTP Server may result in a denial of service, and may have other ramifications. SolarWinds TFTP Server is distributed for the Microsoft Windows platform. Under some circumstances, it may...
Simple Discussion Board 0.1.0 - Remote File Include Vulnerability
No description provided by source. Simple Discussion Board Multiple F.le Inclusion Vulnerability credit: CeNGiZ-HaN mail: [email protected] team: www.system-defacers.org Script: Simple Discussion Board sdb Download Adress:http://prdownloads.sourceforge.net/sdb/sdb-0.1.0.tar.gz class:...
Maximus SchoolMAX 4.0.1 Error_msg Parameter Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18563/info Maximus SchoolMAX is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input before displaying it to users of the application. An attacker may leverage this issue to have...
PKCrew TIAtunnel 0.9 alpha2 Authentication Mechanism Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2831/info TIAtunnel is a freely available IRC session bouncing software package. It is distributed by the pkcrew. A problem in the software package makes it possible for a remote user to gain a local shell. Due to a buffe...
PHPX 3.x admin/user.php CSRF Arbitrary Command Execution
No description provided by source. source: http://www.securityfocus.com/bid/10284/info It has been reported that PHPX is affected by multiple administrator command execution vulnerabilities. These issues are due to a failure of the application to properly validate access to administrative command...
Tiny Java Web Server 1.71 Multiple Input Validation Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/39666/info Tiny Java Web Server is prone to multiple input-validation vulnerabilities because it fails to adequately sanitize user-supplied input. These vulnerabilities include a directory-traversal vulnerability, an...
PHP Nuke 8.2.4 CSRF Vulnerability
No description provided by source. Exploit Title:CSRF vulnerability Author: sajith version: PHP Nuke 8.2.4 vulnerable app link:http://phpnuke.org/modules.php?name=Release CSRF add group html lang=en head titleCSRF POC PHP nuke 8.2.4/title /head body form...
Magic Forum Personal view_forum.cfm ForumID Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/15774/info CFMagic Products are prone to multiple input validation vulnerabilities. These are due to a lack of proper sanitization of user-supplied input. These vulnerabilities allow an attacker to inject malicious SQL co...
OpenTTD <= 0.4.7 (multiple vulnerabilities) Denial of Service Exploit
No description provided by source. Luigi Auriemma Application: OpenTTD http://www.openttd.org Versions: = 0.4.7 Platforms: Windows, nix, BSD, Mac and others Bugs: A program termination through big error number B broadcast clients disconnection in multiplayer menu Exploitation: A remote, versus...
Spreecommerce 0.60.1 Arbitrary Command Execution
No description provided by source. $Id: spreesearchexec.rb 13831 2011-10-07 17:45:15Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms o...
PALS Library System WebPALS 1.0 pals-cgi Arbitrary Command Execution
No description provided by source. source: http://www.securityfocus.com/bid/2372/info A specially crafted URL composed of a known filename, will disclose the requested file residing on a machine running WebPALS. This vulnerability will also allow an attacker to execute arbitrary code with root...
GOM Video Converter 1.1.0.60 (.wav) - Memory Corruption PoC
No description provided by source. !/usr/bin/python + Author: TUNISIAN CYBER + Exploit Title: GOM Video Converter 1.1.0.60 Memory Corruption PoC + Date: 22-03-2014 + Category: DoS/PoC + Tested on: WinXp/Windows 7 Pro + Vendor: http://converter.gomlab.com/ + Friendly Sites:...
Opera Web Browser 7 IFRAME Zone Restriction Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8887/info A flaw in the Opera web browsers security model has been discovered that could allow an attacker to access a users filesystem within the Local Zone. The problem occurs when handling malformed HTML iframes which...
Exim Sender 3.35 Verification Remote Stack Buffer Overrun Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10290/info Exim has been reported prone to a remotely exploitable stack-based buffer overrun vulnerability. This is exposed if sender verification has been enabled in the agent and may be triggered by a malicious e-mail...
Microsoft Internet Explorer 6.0 mms Protocol Handler Executable Command Line Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10879/info A vulnerability has been reported to exist in Microsoft Internet Explorer that may allow remote attackers to pass arbitrary command line arguments to an application associated with the mms: URI protocol handler...