56796 matches found
Abyss Web Server 1.1.2 Incomplete HTTP Request Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7287/info A denial of service vulnerability has been reported for Abyss Web Server. The vulnerability exists when Abyss attempts to parse certain incomplete HTTP headers. GET / HTTP/1.0 Connection: GET / HTTP/1.0 Range:...
AnnonceScriptHP 2.0 admin/admin_config/Aide.php email Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/21514/info AnnonceScriptHP is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these...
CodetoSell ViArt Shop Enterprise 2.1.6 product_details.php category_id Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/13462/info ViArt Shop is affected by multiple cross-site scripting and HTML injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in...
rlpr <= 2.04 msg() Remote Format String Exploit
No description provided by source. by jaguar !/usr/bin/python import os, sys, socket, struct, time, telnetlib class rlprd: fd = None pad = 2 00000000 31DB xor ebx,ebx 00000002 F7E3 mul ebx 00000004 B003 mov al,0x3 00000006 80C304 add bl,0x4 00000009 89E1 mov ecx,esp 0000000B 4A dec edx 0000000C C...
uTorrent <= 2.0.3 DLL Hijacking Exploit (plugin_dll.dll)
No description provided by source. / Exploit Title: uTorrent = 2.0.3 DLL Hijacking Exploit plugindll.dll Date: 24/08/2010 Author: TheLeader Email: gsog2009 a7 hotmail d0t com Software Link: http://www.utorrent.com/downloads Version: 2.0.3 and prior Tested on: Windows 7 x86 6.1.7600 Compile and...
Alt-N SecurityGateway username Buffer Overflow
No description provided by source. $Id: altnsecuritygateway.rb 9719 2010-07-07 17:38:59Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms...
ZixForum 1.12 Forum.ASP Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/16406/info ZixForum is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitatio...
MyBulletinBoard 1.0 RateThread.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14786/info MyBulletinBoard is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation...
eXtreme Message Board 1.9.11 Multiple CSRF Vulnerabilities
No description provided by source. !--- Title: eXtreme Message Board 1.9.11 Multiple CSRF Vulnerabilities Author: 10n1z3d 10n1z3datwdotcn Date: Thu 15 Jul 2010 12:08:07 PM EEST Vendor: http://www.xmbforum.com/ Download: http://www.xmbforum.com/download/XMB-1.9.11.09.zip --- -= CSRF PoC 1 - Change...
ExpressionEngine 1.6 Avtaar Name HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/34193/info ExpressionEngine is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and...
vBulletin misc.php Template Name Arbitrary Code Execution
No description provided by source. $Id: phpvbulletintemplate.rb 9929 2010-07-25 21:37:54Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and term...
T-Dreams Job Seekers Package 3.0 - SQL Injection
No description provided by source. Author: R4dc0re Exploit Title: T-Dreams Job Seekers Package SQL injection Vulnerability Date: 04-12-2010 Vendor or Software Link:http://t-dreams.com Category:WebApp Version:3.0 Price:279$ Contact: [email protected] Website: www.1337db.com Greetings to:...
d.net cms (lfi/sqli) Multiple Vulnerabilities
No description provided by source. + d.net CMS LFI/SQLI Multiple Remote Vulnerabilities + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Download : http://sourceforge.net/projects/dnet/ + SQL Injection PoC's - No admin required...
Microsoft Indexing Service Query Validation Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19927/info Microsoft Indexing Service is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input before it is rendered to other users. An attacker may leverage...
MyBlog 0.9.8 Settings.PHP Authentication Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/23521/info MyBlog is prone to an authentication-bypass vulnerability. Attackers can exploit this issue to bypass the authentication mechanism and then access or overwrite files with arbitrary PHP script code. Script code...
QuickFront 1.0 File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7308/info A vulnerability has been reported for QuickFront that will result in the disclosure of sensitive system resources to remote attackers. QuickFront does not properly sanitize user-supplied input. Specifically,...
grsecurity Kernel Patch 1.9.4 Linux Kernel Memory Protection Weakness
No description provided by source. source: http://www.securityfocus.com/bid/4762/info An attacker with root access may be able to write to kernel memory in spite of the security patch provided by grsecurity. The patch operates by redirecting the write system call, when it is being used to write t...
Utopia News Pro <= 1.1.3 (news.php) SQL Injection Exploit
No description provided by source. ?php bif magic quotes off -SQL INJECTION: /str0ke 3.10 07/10/2005 utopiaxpl.php Utopia News Pro 1.1.3 possibly prior versions SQL Injection / Administrative credentials disclosure by rgod site: http://rgod.altervista.org make these changes in php.ini if you have...
Adobe Collab.getIcon() Buffer Overflow
No description provided by source. $Id: adobegeticon.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Free Download Manager Torrent File Parsing - Multiple Remote Buffer Overflow Vulnerabilities
No description provided by source. $Id: fdmtorrent.rb 7455 2009-11-10 21:52:17Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Mega Mall order-track.php orderNo Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/21072/info Megamail is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...
LAN Management System (LMS) <= 1.9.6 - Remote File Inclusion Exploit
No description provided by source. !/usr/bin/perl LMS - LAN Management System 1.9.6 - RFI Risk : High Remote Code Execution Url: http://www.lms.org.pl/download/1.9/lms-1.9.6.tar.gz Exploit: http://site.com/path/lib/language.php?LIBDIR=EvilScript coded and f0und3d by Kw3RLn...
SiteEnable 3.3 Login.ASP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16009/info SiteEnable is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary...
Markus Triska CGIForum 1.0 "thesection" Directory Traversal Vulnerability
No description provided by source. source : http://www.securityfocus.com/bid/1963/info CGIForum is a commercial cgi script from Markus Triska which is designed to facilitate web-based threaded discussion forums. The script improperly validates user-supplied input to the thesection parameter. If a...
VBulletin 1.0.1 lite/2.x/3.0 /admincp/index.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/14874/info vBulletin is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues t...
FlatPress 0.804 Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/31407/info FlatPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the brows...
Watermark Master 2.2.23 - Buffer Overflow (SEH)
No description provided by source. !/usr/bin/python Exploit Title:Watermark Master Buffer Overflow SEH Date found: 31.10.2013 Exploit Author: metacom URL:http://www.videocharge.com/download.php Software Link:www.videocharge.com/download/WatermarkMasterInstall.exe Version: 2.2.23 Vulnerable...
Mtp-Target Server 1.2.2 Memory Corruption Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13463/info The Mtp-Target server is prone to a memory corruption vulnerability. The issue exists because a comparison fails to ensure that an integer value parameter retrieved from a client is signed. A check is made to...
Alcatel-Lucent OmniPCX Enterprise Communication Server <= 7.1 - masterCGI Command Injection
No description provided by source...
Scorched 3D <= 39.1 - Multiple Vulnerabilities (All-in-One) (PoC)
No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h include stdarg.h include time.h include zlib.h ifdef WIN32 include winsock.h / Header file used for manage errors in Windows It support socket and errno too this header replace the previous...
Microsoft Internet Explorer 5 Remote URLMON.DLL Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7419/info A vulnerability has been discovered in Microsoft Internet Explorer. Due to insufficient bounds checking performed by URLMON.DLL it may be possible for a malicious web server to trigger a buffer overflow. This...
West Street Software LocalWEB HTTP Server 1.2 - Buffer Overflow
No description provided by source. source: http://www.securityfocus.com/bid/1423/info LocalWEB is a freeware HTTP server for the Windows suite of operating systems. Certain versions of this software are vulnerable to a remotely exploitable buffer overflow attack. This attack can instrumented by...
Campsite 2.6.1 ArticleTopic.php g_documentRoot Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/23874/info Campsite is prone to multiple remote file-include vulnerabilities. Exploiting this issue allows remote attackers to execute code in the context of the webserver. This issue affects Campsite 2.6.1. Earlier...
barracudadrive <= 3.7.2 - Multiple Vulnerabilities
No description provided by source. Luigi Auriemma Application: BarracudaDrive Web Server http://barracudaserver.com/products/BarracudaDrive/ http://barracudaserver.com/products/HomeServer/ Versions: = 3.7.2 Platforms: Windows Bugs: A directory traversal B scripts source visualization C arbitrary...
Computer Associates SiteMinder Web Agent Smpwservices.FCC Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26375/info Computer Associates SiteMinder Web Agent is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue allows attackers to execute arbitrar...
PoPToP PPTP <= 1.1.4-b3 Remote Root Exploit
No description provided by source. / exploit for a recently discovered vulnerability in PoPToP PPTP server under Linux. Versions affected are all prior to 1.1.4-b3 and 1.1.3-20030409. The exploit is capable of bruteforcing the RET address to find our buffer in the stack. Upon a successfull run it...
TGS Content Management 0.3.2r2 login.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/30157/info TGS Content Management is prone to an HTML-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these...
IBM Tivoli Directory Server 3.2.2/4.1 LDACGI Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10841/info IBM Tivoli Directory Server is reported to contain a directory traversal vulnerability in its web front-end application. This issue presents itself due to insufficient sanitization of user-supplied data. This...
BL4 SMTP Server < 0.1.5 - Remote Buffer Overflow PoC
No description provided by source. !/usr/bin/perl use IO::Socket; use Socket; my$socket = ; if$ARGV 1 | $ARGV 2 usage if$ARGV 2 $prt = $ARGV1 else $prt = 25 ; $adr = $ARGV0; $prt = $ARGV1; $socket = IO::Socket::INET-newProto=tcp, PeerAddr=$adr, PeerPort=$prt, Reuse=1 or die Error: cant connect to...
IBM Tivoli Directory Server 6.0 Unspecified LDAP Memory Corruption Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16593/info IBM Tivoli Directory Server is prone to an unspecified memory corruption. This issue may be triggered by malformed LDAP data. The exact impact of this vulnerability is not known at this time. Although the issue...
WFTPD 2.34/2.40/3.0 - Remote Buffer Overflow Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/747/info WFTPD is reported prone to a remote buffer overflow vulnerability. The issue exists due to a lack of sufficient bounds checking performed on MKD and CWD arguments. It is reported that superfluous data passed to M...
Spytech NetVizor 6.1 - (services.exe) DoS
No description provided by source. Author: loneferret of Offensive Security Product: Spytech VetVizor Version: Build Release 6.1 Vendor Site: hhttp://www.spytech-web.com/ Software Download: http://www.spytech-web.com/download.shtmlnetvizor Descriptions: NetVizor is the latest in network monitorin...
Apache 2.0.4x mod_php Module File Descriptor Leakage Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/9302/info Reportedly, the Apache modphp module may be prone to a vulnerability that may allow a local attacker to gain access to privileged file descriptors. As a result, the attacker may pose as a legitimate server and...
Spaceacre (index.php) SQL/HTML/XSS Injection Vulnerability
No description provided by source. ------------------------------------------------------------------------------------------- Spaceacre index.php SQL/HTML/XSS Injection Vulnerability ------------------------------------------------------------------------------------------- Author: CoBRa21 Scrip...
Back-End CMS 0.4.5 Facts.php includes_path Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/20207/info Back-End CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows an attacker to execute arbitrary...
Microsoft SQL Server 7.0/2000,Data Engine 1.0/2000 xp_showcolv Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2038/info The API Srvparaminfo, which is implemented by Extended Stored Procedures XPs in Microsoft SQL Server and Data Engine, is susceptible to a buffer overflow vulnerability which may cause the application to fail or...
Total Multimedia Features DoS PoC for Sony Ericsson Phones
No description provided by source. Total Multimedia Features DoS PoC for Sony Ericsson Phones. Should work on almost all of their Models By Aodrulez. In Sony Ericsson phonestested on w800i,k750i,w810i, if you simply rename a File with a .sest extension, it achieves System File status.This file...
LifeType 1.0.5 Index.PHP Date Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18835/info LifeType is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow ...
Flip 3.0 'config.php' Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30312/info Flip is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker can exploit this issue to execute malicious PHP code in the context of the webserve...
Linux i686 - pacman -R <package> - 59 bytes
No description provided by source. / Title : Linux i686 - pacman -R package - 59 bytes Author : Jonathan Salwan Mail : submit ! shell-storm.org Web : http://www.shell-storm.org Pacman is a software package manager, developed as part of the Arch Linux distribution. With this shellcode you can remo...