56796 matches found
Zomplog <= 3.8 (mp3playlist.php speler) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/python ---------------------------------------------------------------------------------- The sql injection : /zomplog-3.8/plugins/mp3playlist/mp3playlist.php?speler=sql I've code a sploit for the fun x...
Getleft 1.2 - Remote Buffer Overflow Proof of Concept
No description provided by source. !/usr/bin/perl Getleft v1.2.0.0 DoS PoC Author: Koshi Application: Getleft v1.2 Publisher: Andres Garcia http://personal1.iddeo.es/andresgarci/getleft/english/index.html Description: Website Downloader, for such things as offline browsing. Tested On: Windows XP...
Sysax Multi Server 5.50 Create Folder Remote Code Exec BoF (MSF Module)
No description provided by source. Title: Sysax Multi Server 5.50 Create Folder Remote Code Exec BoF MSF Module Author: Craig Freyman @cd1zz Tested on: XP SP3 32bit and Server 2003 SP2 32bitNo DEP Notes: My original exploit = http://www.exploit-db.com/exploits/18382/ did not automate the SID...
CreateAuction Cats.ASP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/21929/info Createauction is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...
MetaDot Portal Server 5.6.x userchannel.pl op Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/9439/info A number of vulnerabilities have been found in all version of MetaDot Corporation's MetaDot Portal Server. Due to a failure of the software to properly validate user input, an attacker may be able to corrupt dat...
Elido Face Control 0 Multiple Directory Traversal Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/16401/info Face Control is prone to multiple directory-traversal vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these vulnerabilitie...
Microsoft Internet Explorer 7.0 HTML Form Value Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/33494/info Microsoft Internet Explorer is prone to a denial-of-service vulnerability because it fails to perform adequate boundary checks on user-supplied data. Successfully exploiting this issue may allow an attacker to...
W-Agora 4.0 - create_forum.php bn_dir_default Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/28366/info w-Agora is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the...
Banex PHP MySQL Banner Exchange 2.21 members.php cfg_root Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/19240/info PHP MySQL Banner Exchange is prone to multiple SQL-injection vulnerabilities and a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the...
torrenttrader 2.08 - Multiple Vulnerabilities
No description provided by source. waraxe-2012-SA089 - Multiple Vulnerabilities in TorrentTrader 2.08 =============================================================================== Author: Janek Vind waraxe Date: 17. September 2012 Location: Estonia, Tartu Web:...
gf-3xplorer 2.4 (xss/lfi/etc.) Multiple Vulnerabilities
No description provided by source. --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org...
Simple Machines Forum <= 1.1.4 - Multiple Remote File Include Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/28493/info Simple Machines Forum is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary...
Apache Win32 1.3.x/2.0.x Batch File Remote Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4335/info Special characters such as | may not be filtered by the batch file handler when a web request is made for a batch file. As a result, a remote attacker may be able to execute arbitrary commands on the host runnin...
Ovidentia 6.6.5 'index.php' Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30735/info Ovidentia is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary script code in the browser...
AIX <= 5.3.0 (invscout) Local Command Execution Vulnerability
No description provided by source. !/usr/bin/sh r00t exploit written for the invscout bug reported by Idefense labs http://www.idefense.com/application/poi/display?id=171&type=vulnerabilities coded by ri0t exploitation is trivial but automated with this script www.ri0tnet.net usage ./getr00t.sh :...
phpMyAdmin <= 2.9.1 - Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/23624/info phpMyAdmin is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the...
PhpMyAdmin 2.x db_operations.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/21137/info phpMyAdmin is prone to multiple input-validation vulnerabilities, including an HTML-injection vulnerability, cross-site scripting vulnerabilities, and information-disclosure vulnerabilities. An attacker could...
Baykus Yemek Tarifleri <= 2.1 - SQL Injection Vulnerability
No description provided by source...
Bloginator 1a - SQL Command Injection via Cookie Bypass Exploit
No description provided by source. Author = FireShot , Jacopo Vuga. Thx to = Osirys for develop the Exploitation Code with me Mail = fireshotatautisticidotorg / osirysatautisticidotorg Vulnerability = SQL Command Injection mq = off Software = Bloginator V1A Download =...
SystemTap 1.0/1.1 '__get_argv()' and '__get_compat_argv()' Local Memory Corruption Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/38120/info SystemTap is prone to multiple local memory-corruption vulnerabilities. An attacker may exploit these issues to execute arbitrary code with SYSTEM privileges. Failed exploit attempts will result in a denial of...
WordPress Advertizer plugin <= 1.0 - SQL Injection Vulnerability
No description provided by source. Exploit Title: WordPress Advertizer plugin = 1.0 SQL Injection Vulnerability Date: 2011-08-29 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/advertizer.1.0.zip Version: 1.0 tested Note:...
PHP 4.x copy() Function Safe Mode Bypass
No description provided by source. source: http://www.securityfocus.com/bid/17439/info PHP is prone to multiple 'safemode' and 'openbasedir' restriction-bypass vulnerabilities. Successful exploits could allow an attacker to access sensitive information or to write files in unauthorized locations...
Slash CMS - Multiple Vulnerabilities
No description provided by source. Exploit Title: Slash CMS Multiple Vulnerabilities Date: 21-03-2013 Author: DaOne aka Mocking Bird Vendor Homepage: http://www.slash-cms.com/ Software Link: http://sourceforge.net/projects/slashcms/ Category: webapps/php Google Dork: N/A Tested on:...
IrIran Shoping Script SQL Injection Vulnerability
No description provided by source. ========================================== IrIran Shoping Script SQL Injection Vulnerability ========================================== InformatioN Title : IrIran Shoping Script SQL Injection Vulnerability Author : Net.Edit0r Vendor or Software Link :...
Alumni 1.0.8/1.0.9 - info.php id Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/29019/info Project Alumni is prone to a cross-site scripting vulnerability and an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues could allow...
iOS myDBLite 1.1.10 - Directory Traversal
No description provided by source. Exploit Title : myDBLite v1.1.10 for iPhone / iPod touch, Directory Traversal Date: 02/24/2011 Author: R3d@l3rt, Sp@2K, Sp@2K, Sunlight, H@ckk3y Software Link: http://itunes.apple.com/kr/app/mydb-lite/id335521112?mt=8 Version: 1.1.10 Tested on: iPhone, iPod 3GS...
Apache Tomcat 4.0.x Non-HTTP Request Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8824/info Apache Tomcat 4 has been reported prone to a remotely triggered denial-of-service vulnerability when handling undisclosed non-HTTP request types. When certain non-HTTP request types are handled by the Tomcat HTT...
Pre Printing Press product_desc.php (pid) SQL Injection Vulnerability
No description provided by source. ======================================================================================== | Title : Pre Printing Press productdesc.php pid SQL Injection Vulnerability | Author : Easy Laster | Script : Pre Printing Press | Price : $999 | Exploitation : remote | Bu...
Microsoft Internet Explorer 5.0.1 - Multiple ActiveX Controls Denial of Service Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/22288/info Microsoft Internet Explorer is prone to multiple denial-of-service vulnerabilities because the application fails to handle exceptional conditions. These issues are triggered when an attacker entices a victim us...
AlienVault 4.3.1 - Unauthenticated SQL Injection
No description provided by source...
Sudo <= 1.6.8p9 (SHELLOPTS/PS4 ENV variables) Local Root Exploit
No description provided by source. Sudo local root escalation privilege vuln versions : sudo 1.6.8p10 by breno You need sudo access execution for some bash script Use csh shell to change SHELLOPTS env ie: %cat x.sh !/bin/bash -x echo Getting root!! % cat /etc/sudoers ... breno ALL=ALL...
AdaptCMS 2.0.1 Beta Release Remote File Inclusion Vulnerability (msf)
No description provided by source. / / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID This file is part of the Metasploit Framework...
Gallery 1.2/1.3.x Search Engine Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8288/info Gallery is prone to a cross-site scripting vulnerability. This issue is present in the search engine facility provided by the software. An attacker could exploit this issue by constructing a malicious link to th...
WorldClient 5.0.x Arbitrary File Deletion Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4687/info WorldClient is a web interface packaged with MDaemon, an email server for Microsoft Windows. An input validation vulnerability exists in WorldClient that allows for an attacker to delete an arbitrary file on the...
Dolphin 2.0 (.elf) Local Daniel Of Service
No description provided by source. ?php Dolphin 2.0 .elf Local Daniel Of Service Software Site: http://www.dolphin-emu.com/ Software Download: http://www.dolphin-emu.com/downloads.php?catid=9&downloadid=94 Author: Pr0T3cT10n [email protected] Site: http://www.nullbyte.org.il Dolphin 2.0 is...
Gold MP4 Player 3.3 - Buffer Overflow PoC (SEH)
No description provided by source. ?--------------------------------------------------------------------------------- Exploit Title: GoldMP4Player 3.3 - Buffer Overflow PoC SEH Date: Feb 25 2014 Exploit Author: Gabor Seljan Software Link:...
AHG Search Engine 1.0 Search.CGI Arbitrary Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3985/info Search.CGI is a component of the HTMLsearch Search Engine software distributed by AHG. The software is available for the Unix, Linux, and Microsoft platforms. The search.cgi script included with the AHG Search...
Opsview pre 4.4.1 - Blind SQL Injection
No description provided by source. CVE-2013-5694 Blind SQL Injection in Ops View Versions: Opsview pre 4.4.1 Author: J. Oquendo joquendo at e-fensive dot net I. ADVISORY Title: Blind SQL Injection in OpsView Date published: 2013-10-28 Vendor contacted: 2013-09-04 II. BACKGROUND Opsview is a syste...
Joomla Component GBU FACEBOOK 1.0.5 - SQL injection vulnerability
No description provided by source. !===========================================================================! Joomla Component GBU FACEBOOK SQL injection vulnerability Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : 20 april, 2010...
Achievo <= 1.3.2 (fckeditor) Arbitrary File Upload Exploit
No description provided by source. ?php / ----------------------------------------------------------------- Achievo = 1.3.2 fckeditor Remote Arbitrary File Upload Exploit ----------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....:...
Syzygy CMS <= 0.3 (Auth Bypass) SQL Injection Vulnerability
No description provided by source. --+++=========================================================================+++-- --+++====== Syzygy CMS = 0.3 Auth Bypass SQL Injection Vulnerability ======+++-- --+++=========================================================================+++-- + Syzygy CMS ...
JD-WordPress 2.0-1.0 RC 2 for Joomla wp-trackback.php Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/19209/info JD-WordPress for Joomla is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote files...
Reamday Enterprises Magic News Plus 1.0.2 Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/37566/info Magic News Plus is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in t...
Jarida 1.0 - Multiple Vulnerabilities
No description provided by source. Exploit Title: Jarida 1.0 SQL Injection Date : 26 September 2011 Author : Ptrace Security Gianni Gnesa gnix Contact : researchatptrace-securitydotcom Software Link: http://sourceforge.net/projects/jarida/ Version : 1.0 Tested on : CentOS 5.6 01 ./article.php:28:...
AOL Desktop 9.6 RTX Buffer Overflow
No description provided by source. $Id: aoldesktoplinktag.rb 12284 2011-04-08 23:09:31Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms...
WSN Guest Database Disclosure Vulnerability
No description provided by source. .:. Author : HackXBack [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : WSN Guest .:. Bug Type : Database Disclosure .:. Dork : Powered by WSN Guest === Exploit === http://server/wsnguest/admin/backup.sql Greats T0: All Member...
Apple QuickTime 7.7.2 MIME Type Buffer Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
RedHat Linux 4.2/5.2/6.0,S.u.S.E. Linux 6.0/6.1 Cron Buffer Overflow Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/602/info The version of Vixie cron that ships with RedHat versions 4.2, 5.2 and 6.0 is vulnerable to a local buffer overflow attack. By utilizing the MAILTO environment variable, a buffer can be overflown in the cronpopen...
Joomla! and Mambo 'com_team' Component SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27881/info The 'comteam' component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...
Microsoft IIS 2.0/3.0 Long URL Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2654/info Microsoft Internet Information Server is vulnerable to a denial of service. This particular denial of service affects versions 2.0, 3.0 and 4.0 of the server prior to service pack 4. The URL which causes this...