56796 matches found
Linux Kernel 2.6.x - 'add_to_page_cache_lru()' Local Denial of Service Vulnerability
Linux Kernel 'addtopagecachelru'本地拒绝服务漏洞 漏洞类型： 设计缺陷 exp: global bs=8k iodepth=1024 iodepthbatch=60 randrepeat=1 size=1m directory=/home/oracle numjobs=20 job1 ioengine=sync bs=1k direct=1 rw=randread filename=file1:file2 job2 ioengine=libaio rw=randwrite direct=1 filename=file1:file2 job3 bs=1k...
Nokia Affix < 3.2.0 btftp Remote Client Exploit
No description provided by source...
GarageSales Remote Upload Vulnerability
No description provided by source. Exploit Title: GarageSales Remote Upload Vulnerability Date: 06/04/2010 Author: saidinh0 Software Link: N/A Version: 2004/2008 Tested on: Linux/unix CVE : if exists Code : N/A Email : [email protected] | Intorduction :| Hi everybody , This my first bug Remote Uplo...
Apache 1.x/2.0.x Chunked-Encoding Memory Corruption Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/5033/info When processing requests coded with the 'Chunked Encoding' mechanism, Apache fails to properly calculate required buffer sizes. This is believed to be due to improper signed interpretation of an unsigned integer...
weborf <= 0.12.2 - Directory Traversal vulnerability
No description provided by source. Title: Weborf httpd = 0.12.2 Directory Traversal Vulnerability Date: Sep 6, 2010 Author: Rew Link: http://galileo.dmi.unict.it/wiki/weborf/doku.php Version: 0.12.2 Tested On: Debian 5 CVE: N/A ============================================================= Weborf...
PHPList Mailing List Manager 2.x /admin/eventlog.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/15350/info PHPList is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly santize user-supplied input. The application is prone to multiple cross-site...
PHPX 3.5.9 XCode Tag HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16799/info PHPX is prone to an HTML-injection vulnerability. The application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would be...
LAN Messenger <= 1.2.28 - Denial of Service Vulnerability
No description provided by source. !/usr/bin/python Exploit Title: LAN Messenger = v1.2.28 Remote Denial of Service Vulnerability Version: = v1.2.28 Date: 2012-04-28 Author: Julien Ahrens Homepage: www.inshell.net Software Link: http://lanmsngr.sourceforge.net/ Tested on: Windows XP SP3...
ZoneMinder Video Server packageControl Command Execution
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
Kolibri+ Webserver 2 - (GET Request) Remote SEH Overwrite Exploit
No description provided by source. !/usr/bin/python Could not get this to work on XP SP3. php5ts.dll is the only module with safe seh off but could not get the pop pop ret to work correctly despite the large number of usable addresses that were tested. $ ./kolibri.py 192.168.1.146 8080 Kolibri+...
Cygnus Network Security 4.0/KerbNet 5.0,MIT Kerberos 4/5,RedHat 6.2 Compatibility krb_rd_req() Buffer Overflow (1)
No description provided by source. source: http://www.securityfocus.com/bid/1220/info Several buffer overflow vulnerabilities exist in Kerberos 5 implmenetations due to buffer overflows in the Kerberos 4 compatability code. These include MIT Kerberos 5 releases 1.0.x, 1.1 and 1.1.1, MIT Kerberos ...
Independent Escort CMS Blind SQL Injection Vunerability
No description provided by source...
PowerScripts PlusMail WebConsole 1.0 Poor Authentication Vulnerability (3)
No description provided by source. source: http://www.securityfocus.com/bid/2653/info PowerScripts PlusMail Web Control Panel is a web-based administration suite for maintaining mailing lists, mail aliases, and web sites. It is reportedly possible to change the administrative username and passwor...
W-Agora 4.2.1 profile.php showuser Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/23057/info w-Agora is prone to multiple input-validation vulnerabilities, including possible SQL-injection issues and multiple cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data...
SAP Web Application Server 6.x/7.0 Input Validation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18006/info SAP Web Application Server is prone to an input-validation vulnerability that results in HTTP response-splitting attacks. This issue is due to a failure in the application to properly sanitize user-supplied...
EPShop < 3.0 (pid) Remote SQL Injection Vulnerability
No description provided by source. + Name : EPShop 3.0 pid Remote SQL Injection Vulnerability + Author : mikeX - http://www.cyber-underground.net / m$n: mikeXatfuckoffdotcom + Dorks: ?action=proshow and ?action=disppro + Greetz : Ciaran McG, -Witch-Doct0r, Kn, MegaByte, Squibs, cIpheR, mmmbud,...
VAMP Webmail <= 2.0beta1 (yesno.phtml) Remote Include Vulnerability
No description provided by source...
Home FTP Server 1.11.1.149 - Post-Auth Directory Traversal
No description provided by source...
aoblogger 2.3 login.php username Field SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/16286/info AOblogger is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities...
X10Media Mp3 Search Engine < 1.6.2 Admin Access Vulnerability
No description provided by source. THUNDER Product: X10media Mp3 Search Engine v1.x Admin Access Vulnerability Author : THUNDER t4hathotmail.fr File : admin/admin.php Vulnerable Code / User not an administrator, redirect to main page automatically. / if!$session-isAdmin headerLocation: ../main.ph...
ACDSee PRO 5.1 CUR Image Processing Heap Overflow
No description provided by source. Application: ACDSee PRO CUR Image Processing Heap Overflow Platforms: Windows Secunia: SA48804 PRL: 2012-19 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1 Introduction 2 Report Timeline 3...
DUportal 3.1.2 inc_rating.asp Multiple Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/13288/info DUportal/DUportal SQL are prone to multiple SQL injection vulnerabilities. These issues exist because the application fails to properly sanitize user-supplied input before using it in SQL queries. Successful...
DUportal Pro 3.4 detail.asp Multiple Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/13285/info DUportal Pro is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacke...
DUportal 3.1.2 inc_poll_voting.asp DAT_PARENT Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/13288/info DUportal/DUportal SQL are prone to multiple SQL injection vulnerabilities. These issues exist because the application fails to properly sanitize user-supplied input before using it in SQL queries. Successful...
Novell Groupwise 8.0.2 HP3 and 2012 Integer Overflow Vulnerability
No description provided by source. Application: Novell Groupwise Platforms: Windows Version: 8.0.2 HP3 and 2012 Secunia: SA50622 PRL: 2012-28 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1 Introduction 2 Report Timeline 3...
XennoBB 2.1 Profile.PHP Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/19374/info XennoBB is prone to multiple SQL injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in an SQL query. A successful attack could allow an attacker to compromise th...
Platform Load Sharing Facility 4/5/6 EAuth Privilege Escalation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9724/info Load Sharing Facility eauth component has been reported prone to privilege escalation vulnerability. The eauth component is responsible for controlling authentication procedures within Load Sharing Facility. An...
Apple Mac OS X 10.x AppleScript ARDAgent Shell Local Privilege Escalation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/29831/info Mac OS X is prone to a local privilege-escalation vulnerability affecting ARDAgent Apple Remote Desktop. Successful exploits allow local attackers to execute arbitrary code with superuser privileges, completely...
linux/x86 add user 70 bytes
No description provided by source. / Linux/x86 Appends the line z::0:0:::\n to /etc/passwd. quite old, could be optimized further / include stdio.h char c0de = / main: / \xeb\x29 / jmp callz / / start: / \x5e / popl %esi / \x29\xc0 / subl %eax, %eax / \x88\x46\x0b / movb %al, 0x0b%esi / \x89\xf3 ...
Wordpress WPEasyStats Plugin 1.8 - Remote File Inclusion
No description provided by source. Exploit Title: Wpeasystats Wordpress plugin RFI Google Dork: inurl:wp-content/plugins/wpeasystats Date: 09/19/2011 Author: Ben Schmidt supernothing AT spareclockcycles.org @supernothing Software Link: http://wordpress.org/extend/plugins/wpeasystats/download/...
PHP Volunteer Management System 1.0.2 - Multiple Vulnerabilities
No description provided by source. Exploit Title: PHP Volunteer Management System v 1.0.2 Multiple Vulnerabilities Date: 05/28/12 Author: Ashoo Mail: [email protected] Software Site: https://sourceforge.net/projects/phpvolunteer/ Version: 1.0.2 Tested on: IIS6.0-Windows 2003 ToC 1.0...
mozilocms 1.11 (lfi/pd/xss) Multiple Vulnerabilities
No description provided by source. + moziloCMS 1.11 LFI/PD/XSS Multiple Remote Vulnerabilites + Discovered By SirGod + www.mortal-team.org + www.h4cky0u.org + Local File Inclusion PoC 1 : http://127.0.0.1/index.php?cat=10Willkommen&page=../../../../../BOOTSECT.BAK%00 PoC 2 :...
MyBloggie 2.1.3 Search.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15017/info myBloggie is prone to an SQL injection vulnerability. This is due to a lack of sanitization of user-supplied input before passing it on to SQL queries. Successful exploitation could result in a compromise of th...
Invision Power Board 1.x ST Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13097/info Invision Power Board is reported prone to an SQL injection vulnerability. Due to improper filtering of user-supplied data, attackers may pass SQL statements to the underlying database through the 'st' parameter...
Juniper Networks JUNOS <= 7.1.1 Malformed TCP Packet Denial of Service and Unspecified Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/37670/info JUNOS is prone to a remote denial-of-service vulnerability that arises when the application handles specially crafted TCP packets. JUNOS is also prone to six other unspecified security vulnerabilities. These...
AVS Media Player 4.1.11.100 (.ac3) - Denial of Service
No description provided by source. !/usr/bin/python print +Exploit Title:AVS Media Player.ac3Denial of Service Exploit +Vulnerable Product:4.1.11.100 +Download Product:http://www.avs4you.com/de/downloads.aspx +All AVS4YOU Software has problems with format .ac3 +Date: 29.06.2013 +Exploit Author:...
O-Kiraku Nikki 1.3 Nikki.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15657/info O-Kiraku Nikki is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation cou...
WebPortal CMS <= 0.7.4 (download.php aid) SQL Injection Exploit
No description provided by source. !/usr/bin/perl --==+============================================================================+==-- --==+ WebPortal = 0.7.4 Remote SQL Injection Exploit +==-- --==+============================================================================+==-- Discovered By:...
Vastal I-Tech DVD Zone view_mag.php mag_id Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/36487/info DVD Zone is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to stea...
Linkspider 1.08 Multiple Remote File Include Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/30632/info Linkspider is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues can allow an attacker to compromise the application and...
Moodle 1.7.1 Index.PHP Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/24748/info Moodle is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on...
Gallery <= 2.0.3 stepOrder[] Remote Commands Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo Gallery =2.0.3 \stepOrder\ remote cmmnds xctn \r\n; echo by rgod rgodATautisticiDOTorg \r\n; echo site: http://retrogod.altervista.org \r\n\r\n; echo - works with registerglobals = On and magicquotesgpc = Off \r\n; if...
CilemNews System <= 1.1 (yazdir.asp haber_id) SQL Injection Exploit
No description provided by source. !/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Usage: cilem.pl victim directory Original Advisory: http://www.nukedx.com/?viewdoc=10 googledork inurl:yazdir.asp?haberid= 2.140 pages...
Tomcat 3.2.1/4.0,Weblogic Server 5.1 URL JSP Request Source Code Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2527/info BEA Systems WebLogic Server is an enterprise level web and wireless application server. Tomcat can be used together with the Apache web server or a stand alone server for Java Servlets and Java Pages. Tomcat shi...
NetBSD/FreeBSD Port Systrace 1.x Exit Routine Access Validation Privilege Escalation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10320/info A vulnerability has been reported that affects Systrace on NetBSD, as well as the FreeBSD port by Vladimir Kotal. The source of the issue is insufficient access validation when a systraced process is restoring...
Simple Chat 1.x User Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7168/info Simple Chat! does not restrict access to sensitive information by default. An attacker could use this information to launch attacks against other users. http://www.example.com/chat/data/usr...
Working Resources 1.7.x/2.15 BadBlue Ext.DLL Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7387/info BadBlue is prone to a vulnerability that could allow remote attackers to gain unauthorized access. This is due to an input validation issue in the 'ext.dll' component that could allow a remote attacker to cause...
CP3 Studio PC Version - Denial of Service
No description provided by source. Exploit Title : CP3 Studio PC Ver. Dos Date : June 12, 2010 Author : chap0 - www.seek-truth.net Link : http://www.vocooo.com Version : 2.0 Tested on : Windows XP SP3 En Greetz to : Corelan Security Team The Crew :...
Opera 10.63 - SVG Animation Element Denial of Service
No description provided by source. Exploit Title: Opera Denial of Service by SVG animation Element Date: 16, October 2010 Author: fla Software Link: http://www.opera.com/ Version: 10.63 and previous Tested on: Ubuntu 10.10 x64, Windows 7 x64 svg xmlns=http://www.w3.org/2000/svg...
Opera 12.15 vtable Corruption
No description provided by source. !DOCTYPE HTML PUBLIC -//W3C//DTD HTML 4.01 Transitional//EN html head title Opera 12.15 DOS POC/title /head body iframe id=wnd/iframe script type=text/javascript language=JavaScript / Title: Opera 12.15 vTable Corruption Author: echo Test: Windows 7 x64 Version:...