56796 matches found
KDE 3.0.x KPF Icon Option File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5951/info A vulnerability has been discovered in the kpf file sharing utility. KDE is available for the Linux operating system. It has been reported that by passing a malicious file request to kpf, it is possible for a...
ASPNuke <= 0.80 (register.asp) Remote SQL Injection Vulnerability
No description provided by source. Title : ASPNuke = 0.80 register.asp Remote SQL Injection Vulnerability Author : ajann S.Page : http://www.aspnuke.com D.Page : http://sourceforge.net/project/showfiles.php?groupid=92470...
Oracle Application Server Portal 10g - Authentication Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/29119/info Oracle Application Server Portal is prone to a authentication-bypass vulnerability because the application fails to properly restrict access to certain resources. An attacker can exploit this vulnerability to...
SLMail 5.5 - POP3 PASS Remote Buffer Overflow Exploit
No description provided by source. include fcntl.h include stdio.h include stdlib.h include sys/socket.h include sys/types.h include sys/wait.h include errno.h include netinet/in.h include netdb.h include string.h define retadd \x9f\x45\x3a\x77 /win2k server sp4 0x773a459f/ define port 110 /...
NovaStor NovaNET 12 'DtbClsLogin()' Remote Stack Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/33954/info NovaStor NovaNET is prone to a stack-based buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied data before copying it to an insufficiently sized buffer. Attackers can exploit...
Galacticomm Worldgroup 3.20 Remote FTP Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4185/info Galacticomm Worldgroup is a community building package of both client and server software for Microsoft Windows. Worldgroup is based on BBS software, and includes web and ftp servers. A vulnerability has been...
Matt Wright FormHandler.cgi 2.0 Reply Attachment Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/799/info Any file that the FormHandler.cgi has read access to the cgi is typically run as user 'nobody' on Unix systems can be specified as an attachment in a reply email. This could allow an attacker to gain access to...
LANDesk Lenovo ThinkManagement Suite 9.0.3 Core Server Remote Arbitrary File Deletion Vulnerability
No description provided by source. LANDesk Lenovo ThinkManagement Suite 9.0.3 Core Server WSVulnerabilityCore.dll SetTaskLogByFile Remote Arbitrary File Deletion Vulnerability Tested against: Microsoft Windows Server 2003 r2 sp2 Software home page:...
SNewsCMS 2.1 News_page.PHP Cross-Site Scripting Vulnerability
No description provided by source...
Wireshark <= 1.4.4 packet-dect.c Stack Buffer Overflow
No description provided by source. $Id: wiresharkpacketdect.rb 12364 2011-04-19 07:53:58Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and ter...
Google Chrome 8.0.552.237 - address overflow DoS
No description provided by source. html head Title: Google Chrome v8.0.552.237 address overflow DoS CVE-ID: OSVDB-ID: Author: Vuk Ivanovic Published: 2011-01-17 Verified: yes Google Chrome v8.0.552.237 address overflow DoS Tested on: Windows XP, SP2 EN, Windows 7 x64 Date tested: 01/16/2011...
PHPBB 2.0.x Authentication Bypass Vulnerability (3)
No description provided by source. source: http://www.securityfocus.com/bid/12678/info phpBB is affected by an authentication bypass vulnerability. This issue is due to the application failing to properly sanitize user-supplied input during authentication. Exploitation of this vulnerability would...
deepin tftp server 1.25 - Directory Traversal vulnerability
No description provided by source. Software : Deepin TFTP Server Directory Traversal Vulnerability Software Version : v1.25 Vendor: Deepin.org Vulnerability Published : 2010-08-14 Vulnerability Update Time : Status : Impact : Medium Bug Description : Deepin TFTP Server does not properly sanitise...
Whizzy CMS 10.02 - Local File Inclusion
No description provided by source. x Type: Local File Inclusion x Vendor: www.unverse.net x Script Name: Whizzy CMS x Script Version: 10.02 x Script DL: http://code.google.com/p/whizzy/downloads/list x Author: Anarchy Angel x Mail : anarchydotang31@gmaildotcom Exploit: http://site.org/?LFI Ex:...
PHP CGI Argument Injection Exploit
No description provided by source. Exploit Title: Cve-2012-1823 PHP CGI Argument Injection Exploit Date: May 4, 2012 Author: rayh4c0x4080sec0x2ecom Exploit Discovered by wofeiwo0x4080sec0x2ecom import socket import sys def cgiexploit: pwncode = ?php phpinfo;? postLength = lenpwncode httpraw=POST...
Epson EventManager <= 2.50 Denial of Service
No description provided by source. Luigi Auriemma Application: Epson EventManager http://www.epson.com Versions: = 2.50 Platforms: Windows Bug: Denial of Service Exploitation: remote Date: 14 Mar 2012 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 The...
Battleaxe Software BttlxeForum 2.0 Failure.ASP Cross-Site Scripting Vulnerability
No description provided by source...
HuronCMS 'index.php' Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/39685/info HuronCMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...
XLight FTP Server 1.x Long Directory Request Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9585/info A problem in the handling of large requests has been reported to result in service instability in XLight FTP Server under some circumstances. Because of this, it may be possible for a remote attacker to deny...
H. Nomura Tiny FTPDaemon 0.52 Multiple Buffer Overflow Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/961/info Tiny FTPd is a freeware FTP server for Win9x with a Japanese interface. Version .52 and possible previous versions have unchecked buffers in the code that handles the following commands: APPE, MKD, RMD, RNFR, RNT...
Invision Power Board <= 2.0.3 Login.PHP SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w This one actually works : Just paste the outputted cookie into your request header using livehttpheaders or something and you will probably be logged in as that user. No need to decrypt it! Exploit coded by Tony Little Lately and Petey Beege us...
ATutor 1.4.3 subscribe_forum.php us Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/13972/info ATutor is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to...
MyBulletinBoard 1.0 Forumdisplay.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14754/info MyBulletinBoard is prone to a cross-site scripting vulnerability. This is due to a lack of proper sanitization of user-supplied input to the application. An attacker may leverage this issue to have arbitrary...
GREED 0.81 GRX File List Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12034/info greed Get and Resume Elite Edition is prone to unauthorized command execution. This issue is exposed when the application processes a GRX file list that specifies shell metacharacters and commands in file names...
sendmail 8.11.6 Address Prescan Memory Corruption Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7230/info A vulnerability in Sendmail may be exploited remotely to execute arbitrary code. The flaw is present in the 'prescan' procedure, which is used for processing email addresses in SMTP headers. This condition has...
Vincent Leclercq News 5.2 Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/18775/info Vincent Leclercq News is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before displaying it to users of the application. An attacker may leverage this...
SurgeMail 3.0 - Real CGI executables Remote Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27992/info SurgeMail is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input. Successfully exploiting this issue allows remote attackers to execute arbitrary machin...
MIPS Little Endian Reverse Shell Shellcode (Linux)
No description provided by source. MIPS Little Endian Reverse Shell ASM File and Assembled Shellcode Written by Jacob Holcomb, Security Analyst @ Independent Security Evaluators Blog: http://infosec42.blogspot.com Company Website: http://securityevaluators.com .data .bss .text .globl start start:...
GNU Bash <= 4.0 'ls' Control Character Command Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/37776/info GNU Bash is prone to a command-injection vulnerability because it fails to adequately sanitize control characters in the 'ls' command. Attackers can exploit this issue to execute arbitrary commands in a bash...
Sawmill Enterprise < 8.1.7.3 - Multiple Vulnerabilities
No description provided by source. SEC Consult Security Advisory 20101021-0 ======================================================================= title: Multiple critical vulnerabilities product: Sawmill - Universal Log File Analysis vulnerable version: Sawmill Enterprise v8.1.7.3 fixed version...
Microsoft Internet Explorer 6.0 '&NBSP;' Address Bar URI Spoofing Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/31960/info Internet Explorer is affected by a URI-spoofing vulnerability because it fails to adequately handle specific combinations of the non-breaking space character ''. An attacker may leverage this issue to spoof the...
Global Centre Aplomb Poll 1.1 index.php Madoa Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/25138/info Aplomb Poll is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote...
PHPWebSite 0.x Image File Processing Remote Arbitrary PHP File Upload Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12653/info phpWebSite is reported prone to a remote arbitrary PHP file upload vulnerability. The issue presents itself due to a lack of sanitization performed on image files that are uploaded when submitting an...
Global Centre Aplomb Poll 1.1 vote.php Madoa Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/25138/info Aplomb Poll is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote...
Microsoft Visio 2003 DLL Hijacking Exploit (mfc71enu.dll)
No description provided by source. / Greetz to :b0nd, Fbih2s,r45c4l,Charles ,j4ckh4x0r, punter,eberly, Charles , Dinesh Arora Exploit Title: Microsoft Visio 2003 DLL Hijacking Exploit Date: 25/08/2010 Author: Beenu Arora Tested on: Windows XP SP3 Vulnerable extensions: .vtx Compile and rename to...
Avirt Gateway Suite 3.3/3.3 a/3.5 Directory Creation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/764/info The aVirt Mail Server has a weakness in the code that handles the RCPT TO command. By specifying a path in the command instead of an email recipient , an attacker could cause the mail server to create a directory...
Joomla Component com_pandafminigames SQL Injection Vulnerabilities
No description provided by source. Exploit Title: Joomla Component compandafminigames SQL Injection Vulnerabilities Date: 16.04.2010 Author: Valentin Category: webapps/0day Version: unknown Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: |...
WordPress WP-Property PHP File Upload Vulnerability
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
Microsoft Windows XP/2000/NT 4 ntdll.dll Buffer Overflow Vulnerability (3)
No description provided by source. source: http://www.securityfocus.com/bid/7116/info The Windows library ntdll.dll includes a function that does not perform sufficient bounds checking. The vulnerability is present in the function RtlDosPathNameToNtPathNameU and may be exploited through other...
XChat <= 2.6.7 (win version) Remote Denial of Service Exploit (php)
No description provided by source. ? another way to test this with irssi/bitchx below /str0ke /exec -o perl -e 'print \x9x\xF0\x92\x8D\x85\xF1\xA5\x90\xB4\xF1\x96\x9E\x85\xF1\xA6\x8D\xA5\xF1\xB8\xA5\x85\xF1\xA7\x95\xA8\x29\xF2\x95\x95\x82' ? ?php // XChat = 2.6.7 Windows Remote Crash DoS by ratbo...
Softerra PHP Developer Library <= 1.5.3 File Include Vulnerabilities
No description provided by source. Softerra. PHP Developer Library Class: Remote File Include Vulnerability Patch: Unavailable Published 2006/10/12 Remote: Yes Local: No Type: High Site: http://www.softerra.com/productsphp-library.htm Author: MP Contact: [email protected] Exploit:...
Quest vWorkspace 7.5 Connection Broker Client ActiveX Control (pnllmcli.dll 7.5.304.547) SaveMiniLaunchFile() Method Remote File Creation / Overwrite PoC
No description provided by source. !-- Quest vWorkspace 7.5 Connection Broker Client ActiveX Control pnllmcli.dll 7.5.304.547 SaveMiniLaunchFile Method Remote File Creation / Overwrite ie7/8 vendor site: http://www.quest.com/ file tested: QuestvWorkspace-75--32-bit75.zip Binary Path:...
TFTPD32 2.50 Arbitrary File Download/Upload Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6198/info A vulnerability has been discovered in Tftpd32 which allows a remote attacker to download and upload arbitrary system files. The ability to upload system files may allow an attacker to replaced key system files...
Trend Micro InterScan VirusWall 3.5/3.6 Content-Length Scan Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4265/info Trend Micro InterScan VirusWall is a high performance internet gateway virus scanning package. It is capable of scanning incoming content over HTTP, SMTP and FTP for viruses and malicious code. A vulnerability h...
Max Network Technology BBSMAX <= 4.2 'threadid' Parameter Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/38630/info Max Network Technology BBSMAX is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in...
RSS-aggregator 1.0 admin/fonctions/ Direct Request Administrator Authentication Bypass
No description provided by source. source: http://www.securityfocus.com/bid/30016/info RSS-aggregator is prone to multiple SQL-injection and authentication-bypass vulnerabilities. A successful exploit could allow an attacker to compromise the application, access or modify data, exploit...
Tableau Server - Blind SQL Injection Vulnerability
No description provided by source...
Campus Bulletin Board 3.4 - post3/book.asp review Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/29375/info Campus Bulletin Board is prone to multiple input-validation vulnerabilities, including multiple SQL-injection issues and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied dat...
webessence 1.0.2 - Multiple Vulnerabilities
No description provided by source. WebEssence 1.0.2 Multiple Vulnerabilities Bugs found by whitesheep, R00TATI and epicfail for Debug|Track session @ Backtrack|italia community conference www.backtrack.it XSS PoC:...
XOOPS Module Glossarie <= 1.7 (sid) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Script Name: XOOPS Module Glossarie = 1.7 sid Remote BLIND SQL Injection Exploit Coded by : ajann Author : ajann Contact : : Dork : inurl:/modules/glossaire/ S.Page : http://www.xoops.org/modules/repository/singlefile.php?cid=100&lid=1156 $$ : Fre...