56796 matches found
PHPKB Knowledge Base Software 2.0 - Multilanguage Support Multi SQL Injection Vulnerabilities
No description provided by source...
OneCMS 2.4 - Remote SQL Injection / Upload Vulnerabilities
No description provided by source. WwW.BugReport.ir AmnPardaz Security Research Team Title: OneCMS Vulnerabilities Vendor: http://www.insanevisions.com Bugs: SQL Injection Authentication bypass , Arbitrary file upload! Vulnerable Version: 2.4 prior versions also may be affected Exploitation: Remo...
CactuShop - User Invoices Persistent XSS Vulnerability
No description provided by source. User Invoices Persistent XSS Vulnerability in CactuShop 1. Advisory Information Title: User Invoices Persistent XSS Vulnerability in CactuShop Advisory Id: CORE-2010-0406 Advisory URL: http://www.coresecurity.com/content/cactushop-xss-persistent-vulnerability Da...
NetBSD/FreeBSD Port Systrace 1.x Exit Routine Access Validation Privilege Escalation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10320/info A vulnerability has been reported that affects Systrace on NetBSD, as well as the FreeBSD port by Vladimir Kotal. The source of the issue is insufficient access validation when a systraced process is restoring...
AOL Instant Messenger 4.x/5.x Buddy Icon Predictable File Location Weakness
No description provided by source. source: http://www.securityfocus.com/bid/9698/info It has been reported that AOL Instant Messenger stores imported Buddy Icons in a predictable location on client systems that may allow an attacker to facilitate further attacks which could eventually lead to...
NetcPlus SmartServer3 3.75 Weak Encryption Vulnerability
No description provided by source. / source: http://www.securityfocus.com/bid/1962/info SmartServer3 is an email server designed for small networks. A design error exists in SmartServer3 which enables an authenticated user to view other users login information and possibly gain access to password...
ezbounce 1.0/1.5 Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8071/info It has been reported that ezbounce is affected by a format string vulnerability. The condition is present in the file ezbounce/commands.cpp and can be triggered when session support is enabled. To exploit this...
PHP-NUKE 5.0 - Viewslink Remote SQL Injection
No description provided by source. Author: CMD Contact: [email protected] Dork: allinurl: op=viewslink&sid= =-==-==-==-==-==-==-==C==M==D==-==-==-==-==-==-==-==-==-==-==-= Code : Exploit 1: /links.php?op=viewslink&sid=-1//union//select//0,aid//from//nukeauthors//where//radminsuper=1/...
ZAPms 1.41- SQL Injection Vulnerability
No description provided by source. ============================================================================================================= o ZAPms = SQL Injection Vulnerability Software : ZAPms Version : 1.41 Vendor : http://www.zapms.de Author : NoGe Contact : nogedotcodeatgmaildotcom Desc...
Linux Kernel 2.2.x/2.4.x Privileged Process Hijacking Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/7112/info A vulnerability has been discovered in the Linux kernel which can be exploited using the ptrace system call. By attaching to an incorrectly configured root process, during a specific time window, it may be...
ShopCartDx <= 4.30 - (products.php) Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl 0-Day ShopCartDx = v4.30 products.php Remote Blind SQL Injection Exploit Coded By Dante90, WaRWolFz Crew Bug Discovered By: Dante90, WaRWolFz Crew use strict; use LWP::UserAgent; use HTTP::Request::Common; use Time::HiRes; use IO::Socket; my...
Vikingboard Viking board 0.1.2 forum.php debug Variable Information Disclosure
No description provided by source. source: http://www.securityfocus.com/bid/25060/info Vikingboard is prone to multiple information-disclosure weaknesses because attackers may disclose sensitive information that may be used in other attacks on the system. Vikingboard 0.1.2 is vulnerable; other...
cfingerd 1.4.1/1.4.2/1.4.3 Utilities Buffer Overflow Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/2914/info cfingerd is a secure implementation of the finger daemon. cfingerd has been contributed to by many authors, and is maintained by the cfingerd development team. A buffer overflow in cfingerd makes it possible for...
deV!L`z Clanportal Gamebase Addon SQL Injection Vulnerability
No description provided by source...
wu-ftpd 2.6.0 - Remote Root Exploit
No description provided by source. / c 2000 venglin / b0f http://b0f.freebsd.lublin.pl WUFTPD 2.6.0 REMOTE ROOT EXPLOIT 22/06/2000, updated: 05/08/2000 Idea and preliminary version of exploit by tf8 Greetz: Lam3rZ, TESO, ADM, lcamtuf, karpio. Dedicated to ksm. PRIVATEDONOTDISTRIBUTE / include...
WinAsm Studio 5.1.5.0 - Local Heap Overflow PoC
No description provided by source. WinAsm Studio 5.1.5.0 Local Heap Overflow Poc By Mountassif Moad D0wnload : http://www.winasm.net/index.php?ind=downloads&op=downloadfile&ide=182&file=WinAsm515Full.zip Greatz : Simo-Soft - Skd - fl0 fl0w - Str0ke & By By milw0rm :d Registers EAX 00000001 ECX...
DodosMail 2.5 'dodosmail.php' Local File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30112/info DodosMail is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability using directory-traversal strings to execute local...
QuickTime Picture Viewer 7.6.6 JP2000 Denial of Service Vulnerability
No description provided by source. done by BraniX [email protected] www.hackers.org.pl found: 2010.08.18 published: 2010.12.27 tested on: Windows XP SP3 Home Edition App: QuickTime PictureViewer 7.6.6 DoS, Access Violation Exception PictureViewer.exe MD5: B2859391D32DBBFCE00FD2F641863954...
Mozilla Firefox <= 1.5.0.4 - Javascript Navigator Object Code Execution PoC
No description provided by source. !-- Firefox = 1.5.0.4 Javascript navigator Object Code Execution PoC http://browserfun.blogspot.com/ The following bug mfsa2006-45 was tested on the Firefox 1.5.0.4 running on Windows 2000 SP4, Windows XP SP4, and a recently updated Gentoo Linux system. This bug...
Article Script 1.6.3 RSS.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/20929/info Article Script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromis...
Softbiz Jobs (news_desc) SQL Injection Vulnerability
No description provided by source. Softbiz Jobs newsdesc SQL Injection Vulnerability Author : Baybora Homepage : http://www.1923turk.com Blog : http://baybora.wordpress.com/ Script : softbizscripts Download : http://www.softbizscripts.com/ Exploat :newsdesc.php?id=SQL...
F-Secure BackWeb 6.31 Local Privilege Escalation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10055/info A vulnerability has been reported in F-Secure BackWeb that may permit local attackers to gain system level privileges. The source of this vulnerability is that certain areas within the BackWeb interface permit...
VideoSpirit Lite 1.77 - (SEH) Buffer Overflow
No description provided by source. !/usr/bin/ruby Vendor: http://www.verytools.com/ Software link: http://www.verytools.com/videospirit/download.html print ''' VideoSpirit Lite 1.77 Seh Buffer Overflow Version: Lite 1.77 Date found: 11.11.2013 Exploit Author: metacom Tested on: Win7-Win8-EN '''...
Valve Software Half-Life Server 3.1.1.0 - Multiplayer Request Buffer Overflow
No description provided by source...
Auto CMS <= 1.8 - Remote Code Execution
No description provided by source. ?php / ===================================== Auto CMS = 1.8 Remote Code Execution ===================================== Author: giudinvx Email: giudinvxatgmaildotcom Date: 10/31/2010 Site: http://www.giudinvx.altervista.org/ Site CMS: http://ventics.com/autocms/...
PHPBB2 Page_Header.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6888/info A SQL injection vulnerability has been reported in phpBB2. phpBB2, in some cases, does not sufficiently sanitize user-supplied input which is used when constructing SQL queries. As a result, attackers may supply...
HP NNM CGI webappmon.exe OvJavaLocale Buffer Overflow
No description provided by source. $Id: hpnnmwebappmonovjavalocale.rb 12087 2011-03-23 03:39:12Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing...
QuickTalk Forum <= 1.6 - Remote Blind SQL Injection Exploit
No description provided by source. html head titleQuickTalk Forum = 1.6 Blind SQL Injection Exploit/title script language=Javascript type=text/javascript / ----------------------------------------------------------------------------------------------- - QuickTalk Forum Blind SQL Injection Exploit...
phpBB <= 2.0.19 XSS Remote Cookie Disclosure Exploit
No description provided by source. to be used with cookie stealer located here: http://www.milw0rm.com/id.php?id=1103 Make sure you change www.milw0rm.com to your domain. thnx. /str0ke Author: threesixthousan / As long as html is ON in the latest version of phpBB forums, several XSS attack vector...
Koobi Pro 5.6 showtopic Module toid Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/18970/info Koobi Pro prone to a cross-site scripting issue and an SQL-injection issue because the application fails to properly sanitize user-supplied input. A successful exploit of these vulnerabilities could allow an...
PunBB 3.0/3.1 - Multiple Remote Input Validation Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/12652/info Multiple remote input validation vulnerabilities affect PunBB. These issues are due to a failure of the application to sanitize user-supplied input prior to using it to carry out critical functions. The first...
MailEnable 3.13 and Prior - IMAP Service Multiple Remote Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/28145/info MailEnable is prone to multiple remote vulnerabilities in the IMAP service, including: - Multiple buffer-overflow vulnerabilities. - Multiple denial-of-service vulnerabilities due to a NULL-pointer exception. A...
Acunetix 8 build 20120704 - Remote Stack Based Overflow
No description provided by source. !/usr/bin/python Title: Acunetix Web Vulnerability Scanner Buffer Overflow Exploit Version: 8 Build: 20120704 Tested on: Windows XP SP2 en Vendor: http://www.acunetix.com/ Original Advisory: http://an7isec.blogspot.co.il/2014/04/pown-noobs-acunetix-0day.html...
Sun Solaris 7.0 rpc.ttdbserver Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/811/info It is possible to crash rpc.ttdbserver by using the old tddbserver buffer overflow exploit. This problem is caused by a NULL pointer being dereferenced when rpc function 15 is called with garbage. You cannot make...
Web Wiz NewsPad Express Edition 1.03 Database File Disclosure Vulnerability
No description provided by source. ============================================================= NewsPad Database Download Vulnerability ============================================================= Exploit Title: NewsPad Database Download Vulnerability Date: 15/11/2010 Author: keracker Software...
ASPMass Shopping Cart - Vulnerability File Upload CSRF
No description provided by source. ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-30-aspmass-shopping-cart-vulnerability-file-upload-csrf/ ''' Abysssec Inc Public Advisory Title : ASPMass...
Clearswift MailSweeper 4.x Malformed MIME Attachment Filter Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7044/info Clearswift MailSweeper does not properly process certain malformed MIME email message attachments. If the attachment does not contain a MIME-Version field, MailSweeper does not recognize the attachment as being ...
Attachmate Reflection FTP Client Heap Overflow
No description provided by source. Application: Attachmate Reflection FTP Client Heap Overflow Platforms: Windows Exploitation: Remote code execution CVE Number: PRL: 2011-09 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1...
RoseOnlineCMS <= 3 B1 (admin) Local File Inclusion
漏洞出现在modules/admincp.php中 Click here to go back home'; obendflush; ? $admin直接通过GET方式获取 没有经过过滤 后面直接用include包含了 所以在PHP5.3的情况下 可以 通过%00截断 达到任意文件包含 payload http://0.0.0.0/modules/admincp.php?admin=LFI%00 '/ -.- --------------------oOO------OOo------------------- | RoseOnlineCMS = 3 B1 admin Local Fil...
JAVA Web Start Arbitrary command-line injection
No description provided by source. Bye bye my little 0day :, Tavis Ormandy did a great job uncovering a big logic flaw within Java JRE. I discovered that bug and other that affects every browser few weeks ago and I posted the common 0day++ tweet. The method in which Java Web Start support has bee...
Oftpd 0.3.7 Unsupported Address Family Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/22073/info Oftpd Server is prone to a remote denial-of-service vulnerability because it mishandles unexpected user-supplied input. Exploiting this issue allows remote attackers to crash the application, denying further...
DUware DUpaypal 3.0/3.1 sub.asp iSub Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/14034/info DUpaypal Pro is prone to multiple SQL-injection vulnerabilities because the fails application to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacke...
Windows RT ARM Bind Shell (Port 4444)
No description provided by source. ; Title: Windows RT ARM Bind Shell Port 4444 ; Date: July 28, 2013 ; Author: Matthew Graeber @mattifestation ; Blog post: http://www.exploit-monday.com/2013/07/WinRT-ARM-Shellcode.html ; Tested on: Microsoft Surface RT Tablet w/ Windows RT 6.2.9200 ; License: BS...
D-Link VoIP Phone Adapter - XSS/CSRF Remote Firmware Overwrite
No description provided by source. D-link VoIP Phone Adapter XSS and XSRFremote firmware overwrite model number: DVG-2001s f/w version 1.00.007 Better than just remote code execution, you control the firmware. html form action=http://10.1.1.166/Forms/cbiSetSWUpdate?16640,0,0,0,0,0,0,0,0 method=PO...
Billwerx RC5.2.2 PL2 'primary_number' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/39867/info Billwerx is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...
ProFTPD 1.2.0 (rc2) - memory leakage example Exploit
No description provided by source. / | Proftpd DoS | by Piotr Zurawski [email protected] | This source is just an example of memory leakage in proftpd-1.2.0rc2 | server discovered by Wojciech Purczynski. | / include stdio.h include unistd.h include stdlib.h include signal.h include time.h include...
Puzzle Apps CMS 3.2 - Local File Inclusion
No description provided by source. ------------------------------------------------------------------------ Software................ Puzzle Apps CMS 3.2 Vulnerability........... Local File Inclusion Site.................... http://www.puzzleapps.org/ Download Link...
Mozilla FireFox 2.0.8 Sidebar Bookmark Persistent Denial Of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26216/info Mozilla Firefox is prone to a vulnerability that results in a persistent denial of service. This issue occurs when a victim sets a malicious bookmark and then follows it. Successful attacks will cause Firefox t...
NewsScript Access Validation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12761/info NewsScript is reported prone to an access validation vulnerability. This issue may allow an unauthorized attacker to add, modify and delete messages. It is reported that an attacker can exploit this issue by...
Qihoo 360 Security Guard breg device drivers Privilege Escalation Vulnerability
No description provided by source. / Software Link: http://sd.360.cn/sddownload1.html?src=360home Version: 6.1.5.1009 Tested on: Windows xp Vendor : Qihoo 360 Affected Software : 360 Security Guard 6.1.5.1009 Description: Qihoo 360 Security Guard is very famous in China. Some vulnerabilities have...