56796 matches found
myCare2x CMS Multiple Vulnerabilities
No description provided by source...
phpMyFAQ 2.5.4 and Prior Multiple Cross Site Scripting Vulnerabilities
漏洞信息： phpMyFAQ是一个多语言，完全数据库驱动的FAQ系统。它支持多种数据库来存储所有数据。 phpMyFAQ的脚本index.php中存在多个跨站脚本攻击漏洞。 漏洞影响： phpMyFAQ phpMyFAQ 2.5.4 phpMyFAQ phpMyFAQ 2.5.2 phpMyFAQ phpMyFAQ 2.5.1 phpMyFAQ phpMyFAQ 2.5 -dev phpMyFAQ phpMyFAQ 2.5 漏洞分析：...
Joomla Component com_ckforms Multiple Vulnerabilities
No description provided by source. Author : altbta [email protected]:[email protected] Home : www.v4-team.com/cchttp://www.v4-team.com/cc Script : Joomla Component comckforms Bug Type : Multiple Vulnerabilities Dork : inurl:comckforms === Exploit === LFI...
Computer Associates SiteMinder Web Agent Smpwservices.FCC Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26375/info Computer Associates SiteMinder Web Agent is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue allows attackers to execute arbitrar...
Xerox WorkCentre PJL Daemon Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/38010/info Xerox WorkCentre is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to execute arbitrary code...
Stellar Docs 1.2 Path Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8385/info Stellar Docs will disclose path information in an error page in response to a request for an invalid request for a web resource. This could disclose information that could be useful in further attacks against th...
Hotel / Resort Site Script with OnLine Reservation System
No description provided by source. Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Hotel / Resort Site Script with OnLine Reservation System SQLi Vulnerable Published: 2010-06-08 Vendor url:http://www.mformula.com.br Greetz to:Sid3^effects, aaNumb, M4n0j and to all ICW members...
Pirelli Discus DRG A125g - Remote Change SSID Value Vulnerability
No description provided by source...
Express Burn Plus 4.58 - EBP Project File Handling Buffer Overflow PoC
No description provided by source. !/usr/bin/perl Express Burn Plus v4.58 EBP Project File Handling Buffer Overflow PoC Vendor: NCH Software Product web page: http://www.nchsoftware.com Affected version: 4.58 Summary: Express Burn is a program that allows you to create and copy many kinds of disc...
F@cile Interactive Web <= 0.8x Remote (Include / XSS) Vulnerabilities
No description provided by source. F@cile Interactive Web = 0.8x Multiple Remote Vulnerabilities Contacts ICQ: 10072 MSN/Mail: [email protected] web: www.nukedx.com This exploits works on F@cile Interactive Web = 0.8x Original advisory can be found at: http://www.nukedx.com/?viewdoc=35 File...
MicroWorld eScan Server 9.0.742 - Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28127/info MicroWorld eScan Server is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue allows an attacker to access arbitrary files...
ValidForm Builder script Remote Command Execution Vulnerability
No description provided by source...
AOL Instant Messenger 4.x Hyperlink Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4244/info AOL Instant Messenger AIM is a real time messaging service. The AIM client runs on Microsoft Windows operating systems. It is possible to crash the AIM client by sending a specially formatted hyper-link to a use...
OpenEMR <= 2.8.1 (srcdir) Multiple Remote File Inclusion Vulnerabilities
No description provided by source...
FlatFrag <= 0.3 - Buffer Overflow / Denial of Service Exploit
No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h include time.h ifdef WIN32 include winsock.h / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include string.h...
Autentificator 2.01 Aut_Verifica.Inc.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19813/info Autentificator is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...
Moodle 1.7.1 Index.PHP Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/24748/info Moodle is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on...
MODxCMS 0.9.1 Index.PHP Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17533/info MODxCMS is prone to a directory-traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve...
Dokeos <= 1.8.4 main/admin/course_category.php category Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/27792/info Dokeos is prone to multiple input-validation vulnerabilities including five SQL-injection issues, one HTML-injection issue, three cross-site scripting issues, and one arbitrary-file-upload issue. Attackers can...
SurgeFTP 2.x 'surgeftpmgr.cgi' Multiple Cross Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/37844/info SurgeFTP is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in an...
Pre Printing Press product_desc.php (pid) SQL Injection Vulnerability
No description provided by source. ======================================================================================== | Title : Pre Printing Press productdesc.php pid SQL Injection Vulnerability | Author : Easy Laster | Script : Pre Printing Press | Price : $999 | Exploitation : remote | Bu...
Rosoft media player 4.4.4 SEH buffer overflow PoC
No description provided by source. rosoft media player 4.4.4 SEH buffer overflow POC vulnerble application link http://download.cnet.com/Rosoft-Media-Player/3000-21394-10044022.html tested on XP SP2 !/usr/bin/python filename = crash.m3u junk = \x41 4500 textfile = openfilename , 'w'...
Rosoft Media Player 4.2.1 - Local Buffer Overflow Exploit (multi target)
No description provided by source. / rsmpf.c Rosoft media player free local buffer overflow Exploit multi targets Coded By : SimO-s0fT [email protected] thanks To : Stack & fl0 fl0w & SKD and special thanks to str0ke for his advices and support you are the best brotha example : Cod...
Asterisk <= 1.6 IAX 'POKE' Requests Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30321/info Asterisk is prone to a remote denial-of-service vulnerability because it fails to handle multiple 'POKE' requests in quick succession. Attackers can exploit this issue by sending a persistent stream of 'POKE'...
Joomla! and Mambo Artists Component - 'idgalery' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/29407/info The Artists component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...
ANE CMD CRSF - Add Admin
No description provided by source. ======================================================================= AneCMS CSRF Vulnerability ======================================================================= by Pratul Agrawal Vulnerability found in- Admin module email [email protected] company...
rapidCMS 2.0 - Authentication Bypass
No description provided by source. Exploit Title: rapidCMS V2 Authentication Bypass Date: 18/07/2010 Author: Mahjong Software Link: www.rapidcms.de Version: V2 Tested on: Linux Found by: Mahjong E-Mail: [email protected] Greetings: Puddy, Ancolon...
HP JetDirect J3111A Invalid FTP Command DoS Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1491/info HP JetDirect firmware is vulnerable to a Denial of Service attack. JetDirect devices have an FTP service which fails to properly handle bad FTP commands sent with the ftp quote command. This causes the device to...
Applied Watch Command Center 1.0 Authentication Bypass Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/9124/info A vulnerability has been identified in the system that may allow an attacker to bypass authentication to add attacker supplied IDS alerts and new user accounts in the console. Successful exploitation of these...
WordPress MM Forms Community plugin <= 1.2.3 - SQL Injection Vulnerability
No description provided by source. Exploit Title: WordPress MM Forms Community plugin = 1.2.3 SQL Injection Vulnerability Date: 2011-08-26 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/mm-forms-community.zip Version: 1.2.3 test...
T-Dreams Job Seekers Package 3.0 - SQL Injection
No description provided by source. Author: R4dc0re Exploit Title: T-Dreams Job Seekers Package SQL injection Vulnerability Date: 04-12-2010 Vendor or Software Link:http://t-dreams.com Category:WebApp Version:3.0 Price:279$ Contact: [email protected] Website: www.1337db.com Greetings to:...
RXGoogle.CGI 1.0/2.5 Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9575/info The rxgoogle.cgi search script is prone to a cross-site scripting vulnerability because the software fails to sanitize user input and allows various metacharacters that may facilitate cross-site scripting attack...
File Transfer 1.2 - Request File Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28453/info File Transfer is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue allows an attacker to access arbitrary files outside of th...
Macs CMS 1.1.4 - Multiple Vulnerabilities (XSS/CSRF)
No description provided by source. !--- Title: Macs CMS 1.1.4 Multiple Vulnerabilities XSS/CSRF Author: 10n1z3d 10n1z3datwdotcn Date: Sun 11 Jul 2010 11:53:35 AM EEST Vendor: http://macs-framework.sourceforge.net/ Download: http://sourceforge.net/projects/macs-framework/ --- -= CSRF PoC 1 - Creat...
Venalsur Booking Centre 2.01 Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/32530/info Venalsur Booking Centre is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script cod...
vBulletin vbBux/vbPlaza <= 2.x (vbplaza.php) Blind SQL Injection Vuln
No description provided by source. --==+======================================================================================================================+==-- --==+ vBulletin vbBux/vbPlaza = 2.x vbplaza.php Remote Blind SQL Injection Vulnerability +==--...
Athena Web Registration Remote Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9349/info A problem has been reported in the handling of user-supplied input by the Athena Web Registration scripts. Because of this, it may be possible for an attacker to gain unauthorized access to a vulnerable system...
IHTML Merchant 2.0 - SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15911/info iHTML Merchant is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation cou...
SGI IRIX <= 6.4 cgi-bin handler Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/380/info A vulnerability exists in the cgi-bin program 'handler', as included by Silicon Graphics in their Irix operating system. This vulnerability will allow a remote attacker to execute arbitrary commands on the...
WordPress Trashbin Plugin 0.1 'mtb_undelete' Parameter Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/37097/info The Trashbin plugin for WordPress is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrar...
execve of /bin/sh after setreuid(0,0)
No description provided by source. / $Id: execve-setreuid.c,v 1.1 2001/05/02 18:10:52 raptor Exp $ execve-setreuid.c v1.0 - shellcode for Linux/i386 Copyright c 2001 Raptor [email protected] This shellcode does an execve of /bin/sh after a setreuid0, 0, then exits. / / ASM Code ; setreuid0...
phpCMS 1.1.7 parser.php PHPCMS_INCLUDEPATH Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/21768/info phpCMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the...
OpenGuestbook 0.5 header.php title Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/18666/info OpenGuestbook is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful...
vBulletin misc.php Template Name Arbitrary Code Execution
No description provided by source. $Id: phpvbulletintemplate.rb 9929 2010-07-25 21:37:54Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and term...
wu-ftpd 2.4.2/2.5 .0/2.6 .0 - Remote Format String Stack Overwrite (2)
No description provided by source. source: http://www.securityfocus.com/bid/1387/info Washington University ftp daemon wu-ftpd is a very popular unix ftp server shipped with many distributions of Linux and other UNIX operating systems. Wu-ftpd is vulnerable to a very serious remote attack in the...
Xen 3.3 XenStore Domain Configuration Data Unsafe Storage Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/31499/info Xen is prone to a vulnerability that results in configuration information being stored in a location that is writable by guest domains. UPDATE December 19, 2008: The initial proposed patches did not resolve thi...
ERS Viewer 2013 ERS File Handling Buffer Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
Apple QTJava toQTPointer() Arbitrary Memory Access
No description provided by source. $Id: qtjavapointer.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
Cube <= 2005_08_29 Multiple BoF/Crash Vulnerabilities Exploit
No description provided by source. / by Luigi Auriemma You NEED Enet for compiling this tool then remember -lenet http://enet.bespin.org / http://enet.cubik.org / include stdio.h include stdlib.h include string.h include enet/enet.h define VER 0.1 define PORT 28765 define MAXTRANS 5000 define BOF...
Cpanel 10 Select.HTML Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18655/info Cpanel is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script...