56796 matches found
TradeMC E-Ticaret SQL and XSS Multiple Vulnerabilities
No description provided by source...
DUportal Pro 3.4 result.asp Multiple Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/13285/info DUportal Pro is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacke...
TWiki TWikiUsers INCLUDE Function Remote Arbitrary Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14960/info A remote command execution vulnerability affects the application. The revision control function of the TWikiUsers script uses the backtick shell metacharacter to construct a command line. An attacker may use a...
mailenable enterprise 6.5 - Stored XSS
No description provided by source. !/usr/bin/python ''' Author: loneferret of Offensive Security Product: MailEnable Enterprise Version: 6.5 Vendor Site: http://www.mailenable.com Software Download: http://www.mailenable.com/download.asp Timeline: 29 May 2012: Vulnerability reported to CERT 30 Ma...
IBM DB2 'REPEAT()' Heap Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/37976/info IBM DB2 is prone to a heap-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to execute arbitrary code...
IBM DB2 db2start Format String Arbitrary Code Execution
No description provided by source. source: http://www.securityfocus.com/bid/8989/info Multiple command-line parameter format string vulnerabilities have been discovered in various IBM DB2 binaries. Specifically, format-based functions are implemented erroneously within the db2govd, db2start, and...
IBM DB2 Semaphore Signaling Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11403/info A denial of service vulnerability has been reported in IBM DB2. This vulnerability is reported to only exist when DB2 is installed on Microsoft Windows operating systems. This issue is due to a failure of the...
Sambar Server 4.2 beta 7 Batch CGI Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1002/info The Sambar Web/FTP/Proxy Server for Windows NT and 2000 supports DOS-style batch programs as CGI scripts. A remote attacker can use any batch file used by the server in the 'cgi-bin' directory to run any valid...
KorWeblog 1.6.2 - Remote Directory Listing Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11744/info A vulnerability is reported in the KorWeblog software that may allow a remote user to disclose directory listings. The problem presents itself when a malicious user crafts an URI request containing directory...
OpenDocMan 1.2.5 view_file.php XSS
No description provided by source. source: http://www.securityfocus.com/bid/36777/info OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an...
MunkyScripts Simple Gallery SQL Injection Vulnerability
No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register import re class TestPOCPOCBase: vulID = '68151' ssvid version = '1.0' author = '0xFATeam' vulDate = '' createDate =...
SumatraPDF 2.0.1 - (.chm) & (.mobi) Memory Corruption
No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= ============================================================================= SumatraPDF v2.0.1 chm and mobi files memory corruption Autho...
YaBB 1.40/1.41 Login Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6004/info A cross-site scripting vulnerability has been reported in the YaBB Yet Another Bulletin Board forum login script. HTML tags or script code are not sanitized from the error output of erroneous login attempts. As ...
Oracle WebLogic Session Fixation Via HTTP POST
No description provided by source...
POP Peeper 3.4 - UIDL Buffer Overflow
No description provided by source. $Id: poppeeperuidl.rb 11180 2010-11-30 20:19:18Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
TikiWiki 2.2/3.0 'tiki-listpages.php' Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/34107/info TikiWiki is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and to...
XOOPS Module PopnupBlog <= 2.52 (postid) BLIND SQL Injection Exploit
No description provided by source. html head titleXOOPS Module PopnupBlog = 2.52 postid BLIND SQL Injection Exploit/title script type=text/javascript //'=============================================================================================== //'Script Name: XOOPS Module PopnupBlog = 2.52...
3Com Ftp Server 2.0 - Remote Overflow Exploit
No description provided by source. / Email fixed brotha /str0ke / / 3Com Ftp Server remote overflow exploit author : c0d3r kaveh razavi [email protected] package : 3CDaemon version 2.0 revision 10 advisory : http://secway.org/advisory/ad20041011.txt company address : 3com.com it is just a simp...
Woltlab Burning Board 2.3.4 Class_DB_MySQL.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17147/info Woltlab Burning Board is prone to a cross-site scripting vulnerability. This issue is due to a lack of proper sanitization of user-supplied input. An attacker may leverage this issue to have arbitrary script co...
Fred N. van Kempen dip 3.3.7 - Buffer Overflow Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/86/info A buffer overflow resides in 'dip-3.3.7o' and derived programs. This is a problem only on systems where 'dip' is installed setuid. The culpable code is an 'sprintf' in line 192 in 'main.c': sprintfbuf, %s/LCK..%s,...
myServer 0.6.2 math_sum.mscgi Multiple Parameter Remote Overflow
No description provided by source. source: http://www.securityfocus.com/bid/10831/info Reportedly MyServer is affected by multiple remote vulnerabilities in the 'mathsum.mscgi' example script. These issues are due to a boundary condition error and a failure to properly sanitize user-supplied URI...
Real Networks Helix Universal Server 9.0.x Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10157/info It has been reported that Real Networks Helix Universal Server is affected by a remote denial of service vulnerability. This issue is due to a failure of the application to properly handle malformed RTSP...
FreeBSD 3.3 gdc Symlink Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/835/info It is possible to write debug ouput from gdc to a file /var/tmp/gdbdump. Unfortunately, gdc follows symbolic links which can be created in tmp and will overwrite any file on the system thanks to it being setiud...
WordPress GD Star Rating plugin <= 1.9.10 SQL Injection
No description provided by source. Exploit Title: WordPress GD Star Rating plugin = 1.9.10 SQL Injection Vulnerability Date: 2011-09-26 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/gd-star-rating.zip Version: 1.9.10 tested Not...
PHPBB Photo Album 2.0.53 Module Album_Cat.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13157/info Photo Album is affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary...
Titan FTP Server 6.05 build 550 DELE Command Remote Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27611/info Titan FTP Server is prone to a remote buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. An attacker may exploi...
Creative Software UK Community Portal 1.1 DiscView.php forum_id Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/17890/info Creative Community Portal is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. A...
EmuMail 5.0 Email Form Script Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5824/info Emumail is an open source web mail application. It is available for the Unix, Linux, and Microsoft Windows operating systems. It has been reported that EmuMail does not properly sanitize input. Under some...
Caucho Technology Resin 2.1.12 Directory Listings Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9617/info It has been reported that Resin may be prone to an information disclosure vulnerability that may allow an attacker to disclose directory listings by passing malicious data via a URI parameter. The issue has been...
GOM Video Converter 1.1.0.60 (.wav) - Memory Corruption PoC
No description provided by source. !/usr/bin/python + Author: TUNISIAN CYBER + Exploit Title: GOM Video Converter 1.1.0.60 Memory Corruption PoC + Date: 22-03-2014 + Category: DoS/PoC + Tested on: WinXp/Windows 7 Pro + Vendor: http://converter.gomlab.com/ + Friendly Sites:...
CONTENTCustomizer 3.1 Dialog.PHP Unauthorized Access Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26437/info CONTENTCustomizer is prone to an unauthorized access vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker could exploit this issue to delete arbitrary files,...
Phorum 5.1.20 pm.php Recipient Name SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/23616/info Phorum is prone to multiple input-validation vulnerabilities, including an unauthorized-access issue, privilege-escalation issue, multiple SQL-injection issues, and cross-site scripting issues, because the...
Kazaa Altnet Download Manager ActiveX Control Buffer Overflow
No description provided by source. $Id: kazaaaltnetheap.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
SCO OpenServer 5.0.6/5.0.7 NWPrint Command Line Argument Local Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12986/info nwprint that is distributed with SCO OpenServer is prone to a local buffer overflow vulnerability. This issue arises because the application fails to perform boundary checks prior to copying user-supplied data...
OpenCominterne 1.01 Local File Include Vulnerability
No description provided by source. ==================================================== OpenCominterne 1.01 Local File Include Vulnerability ==================================================== + OpenCominterne 1.01 Local File Include Vulnerability...
Glassfish Enterprise Server 2.1 Admin Console /sysnet/registration.jsf URI XSS
No description provided by source. source: http://www.securityfocus.com/bid/34824/info GlassFish Enterprise Server is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Attacker-supplied HTML and script code would run in the conte...
IKE Aggressive Mode Shared Secret Hash Leakage Weakness
No description provided by source. source: http://www.securityfocus.com/bid/7423/info When a VPN is configured to use a pre-shared master secret and a client attempts to negotiate keys in aggressive mode, a hash of the secret is transmitted across the network in clear-text. This may result in the...
KDE Konqueror 3.5.6 Cookie Handling Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26435/info KDE Konqueror is prone to a remote denial-of-service vulnerability because it fails to handle overly large cookies. An attacker may exploit this vulnerability to cause Konqueror to crash, resulting in...
Invision Power Board <= 2.1.5 (from_contact) SQL Injection Exploit
No description provided by source. !/usr/bin/perl IPB =2.1.4 exploit possibly 2.1.5 too Brought to you by the Ykstortion security team. The bug is in the pm system so you must have a registered user. The exploit will extract a password hash from the forum's data base of the target user. You need ...
Magento eCommerce Local File Disclosure
No description provided by source...
D-Link DIR-615 rev H - Multiple Vulnerabilities
No description provided by source...
Guesbara 1.2 Administrator Password Change Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/23029/info Guesbara is prone to a vulnerability that may permit attackers to change the administrative password. Exploiting this issue may allow an attacker to gain administrative access to the affected application...
Office Viewer OCX 3.2.0.5 - Multiple Methods Denial of Service Exploit
No description provided by source. span style=font: 14pt Courier New;p align=centerb2007/05/04/b/p/span pre codespan style=font: 10pt Courier New;span class=general1-symbol----------------------------------------------------------------------------- bOffice Viewer OA.ocx v. 3.2.0.5 multiple metho...
RhinoSoft Serv-U FTP Server 7.2.0.1 'rnto' Command Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/31563/info RhinoSoft Serv-U FTP server is prone to a directory-traversal vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting this issue allows an attacker to write arbitrar...
RhinoSoft Serv-U FTP Server 3.x/4.x/5.0 LIST Parameter Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10181/info Reportedly Serv-U is affected by a remote buffer overflow vulnerability in the list parameter. This issue is due to a failure of the application to properly validate buffer boundaries during processing of user...
Vim 7.x - Vim Script Multiple Command Execution Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/29715/info Vim is prone to multiple command-execution vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Successfully exploiting these issues can allow an attacker to execute...
WebBBS Pro 1.18 - GET Request Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7890/info A vulnerability has been discovered in WebBBS Pro, which may allow a remote attacker to trigger a denial of service condition in the WebBBS HTTP server. It has been reported that a remote attacker may cause the...
OpenTTD <= 0.4.7 (multiple vulnerabilities) Denial of Service Exploit
No description provided by source. Luigi Auriemma Application: OpenTTD http://www.openttd.org Versions: = 0.4.7 Platforms: Windows, nix, BSD, Mac and others Bugs: A program termination through big error number B broadcast clients disconnection in multiplayer menu Exploitation: A remote, versus...
RakhiSoftware Shopping Cart PHPSESSID Cookie Manipulation Path Disclosure
No description provided by source. source: http://www.securityfocus.com/bid/32563/info RakhiSoftware Shopping Cart is prone to multiple remote vulnerabilities. Exploiting these issues can allow attackers to obtain sensitive information, steal cookie data, access or modify data, or exploit latent...
eForum 0.4 - 'busca.php' Multiple Cross Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/28293/info eForum is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Exploiting these vulnerabilities may allow an attacker to perform...