56796 matches found
Netscape 6.0/7.0 Style Sheet Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6937/info It has been reported that Netscape based browsers may be vulnerable to a denial of service condition when rendering certain style sheet code. If a malicious page is viewed the browser reportedly becomes unstable...
PHP 4/5 addslashes() NULL Byte Bypass
No description provided by source. source: http://www.securityfocus.com/bid/11981/info PHP4 and PHP5 are reported prone to multiple remotely exploitable vulnerabilities. These issue result from insufficient sanitization of user-supplied data. A remote attacker may carry out directory traversal...
Microsoft Internet Explorer 6.0 Frame Src Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/21447/info Microsoft Internet Explorer is prone to a denial-of-service vulnerability because the application fails to handle exceptional conditions. This issue is triggered when an attacker entices a victim user to visit ...
Apple Safari 3.1 - Window.setTimeout Variant Content Spoofing Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28405/info Apple Safari is prone to a content-spoofing vulnerability that allows attackers to populate a vulnerable Safari browser window with arbitrary malicious content. During such an attack, the URL and window title...
Mambo Component com_mambads SQL Injection Vulnerability
No description provided by source...
Openplanning 1.00 (RFI/LFI) Multiple File Include Vulnerability
No description provided by source. =============================================================== Openplanning 1.00 RFI/LFI Multiple File Include Vulnerability =============================================================== + Openplanning 1.00 RFI/LFI Multiple File Include Vulnerability...
Cyberstop Web Server 0.1 Long Request DoS Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3930/info Cyberstop is a web server for Windows 9x/NT/2000 systems. Attacks can be launched on a Cyberstop host if a request is submitted containing an unusual number of arbitrary characters. Cyberstop web server will sto...
e107 website system 0.6 usersettings.php avmsg Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/10436/info e107 is prone to multiple cross-site scripting, HTML injection, file inclusion, and SQL injection vulnerabilities. This may compromise various security properties of a Web site running the software, including...
PHPODP 1.5 ODP.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17976/info phpODP is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script...
PHP-Fusion <= 6.01.15.4 (downloads.php) SQL Injection Vulnerability
No description provided by source. =================================================================== PHP-Fusion = 6.01.15.4 downloads.php SQL Injection Vulnerability =================================================================== + Discovered By : Inj3ct0r + Site : Inj3ct0r.com + support...
WinDirectAudio 1.0 - (.WAV) PoC
No description provided by source. /usr/bin/perl Title: WinDirectAudio .WAV PoC +Date : May 21, 2010 +version : v1.0 +Author : ahwak2000 +Contact : z.u5athotmail.com +Geetz 2 : germayax +tested on : windows xp sp2&sp3 EN my $junk = \x41 x 5000; openmyfile,' ahwak2000.wav'; print myfile $junk.\r\n...
Foxit Reader 3.0 (<= Build 1301) PDF Buffer Overflow Exploit (Univ.)
No description provided by source. !/usr/bin/perl Foxit Reader 3.0 = Build 1301 PDF Buffer Overflow Exploit Universal ------------------------------------------------------------------------ Exploit by SkD [email protected] A SEH overflow occurs in this vulnerability in the popular Foxit Reader...
AWCM 2.1 final - Remote File Inclusion Vulnerability
No description provided by source...
Avaya WinPDM UniteHostRouter <= 3.8.2 - Remote Pre-Auth Command Execute
No description provided by source. Abysssec Public Exploit more info www.abysssec.com Avaya WinPDM UniteHostRouter = 3.8.2 Remote Pre-Auth Command Execute A boundary error in the Unite Host Router service UniteHostRouter.exe when processing certain requests can be exploited to cause a stack-based...
Wordpress User Meta 1.1.1 - Arbitrary File Upload Vulnerability
No description provided by source. Exploit Title: Wordpress User Meta Version 1.1.1 Arbitrary File Upload Google Dork: inurl:wp-content/plugins/user-meta/framework/helper/ Date: 11/06/2012 Exploit Author: Adrien Thierry Vendor Homepage: http://user-meta.com/ Software Link:...
Microsoft Windows Media Player 7.0 .ASX Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1980/info Windows Media Player is an application used for digital audio, and video content viewing. An unsafe buffer copy involving remotely-obtained data exists in the Active Stream Redirector ASX component in Windows...
Adobe Flash Player 9/10 - Invalid Object Reference Remote Code Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/33880/info Adobe Flash Player is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code with the privileges of the user running the application. Failed exploit attempt...
Slackware Linux /usr/bin/ppp-off Insecure /tmp Call Exploit
No description provided by source. !/bin/sh In SlackWare Linux the script /usr/bin/ppp-off writes the output of 'ps x' to /tmp/grep.tmp. Since root is the user that runs ppp-off, a non-privileged user could create a link from /tmp/grep.tmp to any fileie: /etc/issue, thus when root runs the ppp-of...
Quicksilver Master of Orion III 1.2.5 - Multiple Remote Denial of Service Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/11550/info Master of Orion III is reported prone to multiple remote denial of service vulnerabilities. These issues occur because the application does not handle exceptional conditions in a proper manner. Master of Orion...
JV2 Folder Gallery <= 3.1 - (gallery.php) Remote File Inclusion Vulnerability
No description provided by source...
WordPress Plugin DZS Video Gallery 3.1.3 - Remote and Local File Disclosure Vulnerability
No description provided by source. Exploit Title: WordPress DZS Video Gallery dzs-videogallery 3.1.3 Plugins Remote and Local File Disclosure Vulnerability only .SWF Google Dork: inurl:/wp-content/plugins/dzs-videogallery/ Vendor Homepage: http://digitalzoomstudio.net/ Version: ALL Affected File:...
Vanilla Forums 2.0 - 2.0.18.5 (class.utilitycontroller.php) - PHP Object Injection Vulnerability
No description provided by source. ------------------------------------------------------------------------------------------- Vanilla Forums = 2.0.18.5 class.utilitycontroller.php PHP Object Injection Vulnerability...
Freeway 1.4.1.171 templates/Freeway/boxes/card1.php language Parameter Traversal Local File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/30731/info Freeway is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities using directory-traversal strings to view...
ListMail 112 - Command Execution
No description provided by source. !/usr/bin/perl -w Listmail v112 by P.M.Systems / PoC Exploit Listmail is a powerful, hands-free mailing list manager which is exploitable due to an insecure open call. This exploit will attempt to bind a shell at port 60179/fido by using inetd. Code to spawn an...
Joomla Component Car Manager <= 1.1 - Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Script Name: Joomla Component Car Manager = 1.1 Blind SQL Injection Exploit Coded by : ajann Author : ajann Dork : index.php?option=comresman Contact : : S.Page : http://www.webformatique.net $$ : .39.99 .. : ajann,Turkey use IO::Socket; if@ARGV 1...
DeluxeBB <= 1.3 (qorder) Remote SQL Injection Vulnerability
No description provided by source...
HP-UX 11.0 net.init RC Script Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1602/info A vulnerability exists in HP-UX, from Hewlett Packard, under certain configurations. Version 11.0 is confirmed to have this problem; other versions may also be susceptible. If the CLEARTMP option in...
WordPress MM Duplicate plugin <= 1.2 - SQL Injection Vulnerability
No description provided by source. Exploit Title: WordPress MM Duplicate plugin = 1.2 SQL Injection Vulnerability Date: 2011-08-22 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/mm-duplicate.zip Version: 1.2 tested --- PoC ---...
HLstats 1.35 HLStats.PHP Multiple Cross Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/24063/info HLstats is prone to mulitiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Exploiting these issues may help an attacker steal cookie-based...
PHP iReport 1.0 - Remote Html Code injection
No description provided by source. !/usr/bin/perl Title = phpireport v1.0 = Remote Html Code injection Author = Or4nG.M4n Download = http://garr.dl.sourceforge.net/project/phpireport/phpireport%20v1.0%20alpha%20revision%2025.rar Thnks : +----------------------------------+ | xSs m4n i-Hmx h311 c0...
Wordpress Pica Photo Gallery 1.0 - Arbitrary File Upload Vulnerability
No description provided by source. Exploit Title: Wordpress Pica Photo Gallery 1.0 Arbitrary File Upload Google Dork: inurl:wp-content/plugins/pica-photo-gallery/ Date: 11/06/2012 Exploit Author: Adrien Thierry Vendor Homepage: http://www.apptha.com Software Link:...
International TeleCommunications WebBBS 2.13 login & password Buffer Overflow
No description provided by source. source: http://www.securityfocus.com/bid/803/info Certain versions of WebBBS by Mike Bryeans of International TeleCommunications contain a flaw in the initial login program. User supplied data via the login name and password are not bounds checked and can result...
Black Knight Forum 4.0 Forum.ASP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13328/info Black Knight Forum is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input prior to utilizing the data in an SQL query. Successful...
Nagios3 history.cgi Host Command Execution
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' class...
appRain 3.0.2 - Blind SQL Injection Vulnerability
Advisory ID: HTB23177 Product: appRain Vendor: appRain Vulnerable Versions: 3.0.2 and probably prior Tested Version: 3.0.2 Advisory Publication: October 9, 2013 without technical details Vendor Notification: October 9, 2013 Public Disclosure: November 6, 2013 Vulnerability Type: SQL Injection...
Joomla! and Mambo faq Component - 'catid' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27822/info The Joomla! and Mambo 'faq' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow a...
WebYep <= 1.1.9 (webyep_sIncludePath) File Include Vulnerabilities
No description provided by source...
See-Commerce <= 1.0.625 (owimg.php3) Remote Include Vulnerability
No description provided by source. See-Commerce Remote File Inclusion CreW: ToXiC Bug Found by Drago84 Source Code: http://freshmeat.net/redir/seecommerce/14016/urlzip/sc-1.0.625.zip Problem Is: require$path./ow.inc; Page Affect: http://site/see-commerce directory/owimg.php3?path=evil script Grea...
PHPFootball <= 1.6 (filter.php) Remote Hash Disclosure Exploit
No description provided by source. ?php // http://garr.dl.sourceforge.net/sourceforge/phpfootball/PHPfootball1.6.zip $host = $argv1; $path = $argv2; if $argc != 3 echo PHPFootball = 1.6 filter.php Remote Hash Disclosure Exploit\n; echo by KinG-LioN - http://eurohackers.it\n; echo Usage: php $argv...
Quick.Cart 3.4 and Quick.CMS 2.4 Delete Function Cross Site Request Forgery Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/37115/info Quick.Cart and Quick.CMS are prone to a cross-site request-forgery vulnerability because the applications allow users to bypass certain security checks. Exploiting this issue may allow a remote attacker to...
PlatinumFTP <= 1.0.18 Multiple Remote Denial of Service Exploit
No description provided by source. !/usr/bin/perl pftpdos-ai1.pl - Remote DoS against PlatinumFTP 10.1.18 Details:http://seclists.org/lists/bugtraq/2005/Mar/0222.html If you don't get the server down try to change/play a little bit with the Timeout ports at securityforest dot com | greetings to...
Stockman Shopping Cart 7.8 Arbitrary Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7485/info Stockman Shopping Cart has been reported prone to a remote command execution vulnerability. This issue presents itself in the 'shop.plx' script. The problem results from a lack of sufficient sanitization perform...
PostNuke Module pnFlashGames <= 2.5 - SQL Injection Vulnerabilities
No description provided by source. Vuln: Postnuke Mod pnFlashGames Blind SQL/SQL all version Vulnerability Author: Vulnerability search Kacper kacper1964atyahoo.pl dork: inurl:index.php?module=pnFlashGames Author Homepage: http://devilteam.pl/ If magicquotesgpc = off -==== Vuln to old 2 version:...
PHP-Nuke 6.x Multiple Module SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/9544/info Multiple SQL injection vulnerabilities have been reported in various modules included in PHP-Nuke versions 6.9 and earlier. These issues could permit remote attackers to compromise PHP-Nuke administrative...
Sambar Server 6.1 beta 2 showperf.asp title Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/10444/info Sambar Server is reportedly prone to multiple vulnerabilities. These issues may allow an attacker to access sensitive files and carry out directory traversal and cross-site scripting attacks. These issues requi...
BMForum 3.0 forums.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/14396/info BMForum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to...
Brecht Claerhout Sniffit 0.3.6 HIP/0.3.7 beta Mail Logging Buffer Overflow (2)
No description provided by source. source: http://www.securityfocus.com/bid/1158/info Sniffit is a freely available, open source network monitoring tool. It is designed for use on the Unix and Linux Operating Systems. Sniffit contains a remotely exploitable buffer overflow vulnerability. If Sniff...
pBot - Remote Code Execution
No description provided by source. !/usr/bin/perl Exploit Title: pBot Remote Code Execution hostauth Date: 31.07.2012 Exploit Author: @bwallHatesTwits Software Link: https://www.firebwall.com/decoding/read.php?u=620d21fd31b87046e94975e03fdafa8a decoded from attempted attack Version: Various...
SAPID CMS <= 1.2.3_rc3 (rootpath) Remote Code Execution Exploit
No description provided by source. Title: SAPID CMS Multiple remote Command Execution Vulnerabilities Author: Simo64 simo64atmorxorg Discovered: 06 Aout 2006 Published : 08 Aout 2006 MorX Security Research Team http://www.morx.org Vendor : SAPID CMS Version : 123 rc3 Website :...
YenerTurk Haber Script 1.0 - Remote SQL Injection Vulnerability
No description provided by source. YenerTurk Haber Script v1.0 SQL Injection Vulnebrality Credit:ASIANEAGLE Contact:[email protected] Exploit: Admin Nick: http://SITE/Path to...