56796 matches found
IBM AIX 5.x Invscout Local Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13909/info invscout is prone to a local buffer overflow vulnerability. This issue presents itself because the application fails to carry out boundary checks on user-supplied data from the command line. /usr/sbin/invscout...
webpagetest <= 2.6 - Multiple Vulnerabilities
No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP YmmMMMM MMM YM Discovered by dun \ posdubatgmail.com 2012-07-11 WebPagetest = 2.6 Multiple Vulnerabilities Script: WebPagetest provides a system for...
Leigh Business Enterprises Web HelpDesk 4.0 - SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10773/info LBE Web HelpDesk is reported susceptible to an SQL injection vulnerability. This issue is due to improper sanitization of user-supplied data. This issue may allow a remote attacker to manipulate query logic,...
eSyndiCat 2.2 'register.php' Multiple Cross Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/30178/info eSyndiCat is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the...
SudBox Boutique 1.2 login.PHP Authentication Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7651/info A vulnerability has been reported for SudBox Boutique. The problem occurs due to insufficient initialization of variables and may allow an unauthorized user to gain authenticate. Specifically, by making a...
Owl Intranet Engine 0.95 'register.php' Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30410/info Owl Intranet Engine is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browse...
Penny Auction 5 - SQL Injection Vulnerabilities
No description provided by source. | \ | | | | / | | | | | | | | | | // \ \ / / | | | | | | |/ | ' \ \ \ / / | | | \ \ /\ V / | | || | || | | | | | | / || \| / /||,|||/|| || |/ || Penny auction version - 5, SQLi Vulnerabilities Product Page:...
AppIntellect SpotLight CRM Login.ASP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/21521/info AppIntellect SpotLight CRM is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker ...
Dros RFI Vulnerability
No description provided by source...
phpBB <= 2.0.19 XSS Remote Cookie Disclosure Exploit
No description provided by source. to be used with cookie stealer located here: http://www.milw0rm.com/id.php?id=1103 Make sure you change www.milw0rm.com to your domain. thnx. /str0ke Author: threesixthousan / As long as html is ON in the latest version of phpBB forums, several XSS attack vector...
CMS Made Simple 1.6.6 Local File Include and Cross Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/38234/info CMS Made Simple is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the local file-include...
Seo Panel 2.2.0 Cookie-Rendered Persistent XSS Vulnerability
No description provided by source. 'Seo Panel' Cookie-Rendered Persistent XSS Vulnerability CVE-2010-4331 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in 'Seo Panel' page rendering which allows for unfiltered, unencrypted...
Prototype of an PHP application 0.1 ident/disconnect.php path_inc Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/24266/info 'Prototype of an PHP application' is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input to the application. An attacker may leverage these issues to...
Glossaire 2.0 - 'glossaire.php' Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28609/info Glossaire is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...
Adobe SVG Viewer 3.0 ActiveX Control SRC Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13490/info The Adobe SVG Viewer ActiveX control is prone to an information disclosure vulnerability. Reports indicate that the Adobe SVG Viewer ActiveX control may be employed to disclose the existence of a target file...
Netscape Communicator 4.06/4.5/4.6/4.51/4.61 EMBED Buffer Overflow Vulnerability
No description provided by source. / source: http://www.securityfocus.com/bid/618/info In several versions of Netscape Communicator, there is an unchecked buffer in the code that handles EMBED tags. The buffer is in the 'plugins page' option. This vulnerability can be exploited by a malicious...
Family Connections Who is Chatting Add-On Remote File Inclusion Vulnerability
No description provided by source. ======================================================= Who is Chatting 2.2.3 Remote File Include Vulnerability ======================================================= Author : lumut-- Script Details : http://www.familycms.com/downloads/details.php?file=50 Bugs ...
Sun Solaris <= 2.6 power management Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/160/info A vulnerability exists in Sun's power management software under Solaris versions 2.4-2.6 although only 2.6 as part of the main distribution. The sys-suspend program is initiated when a user runs the program, or...
Microsoft Office 2003 - Denial of Service (DoS) Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/22716/info Microsoft Office is prone to a denial-of-service condition when the malformed WMF file is viewed in an Office application. Exploiting this issue allows remote attackers to crash applications, denying service to...
CzarNews <= 1.20 (Account Hijacking) Remote SQL Injection Vuln
首先登陆一个CzarNews 1.20 版本的网站。 2. 打开登陆页面,然后在地址栏中输入 javascript:document.cookie="recook=' or ''=',' or ''='";void0; 随后刷新页面，接下来见证奇迹，你会惊奇的发现你处于了登陆状态。 3. 如果你输入以下代码在URL当中 javascript:c=document.cookie;p=c.substrc.lastIndexOf'='+1.split/%../;a lert"Login: " + p0 + "\nPass: " + p1;void0;...
Atftpd 0.6 - Remote Root Exploit (atftpdx.c)
No description provided by source. / PoC linux/86 remote exploit against atftpd c gunzip FIXED / include stdio.h include stdlib.h include unistd.h include string.h include netdb.h include sys/types.h include sys/socket.h include netinet/in.h include arpa/inet.h include signal.h define HEAPSTART...
APC PowerChute Network Shutdown HTTP Response Splitting and Cross Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/33924/info APC PowerChute Network Shutdown is prone to an HTTP-response-splitting vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage...
Trend Micro OfficeScan Corporate Edition 3.0/3.5/3.11/3.13 DoS Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/1013/info Trend Micro OfficeScan is an antivirus software program which is deployable across an entire network. During the installation of the management software, the administrator is asked to choose between managing fro...
CarLine Forum Russian Board 4.2 search.php text_poisk Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/14045/info Forum Russian Board is prone to multiple input validation vulnerabilities. These issues can allow attackers to carry out SQL Injection, cross-site scripting, and HTML injection attacks. Forum Russian Board 4.2 ...
CarLine Forum Russian Board 4.2 set.php name_ig_array[] Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/14045/info Forum Russian Board is prone to multiple input validation vulnerabilities. These issues can allow attackers to carry out SQL Injection, cross-site scripting, and HTML injection attacks. Forum Russian Board 4.2 ...
Web4Future eDating Professional 5.0 fq.php cid Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/15715/info eDating Professional is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...
Norman Security Suite 8 (nprosec.sys) Local Privilege Escalation 0day
No description provided by source...
IPCheck Server Monitor 5.x Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19473/info IPCheck Server Monitor is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the...
Winamp 5.05-5.13 .ini local stack buffer overflow PoC
No description provided by source. /Winamp 5.05-5.13 .ini local stack buffer overflow poc The problem is in the skin field when a long string is writen it causes the buffer overflow. All u have to do is replace this file with the initial one. -snipp-- Winamp vispluginname=visavs.dll vispluginnum=...
HPE <= 1.0 (HPEinc) Remote File Include Vulnerabilities (updated)
No description provided by source. HPE v0.6.1 Remote File Inclusion Vulnerability Download: http://prdownloads.sourceforge.net/hpe/hpe-1.0.zip?download Download: http://prdownloads.sourceforge.net/hpe/HPE-0.7.0.tar.gz?download Download:...
Elm Development Group ELM 2.4/2.5.1 Mail for UNIX (ELM) Buffer Overflow (2)
No description provided by source. source: http://www.securityfocus.com/bid/1276/info Buffer overflow vulnerabilities exist in elm Electronic Mail for Unix. / Elm 2.5 PL3 exploit Tested Under Linux Slackware 3.6, 4.0, 7.0 By xfer [email protected] Of Buffer0verfl0w Security At Sat May 27...
Concrete5 <= 5.4.2.1 - Multiple Vulnerabilities
No description provided by source. Exploit Title: Concrete5 = 5.4.2.1 SQL Injection and XSS Vulnerabilities Date: 2011-10-04 Author: Ryan Dewhurst ryandewhurst at gmail @ethicalhack3r www.ethicalhack3r.co.uk Software Link: http://sourceforge.net/projects/concretecms/files/concrete5/5.4.2.1/...
mycart 2.0 - Multiple Vulnerabilities
No description provided by source. MyCart 2.0 Multiple Remote Vulnerabilities Name MyCart Vendor http://open.appideas.com Versions Affected 2.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-10-27 X. INDEX I. ABOUT...
XAMPP Linux 1.6 ming.php text Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/30535/info XAMPP for Linux is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the...
PHP <=5.3 - preg_match() full path disclosure
No description provided by source. MajorSecurity Advisory 57PHP =5.3 - pregmatch full path disclosure Details ======= Product: PHP =5.3 Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.php.net/ Vendor-Status: informed Advisory-Status: published Credits ============ Discovered b...
Linux Kernel 2.4.x/2.6.x Local Denial of Service And Memory Disclosure Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/11754/info The Linux kernel is reported prone to multiple local vulnerabilities: - A handcrafted 'a.out' file may be used to trigger a local denial-of-service condition. A local attacker may exploit this vulnerability to...
Joomla Component Photo Battle com_photobattle Local File Inclusion Vulnerability
No description provided by source. =========================================================================================================== o Joomla Component Photo Battle Local File Inclusion Vulnerability Software : comphotobattle version 1.0.1 Demo : http://www.gogoritas.net/en/photo-battle...
SunGard Banner Student 7.3 'add1' Parameter Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27490/info Banner Student is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary script code in the...
Magic Photo Storage Website user/index.php _config[site_path] Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/21965/info Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the...
mpnews pro 2.1 .0.18 - Directory Traversal information disclosure vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8744/info It has been reported that MPNews PRO is prone to an information disclosure vulnerability. The problem is believed to occur due to MPNews PRO failing to sufficiently filter specific dot-dot-slash sequences ../. A...
vtiger CRM <= 5.4.0 (SOAP Services) - Multiple Vulnerabilities
No description provided by source. --------------------------------------------------------------------------------- vtiger CRM = 5.4.0 customerportal.php Two Local File Inclusion Vulnerabilities --------------------------------------------------------------------------------- - Software Link:...
CubeCart 3.x - Remote File Upload Vulnerability
No description provided by source...
anaconda clipper 3.3 - Directory Traversal vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2512/info Clipper is a headline-gathering tool from Anaconda! Partners which, in certain versions, is vulnerable to directory traversal attacks. By including '/../' sequences in requested URLs, an attacker can cause the...
Medal Of Honor Allied Assault getinfo Stack Buffer Overflow
No description provided by source. $Id: mohaagetinfo.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Kerio Personal Firewall 4.3 - IPHLPAPI.DLL Local Privilege Escalation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/21828/info Kerio Personal Firewall is prone to a local privilege-escalation vulnerability. A local attacker could exploit this issue to execute arbitrary machine code with SYSTEM-level privileges. A successful exploit cou...
ABB 1.1 - Forum Remote Database Disclosure Vulnerability
No description provided by source...
Intego FileGuard 2.0/4.0 Weak Password Encryption Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3213/info Intego FileGuard is a commercial access control utility for Mac OS versions 7-9.1. It's functionality includes the ability to enforce privileges, log activities, manage user accounts, restrict access by time, et...
Call of Duty 4 1.5 - Malformed 'stats' command Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/29026/info Call of Duty is prone to a denial-of-service vulnerability because the application fails to handle specially crafted commands. An attacker can exploit this issue to crash the affected application, denying servi...
Savant Web Server 3.1 CGITest.HTML Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8242/info cgitest.html has been reported prone to cross-site scripting attacks. The issue occurs due to a lack of sufficient sanitization performed on data supplied to the cgitest.html script. This issue could be exploite...
Winamp <= 5.33 (.AVI File) Remote Denial of Service Exploit
No description provided by source. !/usr/bin/perl Winamp Buffer Overflow DOS Exploit 0-DAY Testet:Ver 5.3 Discoverd By = DeltahackingTEAM Bug Found & Exploitet By /Farzad.SharifiDr.Trojan Risk = High ExploitEXE =http://www.deltahacking.net/exp/winamp.exe ExploitPL...