56796 matches found
TimeClock CSRF Remote Add Admin Exploit
No description provided by source...
Social Sites MyBB Plugin 0.2.2 - Cross Site Scripting
No description provided by source. Exploit Title: Social Sites MyBB Plugin 0.2.2 Cross Site Scripting Google Dork: inurl:usercp.php?action=socialsites Date: 13.12.2012 Exploit Author: s3m00t Vendor Homepage: http://mattrogowski.co.uk/mybb/ Software Link: http://mods.mybb.com/view/social-sites...
FileBox - File Hosting & Sharing Script 1.5 - SQL Injection Vulnerability
No description provided by source. Exploit Title: FileBox - File Hosting & Sharing Script 1.5 SQL Injection Google Dork: inurl:FileBox Date: 30/08/2011 Author: Scripts Apart Software Link: http://www.scriptsapart.com Version: 1.5 Tested on: Windows 7 , Ubuntu 11 CVE : Exploit Discovered :...
Wireshark 1.10.7 - DoS PoC
No description provided by source. !/usr/bin/python Exploit Title: Wireshark Read Access Violation near NULL starting at libcairo2!cairoimagesurfacegetdata Date: May 15th 2014 Author: Osanda Malith Jayathissa E-Mail: osandajayathissaatgmail.com Version: 1.10.7 32-bit and 64-bit Vendor Homepage:...
RoomPHPlanning <= 1.6 (userform.php) Create Admin User Exploit
No description provided by source. !/usr/bin/perl -w use LWP::UserAgent; use HTML::Form; print \n; print +=RoomPHPlanning\n; print +=v1.x\n; print +=Vul: Remote Create user with all permissions admin\n; print +=Author: Jonathan Salwan \n; print +=Web: http://www.shell-storm.org\n; print +=Mail:...
Sun Solaris 10 ICMP Unspecified Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/22323/info Sun Solaris is prone to a remote denial-of-service vulnerability. A successful attack can trigger a crash in the operating system, leading to a denial-of-service condition for legitimate users. Solaris 10 is...
GNU Mailman 2.1 'email' Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6677/info A vulnerability has been discovered in GNU Mailman. It has been reported that Mailman is prone to cross site scripting attacks. This is due to insufficient santization of URI parameters. As a result, attackers m...
dotWidget for articles 2.0 showcatpicks.php file_path Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/18479/info dotWidget for Articles is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issu...
Connectix Boards <= 0.8.2 template_path Remote File Inclusion Exploit
No description provided by source. !/usr/bin/perl Author : HouSSaMix From H-T Team Script : Connectix Boards Tested in last version 0.8.2 & 0.8.1 Bug : Remote File Inclusion Vulnerable Code : ?php include $templatepath.'menulinks.php'; ? Dork : powered by connectix boards Risk : High Download :...
Seo Panel 2.2.0 - SQL Injection Vulnerabilities
No description provided by source. Vulnerability ID: HTB22824 Reference: http://www.htbridge.ch/advisory/sqlinjectioninseopanel1.html Product: Seo Panel Vendor: http://www.seopanel.in/ http://www.seopanel.in/ Vulnerable Version: 2.2.0 Vendor Notification: 01 February 2011 Vulnerability Type: SQL...
VLC 2.0.1 (.mp4) - Crash PoC
No description provided by source. Application : VLC 2.0.1 division by zero vulnerability Versions : 2.0.1 Date : 19/04/2012 Auther : Senator of Pirates E-Mail : [email protected] FaceBook : /SenatorofPiratesInfo Bug : ---- division by zero vulnerability during the handling of the...
MPlayer Malformed OGM File Handling DoS
No description provided by source. source: http://www.securityfocus.com/bid/34136/info MPlayer is prone to multiple denial-of-service vulnerabilities when handling malformed media files. Successfully exploiting this issue allows remote attackers to deny service to legitimate users...
LibPNG <= 1.2.5 png_jmpbuf() Local Buffer Overflow Exploit
No description provided by source. include stdio.h include stdlib.h include png.h / The pngjmpbuf macro, used in error handling, became available in libpng version 1.0.6. If you want to be able to run your code with older versions of libpng, you must define the macro yourself but only if it is no...
WebCT Campus Edition 3.8/4.x HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9999/info It has been reported that WebCT Campus Edition may be prone to an HTML injection vulnerability that may allow a remote attacker to execute arbitrary HTML or script code in the browser of an unsuspecting user. A...
WebCT Discussion Board 4.1 HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13101/info WebCT is reportedly affected by an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input prior to using it in dynamically generated content...
Star Articles 6.0 - Remote File Upload Vulnerability
No description provided by source. Star Articles 6.0 Remote File Upload ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : dork: allinurl:article.download.php baya ...
Quicksilver Forums <= 1.4.2 RCE Exploit (windows only)
No description provided by source. Author: GiReX Homepage: girex.altervista.org Date: 24/11/2008 CMS: Quicksilver Forums = 1.4.2 Site: http://www.quicksilverforums.com/ Bug: Local File Inclusion Exploit: Remote Command Execution Note: Works with windows servers only Works regardless php.ini...
PHP <= 5.2.11 'htmlspecialcharacters()' Malformed Multibyte Character Cross Site Scripting Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/37389/info PHP is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...
miniature java web server <= 1.71 - Multiple Vulnerabilities
No description provided by source...
firefly media server (mt-daapd) 2.4.1 / svn 1699 - Multiple Vulnerabilities
No description provided by source. Luigi Auriemma Application: Firefly Media Server mt-daapd http://www.fireflymediaserver.org Versions: = 2.4.1 and SVN = 1699 Platforms: nix, Windows, Mac and others Bugs: A partial directory traversal on Windows B authentication bypass on Windows C duplicated HT...
@lex Guestbook <= 4.0.5 - index.php test Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/28519/info @lex Guestbook is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the...
CF Image Host 1.1 - Remote File Inclusion Vulnerability
No description provided by source. Download: http://codefuture.co.uk/counter/?id=22 Title : CF Image Host Remote File Inclusion Vulnerability Author: The.Morpheus Contact: - Thanks: Herkese : Greetz: Megaturks.Net | Spyturks.Com demo :http://codefuture.co.uk/projects/imagehost1.1/demo/...
HP-UX 10/11,IRIX 3/4/5/6,OpenSolaris build snv,Solaris 8/9/10,SunOS 4.1 RPC.YPUpdated Command Execution (1)
No description provided by source. / source: http://www.securityfocus.com/bid/1749/info HP-UX 10.x/11.x,IRIX 3.x/4.x/5.x/6.x,OpenSolaris build snv,Solaris 8/9/10,SunOS 4.1.x RPC.YPUpdated Command Execution 1 The 'rpc.ypupdated' deamon is part of the Network Information Service NIS or Yellow Pages...
House Style 0.1.2 - readfile() Local File Disclosure Vulnerability
No description provided by source. Exploit Title: House Style 0.1.2 = readfile Local File Disclosure Vulnerability Date: 11/07/2012 Author: GoLdM Vendor or Software Link: http://sourceforge.net/projects/housestyle/ Version: 1.03 Category:: readfile Local File Disclosure Vulnerability2 Tested on: ...
Solarwinds 10.4.0.10 TFTP DoS
No description provided by source. Exploit Title: Solarwinds TFTP DOS Date: 5-21-2010 Author: Nullthreat Software Link: http://www.solarwinds.com/products/freetools/freetftpserver.aspx Version: 10.4.0.10 Tested on: Windows XP SP3 Code : !/usr/bin/perl SolarWinds TFTP Server 10.4.0.10 Remote DoS...
mUnky 0.01'index.php' Remote Code Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30705/info mUnky is prone to a remote code-execution vulnerability because the application fails to properly sanitize user-supplied input. Exploiting this issue allows attackers to cause the application to execute arbitra...
Wordpress <= 2.0.6 wp-trackback.php Remote SQL Injection Exploit
No description provided by source. ?php printr' --------------------------------------------------------------------------- Wordpress = 2.0.6 wp-trackback.php ZendHashDelKeyOrIndex / / sql injection admin hash disclosure exploit needs registerglobals=on, 4 = PHP 4.4.3, 5.1.4 by rgod dork: is...
Internet Explorer 8 CSS 'expression' Property Cross Site Scripting Filter Bypass Weakness
No description provided by source. source: http://www.securityfocus.com/bid/32780/info Microsoft Internet Explorer is a web browser for the Microsoft Windows operating system. Internet Explorer 8 includes a cross-site-scripting filter that is designed to prevent cross-site-scripting attacks again...
Csound hetro File Handling Stack Buffer Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
Merit AAA RADIUS Server 3.8 rlmadmin Symbolic Link Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3302/info The 'rlmadmin' user management utility included with the Merit AAA RADIUS Server package is susceptible to a trivial symbolic link attack. The program allows users to specify a directory from which configuration...
WebSiteBaker 2.8.1 DataBase Backup Disclosure
No description provided by source...
Half-Life StatsMe 2.6.x Plug-in MakeStats Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6578/info The Half-Life StatsMe plug-in is prone to an exploitable format string vulnerability. This issue may be exploited by an attacker who can authenticate with the rcon-password of the Half-Life server to execute...
phpBB Spider Friendly Module <= 1.3.10 File Include Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? print ' | \\ | \\ | \ . . |\ \ \ /\ \ / /| || | | | | \ | \ Y / | || | | \ | \ \ / | || | |/ // / / ||| \ | / / \ / \ |\ /\ / / \ / \ | | | | / /\ \ / \ / \ | | | | / | / Y \ || / /| /| /...
HP LaserJet Pro P1606dn - Webadmin Password Reset
No description provided by source. !/usr/bin/python Exploit Title: HP LaserJet Pro P1606dn Webadmin password reset Date: 20.05.2013 Exploit Author: m3tamantra http://m3tamantra.wordpress.com/blog Vendor Homepage: http://www8.hp.com/de/de/products/printers/product-detail.html?oid=4110411 Firmware...
Pixelpost <= 1-5rc1-2 Remote Privilege Escalation Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo Pixelpost = 1-5rc1-2 privilege escalation exploit\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n; echo dork: pixelpost \RSS 2.0\ \ATOM feed\ \Valid xHTML / Valid CSS\r\n\r\n; /...
Microsoft Internet Explorer 5/6 XML Redirect File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5560/info A flaw in Microsoft Internet Explorer may reveal the entire contents of XML files and partial contents of other files to attackers. This vulnerability allows an attacker to read the entire contents of XML files,...
V3 Chat - Profiles/Dating Script 3.0.2 - Insecure Cookie Handling Vuln
No description provided by source. + V3 Chat - Profiles/Dating Script v3.0.2 Insecure Cookie Handling Vulnerability + Discovered By : Mountassif Moad + Greetz : All my freind Exploit: javascript:document.cookie = admin=1; path=/; milw0rm.com 2008-11-08...
mysource 2.14.8/2.16 - Multiple Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/20153/info MySource products are prone to multiple input-validation vulnerabilities. Exploiting these issues will allow an attacker to manipulate the application into becoming an HTTP proxy and to conduct cross-site...
BoutikOne (description.php) SQL Injection Vulnerability
No description provided by source...
Pre ADS Portal <= 2.0 (Auth Bypass/XSS) Multiple Vulnerabilities
No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= IN THE NAME OF ALLAH -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Pre...
V3 Chat Instant Messenger - profile.php site_id Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/18543/info V3 Chat Instant Messenger is prone to multiple cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker...
Photodex ProShow Gold/Producer 5.0.3310 & 6.0.3410 - ScsiAccess Local Privilege Escalation
No description provided by source. Exploit-DB Note: Vuln still in 6.0.3410 as well as 'Photodex ProShow Gold' Inshell Security Advisory http://www.inshell.net 1. ADVISORY INFORMATION ----------------------- Product: Photodex ProShow Producer Vendor URL: www.photodex.com Type: Incorrect Default...
Calendar MX Professional 2.0.0 - Blind SQL Injection Vulnerability
No description provided by source. ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:calendarEventupdate.asp ID Blind SQL Injection Vulnerability Vendor: www.mxmania.net Software: Calendar Mx Professional author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz...
MyBB <= 1.6.11 - Remote Code Execution Using Admin Privileges
No description provided by source. ?php Exploit Title: MyBB = 1.6.11 Remote Code Execution Using Admin Privileges Date: 30/11/2013 Exploit Author: BlackDream Vendor Homepage: www.mybb.com Software Link: http://www.mybb.com/download/latest Version: = 1.6.11 Tested on: Linux Thanks to:...
GNU Indent 2.2.9 - Local Heap Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9297/info It has been reported that GNU Indent may be prone to a local heap overflow vulnerability that can be exploited through a malicious C source input file. It has been reported that indent copies data from the file ...
iSupport 1.8 - SQL Injection Vulnerability
No description provided by source. iSupport 1.8 SQL Injection Vulnerability Date: 2011-06-23 Author: Brendan Coles [email protected] Advisory: http://itsecuritysolutions.org/2011-06-23-iSupport-1.8-SQL-Injection-Vulnerability/ Software: iSupport Version: = 1.8 Homepage:...
ObieWebsite Mini Web Shop 2 sendmail.php PATH_INFO Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/23847/info Mini Web Shop is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit these issues to steal cookie-based...
Mercury Mail SMTP AUTH CRAM-MD5 Buffer Overflow
No description provided by source. $Id: mercurycrammd5.rb 9583 2010-06-22 19:11:05Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of us...
MySQL MaxDB 7.5 WAHTTP Server Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11843/info A remote denial of service vulnerability has been reported to affect the MySQL MaxDB WAHTTP server. This issue is due to a failure of the server to handle malformed requests. An attacker may leverage this issue...
Progress WebSpeed 3.0/3.1 - Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/23778/info WebSpeed is prone to a denial-of-service vulnerability because it fails to properly sanitize user-supplied input. Successful exploits can allow attackers to cause the application to become unresponsive, denying...