56796 matches found
qmailadmin 1.0.x Local Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5404/info The qmailadmin utility, developed by Inter7, is vulnerable to a buffer overflow condition. It is meant to run as a CGI program and is typically installed setuid owned by root on some systems, regular users on...
OneWorldStore DisplayResults.ASP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13249/info OneWorldStore is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could...
Limny 1.01 - Remote File Upload Vulnerability
No description provided by source. ----------exploit Debut Remote File Upload Vulnerability ----------Script Info Moi : JIKO Site : No-exploit.Com Email : : ----------Script Info Site:http : limny.org ----------exploit Info 13 Action the first setup register if the register active...
AWCM 2.2 final - Local File Inclusion Vulnerability
No description provided by source. +Exploit Title: awcm v2.2 final Local File Inclusion +Date: 26-01-2011 +Author: Cucura , Ste@lth Bl@ckFalc0n +Software Link: www.awcm-cms.com +Version: v2.2 +CVE : - +Contact: BlackcucuraatGmail.com http://sourceforge.net/projects/awcm/files/...
Opial CMS 2.0 - Multiple Vulnerabilities
No description provided by source...
FreeBSD 3.3,Linux Mandrake 7.0 'xsoldier' Buffer Overflow Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/871/info Certain versions of FreeBSD 3.3 Confirmed and Linux Mandrake confirmed ship with a vulnerable binary in their X11 games package. The binary/game in question, xsoldier, is a setuid root binary meant to be run via ...
MTCMS <= 2.0 - Remote SQL Injection Vulnerabilities
No description provided by source...
Meet#Web 0.8 ManagerRightsResource.class.php root_path Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/30673/info MeetWeb is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the...
Joomla Component JPad 1.0 - SQL Injection Vulnerability (postauth)
No description provided by source. Joomla Component JPad Remote SQL Injection Founded by : His0k4 Algerian HaCkeR; Contact: His0k4atgmail.com Greetz : All friends & muslims HaCkeRs : ScriptName: Joomla ComponentName: JPad DORK: allinurl:comjpad P.O.C:...
Northern Solutions Xeneo Web Server 2.1/2.2 - Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6098/info A denial of service vulnerability has been reported for Xeneo web server. When the web server processes a malformed HTTP request, it will crash and lead to the denial of service condition. http://www.example.com...
Qualcomm Eudora 6.0.1/6.1.1 Attachment LaunchProtect Warning Bypass Weakness (2)
No description provided by source. source: http://www.securityfocus.com/bid/9101/info A problem has been identified in the implementation of LaunchProtect within Eudora. Because of this, it may be possible to trick users into performing dangerous actions. May 21, 2004 - Eudora version 6.1.1 has...
WordPress Eventify - Simple Events plugin <= 1.7.f SQL Injection Vulnerability
No description provided by source. Exploit Title: WordPress Eventify - Simple Events plugin = 1.7.f SQL Injection Vulnerability Date: 2011-09-07 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/eventify.zip Version: 1.7.f tested...
Mozilla Suite/Firefox < 1.0.5 - compareTo Code Execution
No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...
Mereo 1.9.2 - Remote HTTP Server Denial of Service Vulnerability
No description provided by source. !/usr/bin/python Title: Mereo v1.9.2 Remote HTTP Server DoS 0day By: CwG GeNiuS Email: cwggenius at gmail dot com Tested: XPSP3 Download: http://www.ohloh.net/p/mereo import socket, sys payload =GET /; payload+=X 10000; payload+= HTTP/1.1\r\n\r\n; count = 1; try...
VBulletin 1.0.1 lite/2.x/3.0 /admincp/modlog.php orderby Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/14874/info vBulletin is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues t...
Yogurt Social Network 3.2 rc1 Module for XOOPS scrapbook.php uid Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/30618/info Yogurt Social Network is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code ...
PHP <= 4.4.6 / 5.2.1 array_user_key_compare() ZVAL dtor Local Exploit
No description provided by source. ?php //////////////////////////////////////////////////////////////////////// // // // | || | | | | | | | || || \ // // | |/ || '|/ |/ -| ' \ / -/ |||| /| || / // // ||||,||| ,|||||||,| || |||||| // // // // Proof of concept code from the Hardened-PHP...
VICIDIAL Call Center Suite <= 2.2.1-237 - Multiple Vulnerabilities
No description provided by source. ...:::::VICIDIAL call center suite Blind SQL Injection Vulnerability::::.... Sepahan TelCom IT Group septelcom ------------------------------------------------------- Date: 2012-09-07 Exploit Author: Sepahan TelCom IT Group septelcom Vendor Homepage:...
Linux Kernel 2.6.x SYS_EPoll_Wait Local Integer Overflow Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/12763/info A Local integer overflow vulnerability affects the Linux kernel. This issue is due to a failure of the affected kernel to properly handle user-supplied size values. An attacker may leverage this issue to...
RSS-aggregator 1.0 admin/fonctions/supprimer_tag.php IdTag Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/30016/info RSS-aggregator is prone to multiple SQL-injection and authentication-bypass vulnerabilities. A successful exploit could allow an attacker to compromise the application, access or modify data, exploit...
PHP Ticket <= 0.71 (search.php) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Copyright C undefined1 This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or at your option any...
EZ Publish 2.2.7/3.0 - Multiple Cross Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/7348/info Several cross site scripting vulnerabilities have been reported for eZ Publish. These vulnerabilities are due to insufficient sanitization of user-supplied data submitted to eZ Publish. Exploitation may allow...
OneWorldStore OWAddItem.ASP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13181/info OneWorldStore is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation coul...
Tarantella Enterprise 3 gunzip Race Condition Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3966/info Tarantella Enterprise 3 is vulnerable to a race condition during the installation process. During installation, a root owned binary is created in /tmp the directory specified by the $TMPDIR environment variable...
Dokeos LMS <= 1.8.5 (include) Remote Code Execution Exploit
No description provided by source. !/usr/bin/perl Dokeos LMS = 1.8.5 include Remote Code Execution Exploit Description --------------------------------------------------------------- Dokeos LMS contains one flaw that allows an attacker to include a local file with html extension. The issue is due...
Forum 5 PM.PHP Local File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18967/info Forum 5 is prone to a local file-include vulnerability. The application fails to sanitize user input when executing the script. In particular the script fails to check for the presence of a directory-traversal...
revou twitter clone (xss/sql) Multiple Vulnerabilities
No description provided by source. ReVou Micro Blogging SQL/XSS Injection Vulnerability Author: nuclear site: http://www.revou.com/index.php SQL vuln: http://localhost/path/userupdates.php?user=test21' UNION SELECT 1,2,3,4,@@version,6,7,8/ demo:...
Joomla Component ChronoForms (com_chronocontact)
No description provided by source...
Geomi CMS 1.2 & 3.0 - SQL Injection Vulnerability
No description provided by source. + Exploit Title : Geomi CMS by Tridan IT Sql Injection Vunerability Author : ThunDEr HeaD Contact : [email protected] Date : 11-01-2011 HomePage : www.indishell.in Version : 1.2 , 3.0 Tested on : PBL Technology Vulnerability Style : PHPCMS Sql Injection...
SeaMonkey <= 1.1.14 (marquee) Denial of Service Exploit
No description provided by source. !/usr/bin/perl SeaMonkey = 1.1.14 marquee Denial of Service Exploit by athos - stakerathotmaildotit tested on ubuntu 8.10 / slackware 12.2 thanks to SirDark because he has tested on slackware my $data = undef; my $file = shift or exploit; sub exploit $data .=...
D.R. Software Audio Converter 8.1 - DEP Bypass Exploit
No description provided by source...
Safari 4.0.4 + Firefox 3.5.7 + SeaMonkey 2.0.1 - Remote Denial of Service
No description provided by source. !-- Safari 4.0.4 Remote Denial of Service With Possible Memory Corruption With OOM Opera 10.10 Firefox 3.5.7 Safari 4.0.4 SeaMonkey 2.0.1 Author : 599eme Man Contact : [email protected] -- body onload=javascript:DoS;/body script function DoS var buffer = 'A'; for i...
Mozilla Firefox 3.5.x and SeaMonkey 2.0.1 Remote Denial Of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/38132/info Mozilla Firefox and SeaMonkey are prone to a remote denial-of-service vulnerability. Successful exploits may allow an attacker to crash the affected browser, resulting in a denial-of-service condition. Given th...
Jamroom <= 3.3.8 Cookie Authentication Bypass Vulnerability and Multiple Unspecified Security Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/30406/info Jamroom is prone to fourteen security vulnerabilities, including an authentication-bypass vulnerability that occurs because the application fails to verify user-supplied data. Very few technical details are...
PluggedOut CMS 0.4.8 admin.php contenttypeid Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/14426/info PluggedOut CMS is prone to multiple cross-site scripting and SQL injection vulnerabilities. Exploitation could allow for theft of cookie-based authentication credentials or unauthorized access to database data...
slimserve httpd 1.0/1.1 - Directory Traversal vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14132/info SlimServe HTTP server is prone to directory traversal attacks due to improper sanitization of user input. This type of attack allows a malicious user to read files that exist outside of the Web server root...
Z-Vote 1.1 Wordpress Plugin SQL Injection Vulnerability
No description provided by source. Source: http://packetstormsecurity.org/files/view/98671/zvote-sql.txt Vulnerability ID: HTB22839 Reference: http://www.htbridge.ch/advisory/sqlinjectioninzvotewordpressplugin.html Product: Z-Vote wordpress plugin Vendor: 140hours...
DirectAdmin 1.34.0 - CSRF Create Administrator Vulnerability
No description provided by source. Vendor: http://www.directadmin.com/ Code : Create Administrator : html titleDirectAdmin v1.34.0 XSRF Create Administrator Vulnerability/title !--!Set You'r victim By SarBoT511 !-- form name=reseller action=http://site.com:2222/CMDACCOUNTADMIN method=post input...
BPTutors Tutoring site script - [ CSRF ] Create Administrator Account
No description provided by source. Title: BPTutors Tutoring site script - CSRF Create Administrator Account Date: 26/3/2010 Author: bi0 Software: http://bpowerhouse.info/tutoring-site-script.htm Version: 1.0 Code : /\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ \ \ // // // 01000010 01101001...
Integard Pro 2.2.0.9026 - (Win7 ROP-Code Metasploit Module)
No description provided by source. Exploit Title: Integard Pro 2.2.0.9026 Win7 ROP-Code Metasploit Module Date: 2010-09-15 Author: Node Software Link: http://www.exploit-db.com/application/14941 Version: Race River Integard Pro 2.2.0.9026, integard32.dllv.2.0.0.306 Tested on: Windows 7 x64 Eng CV...
Cisco WLC 4402 - Basic Auth Remote Denial of Service (meta)
No description provided by source. require 'msf/core' class Metasploit3 Msf::Auxiliary include Msf::Exploit::Remote::Tcp include Msf::Auxiliary::Dos def initializeinfo = superupdateinfoinfo, 'Name' = 'Cisco WLC 4200 Basic Auth Denial of Service', 'Description' = %q This module triggers a Denial o...
Easy Icon Maker 5.01 - Crash PoC
No description provided by source. Exploit Title: Easy Icon Maker Version 5.01 Crash Poc vulnerability Date: 28-04-2013 Exploit Author: Asesino04 Vendor Homepage: link Software Link: http://www.icon-maker.com/iconmaker.exe Version: 5.01 & old versions Tested on: Windows 7 Introduction :...
Adobe ColdFusion Server <= 8.0.1 wizards/common/_logintowizard.cfm Query String XSS
No description provided by source. source: http://www.securityfocus.com/bid/36046/info Adobe ColdFusion is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script...
IBM BladeCenter Advanced Management Module 1.42 private/file_management.ssi PATH Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/34447/info IBM BladeCenter Advanced Management Module is prone to the following remote vulnerabilities: - An HTML-injection vulnerability - A cross-site scripting vulnerability - An information-disclosure vulnerability -...
Azaronline Design SQL Injection Vulnerability
No description provided by source. Name: Azaronline Design SQL Injection Vulnerability Vendor: http://azaronline.com Date: 2010-11-02 Author: XroGuE Thanks to: Inj3ct0r.com,Exploit-DB.com,SecurityReason.com,Hack0wn.com ! Contact: Xroguep3rsi4nhack3ratHotmailDotcom Home: Inj3ct0r.com + Dork:...
BSD-Games 2.x Monop Player Name Local Buffer Overrun Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/8501/info Monop included in bsd-games is prone to a locally exploitable buffer overrun vulnerability. This is due to insufficient bounds checking of player names. Monop is typically installed setgid games, so it is possib...
phpDEV5 - Remote Default Insecure Users Vuln
No description provided by source. ------------------------------------------------------------------------ PHPDev5 Remote Insecure Default Users & Passwords vuln. By : Ali7 e-mail : [email protected] date : 09-03-2k5 greetz : all my friends ; AlkaeN ; s4a.cc boyz ; Target : PHPDev 5 URL :...
Cisco IOS 11.x/12.0 ICMP Redirect Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4786/info IOS is the Internet Operating System, used on Cisco routers. It is distributed and maintained by Cisco. It has been reported that it is possible to cause a denial of service in some Cisco routers by sending a...
chicomas <= 2.0.4 (DB Backup/DD/XSS) Multiple Vulnerabilities
No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: chicomas =2.0.4 Multiple Vulnerabilities Vendor: http://www.chicomas.com/ Demo: http://demo.opensourcecms.com/chicomas Bug: Database Information Disclosure, Authorization Weakness, XSS Vulnerable Version:...
iyzi Forum <= 1.0 Beta 3 (uye_ayrinti.asp) Remote SQL Injection
No description provided by source. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + iyzi Forum s1 b2 tr SQL Injection Vulnerability + + Author : Fix TR + + Site : www.hack.gen.tr + + Contact : fixtratbsdmail.com + ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Download &...