56796 matches found
JAWS 0.2/0.3 Cookie Manipulation Authentication Bypass
No description provided by source. source: http://www.securityfocus.com/bid/10670/info JAWS is reported prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data. The following specific issues can affect the application: JAWS is prone to a cross-sit...
PCMAN FTP 2.07 - Buffer Overflow Exploit
No description provided by source. Exploit Title: PCMAN FTP 2.07 Long Command Buffer Overflow unauthenticated Date: Feb 19, 2014 Exploit Author: Sumit Version: 2.07 Tested on: Windows XP Professional SP3 Description: Buffer overflow is triggered upon sending long string to PCMAN FTP 2.07 in place...
Opera 7.0/7.10 JavaScript Console Single Quote Attribute Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7449/info A vulnerability has been reported for Opera 7 browsers for Microsoft Windows operating systems. The vulnerability exists in the Opera JavaScript console. Attackers may exploit the vulnerability to execute script...
Gallery <= 2.0.3 stepOrder[] Remote Commands Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo Gallery =2.0.3 \stepOrder\ remote cmmnds xctn \r\n; echo by rgod rgodATautisticiDOTorg \r\n; echo site: http://retrogod.altervista.org \r\n\r\n; echo - works with registerglobals = On and magicquotesgpc = Off \r\n; if...
PHP Photo Album <= 0.4.1.16 - Multiple Disclosure Vulnerabilities
No description provided by source. ---------------------------------------------------------------- PHP Photo Album = 0.4.1.16 Multiple Disclosure Vulnerabilities ---------------------------------------------------------------- Exploit Title: PHP Photo Album = 0.4.1.16 Multiple Disclosure...
NetArtMedia Real Estate Portal 1.2 - SQL Injection Vulnerability
No description provided by source. !R4Q!4N H4CK3R NetArtMedia Real Estate Portal v2.0 Sql Injection Vulnerability Website : http://www.netartmedia.net Founded By : Encrypt3d.M!nd Home Page : http://encrypt3d.blogspot.com Remote Sql Injections : Affected File : index.php PoC:...
newsPHP 2006 PRO index.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/18726/info NewsPHP 2006 PRO is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properl...
Oracle AutoVue 20.0.1 AutoVueX ActiveX Control SaveViewStateToFile Vulnerability
No description provided by source. Oracle AutoVue 20.0.1 AutoVueX ActiveX Control SaveViewStateToFile Remote File Creation / Overwrite Vulnerability tested against: Internet Explorer 8 Microsoft Windows Server 2003 r2 sp2 download url of a test version:...
Linux kernel 2.0.33 IP Fragment Overlap Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/376/info Linux kernel 2.0.33 is vulnerable to a denial of service attack related to overlapping IP fragments. The bug is not in the handling of them itself, but the action taken when an oversized packet is recieved. A...
Foxit Reader <= 3.2.1.0401 Denial of Service Exploit
No description provided by source. Title: Foxit Reader = 3.2.1.0401 Denial Of Service Exploit Date: 05/04/10 Author: juza - iamjuzaatgmaildotcom Software Link: http://www.foxitsoftware.com/pdf/reader/ Version: All versions = 3.2.1.0401 have the same issue Tested on: Windows XP SP3 x32 Description...
Cars & Vehicle - 'page.php' SQL Injection Vulnerability
exp www.example.com/Script/page.php?lnkid=-1//UNION//SELECT//1,1,1,1,concatwsuser,version,database,1/ 文件page.php没有对linkid的值进行过滤，直接带入了查询，导致sql注入漏洞产生 source: http://www.securityfocus.com/bid/31214/info The Cars & Vehicle script is prone to an SQL-injection vulnerability because it fails to...
JPortal 2.2.1/2.3 Forum Forum.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15925/info JPortal Forum is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation coul...
WeBid <= 1.0.2 (converter.php) Remote Code Execution Exploit
No description provided by source. ?php / ------------------------------------------------------------ WeBid = 1.0.2 converter.php Remote Code Execution Exploit ------------------------------------------------------------ author...: EgiX mail.....: n0b0d13satgmaildotcom link.....:...
Joomla Component com_gds SQL Injection Vulnerability
No description provided by source. Title : Joomla Component comgds SQL Injection Vulnerability Author: DevilZ TM Data : 2010-03-23 InformatioN Title : Joomla Component comgds SQL Injection Vulnerability Author : DevilZ TM By D3v1l Homepage : http://www.DEVILZTM.com Email : [email protected]...
JcomBand toolbar on IE ActiveX Buffer Overflow Exploit
No description provided by source. html head titleJcomBand Exploit heap spray /title object classid='clsid:952E3F80-0C34-48CD-829B-A45913B29670' id='test'/object script language='javascript' // Author: germayax & D3V!L FUCKER // Version: 2.5 // special thanx: for my best friend his0k4. // Geetz 2...
Mambo Component Awesom <= 0.3.2 (listid) SQL Injection Vulnerability
No description provided by source. joomla SQL Injectioncomawesom AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DORKS 1 : allinurl :comawesom ı changed ATATÜRK.com's db. soo dont look ATATÜRK.com db si değiştirilip kullanıcısına bildirilmiştir. EXPLOIT :...
viart shop 4.0.5 - CSRF Vulnerability
No description provided by source. +-------------------------------------------------------------------------+ Software : viart shop 4.0.5 Author : Or4nG.M4N Date : n/a Dork : inurl:powered by viart shop 4.0.5 Software Link : http://www.viart.com/...
Oracle Application Server 4.0.8 .2 ndwfn4.so buffer overflow
No description provided by source. source: http://www.securityfocus.com/bid/2569/info The shared library 'ndwfn4.so' that ships with Oracle Application Server is vulnerable to a buffer overflow. The library is used to handle web requests passed to it by the iPlanet web server. If the library is...
SmarterMail 8.0 - Multiple XSS Vulnerabilities
No description provided by source. Author: Hoyt LLC Research Target: SmarterMail Version 8.0.4086.25048 Tools: Burp Suite Pro 1.3.09, FuzzDB Description: XSS, Cross Site Scripting in SmarterMail 8.0.4086.25048, CWE-79, CAPEC-86 Keywords: Stored XSS, Reflected XSS, Cross Site Scripting, SmarterMai...
Cscope 13.0/15.x Insecure Temporary File Creation Vulnerabilities (1)
No description provided by source. source: http://www.securityfocus.com/bid/11697/info Cscope creates temporary files in an insecure way. A design error causes the application to fail to verify the presence of a file before writing to it. During execution, the utility reportedly creates temporary...
AoA Audio Extractor 2.x - ActiveX ROP exploit
No description provided by source. html p centerAoA Audio Extractor v2.x ActiveX ROP exploitbr / Hadji Samir - s-dz|AT|hotmail.fr & mrme - mrme|AT|net-ninja.netbr //center /p !-- some notes about the exploit: - Tested working on a fully patched windows XP sp3 IE8 VM Last update was done on...
Linux NTP query client 4.2.6p1 - Heap Overflow Vulnerability
No description provided by source. Linux NTP query client v4.2.6p1 Heap Overflow vulnerability vendor: http://www.ntp.org/ software: http://www.eecis.udel.edu/ntp/ntpspool/ntp4/ntp-4.2/ntp-4.2.6p1.tar.gz impact: minor/informational There is a local heap overflow in the ntpq utility client that...
DRZES HMS 3.2 - Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/15644/info DRZES HMS is prone to multiple SQL injection vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input before it is used in SQL queries. Successful exploitation could result ...
Seo Panel 2.2.0 - SQL Injection Vulnerabilities
No description provided by source. Vulnerability ID: HTB22824 Reference: http://www.htbridge.ch/advisory/sqlinjectioninseopanel1.html Product: Seo Panel Vendor: http://www.seopanel.in/ http://www.seopanel.in/ Vulnerable Version: 2.2.0 Vendor Notification: 01 February 2011 Vulnerability Type: SQL...
@lexPHPTeam @lex Guestbook 3.12 Remote PHP File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11260/info A vulnerability is reported to exist in the @lexPHPTeam @lex Guestbook software that may allow an attacker to include malicious PHP files containing arbitrary code to be executed on a vulnerable system. The iss...
Simple Machines Forum 1.0 Size Tag HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10281/info It has been reported that Simple Machines Forum SMF may be prone to an HTML injection vulnerability that may allow an attacker to execute arbitrary HTML or script code in a user's browser. The issue exists due ...
Microsoft SQL Server 7.0 - Remote Denial of Service Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/11265/info Reportedly Microsoft SQL Server is affected by a remote denial of service vulnerability. This issue is due to a failure of the application to handle irregular network communications. An attacker may leverage th...
Elm < 2.5.8 (Expires Header) Remote Buffer Overflow Exploit
No description provided by source. / Exploit code for the bug posted by Ulf Harnhammar metaurtelia.com http://archives.neohapsis.com/archives/fulldisclosure/2005-08/0688.html Probably you will need to change SYSLOC and STRLOC to work on your box / include stdio.h include stdlib.h include string.h...
Invision Power Board 2.0.3/2.1 Act Parameter Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13483/info Invision Power Board is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...
XOOPS 2.0.14 (article.php) SQL Injection Vulnerability
No description provided by source. / \ / | | | \ / | | | | | | | | | | || | | | | | | | | '| | | | | | | | | | |/ \ / |/ / / | | | | || | || | || || | / || | | | / | | || / / |/ || ,|\|,| +-+-+-+-+ |C|r|e|w| +-+-+-+-+ XOOPS 2.0.14 article.php SQL Injection Vulnerability Discovered By 0iZy5...
screen 4.0.3 - Local Authentication Bypass Vulnerability (OpenBSD)
No description provided by source. / / / / / / / / / / / / / // / / / / / / / / / // / / / // // / / / / / // ///// // // // Helith - 0815 -------------------------------------------------------------------------------- Author : Rembrandt Date : 2007-06-03 Affected Software: screen = 4.0.3 Affect...
phpCheckZ 1.1.0 - Blind SQL Injection Vulnerability
No description provided by source. phpCheckZ 1.1.0 Blind SQL Injection Vulnerability Name phpCheckZ Vendor http://www.phpcheckz.com Versions Affected 1.1.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-10-19 X. IND...
dotproject 2.1.5 - Multiple Vulnerabilities
No description provided by source. exploit title: sql injection in dotproject 2.1.5 date 21.o2.2o11 author: lemlajt software : dotproject version: 2.1.5 tested on: linux cve : http://dotproject.net/ PoC : http://localhost/www/cmsadmins/dotpro/dotproject/fileviewer.php?fileid=' in src: 2...
Realtor WebSite System E-Commerce idfestival SQL Injection Vulnerability
No description provided by source. ------------------------------------------------------------------------------------------- Realtor WebSite System E-Commerce all files.php SQL Injection Vulnerability -------------------------------------------------------------------------------------------...
PHP < 4.5.0 - unserialize Overflow
No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...
Adrenalin Player 2.2.5.3 (.asx) - SEH Buffer Overflow
No description provided by source. ====================================================================================== !/usr/bin/python Title: Adrenalin Player .asx - SEH Buffer Overflow software: Adrenalin Player version : 2.2.5.3 Platform: Windows XP sp3 Date: June 18th, 2013 Author: onying...
PHPBB2 Plus 1.5 Portal.PHP Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/13151/info phpBB2 Plus is affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to...
PHPNuke 6.0 Modules.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5799/info A SQL injection vulnerability has been discovered in PHPNuke. Due to insufficient sanitization of variables used in SQL queries, it is possible to modify the logic of SQL queries. This issue could result in a...
Limbo CMS <= 1.0.4.2 (ItemID) Remote Code Execution Exploit (meta)
No description provided by source. Title: Limbo CMS version 1.x suffers from a remote code execution vulnerability. Name: limbocms1x.pm License: Artistic/BSD/GPL Info: Trying to get the command execution exploits out of the way on milw0rm.com. M's are always good. - This is an exploit module for...
phpCOIN 1.2.1 (mod.php) LFI Vulnerability
No description provided by source...
Azaronline Design SQL Injection Vulnerability
No description provided by source. Name: Azaronline Design SQL Injection Vulnerability Vendor: http://azaronline.com Date: 2010-11-02 Author: XroGuE Thanks to: Inj3ct0r.com,Exploit-DB.com,SecurityReason.com,Hack0wn.com ! Contact: Xroguep3rsi4nhack3ratHotmailDotcom Home: Inj3ct0r.com + Dork:...
PHP <= 4.4.4 unserialize() ZVAL Reference Counter Overflow Exploit PoC
No description provided by source. ?php //////////////////////////////////////////////////////////////////////// // // // | || | | | | | | | || || \ // // | |/ || '|/ |/ -| ' \ / -/ |||| /| || / // // ||||,||| ,|||||||,| || |||||| // // // // Proof of concept code from the Hardened-PHP...
Microsoft Internet Explorer 5.0.1 OuterHTML Redirection Handling Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18682/info Microsoft Internet Explorer is prone to an information-disclosure vulnerability because it fails to properly enforce cross-domain policies. This issue may allow attackers to access arbitrary websites in the...
mailtraq 2.17.3.3150 - Stored XSS
No description provided by source. !/usr/bin/python ''' Author: loneferret of Offensive Security Product: MailTraq Version: 2.17.3.3150Mar 5th, 2012 Vendor Site: http://www.mailtraq.com/ Software Download: http://www.mailtraq.com/30day Timeline: 29 May 2012: Vulnerability reported to CERT 30 May...
MyBulletinBoard 1.x UserCP.PHP Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19195/info MyBulletinBoard is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the...
smartermail free 9.2 - Stored XSS
No description provided by source. !/usr/bin/python ''' Author: loneferret of Offensive Security Product: SmarterMail Version: Free 9.2 Vendor Site: http://www.smartertools.com Software Download: http://smartertools.com/smartermail/mail-server-software.aspx Timeline: 29 May 2012: Vulnerability...
mailenable enterprise 6.5 - Stored XSS
No description provided by source. !/usr/bin/python ''' Author: loneferret of Offensive Security Product: MailEnable Enterprise Version: 6.5 Vendor Site: http://www.mailenable.com Software Download: http://www.mailenable.com/download.asp Timeline: 29 May 2012: Vulnerability reported to CERT 30 Ma...
winwebmail server 3.8.1.6 - Stored XSS
No description provided by source. !/usr/bin/python ''' Author: loneferret of Offensive Security Product: WinWebMail Server Version: 3.8.1.6 Vendor Site: http://www.winwebmail.net Software Download: http://www.winwebmail.net/email-server-download.html Timeline: 29 May 2012: Vulnerability reported...
AOL Desktop 9.6 RTX Buffer Overflow
No description provided by source. $Id: aoldesktoplinktag.rb 12284 2011-04-08 23:09:31Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms...
FreeBSD 2.x,HP-UX 9/10/11,kernel 2.0.3,Windows NT 4.0/Server 2003,NetBSD 1 loopback (land.c) DoS (3)
No description provided by source. source: http://www.securityfocus.com/bid/2666/info A number of TCP/IP stacks are vulnerable to a loopback condition initiated by sending a TCP SYN packet with the source address and port spoofed to equal the destination source and port. When a packet of this sor...