56796 matches found
miniBB - Input Validation Hole ('user')
No description provided by source. Example: http://target/minibb/index.php?action=userinfo&user=1%20union%20select%201,2,userpassword%20from%20minibbusers/ milw0rm.com 2004-11-16...
Microsoft Internet Explorer 6.0 DirectAnimation.DAUserData Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18902/info Microsoft Internet Explorer is prone to a denial-of-service vulnerability. This issue is triggered when an attacker convinces a victim user to visit a malicious website that uses the 'DirectAnimation.DAUserData...
Wordpress Plugin Page Flip Image Gallery <= 0.2.2 - Remote FD Vuln
No description provided by source. | | | \ \ \ / / / \ / | / | / | | | | | | \ V / / \ | | | | | | | | | | | / \ | || | | | | | || || \ || // \ | | | Wordpress Plugin Page Flip Image Gallery = 0.2.2 Remote File Disclosure Vulnerability D :...
Joomla Component com_solution SQL Injection Vulnerability
No description provided by source. Title : Joomla Component comsolution SQL Injection Vulnerability Author: DevilZ TM Data : 2010-03-27 InformatioN Title : Joomla Component comsolution SQL Injection Vulnerability Author : DevilZ TM By D3v1l Homepage : http://www.DEVILZTM.com Email :...
Salim Gasmi GLD 1.0 - 1.4 - Postfix Greylisting Buffer Overflow
No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...
MyHobbySite 1.01 SQL Injection and Authentication Bypass Vulnerability
No description provided by source. Exploit Title: MyHobbySite 1.01 SQL injection, Bypass Authentication Vulnerability Date: 12-09-2010 Author: YuGj VN Email: [email protected] Software Link: http://www.myhobbysite.net/index.php?page=15 Version: v1.01 Bug Code: if isset$REQUEST'username' an...
Fail2ban <= 0.8 Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/25117/info Fail2ban is prone to a remote denial-of-service vulnerability because the application fails to properly ensure the validity of authentication-failure messages. Successfully exploiting this issue allows remote...
Member ID The Fish Index PHP SQL Injection Vulnerability
No description provided by source. , | ,---. , . |---. ,---. ,---. ,---. ,---. ,---. , . , | --- | | | | | |---' | | | |---' | | | | ---' ---| ---' ---' ---' ---' ------ ---' V Member ID The Fish Index PHP SQL Injection Vulnerability --== Author ==-- + Author : v4lc0m87 + Contact :...
Indexu 5.0/5.3 user_detail.php u Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/22084/info Indexu is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the...
VirtuaStore 2.0 Password Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18790/info VirtuaStore is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to compromise the...
Indexu 5.0/5.3 login.php error_msg Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/22084/info Indexu is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the...
dotWidget for articles 2.0 admin/categories.php Multiple Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/18479/info dotWidget for Articles is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issu...
Webeveyn Whomp! Real Estate Manager 2005 Login SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16544/info Whomp! Real Estate Manager is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...
Dolibarr ERP & CRM 3 Post-Auth OS Command Injection
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
FreeBSD 3.3 xmindpath Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/839/info The version of xmindpath shipped with FreeBSD 3.3 can be locally exploited via overrunning a buffer of predefined length. It is possible to gain the effective userid of uucp through this vulnerability. It may be...
Kayako LiveResponse 2.0 index.php Calendar Feature Multiple Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/14425/info Kayako LiveResponse is prone to multiple cross-site scripting, SQL injection, and HTML injection vulnerabilties. These issues are all related to input validation errors. The cross-site scripting and HTML...
CMS phpshop 2.0 - SQL Injection Vulnerability
No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register import re class TestPOCPOCBase: vulID = 'SSV-77845' vul ID version = '1' author = 'hh' vulDate = '2013-01-14' createDate ...
Foreman (Red Hat OpenStack/Satellite) users/create Mass Assignment
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit4...
Sphider <= 1.3 (configset.php) Arbitrary Remote Inclusion Exploit
No description provided by source. !/usr/bin/perl use IO::Socket; print \r\nSphider = 1.3 arbitrary remote inclusion\r\n ; print - works with registerglobals = On & allowurlfopen = On\r\n; print by rgod rgodATautisticiDOTorg\r\n; print site: http://retrogod.altervista.org\r\n; print \r\ndork:...
Sphider 1.3 Search.PHP Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/17997/info Sphider is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have...
PHP-Nuke 1.0/2.5 Administrative Privileges Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1592/info PHP-Nuke is a website creation/maintainence tool written in PHP3. It is possible to elevate priviliges in this system from normal user to administrator due to a flaw in authentication code. The problem occurs...
Quick Paypal Payments 3.0 - Presistant XSS (0day)
No description provided by source. TITLE ===== Quick Paypal Payments - Persistent Cross Site Scripting Vulnerability AUTHOR ====== Zy0d0x BLOG ==== https://zy0d0x.com DATE ==== 10/08/2013 VENDOR ====== Quick Plugins - http://quick-plugins.com/ AFFECTED PRODUCT ================ Quick Paypal Paymen...
Apple QuickTime <= 6.5.2.10 (.qtif) Image Parsing Vulnerability
No description provided by source. Added qtif on milw0rm's sploits archive/ /str0ke Application: QuickTime http://www.apple.com/quicktime/ AFFECTED VERSION: Versions verified to be vulnerable: QuickTime.qts 6.5.2.10 and prior versions are affected. The bug: The problem specifically exists when...
Peer2Mail <= 1.4 Encrypted Password Dumper Exploit
No description provided by source...
Joomla Component RSfiles <= 1.0.2 (path) File Download Vulnerability
No description provided by source. Title : Joomla Component RSfiles = 1.0.2 path Remote File Download Vulnerability Author : ajann Contact : : S.Page : http://www.rsjoomla.com $$ : 10 $ Dork : inurl:/index.php?option=comrsfiles DorkEx :...
PHP-Nuke Yellow_Pages Module - 'cid' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28109/info The YellowPages module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...
i-doIT 0.9.9-4 LFI Vulnerability
No description provided by source. ------------------------------------------------------------------------ Software................i-doIT 0.9.9-4 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.i-doit.org/ Discovery...
Papoo 1.0.3 Plugin.PHP Authentication Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/24634/info Papoo is prone to an authentication-bypass vulnerability because the application fails to check user privileges when accessing the administration pages. An attacker can exploit this issue to gain access to...
Apple Safari & Quicktime Denial of Service Vulnerability
No description provided by source. Apple Safari & Quicktime Denial of Service Shameless plug : ------------------------------------------------------------------------ You are invited to join the 2009 edition of HACK.LU, a small but concentrated luxemburgish security conference. More information ...
FreeTrim MP3 2.2.3 - Denial of Service Vulnerability
No description provided by source. Exploit Title: FreeTrim MP3 Local Crash PoC Software Link: http://www.freetrimmp3.com/downloads/FreeTrimMP3.exe Tested on: Win XP SP3 Date: 02-12-2010 Author: h1ch4m Email: [email protected] sahra dyalna o jazayrya khotna my $file= 1.cda; my $junk = \x41 x 100;...
redaxscript 0.3.2 - Multiple Vulnerabilities
No description provided by source. ================================== Vulnerability ID: HTB22805 Reference: http://www.htbridge.ch/advisory/pathdisclosureinredaxscript.html Product: Redaxscript Vendor: http://redaxscript.com/ http://redaxscript.com/ Vulnerable Version: 0.3.2 Vendor Notification: ...
Destiny Media Player 1.61 - (lst File) Local Buffer Overflow PoC
No description provided by source. Destiny Media Player lst file Buffer overflow PoC By:Encrypt3d.M!nd I'am Iraqian...Not Arabian Well,i've tried to write an exploit for this shit but i couldn't the address after the NEW eip will over written,if anyone knows how to exploit this,be my guest chars ...
Graffiti Forums 1.0 Topics.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18928/info Graffiti Forums is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploit could...
RadScripts RadBids Gold 2.0 - faq.php farea Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/13080/info RadBids Gold is reported prone to multiple vulnerabilities. These issues include arbitrary file disclosure, cross-site scripting, and SQL injection. The following specific vulnerabilities were identified: A...
Magic Photo Storage Website admin/add_templates.php _config[site_path] Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/21965/info Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the...
OpenDocMan 1.2.5 add.php last_message Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/36777/info OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an...
Open-FTPD 1.2 - Arbitrary File Upload
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
timobraun Dynamic Galerie 1.0 galerie.php pfad Variable Arbitrary Directory Listing
No description provided by source. source: http://www.securityfocus.com/bid/17896/info Dynamic Galerie is prone to a directory-traversal vulnerability and a cross-site scripting vulnerability. These issues are due to a failure in the application to properly sanitize user-supplied input. An attack...
Ultimate PHP Board 2.2.7 Broken Authentication and Session Management
No description provided by source. Exploit Title : Ultimate PHP Board 2.2.7 Broken Authentication and Session Management Date : 2011.05.17 Author : i2sec - Gi bum Hong Software Link : http://sourceforge.net/projects/textmb/files/UPB/UPB%202.2.7/ Version : 2.2.7 Tested on : apache 2.2.14 | mysql...
Knusperleicht Shoutbox 2.6 Shout.php HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/21637/info Knusperleicht Shoutbox is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue may allow an attacker to execute HTML and script code...
Microsoft Windows 7 wab.exe DLL Hijacking Exploit (wab32res.dll)
No description provided by source. / Exploit Title: Microsoft Windows 7 wab.exe DLL Hijacking Exploit wab32res.dll Date: 24/08/2010 Author: TheLeader Email: gsog2009 a7 hotmail d0t com Version: 6.1.7600 and prior Tested on: Windows 7 x86 6.1.7600 There's a chance this one works with vista...
Terminal Server Client .rdp Denial of Service
No description provided by source. !/usr/bin/perl Exploit Title: Terminal Server Client .rdp Dos Date: 2011-02-01 Author: D3V!L FUCKER Software Link: sudo apt-get install tsclient ^^ Version: All Version Tested on: ubuntu 10.10 press to open then chois the T-T34M.rdp file then connect ^^ C0d3d By...
Zyke CMS 1.0 - Remote File Upload Vulnerability
No description provided by source...
uhttp Server Path Traversal Vulnerability
No description provided by source. uhttp Server Path Traversal Vulnerability Name uhttp Server Vendor http://uhttps.sourceforge.net Versions Affected 0.1.0-alpha Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-03-10 ...
Asterisk 1.4.x - RTP Codec Payload Handling Multiple Buffer Overflow Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/28308/info Asterisk is prone to multiple buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied data before copying it to insufficiently sized buffers. Exploiting these issue...
Cambio 0.5a CSRF Vulnerabiliity
No description provided by source. Vulnerability ID: HTB22768 Reference: http://www.htbridge.ch/advisory/xsrfcsrfincambio.html Product: Cambio Vendor: Joram van den Boezem http://www.cambiocms.org/ Vulnerable Version: 0.5a nightly r37 and probably prior versions Vendor Notification: 28 December...
Hesk Help Desk 2.1 - CSRF
No description provided by source...
Windows Escalate Service Permissions Local Privilege Escalation
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require...
Copy to WebDAV 1.1 iOS - Multiple Vulnerabilities
No description provided by source...
GA's Forum Light 0 Archive.ASP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16563/info GA's Forum Light is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation...