Lucene search
+L
SeebugRecent

56796 matches found

seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•23 views

K&S Shopsysteme Arbitrary Remote File Upload Vulnerability

No description provided by source. Script Name: Shopsysteme new version oscommerce Download: http://www.shopsystem-forum.de/productinfo.php?cPath=22&productsid=43 299 euro : Author: mNt File Upload Bug Google Dork: intext:Powered by K&S Media Concept - Shopsysteme Powered by K&S Media Concept -...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•13 views

Libnemesi 0.6.4-rc1 Multiple Remote Buffer Overflow Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/27048/info Libnemesi is prone to multiple buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied input. Attackers can exploit these issues to execute arbitrary code in the...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•17 views

CarLine Forum Russian Board 4.2 edit_msg.php name_ig_array1[1] Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/14045/info Forum Russian Board is prone to multiple input validation vulnerabilities. These issues can allow attackers to carry out SQL Injection, cross-site scripting, and HTML injection attacks. Forum Russian Board 4.2 ...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•20 views

Ben Chivers Easy Homepage Creator 1.0 File Modification Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5340/info The vulnerability has been reported for Easy Homepage Creator. It is possible for an atttacker to modify any user's home page. The vulnerability is the result of Homepage Creator failing to properly authenticate...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•15 views

A.I-Pifou 1.8 Choix_langue.PHP Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/20120/info A.I-Pifou is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•10 views

Pheap 1.x/2.0 Edit.PHP Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/22670/info Pheap is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve and edit the contents of arbitrary files...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•11 views

Axigen <= 2.0.0b1 Remote Denial of Service Exploit

No description provided by source. / doaxigen.c axigen 1.2.6 - 2.0.0b1 DoS x86-lnx by mu-b - Sat Oct 22 2006 - Tested on: AXIGEN 1.2.6 lnx AXIGEN 2.0.0b1 lnx 0x08088054: parsing error results in DoS little-endian, confirmed DoS + off-by-one heap smash big-endian Note: if you receive a SIGPIPE the...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•28 views

Inout Webmail Script Persistent XSS Vulnerability

No description provided by source. Name :inoutwebmail Persistent Xss Vulnerability Date : Dec,20 2010 Vendor Url :http://www.inoutscripts.com/ Author : Sid3^effects aKa HaRi shellc99atyahoo.com Big hugs : Th3 RDX,Hananbutt, special thanks to : r0073r inj3ct0r.com,L0rd...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•23 views

Snes9x 1.3 - Local Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3437/info Snes9x is a free Super Nintendo emulator that runs on a number of platforms. Snes9x is prone to a buffer overflow. This is due to improper bounds checking of rom names. In this case, 4089 characters are required...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•24 views

NOCC 1.0 error.php html_error_occurred Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/16793/info NOCC Webmail is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to inject...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•19 views

52 byte Linux MIPS execve

No description provided by source. include stdio.h / entropy at phiral.net 52 byte linux mips shellcode oh werd [email protected] /encode/1/2 cat s.s .section .text .globl start .set noreorder start: li $a2, 0x666 p: bltzal $a2, p slti $a2, $zero, -1 addu $sp, $sp, -32 addu $a0, $ra, 4097 addu...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•11 views

Joomla Component com_jejob 1.0 (catid) SQL Injection Vulnerability

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•24 views

Prometeo 1.0.65 - SQL Injection Vulnerability

No description provided by source. // / ////// //////// /// / / / / // / / / / /// //////// / / // / / / // / // /// //////// // ================================= Prometeo vers. 1.0.65 -SQLi Vulnerability- ================================= -Vulnerability ID: LD3-Product: Prometeo-Vendor: Prometeo...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•12 views

Socialware 2.2 - Upload Vulnerability and XSS

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•22 views

Nuked-klaN 1.7 Index.PHP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/16424/info Nuked-klaN is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•14 views

cPanel 10.x editit.html file Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/19624/info cPanel is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input. An attacker may leverage these issues to have arbitrary script cod...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•20 views

WordPress Front End Upload 0.5.4.4 - Arbitrary PHP File Upload

No description provided by source. Exploit Title: WordPress Front End Upload v0.5.4.4 Arbitrary PHP File Upload Vulnerability Date: 7/23/12 Exploit Author: Chris Kellum Vendor Homepage: http://mondaybynoon.com/ Software Link: http://downloads.wordpress.org/plugin/front-end-upload.0.5.4.4.zip...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•27 views

com_hashcash Mambo Component <= 1.2.1 Include Vulnerability

No description provided by source. Hashcash Component Author : Ahmad Maulana a.k.a Matdhule Date : July 12th 2006 Location : Indonesia, Jakarta Web : http://advisories.echo.or.id/adv/adv38-matdhule-2006.txt Critical Lvl : Highly critical Impact : System access Where : From Remote...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•18 views

Jupiter CMS 1.1.5 Index.PHP Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/19721/info Jupiter CMS is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote files containing malicious P...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•17 views

JSPWiki 2.1 Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11746/info It is reported that JSPWiki is susceptible to a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input prior to including it in...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•18 views

sysax <= 5.57 - Directory Traversal

No description provided by source. !/usr/bin/python Title: Sysax Multi Server = 5.57 Directory Traversal Tool Post Auth Author: Craig Freyman @cd1zz Tested on: XP SP3 32bit and Server 2003 SP2 32bit Date Discovered: March 27, 2012 Vendor Contacted: March 29, 2012 Vendor Response: April 3, 2012...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•26 views

Wordpress Easy Webinar Plugin Blind SQL Injection Vulnerability

No description provided by source. Exploit Title: Wordpress Easy Webinar Plugin Blind SQL Injection Vulnerability Vendor Homepage: www.easywebinarplugin.com Date: 10/26/2012 Author: Robert Cooper robert.cooper at areyousecure.net Tested on: Linux/Windows 7 Vulnerable Parameters: wid= Google Dork:...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•26 views

MidHosting FTP Daemon 1.0.1 Shared Memory Local Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7956/info It has been reported that MidHosting FTP Daemon does not properly implement shared memory when the m flag -m is enabled. Because of this, an attacker could corrupt process memory, causing the service to crash...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•24 views

Canna Canna 3.5 b2 Remote Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1445/info A vulnerability exists in the 'canna' package, as distributed with a number of free operating systems, and available for other systems. Version 3.5b2 is vulnerable. It is assumed versions prior to this are also...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•39 views

Cheese Tracker <= 0.9.9 - Local Buffer Overflow Exploit PoC

No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include stdint.h include string.h define VER 0.1 define CPOS 243 // reader.getfilepos-pcpos define JUNKSZ 500 + CPOS // Uint8 junkbuster500 define OVERFLOW 740 // overflow define BOFSZNUM JUNKSZ + OVERFLOW...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•251 views

Easy Message Board Remote Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13555/info Easy Message Board is prone to a remote command execution vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•14 views

Citadel/UX <= 6.27 Remote Root Format String Exploit

No description provided by source. / citadelfsexp.c Citadel/UX v6.27 remote format string exploit Use: ./citadelfsexp -h host options options: -h arg host or IP -t arg type of target system -l targets list -g arg syslog GOT address -r arg RET address coki@nosystem:/audit$ ./citadelfsexp -h...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•17 views

vtiger CRM 4.2 Leads Module record Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/15562/info vtiger CRM is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. vTiger CRM is prone to multiple SQL injection, HT...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•19 views

spiceworks 5.3.75941 - Stored XSS and post-auth SQL Injection

No description provided by source. Product: SpiceWorks Version: 5.3.75941 Vendor Site: http://www.spiceworks.com/community/ Software Download Link: http://www.spiceworks.com/download/?utmsource=comm-secondary-link&utmmedium=website&utmcampaign=homepage Installer Filename: Spiceworks.exe MD5:...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•16 views

Mac OS X <= 10.3.8 (CF_CHARSET_PATH) Local Root Buffer Overflow

No description provided by source. / MacOS XCFCHARSETPATH: local root exploit. by: [email protected] fakehalo/realhalo found by: iDefense anon finder saw the advisory on bugtraq and figured i'd slap this together, so simple i had to. exploits via the /usr/bin/su binary. you must press ENTER at the...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•31 views

phlyLabs phlyMail Lite 4.03.04 Path Disclosure and Stored XSS Vulnerabilities

No description provided by source. ?!-- phlyLabs phlyMail Lite 4.03.04 Path Disclosure and Stored XSS Vulnerabilities Vendor: phlyLabs Product web page: http://www.phlymail.com Affected version: Lite 4.03.04 Summary: phlyMail offers you an interface in the browser to have access to your emails,...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•33 views

Novell NetWare 5.1/6.0 HTTP Post Arbitrary Perl Code Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5520/info A vulnerability has been reported in some versions of Novell NetWare. This issue lies in the handling of some HTTP requests when Perl is used as a handler by a web server. Reportedly, it is possible for an...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•16 views

Nullsoft Winamp 5.0 - Malformed ID3v2 Tag Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14276/info Winamp is susceptible to a buffer overflow vulnerability in its ID3v2 functionality. This issue is due to a failure of the application to properly bounds check input data prior to copying it into a fixed size...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•14 views

Simple PHP Scripts gallery 0.x - index.php Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/28056/info Simple PHP Scripts 'gallery' is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•45 views

TORQUE Resource Manager 2.5.x-2.5.13 - Stack Based Buffer Overflow Stub

No description provided by source. !/usr/bin/env python Exploit Title: TORQUE Resource Manager 2.5.x-2.5.13 stack based buffer overflow stub Date: 27 May 2014 Exploit Author: bwall - @botnethunter Vulnerability discovered by: MWR Labs CVE: CVE-2014-0749 Vendor Homepage:...

10CVSS6.4AI score0.17461EPSS
SaveExploits6
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•18 views

ZTE Change admin password

No description provided by source. Exploit Title: ZTE Change admin password Author: Nuevo Asesino Version: ZTE Inc., Software Release ZXDSL 831IIV7.5.0aZ29OV html body onload=javascript:document.forms0.submit H2Exploit By Nuevo Asesino /H2 form method=POST name=form0...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•19 views

SmartStuff FoolProof Security Program 3.9.x Administrative Password Recovery Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10467/info FoolProof is prone to a vulnerability that may allow an unprivileged user to recover the administrative password for the application. This issue can ultimately allow an attacker to gain unauthorized...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•16 views

PHP-Nuke <= 8.0 Final (INSERT) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl 0day exploit for PHP-nuke =8.0 Final Sql injection attack in INSERT syntax version for every basePostgreSQL,mssql... except MySQL base Coded by:Maciej krasza [email protected] Screenshot: 0day exploit for PHP-nuke =8.0 Final Sql injection atta...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•26 views

CREAR ALMail32 1.10 Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/574/info The ALMail32 POP3 client conatins unchecked buffers in the header parsing code. An abnormally long FROM: or TO: field in the header of an incoming email will overwrite the buffer and allow arbitrary code to be...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•14 views

quate cms <= 0.3.5 (rfi/lfi) Multiple Vulnerabilities

No description provided by source. Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg Quate CMS = 0.3.5 RFI/LFI Multiple Remote Vulnerability Download Script : http://quate.net/quatecms Dork : dielamers attempt; :P Vuln RFI : ./QuateCMS035/admin/includes/header.php line 27 ?php if $bypassrestrict !...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•18 views

Joomla! 1.0.13 Search Component SearchWord Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/26031/info The Joomla! Search component is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•19 views

DVD X Player 5.5 .plf PlayList Buffer Overflow

No description provided by source. $Id: dvdxplfbof.rb 13673 2011-09-01 05:20:47Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•19 views

friendsinwar FAQ Manager (view_faq.php, question param) SQL Injection Vulnerability

No description provided by source. Exploit Title: friendsinwar FAQ Manager SQL Injection URL Vulnerability Date: 16.11 2012 Exploit Author: unsuprise Vendor Homepage: http://www.friendsinwar.com Software Link:http://www.friendsinwar.com/scriptdemo/thefaqmanager/ Tested on: Windows 7, Xampp Blog :...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•18 views

friendsinwar FAQ Manager SQL Injection (authbypass) Vulnerability

No description provided by source. Exploit Title: friendsinwar FAQ Manager SQL Injection authbypass Vulnerability Date: 13.10.201 Exploit Author: d3b4g Vendor Homepage: http://www.friendsinwar.com Software Link: http://www.friendsinwar.com/scriptdemo/thefaqmanager/ Tested on: Windows 7 Blog:...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•21 views

CuteNews <= 1.4.1 (function.php) Local File Include Exploit

No description provided by source. ?php // Happy NEW Iranian year . // Happy Norouz PERSIAN celebration // CuteNews 1.4.1 CutePHP.com Hash password Finder // by Hamid Ebadi // http://hamid.ir // Bug Discovered and Exploited by Hamid Ebadi .: Hamid Network Security Team :. // run it from your...

6.7AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•32 views

Linux-PAM 0.77 Pam_Wheel Module getlogin() Username Spoofing Privileged Escalation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7929/info A vulnerability has been discovered in the Linux-Pam pamwheel module. The problem exists in the way the module authenticates users under certain configurations. Specifically, if the module is configured to allow...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•17 views

WebspotBlogging 3.0 Login.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/16319/info WebspotBlogging is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•43 views

Adobe ColdFusion 9 - Administrative Login Bypass

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote include Msf::Exploit::Remote::HttpClient include...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•14 views

ALFTP FTP Client 4.1/5.0 - 'LIST' Command Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/29585/info ALFTP is prone to a directory-traversal vulnerability because the application fails to sufficiently sanitize user-supplied input. This issue occurs in the FTP client. Exploiting this issue will allow an attacke...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•23 views

39 bytes sys_setuid(0) & sys_setgid(0) & execve ("/bin/sh") x86 linux shellcode

No description provided by source. / Name : 39 bytes syssetuid0 & syssetgid0 & execve /bin/sh x86 linux shellcode Date : Tue Jun 1 21:29:10 2010 Author : gunslinger yudha.gunslingeratgmail.com Web : http://devilzc0de.org blog : http://gunslingerc0de.wordpress.com tested on : linux debian / includ...

7.1AI score
SaveExploits0
Total number of security vulnerabilities56796