56796 matches found
Sun Java System Identity Manager 6.0/7.0/7.1 /idm/user/main.jsp activeControl Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/27214/info Sun Java System Identity Manager is prone to multiple input-validation vulnerabilities, including an HTML-injection issue and cross-site scripting issues, because it fails to adequately sanitize user-supplied...
Zoo 2.10 - Parse.c Local Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17126/info Zoo is prone to a local buffer-overflow vulnerability. This issue is due to a failure in the application to do proper bounds checking on user-supplied data before using it in a finite-sized buffer. An attacker...
Hughes Technologies Mini SQL (mSQL) 2.0.11 w3-msql Buffer Overflow
No description provided by source. source: http://www.securityfocus.com/bid/898/info w3-msql is a cgi-program shipped with Mini-SQL which acts as a web interface for msql. There are a number of buffer overflow vulnerabilities in it with one proven to be exploitable. The exploitable buffer is the...
OpenBSD <= 4.5 (IP datagrams) Remote DoS Vulnerability
No description provided by source. / / / / / / / / / / / / / // / / / / / / / / / // / / / // // / / / / / // ///// // // // Helith - 0815 -------------------------------------------------------------------------------- Author : Rembrandt Date : 2009-04-09 Affected Software: OpenBSD Kernel Affect...
SWAT 4 Multiple Denial Of Service Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/30299/info SWAT 4 is prone to multiple remote denial-of-service vulnerabilities because the application fails to properly handle certain input. An attacker may exploit these issues to crash the affected application, denyi...
WordPress Community Events plugin <= 1.2.1 - SQL Injection Vulnerability
No description provided by source. Exploit Title: WordPress Community Events plugin = 1.2.1 SQL Injection Vulnerability Date: 2011-09-07 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/community-events.zip Version: 1.2.1 tested...
VLC Media Player < 1.1.4 (.xspf) smb:// URI Handling Remote Stack Overflow PoC
No description provided by source. !/usr/bin/python Exploit Title: VLC Media Player 1.1.4 .xspf smb:// URI Handling Remote Stack Overflow PoC Date: 04-09-2010 Author: Hadji Samir , s-Dzathotmaildotfr Software Link:...
John O'Fallon Responder.cgi 1.0 DoS Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3155/info responder.cgi' is a free CGI shell script, written in C, for MacHTTP Server and other MacOS webserver products. It is possible to cause a denial of service to MacHTTP webserver due to improper bounds checking in...
ASTPP VoIP Billing (4cf207a) Multiple Vulnerabilities
No description provided by source. Title: ====== ASTPP VoIP Billing 4cf207a - Multiple Web Vulnerabilities Date: ===== 2012-08-17 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=687 VL-ID: ===== 687 Common Vulnerability Scoring System: ==================================...
WordPress LeagueManager Plugin 3.8 - SQL Injection
No description provided by source. !/usr/bin/ruby Exploit Title: WordPress LeagueManager Plugin v3.8 SQL Injection Google Dork: inurl:/wp-content/plugins/leaguemanager/ Date: 13/03/13 Exploit Author: Joshua Reynolds Vendor Homepage: http://wordpress.org/extend/plugins/leaguemanager/ Software Link...
Microsoft Internet Explorer 5,6,7 - Memory Corruption PoC
No description provided by source...
wordpress plugin dmsguestbook 1.7.0 - Multiple Vulnerabilities
No description provided by source. Wordpress Plugin dmsguestbook 1.7.0 Multiple Remote Vulnerabilities by NBBN 2nd, February 2008 1 File Disclosure Open the following url you can see the config data of wordpress, with the mysql-server username and password. In this file you usually have write...
Ultimate PHP Board 1.8/1.9 Weak Password Encryption Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13975/info Ultimate PHP Board is prone to a weak password encryption vulnerability. This issue is due to a failure of the application to protect passwords with a sufficiently effective encryption scheme. This issue may...
Winamp 5.5.8 (in_mod plugin) Stack Overflow Exploit (SEH)
No description provided by source. !/usr/bin/python finally got time to finish what I started... Winamp 5.5.8.2985 inmod plugin Stack Overflow SEH WINDOWS XP SP3 EN Fully Patched Bug found by http://www.exploit-db.com/exploits/15248/ POC and Exploit by fdisk @fdiskyou e-mail: fdiskyou at...
Multiple D-Link Routers Authentication Bypass Vulnerability
No description provided by source...
PAFaq beta4 Database Unauthorized Access Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13999/info paFaq is prone to an unauthorized access vulnerability regarding the database. This issue is a result of the application failing to perform access validation on the 'backup.php' script. A remote unauthenticated...
Cpanel 11.25 - CSRF Add FTP Account Exploit
No description provided by source. Exploit Title: Cpanel 11.25 - CSRF Add FTP Account Author: G0D-F4Th3r Software Link: http://www.cpanel.net/ Version: 11.25 Exploit html body onload=javascript:fireForms form method=POST name=form0 action= http://server:2082/frontend/x3/ftp/doaddftp.html input...
Elite Graphix ElitCMS 1.01 & PRO - Multiple Web Vulnerabilities
No description provided by source. Document Title: =============== Elite Graphix ElitCMS 1.01 & PRO - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1117 Release Date: ============= 2013-10-18 Vulnerability Laboratory ID...
Phenotype CMS 3.0 - SQL Injection
No description provided by source. Vulnerability ID: HTB22769 Reference: http://www.htbridge.ch/advisory/sqlinjectioninphenotypecms.html Product: Phenotype CMS Vendor: http://www.phenotype-cms.com http://www.phenotype-cms.com Vulnerable Version: 3.0 Vendor Notification: 21 December 2010...
i-Gallery 3.4 igallery.ASP Remote Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26348/info i-Gallery is prone to a remote information-disclosure vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized remote user to view arbitrary local...
Elm Development Group ELM 2.4/2.5.1 Mail for UNIX (ELM) Buffer Overflow (2)
No description provided by source. source: http://www.securityfocus.com/bid/1276/info Buffer overflow vulnerabilities exist in elm Electronic Mail for Unix. / Elm 2.5 PL3 exploit Tested Under Linux Slackware 3.6, 4.0, 7.0 By xfer [email protected] Of Buffer0verfl0w Security At Sat May 27...
WebprojectDB <= 0.1.3 (INCDIR) Remote File Include Vulnerability
No description provided by source. $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ WebprojectDB INCDIR = v.0.1.3 Remote File Include Vulnerability $$ script site: http://sourceforge.net/projects/webprojectdb/ $$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$...
Multiple D-Link Routers UPNP Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19006/info D-Link wired and wireless routers are prone to a buffer-overflow vulnerability because these devices fail to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer...
Fastraq Mailtraq 1.1.4 - Multiple Path Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/1278/info A remote user may browse any known directory on a host running Fastraq Mailtraq 1.1.4 by making a URL request that includes the '../' string. In addition, requesting a URL appended with ../ and an unusually long...
FAQEngine 4.24.00 - Remote File Inclusion vulnerability
No description provided by source. FAQEngine 4.24.00 - Remote File Inclusion vulnerability RFI Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : January 6, 2010 Software Information + Vendor : http://www.boesch-it.de/ + Download :...
ShopCartCGI 2.3 gotopage.cgi Traversal Arbitrary File Access
No description provided by source. source: http://www.securityfocus.com/bid/9670/info It has been reported that ShopcartCGI is prone to a remote file disclosure vulnerability. This issue is due to insufficient validation of user-supplied input. Upon successful exploitation of this issue an attack...
DameWare Mini Remote Control Server 3.7x Pre-Authentication Buffer Overflow Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/9213/info A problem has been identified in the handling of pre-authentication packets by DameWare Mini Remote Control Server. Because of this, it may be possible for a remote attacker to gain unauthorized access to hosts...
Horde Application Framework <= 3.2.1 - Forward Slash Insufficient Filtering Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/31107/info Horde Framework is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser...
ABB 1.1 - Forum Remote Database Disclosure Vulnerability
No description provided by source...
Kaspersky AntiVirus "klif.sys" Privilege Escalation Vulnerability
No description provided by source. / Added NOSTRICT to 1 on line 2 /str0ke ! milw0rm.com / define NOSTRICT 1 include windows.h undef STRICT PUCHAR pCodeBase=PUCHAR0xBE9372C0; PDWORD pJmpAddress=PDWORD0xBE9372B0; PUCHAR pKAVRets=PUCHAR0xBE935087,PUCHAR0xBE935046; PUCHAR pKAVRet; unsigned char...
FestOs <= 2.2.1 - Multiple RFI Exploit
No description provided by source. Exploit Title: FestOs = 2.2.1 Multiple RFI Exploit Date: 19-12-2009 Author: cr4wl3r Software Link: http://code.google.com/p/festos/downloads/list Version: N/A Tested on: GNU/LINUX Code : reportsplacement.php ?php $title = Jury Sheet Report;...
VU Web Visitor Analyst Authentication Bypass
No description provided by source...
DDL CMS 2.1 'blacklist.php' Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/38643/info DDL CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...
phpOnDirectory <= 1.0 - Remote File Include Vulnerabilities
No description provided by source. $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ phpOnDirectory CONSTINCLUDEROOT = v.1.0 Remote File Include Vulnerability $$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$ $$ Find by: Kacper a.k.a Rahim $$ $$ Contact:...
Rit Research Labs "The Bat!" 1.x Missing Linefeeds DoS Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2636/info The Bat! is an MUA for Windows by Rit Research Labs. The Bat! is vulnerable to a remote denial of service attack. Email messages in which carriage return CR characters are not followed by a linefeed LF can cause...
Bitweaver 1.1.1 view.php blog_id Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/15962/info bitweaver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities...
phpFreeForum 1.0 rc2 - part/menu.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/29337/info phpFreeForum is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the...
Microsoft Internet Explorer 6/7/8 'li' Element Denial of Service Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/36070/info Microsoft Internet Explorer is prone to a remote denial-of-service vulnerability. Successful exploits can allow attackers to crash the affected browser, resulting in denial-of-service conditions. Given the natu...
PunBB <= 2.0.10 (Register Multiple Users) Denial of Service Exploit
No description provided by source. / Name: NST-Exploit Punbb 2.0.10 Denial Of Service Copyright: NeoSecurity Author: K4P0 ./NST-XplPunbb www.victim.com 2.0.0.6 /punbb/ PunBB 2.0.10 Denial of Service exploit by K4P0 Use only at your own reputation risk! ; www.NeoSecurityTeam.net 1 - Trying if...
AlkalinePHP <= 0.80.00 beta (thread.php id) SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w Portal : AlkalinePHP = Ver 0.80.00 beta Script Download: https://sourceforge.net/projects/alkalinephp/ exploit aported password crypted maybe is crypted with mysql exploit tatjibe password mcrypté :d mgharba :d:d:d:d Founded & Exploited by :...
mxBB Module FAQ & RULES 2.0.0 - Remote File Inclusion Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? print ' mxBB Module MX Faq & Rules = 2.0.0 faq.php Remote File Include Exploit Vendor: http://www.mx-system.com/modules/mxpafiledb/dload.php?action=download&fileid=371 Bug found and Exploit by bd0rk from SOH-Crew Website1:...
Cuteflow Bin 1.5 - pages/edittemplate_step2.php language Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/28500/info CuteFlow Bin is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data. The issues include a SQL-injection vulnerability and multiple cross-site scriptin...
Wireshark 0.99.8 - SCCP Dissector Decode As Feature Unspecified DoS
No description provided by source. source: http://www.securityfocus.com/bid/28485/info Wireshark is prone to multiple denial-of-service vulnerabilities. Exploiting these issues may allow attackers to cause crashes and deny service to legitimate users of the application. Attackers may be able to...
Chipmunk CMS 1.3 Fontcolor Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14506/info Chipmunk CMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to inject ht...
Noahs Classifieds <= 1.3 (lowerTemplate) Remote Code Execution
No description provided by source. ?php Noah's classifieds 1.3 Remote Code Execution by trueend5 Computer Security Researchers Institute http://www.KAPDA.ir Functions From rgod Condition:registerglobals=On errorreporting0; inisetmaxexecutiontime,0; inisetdefaultsockettimeout, 5; obimplicitflush 1...
Adobe Acrobat Reader <= 8.1.2 Malformed PDF Remote DoS PoC
No description provided by source. Adobe Acrobat Reader = 8.1.2 Reader Remote Denial Of Service the reader deadly crash when a malformed Pdf file is opened: 00414141 AcroRd32.00414141 greetz to : Deimos, benjilenoob, Berga , http://spiritofhack.net/ Poc : http://exploit-db.com/sploits/2008-HI2.pd...
Toast Forums 1.8 - Database Disclosure Vulnerability
No description provided by source...
MDaemon POP3 Server < 9.06 (USER) Remote Heap Overflow Exploit
No description provided by source. !/usr/bin/python import sys import struct import socket from time import sleep MDaemon Pre Authentication USER Heap Overflow Code based on Leon Juranic's exploit Coded by muts - [email protected] http://www.hackingdefined.com http://www.remote-exploit.org...
FunkBoard 0.66 editpost.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/14507/info FunkBoard is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues t...
MySQL 4.x/5.x Server Date_Format Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19032/info MySQL is prone to a remote denial-of-service vulnerability because the database server fails to properly handle unexpected input. This issue allows remote attackers to crash affected database servers, denying...