56796 matches found
Chipmunk Forum recommend.php ID Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/15149/info Chipmunk products are prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the applications to properly sanitize user-supplied input. An attacker may leverage these issue...
PHP Live! 3.2.2 phplive/message_box.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/21737/info PHP Live! is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code...
Joomla Component com_extplorer <= 2.0.0 RC2 Local Directory Traversal
No description provided by source. -------------------------------------------------------------------------------------------------------------- ----- H-T Team HouSSaMix + ToXiC350 from MoroCCo ---------------------------------------------------------...
KAME Racoon "Initial Contact" SA Deletion Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9417/info It has been reported that it may be possible for attackers to remotely delete security associations SAs in hosts running the KAME IKE daemon Racoon. / Sun Microsystems Solaris sysinfo Kernel Memory Disclosure...
Apple Safari 4 Malformed 'feeds:' URI Null Pointer Dereference Remote Denial Of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/33909/info Apple Safari is prone to a denial-of-service vulnerability that stems from a NULL-pointer dereference. Attackers can exploit this issue to crash the affected application, denying service to legitimate users...
ContaoCMS (aka TYPOlight) <= 2.11 CSRF (Delete Admin - Delete Article)
No description provided by source. +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : ContaoCMS aka TYPOlight = 2.11 CSRF Delete Admin- Delete Article Date : 25-02-2012 Author : Ivano Binetti...
Kemana Directory 1.5.6 Database Backup Disclosure Exploit
No description provided by source. ?php / Kemana Directory 1.5.6 Database Backup Disclosure Exploit Vendor: C97net Product web page: http://www.c97.net Affected version: 1.5.6 Summary: Experience the ultimate directory script solution with Kemana. Create your own Yahoo or Dmoz easily with Kemana...
Quagga Routing Software Suite 0.9x - RIPd RIPv1 Request Routing Table Disclosure
No description provided by source. source: http://www.securityfocus.com/bid/17808/info Quagga is susceptible to remote information-disclosure and route-injection vulnerabilities. The application fails to properly ensure that required authentication and protocol configuration options are enforced...
Iatek IntranetApp 2.3 ad_click.asp banner_id Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/12936/info Multiple input-validation vulnerabilities reportedly affect PortalApp. These issues occur due to a failure of the application to properly sanitize user-supplied input prior to using it to carry out critical...
Support Incident Tracker <= 3.65 (translate.php) Remote Code Execution
No description provided by source. ?php / ------------------------------------------------------------------------------ Support Incident Tracker = 3.65 translate.php Remote Code Execution Exploit ------------------------------------------------------------------------------ author..................
pre multi-vendor shopping malls Multiple Vulnerabilities
No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= IN THE NAME OF ALLAH -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Pre...
tenfourzero.net Shutter 0.1.4 'admin.html' Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/38849/info tenfourzero.net's Shutter is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...
Post Revolution <= 0.7.0 RC 2 (dir) Remote File Inclusion Vulnerability
No description provided by source. Post Revolution Remote File Inclusion Affected Software .: Post Revolution 6.6 / 7.0 Release Candidate 2 Download..: http://www.fabio.com.ar/postrev/ Risk ..............: high Date .........: 25/3/2007 Found by ..........: InyeXion Contact ...........:...
X-Scripts X-Poll 1.10 Top.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19236/info X-Poll is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...
SimpleBoard Mambo Component <= 1.1.0 - Remote Include Vulnerability
No description provided by source. Bug Found by h4ntu http://h4ntu.com batamhacker crew Another Mambo component remote inclusion vulneribility download : http://mamboxchange.com/frs/download.php/6920/Simpleboard-1.1.0-Stable.zip bug found in file fileupload.php : requireonce$sbp/sbhelpers.php;...
Pluck 4.5.2 Multiple Cross Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/30542/info Pluck is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browse...
P-News <= 1.16 Remote File Include Vulnerability
No description provided by source. ============================================ P-News 1.16, 1.17 Remote File Inclusion Vulnerability ============================================ Discovered by vegas78 - feel82atweb.de ============================================ Greetz: scoper, corny, smaesch0r,...
Microsoft Internet Explorer 5.0.1 - Multiple ActiveX Controls Denial of Service Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/22288/info Microsoft Internet Explorer is prone to multiple denial-of-service vulnerabilities because the application fails to handle exceptional conditions. These issues are triggered when an attacker entices a victim us...
Jamit Job Board 'post_id' Parameter Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/37701/info Jamit Job Board is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of...
XnView 2.03 (.PCT) - Buffer Overflow Vulnerability
No description provided by source...
QuickZip 4.60.019 Stack BOF - XP SP3
No description provided by source. Exploit Title : QuickZip 4.60.019 Stack BOF - XP SP3 OSVDB-ID : 62781 Date : March 2nd 2010 Author : corelanc0d3r Bug found by : corelanc0d3r Software Link : http://www.quickzip.org/downloads.html Version : 4.60.019 OS : Windows Tested on : XP SP3 En VirtualBox ...
Wordpress bbpress Plugin - Multiple Vulnerabilities
No description provided by source. Souhail Hammou - Independant Security Researcher & Penetration Tester . Facebook : www.facebook.com/dark.puzzle.sec Website : www.dark-puzzle.com Youtube : http://www.youtube.com/user/mariotrey E-mail : [email protected] Greetings to all moroccan researchers a...
CandyPress Store 3.5.2 14 prodList.asp brand Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/21090/info CandyPress Store is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...
Softerra PHP Developer Library <= 1.5.3 File Include Vulnerabilities
No description provided by source. Softerra. PHP Developer Library Class: Remote File Include Vulnerability Patch: Unavailable Published 2006/10/12 Remote: Yes Local: No Type: High Site: http://www.softerra.com/productsphp-library.htm Author: MP Contact: [email protected] Exploit:...
Files Desk Pro v1.4 iOS - Local File Inclusion
No description provided by source. Document Title: =============== Files Desk Pro v1.4 iOS - File Include Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1266 Release Date: ============= 2014-05-16 Vulnerability Laboratory ID VL-ID:...
Caucho Technology Resin 2.1.12 Directory Listings Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9617/info It has been reported that Resin may be prone to an information disclosure vulnerability that may allow an attacker to disclose directory listings by passing malicious data via a URI parameter. The issue has been...
Pivot <= 1.30 RC2 Privileges Escalation/Remote Code Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo Pivot = 1.30 RC2 privileges escalation / remote commands execution exploit\n; echo by rgod [email protected]\n; echo site: http://retrogod.altervista.org\n; echo dorks: \Powered byPivot\n; echo version specific:...
IBM Lotus Domino Sametime STMux.exe Stack Buffer Overflow
No description provided by source. $Id: dominosametimestmux.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms...
AJ Auction Authentication - Bypass Vulnerability
No description provided by source. ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ==============================================================================...
Comodo Firewall 2.3/2.4 - Flawed Component Control Cryptographic Hash Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/22570/info Comodo Firewall is prone to a design error in its cryptographic hashing function for component controls. Exploiting this flaw permits attackers to bypass the application's component controls. The application...
PersianBlog Userslist.ASP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14575/info PersianBlog is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could...
Mozilla 1.x,opera 6/7 Timed Document.Write Method Cross Domain Policy Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7847/info It has been reported that under some circumstances, it is possible violate the cross-domain restriction of browser security. Because of this, an attacker may be able to execute a file across domains and in the...
DATAC RealWin SCADA Server 2.0 (Build 6.1.8.10) - SCPC_INITIALIZE_RF Buffer Overflow
No description provided by source. $Id: realwinscpcinitializerf.rb 11180 2010-11-30 20:19:18Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...
Good for Enterprise 2.2.2.1611 - XSS Vulnerability
No description provided by source. The vulnerable versions are v2.2.2.1611 and earlier Proof of Concept: HTML Email including the following payload will execute Javascript statements when the victim open the email using the vulnerable version. Payload: body div scriptalert'XSS Here'/script /div...
Wordpress HD Webplayer 1.1 - SQL Injection Vulnerability
No description provided by source. | | | | \ | | | \ /\ | | | | | | | | | | | | / \ | |/ / | ' \ | | | . | | | | / / /\ \ | | / | | | | | | | | || |\ | | | | | \ \ / \ |||,|| || || ||| | || || \// \ - JoinSe7en +----------------------------------------------------------------------+ |...
MyBlog <= 0.9.8 Insecure Cookie Handling Vulnerability
No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= MyBlog = 0.9.8: PHP and MySQL Blog/CMS software / Cookie poisioning -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= $ Program: MyBlog $ File affected: all /admin/.php files...
Thibault Godouet FCron 1 Symbolic Link Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2835/info FCron is an implementation of the popular UNIX 'cron' utility that runs user-specified programs at periodic scheduled times. fcron is vulnerable to symbolic link attacks. It is possible for an attacker to...
File Sharing Wizard 1.5.0 - Buffer Overflow PoC
No description provided by source. !/usr/bin/python http://www.sharing-file.net/ File Sharing Wizard Version 1.5.0 build on 26-8-2008 controlling EAX ESP points to our buffer buffer grows if we increase our string more details on http://www.s3cur1ty.de have fun m1k3 at m1k3 dot at import socket...
BaoFeng Storm M3U File Processing Buffer Overflow Exploit
No description provided by source. !/usr/bin/env python Title: BaoFeng Storm M3U File Processing Buffer Overflow Exploit CNVD-ID: CNVD-2010-00752 Author: Lufeng Li and Qingshan Li of Neusoft Corporation Download: www.baofeng.com Test: Put m3u file in roote.g. c:/ d:/,and open this m3u file...
FreeFTPD Remote Authentication Bypass Zeroday Exploit
No description provided by source. FreeFTPD all versions Remote System Level Exploit Zero-Day -- No username needed, straightforward rooting! Discovered & Exploited By Kingcope Year 2011 -- http://www.exploit-db.com/sploits/23079.zip Example banner: WeOnlyDo-wodFTPD 2.3.6.165 This package include...
Vpop3d Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8473/info A vulnerability has been reported for Vpop3d that may make it prone to denial of service attacks. The problem is said to occur due to the affected daemon failing to sufficiently handle USER name values of...
X2CRM 3.4.1 - Multiple Vulnerabilities
No description provided by source. Advisory ID: HTB23172 Product: X2CRM Vendor: X2Engine Inc. Vulnerable Versions: 3.4.1 and probably prior Tested Version: 3.4.1 Advisory Published: September 4, 2013 Vendor Notification: September 4, 2013 Vendor Patch: September 10, 2013 Public Disclosure:...
Lucent Ascend MAX <= 5.0/Pipeline <= 6.0/TNT 1.0/2.0 Router MAX UDP Port 9 Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/714/info Certain versions of Ascends Lucent router software listen on port 9 UDP Discard. Ascend provides configuration tools for MAX and Pipeline routers that locate locally installed routers by broadcasting a specially...
Free Mp3 Player 1.0 - Local Denial of Service Vulnerability
No description provided by source. !/usr/bin/perl Exploit Title: Free Mp3 Player 1.0 Local Denial of Service Date: 19-12-2011 Author: JaMbA Download: http://www.softpedia.com/get/Multimedia/Audio/Audio-Players/Free-Mp3-Player.shtml Version: 1.0 Tested on: Windows 7 my $file= Crash.mp3; my $junk=...
ISDN4Linux 3.1 IPPPD Device String SysLog Format String Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/5437/info isdn4linux is a freely available, open source package of isdn compatibility tools. It is available for Linux operating systems. isdn4linux contains a format string vulnerability in the ipppd utility. In some...
Sygate Personal Firewall 5.6 build 2808 ActiveX with DEP bypass
No description provided by source. html !-- |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | |...
OpenDocMan 1.2.5 view_file.php XSS
No description provided by source. source: http://www.securityfocus.com/bid/36777/info OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an...
PHP Football 1.0 - Cross Site Scripting Vulnerability
No description provided by source. ======================================================================================== | Title : PHP Football Version : 1.0 Cross Site Scripting Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El...
WEBinsta CMS <= 0.3.1 (templates_dir) Remote File Include Exploit
No description provided by source. !/usr/bin/perl WEBinsta CMS 0.3.1 templatesdir Remote File Inclusion Exploit Bug Found & code By K-159 echo.or.id c 2006 usage: perl WEBinsta.pl target cmd shell location cmd shell variable perl WEBinsta.pl http://target.com/ http://site.com/cmd.txt cmd cmd shel...
PHPBB 1.2.4 For Mambo Multiple Remote File Include Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/18914/info phpBB for Mambo is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to...