56796 matches found
DeluxeBB <= 1.06 (templatefolder) Remote File Include Vulnerabilities
No description provided by source. Secunia Research has discovered some vulnerabilities in DeluxeBB, which can be exploited by malicious people to conduct SQL injection attacks and compromise a vulnerable system. 1 Input passed to the templatefolder parameter in various scripts isn't properly...
Painkiller <= 1.3.1 - Denial of Service Exploit
No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h ifdef WIN32 include winsock.h include winerr.h define close closesocket else include unistd.h include sys/socket.h include sys/types.h include arpa/inet.h include netdb.h endif define VER 0....
Ipswitch IMail 5.0,WS_FTP Server 1.0.1/1.0.2 Server Privilege Escalation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/218/info Non-administrative Imail and WSFTP Server users may elevate their privileges to administrator for these applications by modifying a specific registry value. Once a person has obtained administrative privileges,...
Fujitsu Chocoa 1.0 beta7R "Topic" Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/573/info The Chocoa IRC client has an unchecked buffer in the code that processes channel topics. If the server returns a topic that overwrites the client's buffer and contains exploit code arbitrary commands can be run o...
NERO Media Player <= 1.4.0.35b M3U File Buffer Overflow PoC
No description provided by source. NERO Media Player = 1.4.0.35b Remote Buffer Overflow .M3U This exception may be expected and handled. eax=03e90f40 ebx=41414141 ecx=009d01c8 edx=009d015c esi=03e90f38 edi=41414141 eip=7c92b3fb esp=0010bff8 ebp=0010c214 iopl=0 nv up ei pl nz ac pe nc cs=001b...
TikiWiki Project 1.8 tiki-list_trackers.php offset Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/10100/info Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting,...
SudoEdit 1.6.8 - Local Change Permission Exploit
No description provided by source...
Easynet4u Forum Host 'topic.php' SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/38697/info Easynet4u Forum Host is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to compromise the application, access or...
NanoBB 0.7 - Multiple Vulnerabilities
No description provided by source. Exploit Title : NanoBB 0.7 Multiple Vulnerabilities Date : 10 June 2013 Exploit Author : CWH Underground Site : www.2600.in.th Vendor Homepage : http://nanobb.sourceforge.net/ Software Link : heanet.dl.sourceforge.net/project/nanobb/v0.7.zip Version : 0.7 Tested...
Microsoft Internet Explorer 6.0 OVCtl Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19079/info Microsoft Internet Explorer is prone to a denial-of-service vulnerability. This issue is triggered when an attacker convinces a victim user to visit a malicious website. Remote attackers may exploit this issue ...
XTux Server 2001.0 6.01 Garbage Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4260/info XTux is a multiplayer network game for Linux. The server component June 01, 2001 version is vulnerable to a denial of service initiated by connecting to the server and sending unexpected characters. This causes...
Ecommerce Corporation Online Store Kit 3.0 shop_by_brand.php cat_manufacturer Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/9687/info It has been reported that Online Store Kit is prone to multiple SQL injection vulnerabilities. These issues arise due to insufficient sanitation of user-supplied input via the URI. As a result of this a maliciou...
Article Dashboard 'admin/login.php' Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/27286/info Article Dashboard is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an...
Simple Machines Forum <= 1.0.4 (modify) SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w SMF Modify SQL Injection // All Versions // By James http://www.gulftech.org Simple proof of concept for the modify post SQL Injection issue I discovered in Simple Machine Forums. Supply this script with your username password and the complete...
Joomla Component com_noticias 1.0 - SQL Injection Vulnerability
No description provided by source. CoRPITX Turkey www.Hayalet-hack.com www.zone-turk.net/ joomla comnoticiasSQL Injection Vulnerability AUTHOR : xcorpitx HOME : www.Hayalet-hack.com / www.zone-turk.net/ WHEN YOU PUT THIS SQL CODE YOU LL SEE ADMÝN NAME,ADMIN HASH AND EMAÝL DorK : ''comnoticias''...
BSD/OS 2.1,DG/UX <= 7.0,Debian Linux <= 1.3,HP-UX <= 10.34,IBM AIX <= 4.2,SGI IRIX <= 6.4,Solaris <= 2.5.1 xlock Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/224/info The xlock program is used to lock the local X display until the user supplies the correct password. A buffer overflow condition has been discovered in xlock that may allow an unauthorized user to gain root access...
Epic Games Unreal Tournament Server 436.0 DoS Amplifier Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5148/info Unreal Tournament is a game produced by Epic Games, available for Microsoft Windows and Linux. Network play is supported. A vulnerability has been reported in the server used for network play. It is possible to...
PowerDVD 8.0 '.m3u' and '.pls' File Multiple Buffer Overflow Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/30341/info PowerDVD is prone to multiple buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied input. Successfully exploiting these issues may allow remote attackers to...
phUploader 2 - Remote File Upload Vulnerability
No description provided by source. Exploit Title: phUploader Remote File Upload Vulnerability Date: 20-12-2009 Author: wlhaan-hacker Version: v2 CVE : N/A ========================================================================== Script Name : phUploader Language : php email: [email protected]...
Ask.com Toolbar askBar.dll ActiveX Control Buffer Overflow
No description provided by source. $Id: askshortformat.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
MusicBox 2.3 index.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/17149/info MusicBox is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly saniti...
DUware DUpaypal 3.0/3.1 detail.asp iPro Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/14034/info DUpaypal Pro is prone to multiple SQL-injection vulnerabilities because the fails application to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacke...
ARASTAR - SQL Injection Vulnerability
No description provided by source. ++ |o ID | ++ + Title : ARASTAR SQL Injection Vulnerability + Affected Version : ALL VERSIONS + Software Link : http://ara-star.com/art.php?ID=172 + Tested on : Windows XP SP2 CHROME + FIREFOX + Date : 18/11/2011 + Dork : inurl:'.co.il/Cat.php?ID=' intext:POWERE...
phpldapadmin 0.9.8 compare_form.php dn Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/17643/info PHPLDAPAdmin is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to execute...
MyBulletinBoard (MyBB) <= 1.03 (misc.php COMMA) SQL Injection
No description provided by source. MyBB New SQL Injection D3vil-0x1 Devil-00 Milw0rm ID :- http://www.milw0rm.com/auth.php?id=1320 The Inf.File :- misc.php Linez :- code $buddies = $mybb-user'buddylist'; $namesarray = explode,,$buddies; ifisarray$namesarray whilelist$key, $buddyid = each$namesarr...
Fool's Workshop Owl's Workshop 1.0 glossary.php Arbitrary File Access
No description provided by source. source: http://www.securityfocus.com/bid/9689/info Owl's Workshop is reported prone to multiple remote file-disclosure vulnerabilities because the application fails to validate user-supplied input passed via a URI parameter. Upon successful exploitation of these...
Ipswitch IMail 11.01 - XSS Vulnerability
No description provided by source. !/usr/bin/perl Exploit Title: Ipswitch IMail 11.01 XSS Vulnerability Date: 26-04-2013 Author: DaOne aka Mocking Bird Vendor Homepage: http://www.ipswitch.com/ Platform: windows use Net::SMTP; ARGV Check if $ARGV != 2 print \nUSAGE: IMail.pl Mail Server Attacker...
CrossFire <= 1.8.0 (oldsocketmode) Remote Buffer Overflow PoC
No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h include time.h ifdef WIN32 include winsock.h / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include string.h...
phpWebsite 0.8.2/0.8.3 friend.php sid Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/17150/info phpWebSite is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. A successful exploit...
AZ Photo Album Script Pro Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18306/info AZ Photo Album Script Pro is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the...
joomla panoramic component 1.0 - Remote File Inclusion Vulnerability
No description provided by source. ================================================================================================================================== panoramic joomla component 1.0 Remote File Include Vulnerability Component : companoramic version 1.0 Download script :...
Linux 3.4+ recvmmsg x32 compat - Proof of Concept
No description provided by source. / PoC trigger for the linux 3.4+ recvmmsg x32 compat bug, based on the manpage https://code.google.com/p/chromium/issues/detail?id=338594 $ while true; do echo $RANDOM /dev/udp/127.0.0.1/1234; sleep 0.25; done / define GNUSOURCE include netinet/ip.h include...
Phorum 5.2 admin/users.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/34551/info Phorum is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit these issues to steal cookie-based...
sX-Shop (view_image.php) SQL Injection Vulnerability
No description provided by source. sX-Shop / viewimage.php SQL Injection Author : secret - [email protected] Homepage : http://swissfaking.net/ Date : 05 August, 2010 / // // // \ / // / / // \ / | / |/ / \ \ / / / / / , // / / / / / / , // | / / //// ///||// //////||// ||//|/ // sX-Shop ...
Joomla Component JoomMail com_joommail Local File Inclusion Vulnerability
No description provided by source. ============================================================================================================== o Joomla Component JoomMail Local File Inclusion Vulnerability Software : comjoommail version 1.0 Author : AntiSecurity Vrs-hCk NoGe OoNBoY Paman zxvf...
Apple QuickTime 6/7 FLC Movie COLOR_64 Chunk Overflow
No description provided by source. source: http://www.securityfocus.com/bid/19976/info Apple QuickTime is prone to multiple vulnerabilities because it fails to properly bounds-check and sanitize user-supplied data. An attacker can exploit these issues to execute arbitrary code in the context of t...
weborf <= 0.12.2 - Directory Traversal vulnerability
No description provided by source. Title: Weborf httpd = 0.12.2 Directory Traversal Vulnerability Date: Sep 6, 2010 Author: Rew Link: http://galileo.dmi.unict.it/wiki/weborf/doku.php Version: 0.12.2 Tested On: Debian 5 CVE: N/A ============================================================= Weborf...
Fobuc Guestbook 0.9 - SQL Injection Vulnerability
No description provided by source. Exploit Title : Fobuc Guestbook 0.9 SQL Injection Date : 11 June 2013 Exploit Author : CWH Underground Site : www.2600.in.th Vendor Homepage : http://sourceforge.net/projects/fobuc/ Software Link :...
Joomla Component Online Exam com_onlineexam Local File Inclusion Vulnerability
No description provided by source. ================================================================================================================ o Joomla Component Online Exam Local File Inclusion Vulnerability Software : comonlineexam version 1.5.0 Author : AntiSecurity Vrs-hCk NoGe OoNBoY...
miniCWB 2.1.1 - 'connector.php' Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/29368/info miniCWB is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser...
icecast server 1.3.12 - Directory Traversal information disclosure vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5189/info Icecast is a freely available, open source streaming audio server. Icecast is available for the Unix, Linux, and Microsoft Windows platforms. An attacker may exploit a directory traversal vulnerability in Icecas...
ftpzik (xss/lfi) Multiple Vulnerabilities
No description provided by source. ------------------------------------------------------------------------- -- JIKO FroM No-exploit.Com --- ------------------------------------------------------------------------- Author : jiko email : [email protected] Home : www.no-exploit.Com Script : FTPZI...
PHP Gift Registry 1.5.5 - SQL Injection
No description provided by source. Exploit Title: PHP Gift Registry 1.5.5 SQL Injection Date: 02/22/12 Author: G13 Software Link: https://sourceforge.net/projects/phpgiftreg/ Version: 1.5.5 Category: webapps php Vulnerability The userid parameter in the users.php file is vulnerable to SQL...
ComSndFTP 1.3.7 Beta - USER Format String (Write4) Vulnerability
No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit...
Active Auction House account.asp ReturnURL Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/13036/info Active Auction House is reportedly affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may...
Pars CMS 'RP' Parameter Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/38734/info Pars CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...
Journalness <= 4.1 (last_module) Remote Code Execution exploit
No description provided by source. !/usr/bin/perl Vendor url: journalness.sourceforge.net note: exploit requires Registerglobals = On in php.ini Iron http://www.randombase.com require LWP::UserAgent; print Journalness = 4.1 Remote Code Execution exploit By Iron - randombase.com Greets to everyone...
Linux Kernel 2.6.x 'drivers/char/tty_ldisc.c' NULL Pointer Dereference Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/36191/info The Linux kernel is prone to a local denial-of-service vulnerability. Attackers can exploit this issue to crash the affected kernel, denying service to legitimate users. Given the nature of this issue, attacker...
Microsoft Outlook 2003 Web Access Login Form Remote URI Redirection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12459/info A remote URI-redirection vulnerability affects Microsoft Outlook Web Access. This issue occurs because the application fails to properly sanitize URI-supplied data. An attacker may leverage this issue to carry...
News File Grabber 4.1.0.1 Subject Line Stack Buffer Overflow Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/22617/info News File Grabber is prone to a remote stack-based buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory...