56796 matches found
BES-CMS 0.4/0.5 folder.php File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9268/info It has been reported that BES-CMS is vulnerable to a remote file include vulnerability that may allow an attacker to include malicious files containing arbitrary code to be executed on a vulnerable system. The...
NPDS 4.8 News Message HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5797/info Problems with NPDS could make it possible to execute arbitrary script code in a vulnerable client. NPDS does not sufficiently filter potentially malicious HTML code from news posts. As a result, when a user view...
Simple PHP Agenda 2.2.8 (edit_event.php, eventid param) - SQL Injection
No description provided by source...
bzexe (bzip2) race condition
No description provided by source. / bzexecPoC.c -- bzip2 bzexe race condition PoC Author: vladz http://vladz.devzero.fr Tested on: Debian 6.0.3 up to date bzip2 version 1.0.5-6 This PoC exploits a race condition in the bzexe script. This tool is rarely used so I wasn't supposed to write an...
OSCommerce 2.1/2.2 Info_Message Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7153/info It has been reported that osCommerce does not sufficiently filter URI parameters supplied to multiple osCommerce scripts. As a result of this deficiency, it is possible for a remote attacker to create a maliciou...
gnu wget 1.x Multiple Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/11871/info Multiple remote vulnerabilities reportedly affect GNU wget. These issues are due to the application's failure to properly sanitize user-supplied input and to properly validate the presence of files before writi...
FluxBB 1.5.3 - Multiple Vulnerabilities
No description provided by source. !-- FluxBB 1.5.3 Multiple Remote Vulnerabilities Vendor: FluxBB Product web page: http://www.fluxbb.org Affected version: 1.5.3 Summary: FluxBB is fast, light, user-friendly forum software for your website. Desc: FluxBB suffers from a cross-site scripting,...
GnuPG 1.4/1.9 Parse_Comment Remote Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19110/info GnuPG is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. This issue may allow remote...
Zabbix <= 1.8.4 (popup.php) SQL Injection
No description provided by source...
phpCMS 1.1.7 parser.php PHPCMS_INCLUDEPATH Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/21768/info phpCMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the...
ColdUserGroup 1.06 - Blind SQL Injection Exploit
No description provided by source. !/usr/bin/python ColdGen - coldusergroup v1.06 0day Remote Blind SQL Injection Exploit Vendor: http://www.coldgen.com/ Found by: mrme ----------------------------------------------- Script provided 'as is', without any warranty. Use for educational purposes only...
PHP Classifieds 6.20 - Multiple Cross Site Scripting and Authentication Bypass Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/28521/info PHP Classifieds is prone to multiple cross-site scripting vulnerabilities and an authentication-bypass vulnerability. An attacker may leverage these issues to gain unauthorized access to the affected applicatio...
webgrind 1.0 (file param) Local File Inclusion Vulnerability
No description provided by source. webgrind 1.0 file param Local File Inclusion Vulnerability Vendor: Joakim Nygard and Jacob Oettinger Product web page: http://code.google.com/p/webgrind Affected version: 1.0 v1.02 in trunk on github Summary: Webgrind is an Xdebug profiling web frontend in PHP5...
Microsoft Internet Explorer 6.0 - Multiple Object ListWidth Property Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19113/info Microsoft Internet Explorer is prone to a denial-of-service vulnerability. This issue is triggered when an attacker convinces a victim user to visit a malicious website. Remote attackers may exploit this issue ...
phpBB <= 2.0.15 Register Multiple Users Denial of Service (perl code)
No description provided by source. !/usr/bin/perl Name: NsT-phpBBDoS Perl Version Copyright: Neo Security Team Author: HaCkZaTaN Ported: g30rg3x Date: 20/06/05 Description: NsT-phpBB DoS By HackZatan Ported tu perl By g30rg3x A Simple phpBB Registration And Search DoS Flooder...
UBB Threads < 6.5.2 Beta (mailthread.php) SQL Injection Exploit
No description provided by source. ?php T r a p - S e t U n d e r g r o u n d H a c k i n g T e a m Vulnerable: UBBCentral SQL Injection Exploit By : MHp0rtal Discovered By: James Bercegay Gr33tz To == Alphaprogrammer , Oilkarchack , TheCephaleX , Str0ke And Iranian Hacking & Security Teams : IHS...
Rumpus 5.1 - Local Privilege Escalation / Remote FTP LIST PoC Exploit
No description provided by source. !/usr/bin/ruby Copyright c Lance M. Havok lmh at info-pull.com Kevin Finisterre kflists at digitalmunition.com Proof of concept for issues described in MOAB-18-01-2007. require 'net/ftp' require 'socket' bugselected = ARGV0 || 0.toi targethost = ARGV1 || localho...
SmartVmd ActiveX 1.1 - Remote File Overwrite Exploit
No description provided by source. HTML BODY b Author : Houssamix br/ br/ br/ SmartVmd ActiveX v 1.1 remote File Overwrite Exploit br/ download : http://www.smartvmd.com/setup/SetupActiveXVmd.msi br/ b/ object id=hsmx classid=clsid:E3462D53-47A6-11D8-8EF6-DAE89272743C/object SCRIPT / Report for...
Booby 1.0.1 - Multiple Remote File Inclusion Vulnerabilities
No description provided by source. software name: Booby version: 1.0.1 description: A Webbased Personal Information Manager PIM with support for bookmarks, calendar, contacts, notes, news and tasks. download:...
DUware DUforum 3.0/3.1 userEdit.asp id Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/14035/info DUforum is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to...
Wordpress Plugin e-Commerce <= 3.8.6 - SQL Injection Vulnerability
No description provided by source. Exploit Title: WordPress WP e-Commerce plugin = 3.8.6 SQL Injection Vulnerability Date: 2011-09-13 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/wp-e-commerce.3.8.6.zip Version: 3.8.6 tested...
MiniWeb 0.8.19 Remote Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/34563/info MiniWeb is prone to a remote buffer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a...
razorCMS 0.3RC2 Multiple Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/34566/info razorCMS is prone to a local information-disclosure vulnerability, a local access-validation vulnerability, a security-bypass vulnerability, and multiple cross-site-scripting vulnerabilities. Attackers can...
UeberProject <= 1.0 (login/secure.php) Remote File Include Vulnerability
No description provided by source...
Microsoft Crypto API X.509 Certificate Validation - Remote Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28548/info Microsoft's Crypto API library is prone to an information-disclosure vulnerability because HTTP requests to arbitrary hosts and ports may be automatically triggered when validating X.509 certificates. Successfu...
phpCMS 1.1.7 phpCMS include/class.session_phpcms.php PHPCMS_INCLUDEPATH Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/21768/info phpCMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the...
BigAnt Server 2.52 - Remote Buffer Overflow Exploit (2)
No description provided by source. !/usr/bin/python BigAnt Server 2.52 remote buffer overflow exploit 2 Author: DouBleZer0 Vulnerability discovered by Lincoln a another version of the original exploit by Lincoln application is little hazy.. import sys,socket host = sys.argv1 buffer= \x90 20...
Geeklog 1.3.x XSS
No description provided by source. source: http://www.securityfocus.com/bid/8718/info Geeklog is prone to multiple vulnerabilities, including cross-site scripting and SQL injection issues. Exploitation of these issues could permit unauthorized access to user accounts and sensitive information. So...
ProjectApp 3.3 search_employees.asp keywords Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/16011/info ProjectApp is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have...
Blender 2.36 BVF File Import Python Code Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17663/info Blender is susceptible to a Python code-execution vulnerability. This issue is due to the application's failure to properly sanitize user-supplied input before using it in a Python 'eval' statement. This issue...
MyBulletinBoard (MyBB) <= 1.04 (misc.php COMMA) SQL Injection (2)
No description provided by source. !/usr/bin/perl -w MyBB = 1.04 misc.php COMMA Remote SQL Injection Exploit 2 , Perl C0d3 Milw0rm ID :- http://www.milw0rm.com/auth.php?id=1539 D3vil-0x1 | Devil-00 BlackHat : DONT FORGET TO DO YOUR CONFIG !! DONT FORGET TO DO YOUR CONFIG !! DONT FORGET TO DO YOUR...
Belkin N150 Wireless Router Password Disclosure
No description provided by source...
PlatinumFTPServer 1.0.6 Dot-Dot-Slash Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6554/info PlatinumFTPserver is an FTP server for Microsoft Windows systems. It is commercially available, and distributed by PlatinumFTP. A directory traversal vulnerability has been reported in PlatinumFTPserver. The...
Sun i-Runbook 2.5.2 Directory And File Content Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5209/info Sun i-Runbook is a single point of technical and administration management for Sun production environments. i-Runbook provides a web interface. i-Runbook can be led to disclose the contents of a known resource...
YahooPOPs <= 1.6 SMTP Remote Buffer Overflow Exploit
//Diabolic Crab's exploit for YahooPOPs = 1.6 SMTP //[email protected] //www.hackerscenter.com //For more work check out, http://icis.digitalparadox.org //This was done at 4 am so escuse the messy code if any //Good job class101 on the windows version ; include stdio.h include stdlib.h...
Winamp <= 5.21 (Midi File Header Handling) Buffer Overflow PoC
/ Winamp 5.21 - Midi Buffer Overflow inmidi.dll PoC coded by: BassReFLeX Date: 19 Jun 2006 / include stdio.h include stdlib.h include string.h void usagechar file; char header = \x4D\x54\x68\x64\x00\x00 \x00\x06\x00\x00\x00\x01 \x00\x60\x4D\x54\x72\x6B \x00\x00; char badc0de =...
icblogger 2.0 - (YID) Remote SQL Injection Vulnerability
No description provided by source. Icblogger = YID Remote Blind SQL Injection - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Credit by | Chironex Fleckeri Mail | [email protected] - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Usage :...
Wordpress <= 1.5.1.2 xmlrpc Interface SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w sorry for the late posting, had to test it. /str0ke Wordpress 1.5.1.2 Strayhorn // XMLRPC Interface SQL Injection By James Bercegay // http://www.gulftech.org/ // June 21 2005 Quick and dirty proof of concept that uses the XML RPC server...
DataLife Engine <= 4.1 - Remote SQL Injection Exploit (perl)
No description provided by source. !/usr/bin/perl DataLife Engine sql injection exploit by RST/GHC coded by 1dt.w0lf RST/GHC http://rst.void.ru http://ghc.ru 18.06.06 use LWP::UserAgent; use Getopt::Std; getopts'u:n:p:'; $url = $optu; $name = $optn; $prefix = $optp || 'dle'; if!$url || !$name $sn...
sirang web-based d-control Multiple Vulnerabilities
No description provided by source. ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | Day 8 0 day | | | | || / \ || | | | || ||// \/|/ ''' - Title : Sirang Web-Based D-Control Multiple Remote Vulnerabilities - Affected Version : = v6.0 - Vendor Site :...
viart shop 4.0.5 - CSRF Vulnerability
No description provided by source. +-------------------------------------------------------------------------+ Software : viart shop 4.0.5 Author : Or4nG.M4N Date : n/a Dork : inurl:powered by viart shop 4.0.5 Software Link : http://www.viart.com/...
Annuaire 1Two 2.2 - Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Affected.scr..: Annuaire 1Two 2.2 Poc.ID........: 09060902.txt Type..........: SQL Injection without quote Risk.level....: Medium Vendor.Status.: Unpatched Src.download..: http://www.1two.org/ Poc.link......: acid-root.new.fr/poc/09060902.txt...
Joomla Component com_communitypolls 1.5.2 - LFI Vulnerability
No description provided by source. !===========================================================================! Joomla Component comcommunitypolls LFI Vulnerability Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : 16 February, 2010...
festos cms 2.3b Multiple Vulnerabilities
No description provided by source. ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | Day 9 0day | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-9-festos-cms-2-3b-multiple-remote-vulnerabilities/ ''' Title : FestOS CMS 2.3b Multiple Remote...
Xoops <= 2.2.3 Search.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/20514/info Xoops is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an...
Microsoft IIS 4/5 SMTP Service Encapsulated SMTP Address Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5213/info Microsoft Exchange 5.5 and the SMTP Simple Mail Transfer Protocol service included with IIS Internet Information Services 4.0 and 5.0 are vulnerable to an encapsulated SMTP address vulnerability. The vulnerabili...
Solaris 8 dtspcd - Heap Overflow
No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...
PHPKick 0.8 - statistics.php SQL Injection Exploit
No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import Output, POCBase from pocsuite.utils import register class TestPOCPOCBase: vulID = '69551' version = '1' author = 'RickGray' vulDate = '2010-08-08' createDate = '2015-10-15'...
AOL Desktop 9.6 RTX Buffer Overflow
No description provided by source. $Id: aoldesktoplinktag.rb 12284 2011-04-08 23:09:31Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms...
Newsscript 1.0 Administrative Privilege Elevation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7705/info A vulnerability has been reported that could enable a member of the news system to create and access an administrative account. This is due to insufficient validation of data supplied to account editing input...