56796 matches found
ig shop 1.0 (eval/SQL Injection) Multiple Vulnerabilities
No description provided by source. If eval is the answer, then you are asking the wrong question. --Unknowen ig-shop suffers from two eval's that can be controlled by an attacker: http://127.0.0.1/igshop/cart.php?action=;phpinfo;// ./cart.php line 692: eval cart$action;;...
RealNetworks RealOne Player/RealPlayer RM File Remote Stack Based Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15381/info RealNetworks RealPlayer and RealOne Player are reported prone to a remote stack-based buffer-overflow vulnerability. The applications fail to perform boundary checks when parsing RM Real Media files. A remote...
MS Windows 2000/NT 4/XP Window Message Subsystem Design Error Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/5408/info A serious design error in the Win32 API has been reported. The issue is related to the inter-window message passing system. This vulnerability is wide-ranging and likely affects almost every Win32 window-based...
hztty 2.0 - Local root exploit (Tested on Red Hat 9.0)
No description provided by source. / 0x333hztty = hztty 2.0 local root exploit more info : Debian Security Advisory DSA 385-1 note I adjusted some part of hztty's code since there were some errors. hope this will not influence exploitation : tested against Red Hat 9.0 : c0wboy@0x333 c0wboy$ gcc...
Oracle ORADC ActiveX Control Remote Code Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/22026/info Oracle ORADC ActiveX control is prone to a remote code-execution vulnerability. Exploiting this issue allows remote attackers to execute arbitrary machine code in the context of applications using the affected...
DIGITAL UNIX 4.0 d/e/f,AIX <= 4.3.2,CDE <= 2.1,IRIX <= 6.5.14,Solaris <= 7.0 - Buffer Overflow
No description provided by source. / source: http://www.securityfocus.com/bid/635/info TRU64/DIGITAL UNIX 4.0 d/e/f,AIX = 4.3.2,Common Desktop Environment = 2.1,IRIX = 6.5.14,Solaris = 7.0 dtaction Userflag Buffer Overflow Vulnerability CDE is the Common Desktop Environment, an implementation of ...
PHPWebFTP 2.3 - Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/17688/info phpWebFTP is prone to multiple cross-site scripting vulnerabilities. These issues are due to the application's failure to properly sanitize user-supplied input using the HTTP 'POST' method when submitting a...
EasySite 2.0 - skin_chooser.php EASYSITE_BASE Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/28563/info EasySite is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and th...
netvolution cms 1.0 (xss/sql) Multiple Vulnerabilities
No description provided by source. Found By : Ellinas aka Greek Email: [email protected] Vulnerable Product: CMS netvolution v1.0 website : www.netvolution.net , www.atcom.gr SQL Injection Version Finding:...
AOL 9.5 ActiveX 0day Exploit (heap spray)
No description provided by source. html head titleAOL 9.5 ActiveX 0day Exploit heap spray /title br+ AOL 9.5 ActiveX 0day Exploit heap spray/br br+ Author : Dzattacker/br br+ Discovered by: Hellcode Research http://www.hellcode.net br+ Reference: http://www.exploit-db.com/exploits/11190 br+ Teste...
Authoria HR Suite AthCGI.EXE Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5932/info Authoria HR Suite is prone to cross-site scripting attacks. An attacker could construct a malicious link to a vulnerable host that contains arbitrary HTML and script code. If this link is visited by a web user,...
Joomla En Masse Component 1.2.0.4 - SQL Injection
No description provided by source...
AlienVault OSSIM 3.1 Reflected XSS and Blind SQL Injection
No description provided by source. !/usr/bin/python ''' AlienVault has a reflected XSS vulnerability in the url parameter of top.php. Proof of Concept: Enticing a logged in user to visit the following URL where an attacker is hosting an cookie grabber will allow for the hijacking of the user...
SUMON <= 0.7.0 (chg.php host) Command Execution Vulnerability
No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP YmmMMMM MMM YM Discovered by dun \ dunatstrcpy.pl sumon = 0.7.0 Remote Command Execution Vulnerability Script: Simple Unix MONitor sumon Script Site:...
MiniHTTPServer WebForums Server 1.x/2.0 - Remote Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7955/info It has been reported that WebForums Server does not properly handle some types of requests. Because of this, attackers may be able to gain access to files on the host server with the privileges of the web server...
WebCal 3.0 4 webcal.cgi Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/15917/info WebCal is prone to multiple HTML injection and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in dynamically...
CA BrightStor ARCserve Backup AddColumn() ActiveX Buffer Overflow
No description provided by source. $Id: cabrightstoraddcolumn.rb 9525 2010-06-15 07:18:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and ter...
Adobe Illustrator CS4 DLL Hijacking Exploit (aires.dll)
No description provided by source. / Exploit Title: Adobe Illustrator CS4 DLL Hijacking Exploit aires.dll Date: August 25, 2010 Author: Glafkos Charalambous glafkos@astalavistadotcom Version: CS4 v14.0.0 Tested on: Windows 7 x64 Ultimate Vulnerable extensions: .ait .eps Greetz: Astalavista, OffSE...
ezDatabase <= 2.0 (db_id) Remote Command Execution Exploit
No description provided by source. !/usr/bin/perl ezDatabase Remote Command Execution Exploit based on advisory by Pridels Team Copyright c 2006 cijfer cijfer@netti!fi All rights reserved. never ctrl+c again. cijfer$ http://target.com/dir host changed to 'http://target.com/dir' cijfer$ $Id:...
MS Visual Studio RAD Support Buffer Overflow Vulnerability (metasploit)
No description provided by source. source: http://www.securityfocus.com/bid/2906/info Due to an unchecked buffer in a subcomponent of FrontPage Server Extensions Visual InterDev RAD Remote Deployment Support, a specially crafted request via 'fp30reg.dll' could allow a user to execute arbitrary...
ProjectButler <= 0.8.4 (rootdir) Remote File Include Vulnerabilities
No description provided by source. projectbutler-0.8.4 Remote File Inclusion Vulnerability Download: http://prdownloads.sourceforge.net/projectbutler/projectbutler-0.8.4.tar.gz?download Found By: the master exploit: http://Target/Path/classes/Cache.class.php?rootdir=http://cmd.gif?...
Scratcher (SQL/XSS) Multiple Remote Vulnerability
No description provided by source. + Scratcher SQL/XSS Multiple Remote Vulnerability 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ 0 0 \ \ /\ /\ \ \ \ /\ \ \ /...
Qpopper 3/4 Username Information Disclosure Weakness
No description provided by source. source: http://www.securityfocus.com/bid/7110/info An information disclosure weakness has been reported for Qpopper when authenticating. The weakness is due to the fact that if a valid username is sent with a bad password, Qpopper will wait a small amount of tim...
Todd Woolums ASP News Management 2.2 - SQL Injection Vulnerabiltiy
No description provided by source. |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ \ | | \ \ /\ /\ \ \ \ /\ \L\ /\ /\ \ \ \ \ \ \ / /\ \L\ \ | |...
Open Realty 2.x and 3.x Persistent XSS Vulnerability
No description provided by source...
phpFreeChat 1.1 'demo21_with_hardocded_urls.php' Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30292/info phpFreeChat is prone to an unspecified cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...
phpMyWebmin <= 1.0 (target) Remote File Include Vulnerabilities
No description provided by source...
IF-CMS Index.PHP Cross-Site Scripting Vulnerability
No description provided by source...
MoSpray Mambo Component <= 18RC1 Remote Include Vulnerability
No description provided by source. Kurdish Security MoSpray Remote File Include Vulnerability Original Advisory : http://kurdishsecurity.blogspot.com/2006/07/kurdish-security-14-mospray-basedir.html Freedom For Ocalan Contact : irc.gigachat.net kurdhack & www.PatrioticHackers.com Rish : High Clas...
WinAsm Studio 5.1.5.0 - Local Heap Overflow PoC
No description provided by source. WinAsm Studio 5.1.5.0 Local Heap Overflow Poc By Mountassif Moad D0wnload : http://www.winasm.net/index.php?ind=downloads&op=downloadfile&ide=182&file=WinAsm515Full.zip Greatz : Simo-Soft - Skd - fl0 fl0w - Str0ke & By By milw0rm :d Registers EAX 00000001 ECX...
Dokeos <= 1.8.4 main/mySpace/index.php tracking_list_coaches_column Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/27792/info Dokeos is prone to multiple input-validation vulnerabilities including five SQL-injection issues, one HTML-injection issue, three cross-site scripting issues, and one arbitrary-file-upload issue. Attackers can...
Apple Mac OS X Safari <= 2.0.3 (417.9.2) (ROWSPAN) DoS PoC
No description provided by source. !-- Apple Mac OS X Safari 2.0.3 Vulnerability ========================================= Author: Yannick von Arx Email: yannickdotvonarxatyanuxdotch Release Date: April 23th, 2006 Vendor: Apple Computer Inc. Tested on: iBook G4 1.2 GHz with Mac OS X 10.4.5 Build...
Trillian 3.1.9 - DTD File XML Parser Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28747/info Trillian is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. To exploit this issue, an attacker must entice an unsuspecting user to load a...
FuseWare FuseMail 2.7 POP Mail Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/634/info There is a buffer overflow in the FuseMail POP service long USER,PASS that may allow an intruder to execute arbitrary code on the target server. FuseMail 2.7...
HyperStop WebHost Directory 1.2 Database Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/31249/info HyperStop WebHost Directory is reported prone to an information-disclosure vulnerability. Successful exploits of this issue may allow an attacker to obtain sensitive information by downloading the full contents...
Ipswitch Instant Messaging 2.0.8.1 Multiple Security Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/27677/info Ipswitch Instant Messaging is prone to multiple security vulnerabilities, including a denial-of-service vulnerability, a format-string vulnerability, and a vulnerability that allows attackers to overwrite...
TCLHttpd 3.4.2 - Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/8688/info It has been reported that several of the modules included with TCLHTtpd are vulnerable to cross-site scripting attacks. According to the report, the Status, Debug, Mail and Admin modules are affected by these...
ActiveCampaign KnowledgeBuilder 2.2 - Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/20020/info ActiveCampaign KnowledgeBuilder is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. This may allow an attacker to compromise the application and the...
Microsoft Media Player - (quartz.dll .wav) Multiple Remote DoS Vulns
No description provided by source. ! /usr/bin/perl CAL2quartzwavpoc.pl TwoMircoSoftMediaplayerquartz.dllwavremoteDosvulnerabilities by Code Audit Labs public 2009-04-19 http://www.vulnhunt.com/ Affected ======== test on full updated winxp sp3 windows media Player 10.00.00.3998 quartz.dll...
Array Networks vxAG 9.2.0.34 and vAPV 8.3.2.17 - Multiple Vulnerabilities
No description provided by source. ----------- Author: ----------- xistence xistenceat0x90.nl ------------------------- Affected products: ------------------------- Array Networks vxAG 9.2.0.34 and vAPV 8.3.2.17 appliances ------------------------- Affected vendors: ------------------------- Arra...
PHP Pro Bid 5.2.4 categories.php orderType Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/19158/info PHP Pro Bid is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful...
Joomla! and Mambo 'com_omnirealestate' Component - 'objid' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27783/info The 'comomnirealestate' component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this...
dbhcms 1.1.4 - Stored XSS
No description provided by source. Title: DBHcms 1.1.4 Stored XSS Vendor: http://www.drbenhur.com Dork: powered by DBHcms AUTHOR: ITSecTeam Email: [email protected] Website: http://www.itsecteam.com Forum : http://forum.ITSecTeam.com Original Advisory:...
Ajax File Manager Directory Traversal
No description provided by source. Exploit Title: Ajax File Manager DirectoryTraversal Google Dork: inurl: plugins/ajaxfilemanager Date: 03/07/2014 Exploit Author: Eduardo Alves edudx9 Vendor Homepage: phpletter.com Software Link: http://phpletter.com/Demo/Ajax-File--Manager/ Version: app version...
multibanners Mambo Component <= 1.0.1 - Remote Inclusion Vulnerability
No description provided by source. SolpotCrew Community Com Multibanners Remote File Inclusion mosConfigabsolutepath original advisory : http://solpotcrew.org/adv/BlueSpy-adv-multibanners.txt Bug Found By :Blue|Spy contact: [email protected] Website : http://kunamgede.biz, http://blue-spy.net...
Joomla LMO Component <= 1.0b2 Remote Include Vulnerability
No description provided by source. Application : LMO - Joomla! Component URL : http://forge.joomla.org/sf/projects/lmo Variable $mosConfigabsolutepath not sanitized: xpl works with registerglobals=on in components/comlmo/lmo.php on line 11-12...
D-Link Routers - Multiple Vulnerabilities
No description provided by source. The following five D-Link model routers suffer from several vulnerabilities including Clear Text Storage of Passwords, Cross Site Scripting and Sensitive Information Disclosure. DIR-652 D-Link Wireless N Gigabit Home Router DIR-835 D-Link Network DIR-835L Wirele...
OpenDocMan 1.2.5 index.php last_message Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/36777/info OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an...
VBulletin 2.0/2.2.x Cross Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/5997/info vBulletin does not filter HTML tags from URI parameters, making it prone to cross-site scripting attacks. As a result, it is possible for a remote attacker to create a malicious link containing script code which...
IPB 3.0.1 - SQL Injection exploit
No description provided by source. ?php errorreportingEALL; /////////////////////////////////////////////////////////////////////// /////////////////////////////////////////////////////////////////////// // IPB 3.0.1 sql injection exploit // Version 1.0 // written by Cryptovirus //...