56796 matches found
My Web Server 1.0.1/1.0.2 Long Get Request Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5954/info My Web Server is a web server software package distributed and maintained by MyWebServer LLC. It is designed for the Microsoft Windows operating system. It has been reported that My Web Server does not properly...
HP-UX 10.x stmkfont Alternate Typeface Library Buffer Overflow Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/6836/info A buffer overflow vulnerability has been reported in the stmkfont utility shipped with HP-UX systems. The problem occurs due to insufficient bounds checking on user-suplied data to the alternate typeface library...
Vivvo Article Manager <= 3.2 (classified_path) File Include Vulnerability
No description provided by source. !/usr/bin/env python coding: utf-8 import re from pocsuite.net import req from pocsuite.poc import Output, POCBase from pocsuite.utils import register class VivvoArticleManagerRemoteFileIncludePOCBase: vulID = '63958' version = '1' vulDate = '2006-09-09' author ...
Apple Safari 3 for Windows Document.Location Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/24499/info Apple Safari for Windows is prone to a denial-of-service vulnerability because it fails to properly handle user-supplied input. An attacker may exploit this issue by enticing victims into opening a maliciously...
DotBr 0.1 System.PHP3 Remote Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6866/info The DotBr 'system.php3' script is prone to a remote command execution vulnerability. This is due to insufficient sanitization of user-supplied data. Exploitation may result in execution of arbitrary shell comman...
XOOPS MyTutorials Module 2.1 - 'printpage.php' SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28230/info MyTutorials is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise t...
Chipmunk Blog members.php membername Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/29883/info Chipmunk Blog is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in th...
MS IE 4.0/5.0 ActiveX "Eyedog" Vulnerability
No description provided by source. Microsoft Internet Explorer 4.0/5.0 for Windows 95/Windows NT 4/Windows 2000/Windows 95/Windows 98 ActiveX Eyedog Vulnerability source: http://www.securityfocus.com/bid/619/info The Eyedog ActiveX control is marked 'safe for scripting' although it permits regist...
timelive time and expense tracking 4.1.1 - Multiple Vulnerabilities
No description provided by source. Exploit Title : TimeLive Time and Expense Tracking = Multiple Vulnerabilities Vulnerability : Directory Traversal / Remote Database Download / File Download / Source Code Disclosure Date : 28/09/2011 Author : Nathaniel Carew Impact : High Software Link :...
Solaris <= 7.0 cancel Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/293/info A buffer overrun condition was discovered in Solaris 2.6 X86 in /usr/bin/cancel. This buffer overflow is apparently present in the SPARC version as well although it is thought to be unexploitable. Previous versio...
Iamma Simple Gallery 1.0/2.0 - Arbitrary File Upload Vulnerability
No description provided by source. Found by: X0r Iamma Simple Gallery Arbitrary File Upload Version: 1,2 ? Email: evolutionteam.x0atgmaildotcom Script Download:http://www.matteoiammarrone.com/public/modules.php?name=Downloads&dop=getit&lid=4 Script Download...
Adobe Acrobat <= 9.1.1 Stack Overflow Crash PoC (osx/win)
No description provided by source. Acrobat = 9.1.1 Stack Overflow Crashy PoC http://www.exploit-db.com/sploits/2009-crashytheclown.pdf milw0rm.com 2009-05-29...
Elevation of privileges under Windows Vista/7 (UAC Bypass) 0day
No description provided by source...
Sophos Products - Multiple Vulnerabilities
No description provided by source. List, I've completed the second paper in my series analyzing Sophos Antivirus internals, titled Practical Attacks against Sophos Antivirus. As the name suggests, this paper describes realistic attacks against networks using Sophos products. The paper includes a...
CMS Made Simple 0.10 Index.PHP Cross-Site Scripting Vulnerability
No description provided by source...
Bloq 0.5.4 index.php page[path] Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/20512/info Bloq is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to compromise the application and the...
FreeFTPD Remote Authentication Bypass Zeroday Exploit
No description provided by source. FreeFTPD all versions Remote System Level Exploit Zero-Day -- No username needed, straightforward rooting! Discovered & Exploited By Kingcope Year 2011 -- http://www.exploit-db.com/sploits/23079.zip Example banner: WeOnlyDo-wodFTPD 2.3.6.165 This package include...
ELS Screen to Screen 1.0 - Multiple Password Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/551/info Screen to Screen is a remote control utility for systems runnig MacOS. To use it, you need to have an administrator password. This password is stored in encrypted form in a file called Authorization located in th...
php Download Manager <= 1.1 - Local File Inclusion Vulnerability
No description provided by source. Author : BeyazKurt Contact : [email protected] Script : php Download Manager v1.1 & 1.0 Risk : Local File Include Download : http://sourceforge.net/project/showfiles.php?groupid=185482 File : include/body.inc.php Code : ?php if fileexists$content...
Apple <= 2.0.4 Safari Unspecified Local Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/23825/info Apple Safari is prone to an unspecified local vulnerability. Few technical details are currently available. We will update this BID as more information emerges. tell application Safari do JavaScript...
BlogPHP 2.0 - Persistent XSS Vulnerability
No description provided by source...
Microsoft Windows XP/2000/NT 4 Locator Service Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6666/info It has been reported that the Microsoft Windows Locator service is affected by a remotely exploitable buffer overflow vulnerability. The condition is due to a memory copy of RPC arguments received from remote...
Joomla! VirtueMart Component 2.0.22a - SQL Injection
No description provided by source. ------------------------------------------------------------ Joomla! VirtueMart component = 2.0.22a - SQL Injection ------------------------------------------------------------ == Description == - Software link: http://www.virtuemart.net/ - Affected versions: Al...
WikyBlog 1.7.3rc2 - Multiple Vulnerabilities
No description provided by source...
X7 Chat <= 2.0.4 (old_prefix) Remote Blind SQL Injection Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo X7 Chat =2.0.4 'oldprefix' blind SQL injection / privilege escalation exploit\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n; echo dork: \Powered By X7 Chat\r\n\r\n; if $argc3...
321soft PhP-Gallery 0.9 index.php path Variable Arbitrary Directory Listing
No description provided by source. source: http://www.securityfocus.com/bid/17812/info PhP-Gallery is prone to an information-disclosure vulnerability and a cross-site scripting vulnerability. These issues are due to a failure in the application to properly sanitize user-supplied input. An attack...
Joomla Component Memory Book com_memory Local File Inclusion Vulnerability
No description provided by source. ============================================================================================================ o Joomla Component Memory Book Local File Inclusion Vulnerability Software : commemory version 1.2 Author : AntiSecurity Vrs-hCk NoGe OoNBoY Paman zxvf...
ProFTPD 1.2.0 (rc2) - memory leakage example Exploit
No description provided by source. / | Proftpd DoS | by Piotr Zurawski [email protected] | This source is just an example of memory leakage in proftpd-1.2.0rc2 | server discovered by Wojciech Purczynski. | / include stdio.h include unistd.h include stdlib.h include signal.h include time.h include...
STUNSHELL Web Shell Remote Code Execution
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
MySQL 3.20.32/3.22.x/3.23.x Null Root Password Weak Default Configuration Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/5503/info MySQL is is an open source relational database project, and is available for a number of operating systems, including Microsoft Windows. A weak default configuration problem has been reported in the Windows bina...
Perl Net::DNS 0.48/0.59/0.60 DNS Response Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26902/info The Perl Net::DNS module is prone to a remote denial-of-service vulnerability because the module fails to properly handle malformed DNS responses. Successfully exploiting this issue allows attackers to crash...
OpenEMR Electronic Medical Record Software 3.2 - Multiple Vulnerabilities
No description provided by source. Redspin Security Notice -- RSN-2010-01 Multiple vulnerabilities in OpenEMR Electronic Medical Record Software Overview ---------------- Quote from http://www.oemr.org/ OpenEMR is a free medical practice management, electronic medical records, prescription writin...
VU Case Manager Authentication Bypass
No description provided by source. 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ 0 0 \ \ /\ /\ \ \ \ /\ \ \ /\ /\ \ \ \ \ \ \ / 1 1 \ \ \ \\ \ \ /\ \...
Zeus Web Server 4.x Admin Interface VS_Diag.CGI Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7751/info The Zeus Web Server contains a web based administration interface that is vulnerable to cross site scripting attacks. Due to insufficient sanitization of user-supplied input, it is possible for an attacker to...
Kasseler CMS News Module 'id' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/38909/info Kasseler CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...
SAMEDIA LandShop 0.6.3 ls.php Multiple Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/15709/info Landshop is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitatio...
GnuPG 1.4.3/1.9.x Parse_User_ID Remote Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18554/info GnuPG is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. This issue may allow remote...
@lex Poll 1.2 - 'setup.php' Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28520/info @lex Poll is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...
Kasseler CMS 1.4.x lite (Module Jokes) SQL-Injection Exploit
No description provided by source. ?php echo \n\n\n; echo \n; echo Product: Kasseler CMS 1.4.x lite Module Jokes SQL-Injection Exploit \n; echo Usage: php.exe kasseler.php www.site.com /cmspath/ \n; echo Require: Magicquotes = off \n; echo Author: Sc0rpi0n RUS http://scorpion.su \n; echo Special...
AL-Athkat.2.0 - Cross Site Scripting Vulnerability
No description provided by source...
Linux Kernel < 2.6.20.2 - IPv6_Getsockopt_Sticky Memory Leak PoC
No description provided by source. / Linux Kernel IPV6GetsockoptSticky Memory Leak Proof Of Concept dreyer 07-2007 Osu, Tatakae, Sexy Pandas! Dumps to stdout the memory mapped between INI and END. CVE: CVE-2007-1000 BID: 22904 Affected: Linux Kernel 2.6.20.2...
SaphpLesson 2.0 Print.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17239/info SaphpLesson is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could all...
ClamAV Daemon 0.65 Malformed UUEncoded Message Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9610/info A problem in the handling of specially crafted UUEncoded messages has been identified in ClamAV. Because of this, an attacker may prevent the delivery of e-mail to users. Save the following file to /clamtest.mbo...
Trillian 0.73/0.74 IRC PRIVMSG Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5755/info Trillian is an instant messaging client that supports a number of protocols including IRC, ICQ, MSN. It is available for Microsoft Windows systems. A buffer overflow has been discovered in Trillian version .73 a...
Armida Databased Web Server 1.0 - Remote GET Request Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8017/info Armida Databased Web Server is reportedly prone to a remote denial of service when process malicious GET requests. The problem occurs when processing requests containing excessive data. Exploitation of this...
paBugs <= 2.0 Beta 3 (main.php cid) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; if@ARGV 4 usage; exit; $host = $ARGV0; Host $path = $ARGV1; Path to paBugs directory $pref = $ARGV2; prefix for admin tables $usid = $ARGV3; user id $www = new LWP::UserAgent; $sql =...
Clansys 1.1 (showid) - Remote SQL Injection Exploit
No description provided by source...
TWiki History TWikiUsers rev Parameter Command Execution
No description provided by source. $Id: twikihistory.rb 9671 2010-07-03 06:21:31Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Mozilla Multiple Products Server Refresh Header XSS
No description provided by source. source: http://www.securityfocus.com/bid/34656/info The Mozilla Foundation has released multiple security advisories specifying various vulnerabilities in Firefox, Thunderbird, and SeaMonkey. Attackers can exploit these issues to bypass same-origin restrictions,...
Phorum 5.1.20 admin.php module[] Variable Path Disclosure
No description provided by source. source: http://www.securityfocus.com/bid/23616/info Phorum is prone to multiple input-validation vulnerabilities, including an unauthorized-access issue, privilege-escalation issue, multiple SQL-injection issues, and cross-site scripting issues, because the...