Lucene search
+L
SeebugRecent

56796 matches found

seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•9 views

My Web Server 1.0.1/1.0.2 Long Get Request Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5954/info My Web Server is a web server software package distributed and maintained by MyWebServer LLC. It is designed for the Microsoft Windows operating system. It has been reported that My Web Server does not properly...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•19 views

HP-UX 10.x stmkfont Alternate Typeface Library Buffer Overflow Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/6836/info A buffer overflow vulnerability has been reported in the stmkfont utility shipped with HP-UX systems. The problem occurs due to insufficient bounds checking on user-suplied data to the alternate typeface library...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•17 views

Vivvo Article Manager <= 3.2 (classified_path) File Include Vulnerability

No description provided by source. !/usr/bin/env python coding: utf-8 import re from pocsuite.net import req from pocsuite.poc import Output, POCBase from pocsuite.utils import register class VivvoArticleManagerRemoteFileIncludePOCBase: vulID = '63958' version = '1' vulDate = '2006-09-09' author ...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•15 views

Apple Safari 3 for Windows Document.Location Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/24499/info Apple Safari for Windows is prone to a denial-of-service vulnerability because it fails to properly handle user-supplied input. An attacker may exploit this issue by enticing victims into opening a maliciously...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•16 views

DotBr 0.1 System.PHP3 Remote Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6866/info The DotBr 'system.php3' script is prone to a remote command execution vulnerability. This is due to insufficient sanitization of user-supplied data. Exploitation may result in execution of arbitrary shell comman...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•13 views

XOOPS MyTutorials Module 2.1 - 'printpage.php' SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/28230/info MyTutorials is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise t...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•24 views

Chipmunk Blog members.php membername Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/29883/info Chipmunk Blog is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in th...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•24 views

MS IE 4.0/5.0 ActiveX "Eyedog" Vulnerability

No description provided by source. Microsoft Internet Explorer 4.0/5.0 for Windows 95/Windows NT 4/Windows 2000/Windows 95/Windows 98 ActiveX Eyedog Vulnerability source: http://www.securityfocus.com/bid/619/info The Eyedog ActiveX control is marked 'safe for scripting' although it permits regist...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•26 views

timelive time and expense tracking 4.1.1 - Multiple Vulnerabilities

No description provided by source. Exploit Title : TimeLive Time and Expense Tracking = Multiple Vulnerabilities Vulnerability : Directory Traversal / Remote Database Download / File Download / Source Code Disclosure Date : 28/09/2011 Author : Nathaniel Carew Impact : High Software Link :...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•15 views

Solaris <= 7.0 cancel Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/293/info A buffer overrun condition was discovered in Solaris 2.6 X86 in /usr/bin/cancel. This buffer overflow is apparently present in the SPARC version as well although it is thought to be unexploitable. Previous versio...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•18 views

Iamma Simple Gallery 1.0/2.0 - Arbitrary File Upload Vulnerability

No description provided by source. Found by: X0r Iamma Simple Gallery Arbitrary File Upload Version: 1,2 ? Email: evolutionteam.x0atgmaildotcom Script Download:http://www.matteoiammarrone.com/public/modules.php?name=Downloads&dop=getit&lid=4 Script Download...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•23 views

Adobe Acrobat <= 9.1.1 Stack Overflow Crash PoC (osx/win)

No description provided by source. Acrobat = 9.1.1 Stack Overflow Crashy PoC http://www.exploit-db.com/sploits/2009-crashytheclown.pdf milw0rm.com 2009-05-29...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•8 views

Elevation of privileges under Windows Vista/7 (UAC Bypass) 0day

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•27 views

Sophos Products - Multiple Vulnerabilities

No description provided by source. List, I've completed the second paper in my series analyzing Sophos Antivirus internals, titled Practical Attacks against Sophos Antivirus. As the name suggests, this paper describes realistic attacks against networks using Sophos products. The paper includes a...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•19 views

CMS Made Simple 0.10 Index.PHP Cross-Site Scripting Vulnerability

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•18 views

Bloq 0.5.4 index.php page[path] Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/20512/info Bloq is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to compromise the application and the...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•20 views

FreeFTPD Remote Authentication Bypass Zeroday Exploit

No description provided by source. FreeFTPD all versions Remote System Level Exploit Zero-Day -- No username needed, straightforward rooting! Discovered & Exploited By Kingcope Year 2011 -- http://www.exploit-db.com/sploits/23079.zip Example banner: WeOnlyDo-wodFTPD 2.3.6.165 This package include...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•25 views

ELS Screen to Screen 1.0 - Multiple Password Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/551/info Screen to Screen is a remote control utility for systems runnig MacOS. To use it, you need to have an administrator password. This password is stored in encrypted form in a file called Authorization located in th...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•18 views

php Download Manager <= 1.1 - Local File Inclusion Vulnerability

No description provided by source. Author : BeyazKurt Contact : [email protected] Script : php Download Manager v1.1 & 1.0 Risk : Local File Include Download : http://sourceforge.net/project/showfiles.php?groupid=185482 File : include/body.inc.php Code : ?php if fileexists$content...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•12 views

Apple <= 2.0.4 Safari Unspecified Local Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/23825/info Apple Safari is prone to an unspecified local vulnerability. Few technical details are currently available. We will update this BID as more information emerges. tell application Safari do JavaScript...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•22 views

BlogPHP 2.0 - Persistent XSS Vulnerability

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•25 views

Microsoft Windows XP/2000/NT 4 Locator Service Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6666/info It has been reported that the Microsoft Windows Locator service is affected by a remotely exploitable buffer overflow vulnerability. The condition is due to a memory copy of RPC arguments received from remote...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•15 views

Joomla! VirtueMart Component 2.0.22a - SQL Injection

No description provided by source. ------------------------------------------------------------ Joomla! VirtueMart component = 2.0.22a - SQL Injection ------------------------------------------------------------ == Description == - Software link: http://www.virtuemart.net/ - Affected versions: Al...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•19 views

WikyBlog 1.7.3rc2 - Multiple Vulnerabilities

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•16 views

X7 Chat <= 2.0.4 (old_prefix) Remote Blind SQL Injection Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo X7 Chat =2.0.4 'oldprefix' blind SQL injection / privilege escalation exploit\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n; echo dork: \Powered By X7 Chat\r\n\r\n; if $argc3...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•15 views

321soft PhP-Gallery 0.9 index.php path Variable Arbitrary Directory Listing

No description provided by source. source: http://www.securityfocus.com/bid/17812/info PhP-Gallery is prone to an information-disclosure vulnerability and a cross-site scripting vulnerability. These issues are due to a failure in the application to properly sanitize user-supplied input. An attack...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•21 views

Joomla Component Memory Book com_memory Local File Inclusion Vulnerability

No description provided by source. ============================================================================================================ o Joomla Component Memory Book Local File Inclusion Vulnerability Software : commemory version 1.2 Author : AntiSecurity Vrs-hCk NoGe OoNBoY Paman zxvf...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•32 views

ProFTPD 1.2.0 (rc2) - memory leakage example Exploit

No description provided by source. / | Proftpd DoS | by Piotr Zurawski [email protected] | This source is just an example of memory leakage in proftpd-1.2.0rc2 | server discovered by Wojciech Purczynski. | / include stdio.h include unistd.h include stdlib.h include signal.h include time.h include...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•40 views

STUNSHELL Web Shell Remote Code Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•32 views

MySQL 3.20.32/3.22.x/3.23.x Null Root Password Weak Default Configuration Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/5503/info MySQL is is an open source relational database project, and is available for a number of operating systems, including Microsoft Windows. A weak default configuration problem has been reported in the Windows bina...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•22 views

Perl Net::DNS 0.48/0.59/0.60 DNS Response Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/26902/info The Perl Net::DNS module is prone to a remote denial-of-service vulnerability because the module fails to properly handle malformed DNS responses. Successfully exploiting this issue allows attackers to crash...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•30 views

OpenEMR Electronic Medical Record Software 3.2 - Multiple Vulnerabilities

No description provided by source. Redspin Security Notice -- RSN-2010-01 Multiple vulnerabilities in OpenEMR Electronic Medical Record Software Overview ---------------- Quote from http://www.oemr.org/ OpenEMR is a free medical practice management, electronic medical records, prescription writin...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•16 views

VU Case Manager Authentication Bypass

No description provided by source. 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ 0 0 \ \ /\ /\ \ \ \ /\ \ \ /\ /\ \ \ \ \ \ \ / 1 1 \ \ \ \\ \ \ /\ \...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•26 views

Zeus Web Server 4.x Admin Interface VS_Diag.CGI Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7751/info The Zeus Web Server contains a web based administration interface that is vulnerable to cross site scripting attacks. Due to insufficient sanitization of user-supplied input, it is possible for an attacker to...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•15 views

Kasseler CMS News Module 'id' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/38909/info Kasseler CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•16 views

SAMEDIA LandShop 0.6.3 ls.php Multiple Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/15709/info Landshop is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitatio...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•25 views

GnuPG 1.4.3/1.9.x Parse_User_ID Remote Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/18554/info GnuPG is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. This issue may allow remote...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•19 views

@lex Poll 1.2 - 'setup.php' Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/28520/info @lex Poll is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•12 views

Kasseler CMS 1.4.x lite (Module Jokes) SQL-Injection Exploit

No description provided by source. ?php echo \n\n\n; echo \n; echo Product: Kasseler CMS 1.4.x lite Module Jokes SQL-Injection Exploit \n; echo Usage: php.exe kasseler.php www.site.com /cmspath/ \n; echo Require: Magicquotes = off \n; echo Author: Sc0rpi0n RUS http://scorpion.su \n; echo Special...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•15 views

AL-Athkat.2.0 - Cross Site Scripting Vulnerability

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•31 views

Linux Kernel < 2.6.20.2 - IPv6_Getsockopt_Sticky Memory Leak PoC

No description provided by source. / Linux Kernel IPV6GetsockoptSticky Memory Leak Proof Of Concept dreyer 07-2007 Osu, Tatakae, Sexy Pandas! Dumps to stdout the memory mapped between INI and END. CVE: CVE-2007-1000 BID: 22904 Affected: Linux Kernel 2.6.20.2...

7.2CVSS6.5AI score0.011EPSS
SaveExploits7
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•27 views

SaphpLesson 2.0 Print.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/17239/info SaphpLesson is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could all...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•16 views

ClamAV Daemon 0.65 Malformed UUEncoded Message Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9610/info A problem in the handling of specially crafted UUEncoded messages has been identified in ClamAV. Because of this, an attacker may prevent the delivery of e-mail to users. Save the following file to /clamtest.mbo...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•32 views

Trillian 0.73/0.74 IRC PRIVMSG Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5755/info Trillian is an instant messaging client that supports a number of protocols including IRC, ICQ, MSN. It is available for Microsoft Windows systems. A buffer overflow has been discovered in Trillian version .73 a...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•25 views

Armida Databased Web Server 1.0 - Remote GET Request Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8017/info Armida Databased Web Server is reportedly prone to a remote denial of service when process malicious GET requests. The problem occurs when processing requests containing excessive data. Exploitation of this...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•19 views

paBugs <= 2.0 Beta 3 (main.php cid) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; if@ARGV 4 usage; exit; $host = $ARGV0; Host $path = $ARGV1; Path to paBugs directory $pref = $ARGV2; prefix for admin tables $usid = $ARGV3; user id $www = new LWP::UserAgent; $sql =...

6.7AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•11 views

Clansys 1.1 (showid) - Remote SQL Injection Exploit

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•46 views

TWiki History TWikiUsers rev Parameter Command Execution

No description provided by source. $Id: twikihistory.rb 9671 2010-07-03 06:21:31Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•16 views

Mozilla Multiple Products Server Refresh Header XSS

No description provided by source. source: http://www.securityfocus.com/bid/34656/info The Mozilla Foundation has released multiple security advisories specifying various vulnerabilities in Firefox, Thunderbird, and SeaMonkey. Attackers can exploit these issues to bypass same-origin restrictions,...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•13 views

Phorum 5.1.20 admin.php module[] Variable Path Disclosure

No description provided by source. source: http://www.securityfocus.com/bid/23616/info Phorum is prone to multiple input-validation vulnerabilities, including an unauthorized-access issue, privilege-escalation issue, multiple SQL-injection issues, and cross-site scripting issues, because the...

7.1AI score
SaveExploits0
Total number of security vulnerabilities56796