56796 matches found
phpBB <= 2.0.16 XSS Remote Cookie Disclosure Exploit
No description provided by source. / 1 Change milw0rm.com to your domain.com 2 Post the below code into a new message. Example Output: ... - - 09/Jul/2005:03:09:13 -0500 GET...
Berlios GPSD Format String Vulnerability
No description provided by source. $Id: gpsdformatstring.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
Novell Groupwise Address Book Remote Code Execution
No description provided by source. Application: Novell Groupwise Address Book Remote Code Execution Platforms: Windows Exploitation: Remote code execution CVE Number: 2011-4189 Novell TID: 733885 PRL: 2012-04 Author: Francis Provencher Protek Research Lab's Website:...
SuSE 6.x/7.0 MkDir Error Handling rctab Race Condition Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/2207/info rctab is the Run Control Tab script included with the SuSE distribution of the Linux Operating System. SuSE is a freely available, Open Source Operating system maintained by SuSE Incorporated. A race condition i...
Simple PHP Blog <= 0.4.7.1 - Remote Command Execution Exploit
No description provided by source. !/usr/bin/perl use IO::Socket; print Simple PHP Blog = 0.4.7.1 cmmnds xctn exploit\r\n; print through arbitrary local inclusion\r\n; print rgod [email protected]\r\n; print - this works with magicquotesgpc = Off\r\n\r\n; short explaination: we have this code in...
Five Star Review Script 0 index2.php sort Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/18390/info Five Star Review Script is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to run arbitrary HTML a...
Squid NTLM Authenticate Overflow
No description provided by source. $Id: squidntlmauthenticate.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and ter...
AneCMS 1.3 Persistant XSS Vulnerability
No description provided by source. Exploit Title: AneCMS 1.3 Persistant XSS Date: 17.1.2011 Author: Penguin Visit: www.null-sector.info Software Link: http://anecms.com/anecms.zip Version: 1.3 Tested on: Linux I Vulnerability ---------------------- You can add blogpost comments that does not get...
Abyss Web Server 1.0 File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4466/info Abyss Web Server is a freely available personal web server. It is maintained by Aprelium Technologies and runs on Microsoft Windows operating systems, as well as Linux. It is possible for a remote attacker to...
PhpGedView 2.5/2.6 Placelist.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11910/info It is reported that PhpGedView is susceptible to a remote SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input prior to including it in an SQL...
Five Star Review Script 0 report.php item_id Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/18390/info Five Star Review Script is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to run arbitrary HTML a...
iManager Plugin 1.2.8 (d) - Remote Arbitrary File Deletion Vulnerability
No description provided by source. iManager Plugin v1.2.8 d Remote Arbitrary File Deletion Vulnerability Vendor: net4visions.com Product web page: http://www.net4visions.com Affected version: = 1.2.8 Build 02012008 Summary: With iManager you can manage your files/images on your webserver, and it...
LoveCMS 1.4 index.php id Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/22675/info LoveCMS is prone to multiple input-validation vulnerabilities, including an arbitrary-file-upload issue, a remote file-include issue, a local file-include issue, and a cross-site scripting issue. An attacker ca...
Pre Hotel and Resorts 'user_login.asp' Multiple SQL Injection Vulnerabilies
No description provided by source. source: http://www.securityfocus.com/bid/27450/info Pre Hotel and Resorts is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an...
CMS Made Simple 1.11.10 - Multiple XSS Vulnerabilities
No description provided by source. Exploit Title : CMS Made Simple 1.11.10 Multiple XSS Vulnerability Google dork : N/A Date : 02/04/2014 Exploit Author : Blessen Thomas Vendor Homepage : http://www.cmsmadesimple.org/ Software Link : N/A Version : 1.11.10 Tested on : Windows 7 hosted in WAMP serv...
Mozilla Multiple Products Server Refresh Header XSS
No description provided by source. source: http://www.securityfocus.com/bid/34656/info The Mozilla Foundation has released multiple security advisories specifying various vulnerabilities in Firefox, Thunderbird, and SeaMonkey. Attackers can exploit these issues to bypass same-origin restrictions,...
WinFTP Server 1.6 - Denial of Service Exploit
No description provided by source. !/usr/local/bin/perl -w WinFTP server ver 1.6 D.o.S Exploit Discovered,exploited by KaGra Tested on WinXP SP1 English version Sending 40 times a username and a buffer of 1500 bytes as pass,will crash the server,as soon as is not minimized in Target computer.If h...
agXchange ESM 'ucquerydetails.jsp' Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/38896/info agXchange ESM is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of a...
WinSCP 3.5.6 Long URI Handling Memory Corruption Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10160/info It has been reported that WinSCP may be prone to a denial of service condition resulting from memory corruption. This issue occurs when the application attempts to handle excessively long 'sftp:' or 'scp'...
Sun Java Web Start Plugin Command Line Argument Injection
No description provided by source. $Id: javawsarginjectaltjvm.rb 10404 2010-09-21 00:13:30Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...
Adobe GetPlus get_atlcom 1.6.2.48 - ActiveX Remote Exec PoC (0day)
No description provided by source. object id=TestObj classid=CLSID:E2883E8F-472F-4fb0-9522-AC9BF37916A7 style=width:100;height:350 PARAM NAME=cx VALUE=0xFFFFFFFF PARAM NAME=cy VALUE=0xFFFFFFFF PARAM NAME=Service-URL...
Sun Solaris <= 7.0 lpset Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/251/info A stack buffer overflow vulnerability in the handling of the -a command in the lpset program allows arbitrary execution of code with root privileges. The lpset utility sets printing configuration information in t...
Azerbaijan Development Group AzDGDatingPlatinum 1.1 .0 view.php id Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/13082/info AzDGDatingPlatinum is reported prone to multiple vulnerabilities. The following specific issues were identified: - Multiple SQL-injection vulnerabilities. These issues could permit remote attackers to pass...
e107 website system 0.7.5 admin.php Query String (PATH_INFO) Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/19997/info e107 CMS is prone to multiple cross-site scripting vulnerabilities because the application fails to sanitize user-supplied input. An attacker may levearge this issue to have arbitrary script code execute in the...
PHP iCalendar 1.1/2.x search.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/21792/info PHP icalendar is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script cod...
Active PHP Bookmarks 1.0 APB.PHP Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/23670/info Active PHP Bookmarks is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and t...
Planet 2.0 HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/36392/info Planet is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code...
php iCalendar <= 2.21 (publish.ical.php) Remote Code Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo php iCalendar =2.21 publish.ical.php remote cmmnds xctn\r\n; echo by rgod rgodATautisticiDOTorg\r\n; echo site: http://retrogod.altervista.org\r\n; echo this works if \phpicalendarpublishing\ is set to 1 in...
Apache 2.0.4x mod_php Module File Descriptor Leakage Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/9302/info Reportedly, the Apache modphp module may be prone to a vulnerability that may allow a local attacker to gain access to privileged file descriptors. As a result, the attacker may pose as a legitimate server and...
Direct News 4.10.2 - Multiple Remote File Include Vulnerability
No description provided by source. \|/// \ - - // @ @ ----oOOo---oOOo-------------------------------------------------- Direct News 4.10.2 Multiple Remote File Include Vulnerability Script: http://code.google.com/p/directnews/downloads/list Author: mat Mail: [email protected]...
Apache Cygwin 1.3.x/2.0.x Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9733/info It has been reported that Apache may be prone to a directory traversal vulnerability that may allow a remote attacker to access information outside the server root directory. This issue is only reported to prese...
Microsoft .NET Framework SDK 1.0/1.1 MSIL Tools Buffer Overflow Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/17243/info Microsoft .NET Framework SDK contains tools for assembling and disassembling MSIL files. These tools are prone to buffer-overflow vulnerabilities that attackers could exploit to cause a denial of service or...
Oracle Identity Manager 11g R2 SP1 (11.1.2.1.0) - Unvalidated Redirects
No description provided by source. Unvalidated Redirects on Oracle Identity Manager ======================================================================= ADVISORY INFORMATION Title: Unvalidated Redirects on Oracle Identity Manager Discovery date: 10/12/2013 Release date: 03/04/2014 Vendor...
Piwik <= 1357 2009-08-02 file upload and code execution
No description provided by source...
YOPS Web Server Remote Command Execution
No description provided by source. DCA-00015 Software - YOPS Your Open Personal WEB Server Vendor Product Description - YOPS Your Own Personal WEB Server is a small SEDA-like HTTP server for Linux OS written in C. There are 7 stages accept, parse, launch, fetch, error, send and log, and pipes are...
Cisco WLC 4402 - Basic Auth Remote Denial of Service (meta)
No description provided by source. require 'msf/core' class Metasploit3 Msf::Auxiliary include Msf::Exploit::Remote::Tcp include Msf::Auxiliary::Dos def initializeinfo = superupdateinfoinfo, 'Name' = 'Cisco WLC 4200 Basic Auth Denial of Service', 'Description' = %q This module triggers a Denial o...
Alt-N MDaemon 2.8.5 0 UIDL DoS Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1366/info A remote user is capable of crashing Alt-N MDaemon 2.8.5.0 by executing the pass command, then the UIDL command and quitting the mail server before the UIDL has returned a response. This must be done before the...
MyBulletinBoard 1.0.x/1.1.x Usercp.PHP SQL Injection Vulnerability
No description provided by source...
Mac OS X <= 10.4.6 (launchd) Local Format String Exploit (x86)
No description provided by source. !/usr/bin/perl http://www.digitalmunition.com/FailureToLaunch.pl Code by Kevin Finisterre kflistsatdigitalmunitiondotcom This is a practical application of Non Executable Stack Lovin - http://www.digitalmunition.com/NonExecutableLovin.txt This code currently jum...
LimeSurvey <= 1.52 (language.php) Remote File Inclusion Vulnerability
No description provided by source. \|/// \ - - // Xmors Underground Group @ @ ----oOOo---oOOo-------------------------------------------------- Portal : LimeSurvey PHPSurveyor 1.52 plusbuild 2007.10.16 Download :...
DMSEasy0.9.7 (fckeditor) Arbitrary File Upload
No description provided by source. !/usr/bin/perl use strict; use warnings; use LWP::UserAgent; use HTTP::Request::Common; print INTRO; +++++++++++++++++++++++++++++++++++++++++++++++++++++ + DMSEasy0.9.7 fckeditor Arbitrary File Upload + + + +++++++++++++++++++++++++++++++++++++++++++++++++++++...
Maian Weblog 2.0 mail.php Multiple Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/17247/info Maian Weblog is prone to multiple SQL-injection vulnerabilities. The application fails to properly sanitize user-supplied input before using it in SQL queries. This will allow an attacker to inject arbitrary SQ...
EasySiteNetwork Jokes Complete Website 'joke.php' SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/32908/info EasySiteNetwork Jokes Complete Website is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow ...
FreeBSD <= 7.1 libc Berkley DB Interface Uninitialized Memory Local Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/34666/info FreeBSD is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks. include sys/types.h include db.h includ...
Joomla Jobprofile Component (com_jobprofile) - SQL Injection
No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register import re class TestPOCPOCBase: vulID = '72384' ssvid version = '1.0' author = 'kikay' vulDate = '2011-12-02' createDate ...
WordPress Filedownload Plugin 0.1 (download.php) Remote File Disclosure Vulnerability
No description provided by source...
Asura Engine Challenge B Query - Remote Stack Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/25411/info Asura Engine is prone to a remote stack-based buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. An attacker ca...
PowerMovieList 0.13/0.14 Edit User HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/20564/info PowerMovieList is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and...
E-vanced Solutions E-vents 5.0 Multiple Input Validation Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/26526/info E-vanced Solutions E-vents is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-bas...
Trixbox 2.4.2 - user/index.php Query String XSS
No description provided by source. source: http://www.securityfocus.com/bid/27460/info The 'trixbox' product is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary...