56796 matches found
Tower Toppler 0.99.1 Display Variable Local Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7028/info It has been reported that a buffer overflow exists in Tower Toppler. A local user may be able to exploit this issue to execute code with the privileges of the toppler program. !/usr/bin/perl [email protected]...
Yahoo! Toolbar 1.4.1 Helper Class ActiveX Control Remote Buffer Overflow Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26656/info Yahoo! Toolbar ActiveX Control is prone to a buffer-overflow vulnerability. An attacker can exploit this issue to trigger denial-of-service conditions in Internet Explorer or other applications that use the...
DCShop Beta 1.0 Form Manipulation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4356/info DCShop Beta is a freely available shopping cart system, written in Perl. It will run on most Unix and Linux variants, as well as Microsoft Windows operating systems. It is possible to overwrite setup files .setu...
Motorola Bluetooth Interface Dialog Spoofing Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17190/info Motorola mobile handsets are prone to a dialog-spoofing vulnerability when accepting Bluetooth communications. An attacker could exploit this issue to trick a user into granting them AT access to the device. Th...
Easy Chat Server 1.x Multiple Denial of Service Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/10649/info It is reported that Easy Chat Server is susceptible to multiple denial of service vulnerabilities. The chat software is implemented as a web server serving a chat web application to clients. The software is...
LimeSurvey 2.00+ (build 131107) - Multiple Vulnerabilities
No description provided by source. ? LimeSurvey v2.00+ build 131107 Script Insertion And SQL Injection Vulnerability Vendor: LimeSurvey Project Team Product web page: http://www.limesurvey.org Affected version: 2.00+ build 131009 2.00+ build 131022 2.00+ build 131031 2.00+ build 131107 Summary:...
webo site speedup <= 1.6.1 - Multiple Vulnerabilities
No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP YmmMMMM MMM YM Discovered by dun \ posdubatgmail.com 2012-06-16 WEBO Site SpeedUp = 1.6.1 Multiple Vulnerabilites Script: WEBO Site SpeedUp is a PHP...
nuBuilder 10.04.20 Local File Inclusion Vulnerability
No description provided by source. ------------------------------------------------------------------------ Software................nuBuilder 10.04.20 Vulnerability...........Local File Inclusion Download................http://sourceforge.net/projects/nubuilder/files/ Release...
XOOPS Module XFsection <= 1.07 (articleid) BLIND SQL Injection Exploit
No description provided by source. html head titleXOOPS Module XFsection = 1.07 articleid BLIND SQL Injection Exploit/title script type=text/javascript //'=============================================================================================== //'Script Name: XOOPS Module XFsection = 1.07...
VBulletin 1.0.1 lite/2.x/3.0 /admincp/template.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/14874/info vBulletin is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues t...
Fritz!Box - Remote Command Execution Exploit
No description provided by source. App : Fritz!Box Author : 0x4148 Fritz!Box is Networking/voice Over ip router produced by AVM it suffer from Unauthenticated remote command execution flaw Poc : https://ip/cgi-bin/webcm?getpage=../html/menus/menu2.html&var:lang=%26%20cat%20/var/flash/voip.cfg%20%...
Empire CMS <= 3.7 (checklevel.php) Remote File Include Vulnerability
No description provided by source. Empire CMS =3.7 checklevel.php Remote File Include Vulnerability Find by: Bob Linuson Code: 2 $includefile=$checkpath.e/class/MemberLevel.php; 3 include$includefile; ..... 67 include$checkpath.e/class/connect.php; 68 include$checkpath.e/class/dbsql.php; 69...
makit news/blog poster 3.1 - DB Download Vulnerability
No description provided by source...
SGI IRIX 6.5.22 GR_OSView Local Arbitrary File Overwrite Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13058/info A local file overwrite vulnerability affects SGI IRIX. This issue is due to a failure of the affected utility to drop privileges prior to carrying out critical functionality. An attacker may leverage this issue...
Microsoft Office Word 2010 Crash PoC
No description provided by source. Title : Microsoft Office Word 2010 Stack Overflow Version : Microsoft Office professional Plus 2010 Date : 2012-10-23 Vendor : http://office.microsoft.com Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : XP SP3 ENG Bug : ----...
FreeFloat FTP Server 1.00 - MKD Buffer Overflow Exploit
No description provided by source...
Exponent CMS 0.96.5/ 0.96.6 magpie_slashbox.php rss_url Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/23574/info Exponent CMS is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. Exploiting these issues could allow an attacker to steal cookie-based...
Apache Axis2 1.4.1 - Local File Inclusion Vulnerability
No description provided by source. Exploit Title: Apache Axis21.4.1 Local File Inclusion Vulnerability Date: 2010/5/24 Author: HC Software Link: http://ws.apache.org/axis2/download/141/download.cgi Version: Axis2 1.4.1 Tested on: Linux category: Webapps Code : 1.http://Domain...
ClipSharePro <= 4.1 - Local File Inclusion
No description provided by source. Exploit Title : ClipSharePro = 4.1 Local File Inclusion Date : 2013/3/9 Exploit Author : Saadat Ullah ? saadilinuxatrocketmaildotcom Software Link : http://www.clip-share.com Author HomePage: http://security-geeks.blogspot.com Tested on: Server : Apache/2.2.15...
Oracle 10g Secure Enterprise Search 'search_p_groups' Parameter Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/35681/info Oracle Database is prone to a cross-site scripting vulnerability that affects the Secure Enterprise Search component. An attacker may leverage this issue to execute arbitrary script code in the browser of an...
Cybuzu Garoon 2.1.0 - Multiple Remote SQL Injection Vulnerabilities
No description provided by source. Cybozu Garoon 2 SQL Injection Vulnerabilities by Tan Chew Keong Release Date: 2006-08-28 Summary Some SQL injection vulnerabilities have been found in Cybozu Garoon 2. When exploited by a logon user, the vulnerabilities allow manipulation of SQL statements which...
Community Link Pro Login.CGI File Parameter Remote Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14097/info Community Link Pro is prone to a remote arbitrary command execution vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data. Due to this, an attacker can prefix arbitrar...
Scribe <= 0.2 - Remote PHP Code Execution Vulnerability
No description provided by source. --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org...
Apple Mac OS X 10.x FPathConf System Call Local Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/20982/info Apple Mac OS X is prone to a local denial-of-service vulnerability because the kernel fails to properly handle the execution of a system call. Exploiting this issue allows local, unprivileged users to crash...
Manila 9.0.1 - Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/17563/info Manila is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have...
BarCode ActiveX Control BarCodeAx.dll 4.9 - Remote Overflow Exploit
No description provided by source. :. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: BarCodeAx.dll v. 4.9 ActiveX Control Remote Stack Buffer Overflow ================================================================= Internal ID: VULWAR200706223 Introduction...
IBM Access Support ActiveX Control Buffer Overflow
No description provided by source. $Id: ibmegathgetxmlvalue.rb 10998 2010-11-11 22:43:22Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and term...
Coppermine Photo Gallery 1.x Albmgr.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/21894/info Coppermine Photo Gallery is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an...
BEA AquaLogic Interaction 6.0/6.1 Plumtree Portal Multiple Information Disclosure Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/26620/info BEA AquaLogic Interaction is prone to multiple information-disclosure vulnerabilities. Attackers can exploit these issues to access valid usernames in the Plumtree portal as well as the server hostname, build...
MASA2EL Music City 1.0 - Remote SQL Injection Vulnerability
No description provided by source. :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: Exploit Title : MASA2EL Music City Remote Sql Injection Vulnerability Author: alnjm33 Software Link: http://www.masa2el.com/index.php?go=dl&type=d&id=4 Tested on: Version 1.0 My...
MYRE Realty Manager Multiple Vulnerabilities
No description provided by source. Exploit Title:MYRE Realty Manager Multiple Vulnerabilities Date: 13.10.201 Exploit Author: d3b4g Vendor Homepage:http://myrephp.com Software Link: http://myrephp.com/demo2/ Tested on: Windows 7 Blog: d3b4g.me...
Sielco Sistemi Winlog Buffer Overflow
No description provided by source. $Id: winlogruntime.rb 13000 2011-06-21 22:42:53Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms o...
WireShark 1.8.2 & 1.6.0 - Buffer Overflow 0day PoC
No description provided by source. / WireShark Buffer Overflow 0day author: X-h4ck,[email protected],www.pirate.al greetz to people that i love and my girlfriend , and yes imm proud to be albanian.only the poc, no exploit available so i wont confuse the script kiddies, eax,ecx,edx,ebx overwritten...
Mambo Component Ricette 1.0 - Remote SQL Injection Vulnerability
No description provided by source. joomla SQL Injectioncomricette AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORK 1 : allinurl: comricette DORK 2 : allinurl: comricetteid EXPLOIT :...
Microsoft Internet Explorer 5/6 Cached Objects Zone Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6028/info Multiple vulnerabilities have been reported for Microsoft Internet Explorer. These vulnerabilities have been reported to affect Internet Explorer 5.5 to 6.0. Internet Explorer 6.0 with Service Pack 1 and Interne...
jetAudio <= 7.0.5 (.ASX) Remote Stack Overflow Exploit PoC
No description provided by source. Application: jetAudio = 7.0.5 .ASX Remote Stack Overflow Web Site: http://www.cowonamerica.com/download/ Platform: Windows Bug:Remote Stack Overflow Extension: ASX special condition: none ------------------------------------------------------- 1 Introduction 2 B...
Jupiter CMS 1.1.4/1.1.5 modules/register Multiple Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/20048/info Jupiter CMSA is prone to multiple input-validation vulnerabilities, including cross-site scripting, SQL-injection, and arbitrary file-upload issues, because the application fails to sanitize user-supplied input...
vAuthenticate 2.8 - Remote SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6605/info A vulnerability has been discovered in vAuthenticate. It has been reported that various PHP scripts used by vAuthenticate are prone to SQL injection attacks. This issue may be exploited by an unauthorized attack...
33 Bytes chmod("/etc/shadow", 0777) Shellcode
No description provided by source. [email protected] http://plasticsouptaste.blogspot.com Name: 33 bytes chmod"/etc/shadow", 0777 shellcode Platform: Linux x86 include "stdio.h" int mainint argc, char argv char shellcode...
Kayako SupportSuite 3.x index.php filter Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/30642/info Kayako SupportSuite is prone to multiple input-validation vulnerabilities, including an SQL-injection issue, multiple cross-site scripting issues, and an HTML-injection issue. The vulnerabilities occur because...
Wordpress Plugin Marketplace Plugin 1.5.0 - 1.6.1 - Arbitrary File Upload
No description provided by source. Description : Wordpress Plugins - WP Marketplace Shell Upload Vulnerability Version : 1.5.0 - 1.6.1 Link : http://wordpress.org/extend/plugins/wpmarketplace/ Plugins : http://downloads.wordpress.org/plugin/wpmarketplace.zip Date : 26-05-2012 Google Dork :...
DB Hub 0.3 - Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/21791/info A remote denial-of-service vulnerability affects the DB Hub application because of a memory-corruption flaw when the application attempts to process specially crafted network traffic. An attacker may exploit th...
Webmedia Explorer 6.13.1 Stored Cross Site Scripting Vulnerability
No description provided by source. Vulnerability ID: HTB22661 Reference: http://www.htbridge.ch/advisory/storedxssvulnerabilityinwebmediaexplorer.html Product: Webmedia Explorer Vendor: Marc Salmurri http://www.webmediaexplorer.com/ Vulnerable Version: 6.13.1 and probably prior versions Vendor...
TinyBB 1.2 - SQL Injection Vulnerability
No description provided by source. +-------------------------------+ | TinyBB 1.2 SQLi Vulnerability | +-------------------------------+ Vulnerable Web-App : TinyBB 1.2 Vulnerability : SQL Injection. Author : Aodrulez. Email : [email protected] Google-Dork : TinyBB 2011 all rights reserved...
SmartMail Server 1.0 BETA 10 Oversized Request Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6075/info SmartMail Server is reported to be prone to a remote denial of service condition. It is possible to trigger this condition by sending large amounts 5MB+ of data to the server via TCP port 25 or 110. SmartMail...
Sitebuilder 1.4 'sitebuilder.cgi' Directory Traversal File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8521/info Sitebuilder is said to be prone to a directory traversal vulnerability, potentially allowing users to disclose the contents of system files. The problem occurs due to the application failing to parse user-suppli...
IRIX <= 6.4 pfdisplay.cgi Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/64/info There exists a security vulnerability with the CGI program pfdispaly.cgi distributed with IRIX. This problem its not fixed by patch 3018. $ lynx -dump...
QIP 2005 Malformed Rich Text Message Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/33609/info QIP 2005 is prone to a remote denial-of-service vulnerability. Exploiting this issue may allow attackers to cause the application to hang and consume excessive computer resources, denying service to legitimate...
Simple PHP Blog <= 0.4.0 - Multiple Remote Exploits
No description provided by source. !/usr/bin/perl -w =============================================================================== Title: sphpblogvulns.pl Written by: Kenneth F. Belva, CISSP Franklin Technologies Unlimited, Inc. http://www.ftusecurity.com Date: August 25, 2005 Version: 0.1...
Easy Web Portal 2.1.2 - Multiple Remote File Include Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/20825/info Easy Web Portal is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application...