56796 matches found
SonicWALL GMS/Viewpoint/Analyzer Authentication Bypass
No description provided by source...
1WebCalendar 4.0 viewEvent.cfm EventID Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/17193/info 1WebCalendar is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. A successful exploi...
Apple Mac OS X 10.4.x iMovie HD .imovieproj Filename Format String
No description provided by source. source: http://www.securityfocus.com/bid/22326/info Multiple products for Mac OS X are prone to multiple remote format-string vulnerabilities. The affected applications include Help Viewer, Safari, iPhoto, and iMovie. Exploiting these issues can allow...
UC Gateway Investment SiteEngine 5.0 'api.php' URI Redirection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/31888/info SiteEngine is prone to a remote URI-redirection vulnerability because the application fails to properly sanitize user-supplied input. A successful exploit may aid in phishing-style attacks. SiteEngine 5.0 is...
Chipmunk Blog photos.php membername Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/29883/info Chipmunk Blog is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in th...
Centrinity FirstClass 7.1 HTTP Server Directory Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8920/info It has been reported that Centrinity FirstClass HTTP server may be prone to an information disclosure vulnerability that may allow a remote attacker to disclose listings for server root and user web directories ...
Novaboard 1.1.4 - Local File Inclusion Vulnerability
No description provided by source. Vulnerability ID: HTB22657 Reference: http://www.htbridge.ch/advisory/lfiinnovaboard.html Product: Novaboard Vendor: Novaboard http://www.novaboard.net/ Vulnerable Version: 1.1.4 and probably prior versions Vendor Notification: 13 October 2010 Vulnerability Type...
SiteSearch Indexer 3.5 Searchresults.ASP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17332/info SiteSearch Indexer is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...
phpvid 1.1 (xss/sql) Multiple Vulnerabilities
No description provided by source. . . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ \ / / // \ / \ |/| || \\ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --d3hydr8 -rsauron-baltazar -sinner01 -C1c4Tr1Z - beenu...
Vito CMS SQL Injection Vulnerability
No description provided by source. .:. Author : [email protected] .:. Contact: [email protected], [email protected] .:. Home : www.evilzone.org .:. Script : Vito CMS .:. Info link: http://kameleon-lab.com/vito-cms.php .:. Versions: ALL .:. Bug Type : Sql Injection .:. Risk: High .:. Tested on ...
WebCom datakommunikation Guestbook 0.1 wguest.exe Arbitrary File Access
No description provided by source. source: http://www.securityfocus.com/bid/2024/info The freeware guestbook package from freeware.webcom.se provides a web-based guestbook feature, using CGI. Some versions of this guestbook undetermined at the time of writing are vulnerable to an attack allowing ...
NewAtlanta ServletExec/ISAPI 4.1 File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4795/info ServletExec/ISAPI is a plug-in Java Servlet/JSP engine for Microsoft IIS. It runs with IIS on Microsoft Windows NT/2000/XP systems. ServletExec/ISAPI will disclose the contents of arbitrary files within the...
Blue Coat WinProxy Host Header Overflow
No description provided by source. $Id: bluecoatwinproxyhost.rb 9797 2010-07-12 23:25:31Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and term...
Veritas Software Volume Manager 3.0.2/3.0.3/3.0.4 File Permission Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1356/info A vulnerability exists in the Volume Manager product, versions 3.0.x, from Veritas Software. Volume Manager is a popular disk management package. Volume Manager running on Solaris platforms prior to Solaris 8 ar...
DivX Plus Web Player "file://" Buffer Overflow Vulnerability PoC
No description provided by source. Exploit Title: DivX Plus Web Player file:// Buffer Overflow Vulnerability PoC 0day Date: 10/4/2011 Author: Snake Shahriyar.j at gmail Version: DivX Plus Web Player = 2.1.2.265 Tested on: XP SP3 , IE6 CVE : Not Assigned Yet Ref :...
FSphp 0.2.1 - Multiple Remote File Inclusion Vulnerabilities
No description provided by source...
SiteWare 2.5/3.0/3.1 Editor Desktop Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2868/info Screaming Media is a provider for custom web content. SiteWare Editor Desktop is the web-based administration tool for managing Screaming Media content. SiteWare Editor Desktop is prone to directory traversal...
Infinity <= 2.0.5 Arbitrary Create Admin Exploit
No description provided by source. ?php printr' || || | || o,7 || . o7 || q||| o///, : / / . /QQQQQQQQQQQQQQQQQQQ\ q Infinity = 2.0.5 Create Admin /QQQ/\QQQ\ /QQQQQ/ \QQQQQQ\ q POST 3 /QQQQ/ QQQQ\ /QQQQ/ \QQQQ\ q Owned : |QQQQ/ By Qabandi \QQQQ| |QQQQ| |QQQQ| |QQQQ| From Kuwait, PEACE... |QQQQ|...
EServ 2.9x Directory Indexing Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7669/info EServ does not sufficiently prevent web users from being able to view directory indexes. This may result in disclosure of sensitive information. GET /? HTTP/1.1...
Adobe - JBIG2Decode Memory Corruption Exploit (2)
No description provided by source. $Id: adobejbig2decode.rb 10477 2010-09-25 11:59:02Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
TotalCalendar <= 2.402 (view_event.php) Remote SQL Injection Vulns
No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register import re class TestPOCPOCBase: vulID = '64776' ssvid version = '1.0' author = 'kikay' vulDate = '2007-07-03' createDate ...
PeerCast 0.1218 - 'getAuthUserPass' Multiple Buffer Overflow Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/28986/info PeerCast is prone to multiple buffer-overflow vulnerabilities because it fails to adequately bounds-check user-supplied input before copying it to an insufficiently sized buffer. Successfully exploiting these...
Microsoft FrontPage Server Extensions Cross-Site Scripting Vulnerability
... FrontPage Server Extensions为FrontPage服务扩展，与IIS一起使用可以方便的支持管理、创建以及浏览FrontPage扩展的网站。 ... FrontPage Server Extensions对HTML页面的处理存在输入验证漏洞，远程攻击者可能在客户机器上执行任意脚本代码。 ... FrontPage Server Extensions的fpadmdll.dll中的一些参数没有正确的过滤返回给用户的特定输入，导致跨站脚本问题，可能允许攻击者以当前会话权限以客户机的浏览器中执行恶意脚本代码，利用这个漏洞必须用户交互。...
GeoBlog MOD_1.0 Viewcat.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17784/info GeoBlog is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script...
RndLabs Babo Violent 2 - Multiple Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/25329/info Babo Violent 2 is prone to four vulnerabilities: a format-string issue and three denial-of-service issues. Successful attacks could allow attackers to execute arbitrary code or crash game servers...
geoBlog MOD_1.0 deletecomment.php id Variable Remote Arbitrary Comment Deletion
No description provided by source. source: http://www.securityfocus.com/bid/24966/info geoBlog is prone to multiple security-bypass vulnerabilities because the application fails to properly validate users when deleting user blogs and comments. An attacker may exploit these issues to delete blogs...
Matt Wright FormMail 1.6/1.7/1.8 Environmental Variables Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1187/info An unauthorized remote user is capable of obtaining CGI environmental variable information from a web server running Matt Wright FormMail by requesting a specially formed URL that specifies the email address to...
NetZero ZeroPort 3.0 Weak Encryption Method Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1483/info Netzero is a free internet service provider which requires its users to run the application ZeroPort in order to log onto the network. The username and password is stored locally in a text file called id.dat and...
Softbiz Classifieds Script Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/32375/info Softbiz Classifieds Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in...
Adobe RoboHelp Server 8 Authentication Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/36245/info Adobe RoboHelp Server is prone to an authentication-bypass vulnerability. An attacker can exploit this issue to upload and execute arbitrary code with SYSTEM-level privileges. RoboHelp Server 8.0 is affected;...
Zope <= 2.11.2 PythonScript Multiple Remote Denial Of Service Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/32267/info Zope is prone to multiple remote denial-of-service vulnerabilities. Remote attackers can exploit this issue to cause the Zope server to halt or to consume excessive server resources, resulting in...
free QBoard 1.1 delete.php qb_path Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/18780/info Plume CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows the attacker to execute arbitrary...
Apple Mac OS X 10.4.8 - DMG UFS FFS_MountFS Integer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/21993/info Apple Mac OS X is prone to a remote integer-overflow vulnerability. This issue occurs when the UFS filesystem handler fails to handle specially crafted DMG images. A successful exploit can allow a remote attack...
Tunez 1.21 songinfo.php song_id Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/15548/info Tunez is prone to multiple input validation vulnerabilities. The application is affected by an SQL injection vulnerability and a cross-site scripting issue. Successful exploitation of the SQL injection issue...
minihttp file-sharing for net 1.5 - Directory Traversal vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8619/info It has been reported that WebForums and File-Sharing for NET are prone to a remote directory traversal attack due to insufficient sanitization of user-supplied data. This vulnerability could allow a remote...
Plesk 10.4.4/11.0.9 - SSO XXE/XSS Injection Exploit
No description provided by source...
Portrait Software Portrait Campaign Manager 4.6.1.22 Multiple Cross Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/38252/info Portrait Campaign Manager is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary scrip...
MODx CMS <= 0.9.2.1 (FCKeditor) Remote File Include Vulnerability
No description provided by source. +------------------------------------------------------------------------------------------- + MODx CMS 0.9.2.1 basepath Remote File Include Vulnerability +------------------------------------------------------------------------------------------- + Affected...
KnowledgeQuest 2.6 - Administration Multiple Authentication Bypass Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/29012/info KnowledgeQuest is prone to multiple authentication-bypass vulnerabilities. Attackers can leverage these issues to compromise the application, which could aid in other attacks. KnowledgeQuest 2.6 is vulnerable;...
NVIDIA Graphics Driver <= 8774 Local Buffer Overflow Exploit
No description provided by source. / Copyright c 2005 Matthieu Herrb Copyright c 2006 Derek Abdine, Marc Bevand Permission to use, copy, modify, and distribute this software for any purpose with or without fee is hereby granted, provided that the above copyright notice and this permission notice...
Colloquy <= 2.1.3545 (INVITE) Format String Denial of Service Exploit
No description provided by source. !/usr/bin/ruby c Copyright 2006 Lance M. Havok [email protected] Makes use of the Colloquy INVITE format string vulnerability. require 'socket' targetchannel = ARGV0 || whatever targetserver = ARGV1 || irc.server.org targetport = ARGV2 || 6667 randnick = spongeb...
Logaholic index.php parameter Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/27003/info Logaholic is prone to multiple input-validation vulnerabilities, including multiple SQL-injection issues, a cross-site scripting issue, and an HTML-injection issue. The issues occur because the application fail...
AWCM 2.2 final - Local File Inclusion Vulnerability
No description provided by source. +Exploit Title: awcm v2.2 final Local File Inclusion +Date: 26-01-2011 +Author: Cucura , Ste@lth Bl@ckFalc0n +Software Link: www.awcm-cms.com +Version: v2.2 +CVE : - +Contact: BlackcucuraatGmail.com http://sourceforge.net/projects/awcm/files/...
Opera Web Browser 11.00 - Integer Overflow Vulnerability
No description provided by source. +Exploit Title: Exploit Integer Overflow Opera Web Browser 11.00 +Date: 24\01\2011 +Author: C4SS!0 G0M3S +Software Link: http://get12.opera.com/pub/opera/win/1100/int/Opera1100intSetup.exe +Version: 11.00 +Tested On: WIN-XP SP3 PORTUGUESE BRAZILIAN +CVE: N/A Not...
Allied Telesis AT-MCF2000M 3.0.2 Gaining Root Shell Access
No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP YmmMMMM MMM YM Discovered by dun \ posdubatgmail.com 2013-01-02 Allied Telesis AT-MCF2000M 3.0.2 Gaining Root Shell Access Device: The AT-MCF2000M is t...
PHP Proxima <= 6 - completepack Remote Code Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? $devilteam = ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+:...
Trend Micro InterScan VirusWall for Windows NT 3.4/3.5/3.51 Remote Reconfiguration Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2808/info Interscan Viruswall is a Virus scanning software package distributed and maintained by Trend Micro. It is designed to scan for virus occurances in both incoming and outgoing traffic via SMTP, FTP, and HTTP at th...
Dacio's Image Gallery 1.6 Multiple Remote Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/34906/info Dacio's Image Gallery is prone to multiple remote vulnerabilities: - An arbitrary-file-upload vulnerability - An authentication-bypass vulnerability - A directory-traversal vulnerability An attacker can exploit...
Fool's Workshop Owl's Workshop 1.0 readings/index.php Arbitrary File Access
No description provided by source. source: http://www.securityfocus.com/bid/9689/info Owl's Workshop is reported prone to multiple remote file-disclosure vulnerabilities because the application fails to validate user-supplied input passed via a URI parameter. Upon successful exploitation of these...
Windows Escalate Service Permissions Local Privilege Escalation
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require...