56796 matches found
Online Photo Pro 2.0 'section' Parameter Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/34625/info Online Photo Pro is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site...
PlanetGallery Gallery_admin.PHP Authentication Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17753/info PlanetGallery is prone to an authentication-bypass vulnerability. The issue occurs because the affected script fails to prompt for authentication credentials. An attacker can exploit this issue to bypass...
WarpSpeed 4nAlbum Module 0.92 modules.php gid Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/9881/info It has been reported that 4nAlbum is prone to multiple vulnerabilities. These issues are primarily due to a failure of the module to validate user input. There is an information disclosure issue with the...
Novell Sentinel Log Manager <= 1.2.0.2 - Retention Policy Vulnerability
No description provided by source. Novell Sentinel Log Manager ver. =1.2.0.2 allows unauthenticated users configuring retention policies. Vendor informed: 2012/09/06 Patch Released: 2012/09/21 PoC: !/bin/bash TARGET=$1 PORT=8443 if $ -ne 1 ; then echo Usage: basename $0 target exit 1 fi echo POST...
BMForum 5.6 - index.php outpused Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/29339/info BMForum is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the...
BMForum 3.0 post.php forumid Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/14396/info BMForum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to...
D-Link Dl-704 2.56 b5 IP Fragment Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3306/info The DLink Dl-704 is a DSL/Cable router and switch designed for home network use. A problem has been discovered in the Dl-704 router. Upon receiving a high amount of fragmented IP packets, the router begins to...
Darxite 0.4 Login Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1598/info Darxite 0.4 does not do proper bounds checking on user-supplied data during the login process, relying on sprintf to deliver the data into a 256 character buffer. Therefore, it is possible for an attacker to...
Membris 2.0.1 - Multiple Vulnerabilities
No description provided by source. Exploit:Membris v 2.0.1 Sql \ XSS & File Disclosure Vulnerabilities Google Dork: Powered by Membris v 2.0.1 Date: Dr.abolalh Author:01/06/2012 E-Mail: [email protected] Software Link: http://scripts.toocharger.com/fiches/scripts/membris/5258.htm Version: Membris v...
CutePHP CuteNews 1.3.6 X-Forwarded-For Script Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12691/info A remote script injection vulnerability affects CutePHP CuteNews. This issue is due to a failure of the application to properly sanitize user-supplied input prior to using it to carry out critical functionality...
InShop and InMail Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/11758/info InMail and InShop are both reported susceptible to cross-site scripting vulnerabilities. These issues are due to a failure of the applications to properly sanitize user-supplied input prior to including it in...
CuteNews 1.4.1 - Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/17700/info CuteNews is prone to multiple cross-site scripting vulnerabilities. These issues are due to the application's failure to properly sanitize user-supplied input. An attacker may leverage these issues to have...
LifeType 1.2.8 - 'admin.php' Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/29050/info LifeType is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...
Chris LaPointe Download Center 1.2 - search_results Action search Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/28219/info Download Center is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in...
php-nuke platinum 7.6.b.5 - Remote File Inclusion Vulnerability
No description provided by source. ---------------------------------------------- GrEeTs To -=sHaDoW sEcUrItY TeAm=- GrEaTs To ---------------------------------------------- A2J, Chucks, The Pitbull, ICQBomber, str0ke ---------------------------------------------- BiG sHoUt OuT tO udplink.net &...
SugarCRM <= 6.3.1 unserialize() PHP Code Execution
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
GGZ Gaming Zone 0.0.12 Multiple Denial of Service Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/17094/info GGZ Gaming Zone is prone to multiple remote denial-of-service vulnerabilities. These issues are due to improper input sanitization. An attacker may cause the victim's connection to the server to terminate,...
DVGuestbook 1.0/1.2.2 index.php page Parameter XSS
No description provided by source...
Borland VisiBroker Smart Agent 08.00.00.C1.03 - Multiple Remote Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/28084/info Borland VisiBroker Smart Agent is prone to multiple remote vulnerabilities, including a heap-based buffer-overflow issue and a denial-of-service issue. A successful exploit will allow remote attackers to execut...
GuppY <= 4.5.16 Remote Commands Execution Exploit
No description provided by source...
12Planet Chat Server 2.5 Error Message Installation Path Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7355/info When certain malformed URL requests are sent to a 12Planet Chat Server, the server's installation path may be revealed in the returned error message. This information could be used by a remote attacker to launch...
N-13 News 3.4 - Remote Admin Add CSRF Exploit
No description provided by source. ======================================================== N-13 News 3.4 Remote Admin Add CSRF Exploit ======================================================== Title: N-13 News 3.4 Remote Admin Add CSRF Exploit Author : anT!-Tr0J4n Email : D3v-PoinTathotmaild0tcom...
AuraCMS 3.0 - Multiple Vulnerabilities
No description provided by source. Exploit Title: AuraCMS 3.0 Multiple Vulnerabilities Date: 05/28/2014 Author: Mustafa ALTINKAYNAK Download URL :http://auracms.org/ Software Link: http://codeload.github.com/auracms/AuraCMS/zip/master Vuln Category: CWE-79 XSS - CWE-98 LFI Tested on: AuraCMS 3.0...
Draytek Vigor 3900 1.06 - Privilege Escalation
No description provided by source...
Trend Micro Internet Security Pro 2010 ActiveX extSetOwner() Remote Code Execution (MSF)
No description provided by source. trendmicroextsetowner.rb Trend Micro Internet Security Pro 2010 ActiveX extSetOwner Remote Code Execution exploit for the Metasploit Framework Exploit successfully tested on the following platforms: - Trend Micro Internet Security Pro 2010 on Internet Explorer 7...
Goolery 0.3 viewpic.php conversation_id Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/11587/info It is reported that Goollery is affected by various cross-site scripting vulnerabilities. These issues are due to a failure of the application to properly sanitize user-supplied URI input. These problems presen...
Cpanel <= 11.x (Fantastico) LFI Vulnerability (sec bypass)
No description provided by source. Fantastico In all Version Cpanel 11.x = local File Include Must login to :2082 To break the protection modsecurity & safemode: off & Disable functions : all none Vulnerable Code $licensingservers=$fantasticopath . /includes/enclicensingservers.php; if...
Edimax EW-7206-APg and EW-7209APg - Multiple Vulnerabilities
No description provided by source. Device Name: EW-7206APg / EW-7209APg Vendor: Edimax ============ Vulnerable Firmware Releases: ============ Device: EW-7206APg Hardware Version Rev. A Runtime Code Version v1.32 Runtime Code Version V1.33 Device: EW-7209APg Hardware Version Rev. A Runtime Code...
Dokeos LMS <= 1.6.4 (authldap.php) Remote File Include Exploit
No description provided by source...
Gizzar <= 03162002 (index.php) Remote File Include Vulnerability
No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register import re class TestPOCPOCBase: vulID = '64305' ssvid version = '1.0' author = 'kikay' vulDate = '2006-12-13' createDate ...
LinPHA 1.3.4 - Multiple Vulnerabilities
No description provided by source. Exploit Title: linPHA 1.3.4 - Pemanent XSS and CSRF Date: 28/01/2014 Exploit Author: [email protected] Vendor Homepage: http://sourceforge.net/projects/linpha/ Software Link: http://sourceforge.net/projects/linpha/files/latest/download Version: 1.3.4 Tested on:...
Joomla Component ProDesk 1.0/1.2 - Local File Inclusion Vulnerability
No description provided by source. ------------------------------------------------------------------------------------------------------- Joomla Component ProDesk v 1.0 AND 1.2 comprodesk&includefile Local File Inclusion Vulnerability...
Microsoft Windows NT 4.0 PhoneBook Server Buffer Overflow
No description provided by source. source: http://www.securityfocus.com/bid/2048/info The Phone Book Service is an optional component that ships with the NT 4 Option Pack and Windows 2000. It is not installed by default. A buffer overflow vulnerability was discovered in the URL processing routine...
Calibre E-Book Reader Local Root
No description provided by source. / .80 Calibrer Assault Mount by zx2c4 Yesterday's assult mount used inotify to mount into /etc/pam.d. Today we expand the attack by adding a race toggler so we can mount from non-block devices. Enjoy. - zx2c4 2011-11-4 greets to djrbliss / include stdio.h includ...
1-Script 1-Search 1.8 1search.CGI Cross-Site Scripting Vulnerability
No description provided by source...
CoolPlayer Portable 2.19.1 - (m3u) Buffer Overflow Exploit (2)
No description provided by source. !/usr/bin/python Usage : coolplayer.py Bug : CoolPlayer Portablem3u Buffer Overflow exploit Founder : Goldm First exploiter : stack he is my friend : Tested on : Xp sp2 fr Greetings : All friends & muslims HaCkErs DZ,snakespc.com,secdz.com Note: I didn't know wh...
Bedder CMS Blind SQL Injection Vulnerability
No description provided by source. +Exploit Title: Bedder CMS Blind SQL Injection Vulnerability +Author : ^Xecuti0n3r + Date : 15.04.2011 + Hour : 13:37 PM + E-mail : xecuti0n3ryahoo.com + dork : intext:Design by Bedder + Category : Web Apps Blind SQli Choose any site that comes up when you enter...
Trlinux Postaci Webmail 1.1.3 Password Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2029/info Postaci Webmail is a database-driven web e-mail system. PostACI contains a vulnerability in its default configuration that may allow a remote attacker to gain access to the underlying database. Webmail stores...
Multiple File Attachments Mail Form Pro 2.0 - WebShell upload
No description provided by source. Exploit Title: Multiple File Attachments Mail Form Pro v2 - WebShell upload Date: 16/02/2010 Author: EgoPL Mail: [email protected]:[email protected] Software Link: http://activeden.net/item/multiple-file-attachments-mail-form-prov2/31262 17$ but It's now on ...
Rix4Web Portal - Blind SQL Injection Vulnerability
No description provided by source. Exploit Title: Rix4Web Portal Remote Blind SQL Injection Vulnerability Date: 02/23/2013 Author: L0n3ly-H34rT Contact: [email protected] My Site: http://se3c.blogspot.com/ Vendor Link: http://www.rix4web.com/ Software Link:...
E.Z. Poll 2 - (Auth Bypass) Remote SQL Injection Vulnerability
No description provided by source. Description: E.Z. Poll = v.2 script Remote SQL injection Exploit discovered by t0fx aka xtof69 vendor : E.Z. vulnerable page : http://www.site.com/admin/login.asp exploit : Username : 'or' '=' Password : 'or' '=' Add, modify user : /admin/admin-users.asp...
WordPress Trashbin Plugin 0.1 'mtb_undelete' Parameter Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/37097/info The Trashbin plugin for WordPress is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrar...
AiCart 2.0 - Multiple Vulnerabilities
No description provided by source. ================================= AiCart 2.0 Multiple Vulnerabilities =================================== == Infos ================================================================================================== Date 18.06.2011 Software URL http://www.aicart.c...
WSMP3 0.0.x Remote Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7645/info A vulnerability has been reported in WsMp3. The problem occurs due to insufficient sanitization of HTTP POST requests. As a result, an attacker may be capable of executing arbitrary files on a target system. Thi...
DD-WRT Site Survey SSID Script Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30573/info DD-WRT is prone to a script-injection vulnerability because it fails to adequately sanitize user-supplied data to the 'Site Survey' section of the administrative web interface. Attackers can exploit this issue ...
Simple PHP Blog 0.4 colors.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/15283/info Simple PHP Blog is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to hav...
MyServer 0.8 Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13578/info myServer is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary scrip...
BookReview 1.0 suggest_category.htm node Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/13783/info BookReview is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have...
APC ActionApps CMS 2.8.1 - Remote File Include Vulnerabilities
No description provided by source. DEVIL TEAM THE BEST POLISH TEAM APC ActionApps CMS 2.8.1 - Remote File Include Vulnerabilities Find by Kacper Rahim. Greetings For ALL DEVIL TEAM members, Special DragonHeart : Contact: [email protected] or http://www.devilteam.yum.pl site:...
Opera + Mozilla Firefox 3.6 - Long String Crash Exploit (0day)
No description provided by source. ======================================================================= Mozilla Firefox 3.6 plenitude String Crash0day Exploit Opera plenitude String Denial of Service Exploit ======================================================================= by Asheesh Kum...