56796 matches found
Piwik <= 1357 2009-08-02 file upload and code execution
No description provided by source...
YOPS Web Server Remote Command Execution
No description provided by source. DCA-00015 Software - YOPS Your Open Personal WEB Server Vendor Product Description - YOPS Your Own Personal WEB Server is a small SEDA-like HTTP server for Linux OS written in C. There are 7 stages accept, parse, launch, fetch, error, send and log, and pipes are...
Cisco WLC 4402 - Basic Auth Remote Denial of Service (meta)
No description provided by source. require 'msf/core' class Metasploit3 Msf::Auxiliary include Msf::Exploit::Remote::Tcp include Msf::Auxiliary::Dos def initializeinfo = superupdateinfoinfo, 'Name' = 'Cisco WLC 4200 Basic Auth Denial of Service', 'Description' = %q This module triggers a Denial o...
Alt-N MDaemon 2.8.5 0 UIDL DoS Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1366/info A remote user is capable of crashing Alt-N MDaemon 2.8.5.0 by executing the pass command, then the UIDL command and quitting the mail server before the UIDL has returned a response. This must be done before the...
MyBulletinBoard 1.0.x/1.1.x Usercp.PHP SQL Injection Vulnerability
No description provided by source...
Mac OS X <= 10.4.6 (launchd) Local Format String Exploit (x86)
No description provided by source. !/usr/bin/perl http://www.digitalmunition.com/FailureToLaunch.pl Code by Kevin Finisterre kflistsatdigitalmunitiondotcom This is a practical application of Non Executable Stack Lovin - http://www.digitalmunition.com/NonExecutableLovin.txt This code currently jum...
LimeSurvey <= 1.52 (language.php) Remote File Inclusion Vulnerability
No description provided by source. \|/// \ - - // Xmors Underground Group @ @ ----oOOo---oOOo-------------------------------------------------- Portal : LimeSurvey PHPSurveyor 1.52 plusbuild 2007.10.16 Download :...
DMSEasy0.9.7 (fckeditor) Arbitrary File Upload
No description provided by source. !/usr/bin/perl use strict; use warnings; use LWP::UserAgent; use HTTP::Request::Common; print INTRO; +++++++++++++++++++++++++++++++++++++++++++++++++++++ + DMSEasy0.9.7 fckeditor Arbitrary File Upload + + + +++++++++++++++++++++++++++++++++++++++++++++++++++++...
Maian Weblog 2.0 mail.php Multiple Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/17247/info Maian Weblog is prone to multiple SQL-injection vulnerabilities. The application fails to properly sanitize user-supplied input before using it in SQL queries. This will allow an attacker to inject arbitrary SQ...
EasySiteNetwork Jokes Complete Website 'joke.php' SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/32908/info EasySiteNetwork Jokes Complete Website is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow ...
FreeBSD <= 7.1 libc Berkley DB Interface Uninitialized Memory Local Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/34666/info FreeBSD is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks. include sys/types.h include db.h includ...
Joomla Jobprofile Component (com_jobprofile) - SQL Injection
No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register import re class TestPOCPOCBase: vulID = '72384' ssvid version = '1.0' author = 'kikay' vulDate = '2011-12-02' createDate ...
WordPress Filedownload Plugin 0.1 (download.php) Remote File Disclosure Vulnerability
No description provided by source...
Asura Engine Challenge B Query - Remote Stack Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/25411/info Asura Engine is prone to a remote stack-based buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. An attacker ca...
PowerMovieList 0.13/0.14 Edit User HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/20564/info PowerMovieList is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and...
E-vanced Solutions E-vents 5.0 Multiple Input Validation Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/26526/info E-vanced Solutions E-vents is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-bas...
Trixbox 2.4.2 - user/index.php Query String XSS
No description provided by source. source: http://www.securityfocus.com/bid/27460/info The 'trixbox' product is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary...
PHPMyRing <= 4.2.1 (cherche.php) Remote SQL Injection Vulnerability
No description provided by source. Title : PHP My Ring = 4.2.1 cherche.php Remote SQL Injection Vulnerability Author : ajann http://target/path/cherche.php?limite=-1%20union%20select%200,pseudo,0,mdp,0,0%20from%20webring/&mots=%20&where=description ajann,Turkey ... Im not Hacker! milw0rm.com...
mcGallery 1.1 - stats.php lang Parameter XSS
No description provided by source...
iFoto 0.20 Index.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18391/info iFoto is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script...
TinyBB 1.4 - Blind SQL Injection and Path Disclosure
No description provided by source. Exploit Title : TinyBB 1.4 Sql Injection + Path Disclosure Google Dork : Proudly powered by TinyBB Date : 7 April 2011 Author : swami Contact : flaviodotbaldassiatgmaildotcom Version : 1.4 Tested on : Centos 5.5 with magicquotesgpc off Thanks to : ptrace.net Fro...
Ametys CMS 3.5.2 - (lang parameter) XPath Injection Vulnerability
No description provided by source. Ametys CMS 3.5.2 lang parameter XPath Injection Vulnerability Vendor: Anyware Services Product web page: http://www.ametys.org Download: http://www.ametys.org/en/download/ametys-cms.html Affected version: 3.5.2 and 3.5.1 Summary: Ametys is a Java-based open sour...
Midicart PHP Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5851/info A problem with the default installation of Midicart PHP may make it possible for remote users to gain access to sensitive information. The default installation of Midicart PHP does not place sufficient access...
Microsoft Internet Explorer CDwnBindInfo Object Use-After-Free Vulnerability
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
yblog 0.2.2.2 (xss/sql) Multiple Vulnerabilities
No description provided by source. / | || | | | | | | | | /| | | | | || ||| ||||| || C. H. R. O. O. T. SECURITY GROUP - -- ----- --- -- -- ---- --- -- - http://www.chroot.org Hacks In Taiwan | || | | | | | | | Conference 2008 | | | | | | | | | || ||| || |||| http://www.hitcon.org Title...
MS IE 4.0/5.0 ActiveX "Eyedog" Vulnerability
No description provided by source. Microsoft Internet Explorer 4.0/5.0 for Windows 95/Windows NT 4/Windows 2000/Windows 95/Windows 98 ActiveX Eyedog Vulnerability source: http://www.securityfocus.com/bid/619/info The Eyedog ActiveX control is marked 'safe for scripting' although it permits regist...
Midicart PHP Arbitrary File Upload Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5855/info A problem with the default installation of Midicart PHP may make it possible for remote users to gain access to sensitive information. The default installation of Midicart PHP does not place sufficient access...
Gamespy Software Development Kit Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9741/info It has been reported that the GameSpy SDK is prone to a remote denial of service vulnerability. This issue is due to the software failing to handle exceptional conditions during network communication. Exploitati...
Setuid Tunnelblick Privilege Escalation
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' require...
Oracle Java BytePackedRaster.verify() Signed Integer Overflow
No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 +------------------------------------------------------------------------------+ | Packet Storm Advisory 2013-0819-1 | | http://packetstormsecurity.com/ |...
e107 website system 0.7.5 user.php Query String (PATH_INFO) Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/19997/info e107 CMS is prone to multiple cross-site scripting vulnerabilities because the application fails to sanitize user-supplied input. An attacker may levearge this issue to have arbitrary script code execute in the...
AlstraSoft Live Support 1.21 - Admin Credential Retrieve Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo AlstraSoft Live Support v1.21 Admin Credential Retrieve Exploit by BlackHawk [email protected] http://itablackhawk.altervista.org Thanks to rgod for the php code and Marty for the Love ; if $argc2 echo Usage: php...
FreePBX 2.5.x - 2.6.0 - Permanent Cross-Site Scripting (XSS)
No description provided by source...
WinComLPD <= 3.0.2 - Buffer Overflow
No description provided by source. $Id: wincomlpdadmin.rb 9583 2010-06-22 19:11:05Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of us...
PHP Lowbids viewfaqs.php Blind SQL Injection Vulnerability
No description provided by source. == +Script: PHP Lowbids +Version: n/a +Link: http://phplowbids.com == +Author: BorN To K!LL - h4ck3r +Contact: [email protected] == +3xploit: /viewfaqs.php?cat=Blind-Injection +3xample: /viewfaqs.php?cat=1 and substringversion,1,1=4 // true /viewfaqs.php?cat=1 a...
IBM AIX <= 4.2.1, Sun Solaris <= 7.0 LC_MESSAGES libc Buffer Overflow Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/268/info A buffer overflow in libc's handling of the LCMESSAGES environment variable allows a malicious user to exploit any suid root program linked agains libc to obtain root privileges. This problem is found in both IBM...
SLMail 5.5 - Remote Buffer Overflow Exploit
No description provided by source. / SLMAIL REMOTE PASSWD BOF - Ivan Ivanovic Ivanov ????-????? ???????????????? 31337 Team / include string.h include stdio.h include winsock2.h include windows.h // bind 4444 unsigned char shellcode = \xfc\x6a\xeb\x4d\xe8\xf9\xff\xff\xff\x60\x8b\x6c\x24\x24\x8b\x...
Mac OS X <= 10.4.6 (launchd) Local Format String Exploit (ppc)
No description provided by source. !/usr/bin/perl http://www.digitalmunition.com/FailureToLaunch-ppc.pl Code by Kevin Finisterre kflistsatdigitalmunitiondotcom Much appreciation goes to John H for all kindsa random shit like exploiting Veritas and other random things in the past core... where the...
GNU Bash <= 4.0 'ls' Control Character Command Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/37776/info GNU Bash is prone to a command-injection vulnerability because it fails to adequately sanitize control characters in the 'ls' command. Attackers can exploit this issue to execute arbitrary commands in a bash...
FreeWPS <= 2.11 (images.php) Remote Code Execution Exploit
No description provided by source. ? errorreportingEERROR; function exploitinit if !extensionloaded'phpcurl' && !extensionloaded'curl' if !dl'curl.so' && !dl'phpcurl.dll' die oo error - cannot load curl extension!; function exploitheader echo...
Dotproject 2.0 /includes/session.php baseDir Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/16648/info Dotproject is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to includ...
Pixel Motion 0 admin/index.php Multiple Field SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/17260/info Pixel Motion is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful explo...
PunBB Automatic Image Upload <= 1.3.5 Delete Arbitrary File Exploit
No description provided by source. !/usr/bin/perl 0-Day PunBB Automatic Image Upload = v1.3.5 Delete Arbitrary File Vulnerability Coded By Dante90, WaRWolFz Crew Bug Discovered By: Dante90, WaRWolFz Crew Works only if '$AllowDelete = USERGROUP;' is not commented in uploadimgconfig.php FIND LINE:...
post Card (catid) Remote SQL Injection Vulnerability
No description provided by source. post Card catid Remote SQL Injection Vulnerability Author: Hussin X Home : www.iqs3cur1ty.comhttp://www.iqs3cur1ty.com & www.iq-ty.comhttp://www.iq-ty.com MaiL : [email protected] script : http://webbdomain.com/php/postcarden/index2.php script :...
atutor 1.2 - Multiple Vulnerabilities
No description provided by source...
Yap Blog 1.1 - 'index.php' Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28120/info Yap Blog is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise the application and the underlyi...
Max.Blog <= 1.0.6 (offline_auth.php) Offline Authentication Bypass
No description provided by source. Salvatore drosophila Fresta Application: Max.Blog http://www.mzbservices.com Version: Max.Blog = 1.0.6 Bug: Offline Authentication Bypass Exploitation: Remote Dork: intext:Powered by Max.Blog Date: 27 Jan 2009 Discovered by: Salvatore drosophila Fresta Author:...
DreamAccount <= 3.1 (auth.api.php) Remote File Include Exploit
No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import Output, POCBase from pocsuite.utils import register class TestPOCPOCBase: vulID = '63672' ssvid version = '1.0' author = '皮皮' vulDate = '2006-12-01' createDate = '2015-12-24...
Linux kernel 2.1.89/2.2.x Zero-Length Fragment Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2247/info Linux kernel versions 2.1.89 to 2.2.3 are vulnerable to a denial of service attack caused when a 0-length IP fragment is received, if it is the first fragment in the list. Several thousands 0-length packets must...
CS Whois Lookup 'ip' Parameter Remote Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/34700/info CS Whois Lookup is prone to a remote command-execution vulnerability because the software fails to adequately sanitize user-supplied input. Successful attacks can compromise the affected software and possibly t...