56796 matches found
Stelian Pop dump 0.4 restore Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1330/info A buffer overflow exists in the 'restore' program, part of the dump 0.4b15-1 package, distributed with RedHat Linux 6.2. By supplying a long string containing machine executable code at the prompt for a tape nam...
Grayscale BandSite CMS 1.1 mp3_content.php the_band Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/20137/info Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data. These issues may allow an attacker to access sensitive informatio...
FactoSystem Weblog 0.9/1.0/1.1 - Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/5600/info FactoSystem Weblog is a freely available, open source software package for weblogging and managing content. It is available for Microsoft Windows operating systems. FactoSystem does not adequately filter special...
VBulletin 3.0 Search.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9656/info It has been reported that VBulletin is prone to a cross-site scripting vulnerability in the 'search.php' script. This issue is reportedly due to a failure to sanitize user input and so allow HTML and script code...
Linux Kernel 2.6.x NETLINK_FIB_LOOKUP Local Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/23677/info The Linux kernel is prone to a denial-of-service vulnerability. This issue presents itself when a NETLINK message is misrouted. A local attacker may exploit this issue to trigger an infinite-recursion stack-bas...
RW-Download 4.0.6 - (index.php) SQL Injection Vulnerability
No description provided by source. /////////////////////////Dr.NeT/////////////////////////////////Dr.NeT//////////////////////Dr.NeT////////// //Title ||= RW-Download v4.0.6 = index.php SQL Injection Vulnerability // //Secript ||= RW-Download // //Language||= Php // //Download||=...
ZyXEL ZyWALL 2 3.62 Forms/General_1 sysSystemName Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/25262/info ZyXEL ZyWALL 2 is prone to multiple remote vulnerabilities that affect the management interface. An attacker can exploit these issues to carry out cross-site request forgery, HTML-injection, and denial-of-servi...
NovaSTOR NovaNET 11.0 remote DoS and arbitrary memory read
No description provided by source. source: http://www.securityfocus.com/bid/39693/info NovaStor NovaNET is prone to code-execution, denial-of-service, and information-disclosure vulnerabilities. An attacker can exploit these issues to execute arbitrary code, access sensitive information, or crash...
Pre Classified Listings SQL Injection Vulnerability
No description provided by source. ================================================================= Pre Classified Listings Remote SQL Injection Vulnerability ================================================================= Author: Crux Homepage: http://hack-tech.com Date: 2-27-2010 Software...
Popper <= 1.41-r2 - (form) Remote File Include Vulnerability
No description provided by source. ============================================================================================== Popper = v1.41 form Remote File Inclusion Exploit =============================================================================================== Critical Level :...
TCLhttpd 3.4.2 Directory Listing Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8687/info It has been reported that a vulnerability present in TCLHttpd allows for attackers to view the contents of arbitrary directories on affected web servers. According to the report, the input validation implemented...
Chasys Media Player - (.lst playlist) Local Buffer Overflow Exploit
No description provided by source. !/usr/bin/perl -------------------------------------------------------------- Chasys Media Player .lst playlist Local Buffer Overflow Exploit Discovered and Exploited By : zAx Thanks to all my friends !...
CitrusDB 0.1/0.2/0.3 Credit Card Data Remote Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12402/info A remote information disclosure issue affects CitrusDB. This issue is due to a design problem that grants unauthorized users the ability to export sensitive data. An attacker may leverage this issue to gain...
Popper Webmail 1.41 ChildWindow.Inc.PHP Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13851/info Popper is affected by a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...
Podcast Generator <= 1.1 - Remote Code Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo Podcast Generator = 1.1 Remote Code Execution Vendor: http://podcastgen.sourceforge.net Exploit Author: BlackHawk Author's Site: http://itablackhawk.altervista.org Credits goes to RGod for the code Thanks to Marija just...
NCMedia Sound Editor Pro 7.5.1 - MRUList201202.dat File Handling Buffer Overflow
No description provided by source. !/usr/bin/python Exploit Title: NCMedia Sound Editor Pro v7.5.1 MRUList201202.dat File Handling Local Buffer Overflow Version: 7.5.1 Date: 2012-08-07 Author: Julien Ahrens Website: http://www.inshell.net Software Link: http://www.soundeditorpro.com/ Tested on:...
asg-sentry <= 7.0.0 - Multiple Vulnerabilities
No description provided by source. Luigi Auriemma Application: ASG-Sentry http://www.asg-sentry.com Versions: = 7.0.0 Platforms: Windows and Unix Bugs: A arbitrary files deleting B heap-overflow in FxAgent C termination of FxIAList D buffer-overflow in FxIAList Exploitation: remote Date: 10 Mar...
Tugux CMS 1.2 (pid) Arbitrary File Deletion Vulnerability
No description provided by source. Tugux CMS 1.2 pid Remote Arbitrary File Deletion Vulnerability Vendor: Tugux Studios Product web page: http://www.tugux.com Affected version: 1.2 Summary: Tugux CMS is a free, open-source content Management system CMS and application that powers the entire web...
Caldera OpenServer 5.0.x XSCO Color Database File Heap Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4985/info OpenServer is commercial Unix operating system originally developed by SCO, and distributed by Caldera. It may be possible for a local user to gain elevated privileges. When Xsco is executed, and an excessively...
UltraVNC 1.0.1 - Multiple Remote Error Logging Buffer Overflow Vulnerabilities (2)
No description provided by source. source: http://www.securityfocus.com/bid/17378/info UltraVNC is susceptible to multiple error-logging remote buffer-overflow vulnerabilities. These issues are due to the application's failure to properly bounds-check user-supplied input before copying it to...
cPanel 11.x - scripts2/changeip user Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/29125/info cPanel is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in...
Chilkat Zip ActiveX Component 12.4 - Multiple Insecure Methods Exploit
No description provided by source. pre codespan style=font: 10pt Courier New;span class=general1-symbol------------------------------------------------------------------------------ bChilkat Software Chilkat Zip ActiveX Component ChilkatZip2.dll v. 12.4.2.0 SaveLastError and WriteExe Insecure...
cPanel 11.x - scripts2/knowlegebase issue Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/29125/info cPanel is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in...
Web Wiz Multiple Products SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16085/info Multiple Products by Web Wiz are prone to an SQL injection vulnerability. Successful exploitation can allow an attacker to bypass authentication and gain unauthorized access to a site. Attacks may also result i...
BBSNew 2.0.1 Index2.PHP Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/20204/info bbsNew is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. A successful exploit of this issue allows an attacker to execute arbitrary server-side script co...
AnnonceScriptHP 2.0 membre.dwt.php email Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/21514/info AnnonceScriptHP is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these...
Jax Petition 3.06 Book smileys.php languagepack Parameter Local File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/22072/info Jax Petitionbook is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities using directory-traversal string...
TankLogger 2.4 General Functions Script SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/16228/info TankLogger is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...
XOOPS MyTutorials Module 2.1 - 'printpage.php' SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28230/info MyTutorials is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise t...
Symantec Web Gateway 5.0.3.18 LFI Remote ROOT RCE Exploit
No description provided by source. !/usr/bin/python ''' The original patch for the Symantec Web Gateway 5.0.2 LFI vulnerability removed the /tmp/networkScript file but left the entry in /etc/sudoers, allowing us to simply recreate the file and obtain a root shell using a different LFI...
Adobe Flash Player <= 10.0.22 and AIR - 'intf_count' Integer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/35907/info Adobe Flash Player and Adobe AIR are prone to an integer-overflow vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the application. Failed attacks may cause a...
Barracuda Control Center 620 - Multiple Web Vulnerabilities
No description provided by source. Title: ====== Barracuda Control Center 620 - Multiple Web Vulnerabilities Date: ===== 2011-12-21 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=32 VL-ID: ===== 32 Introduction: ============= Barracuda Networks - Worldwide leader in...
7-Technologies IGSS 9 IGSSdataServer .RMS Rename Buffer Overflow
No description provided by source. $Id: igss9igssdataserverrename.rb 12886 2011-06-09 06:04:04Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing a...
AnnonceScriptHP 2.0 Templates/commun.dwt.php email Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/21514/info AnnonceScriptHP is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these...
Antologic Antolinux 1.0 Administrative Interface NDCR Parameter Remote Command Execution
No description provided by source. source: http://www.securityfocus.com/bid/9495/info It has been reported that Antologic Antolinux may be prone to a remote command execution vulnerability that may allow an attacker to execute arbitrary commands with the privileges of the server hosting the...
Microsoft Windows Kernel Intel x64 SYSRET PoC
No description provided by source. Source: http://packetstormsecurity.org/files/115908/sysret.rar This is proof of concept code that demonstrates the Microsoft Windows kernel Intel/x64 SYSRET vulnerability as described in MS12-042. The shellcode disables code signing and will grant NT SYSTEM...
Opera 10.10 (XML parser) Denial of Service PoC
No description provided by source. From tiny islands of maldivies d3b4g.info Tested: version 10.10 Tested on windows XP SP3 20-01-2010 special thanks to peter Van Eeckhoutte after opening the opera.html broswer hang for a while and crush.same bug in firefox too :d This vulnerability cause a denia...
HolaCMS 1.2/1.4.x Voting Module Remote File Corruption Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12789/info HolaCMS is prone to a vulnerability that may allow remote users to corrupt files on the server. This is due an input validation error that allows users to submit voting data to an attacker-specified file. It ha...
CreaDirectory 1.2 search.asp search Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/21230/info Creascripts creadirectory is prone to multiple input-validation vulnerabilities, inculding SQL-injection issues and a cross-site scripting issue, because the application fails to sufficiently sanitize...
CyberBuild 0 browse0.htm ProductIndex Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/17829/info CyberBuild is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly...
Microsoft Organization Chart 2 - Remote Code Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/31059/info Microsoft Organization Chart is prone to a remote code-execution vulnerability because of a memory-access violation. Remote attackers can exploit this issue by enticing victims into opening a maliciously crafte...
PHPDirector Game Edition 0.1 - Multiple Vulnerabilities (LFI/SQLi/Xss)
No description provided by source. Exploit Title: PHPDirector Game Edition Multiple Vulnerabilities LFI/SQLi/Xss Date: 2010-01-05 Author: Zer0 Thunder Site : http://www.play-online.bzh.be/forum/ Version: v0.1 Tested on: Windows XP sp2 WampServer 2.0i / LinuxBox Ubuntu Server 9.10 CVE : Code : Loc...
Wireshark <= 1.4.4 packet-dect.c Stack Buffer Overflow
No description provided by source. $Id: wiresharkpacketdect.rb 12364 2011-04-19 07:53:58Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and ter...
cPanel 11.18.3/11.21 - 'manpage.html' Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28403/info cPanel is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browse...
Twilight WebServer 1.3.3 .0 GET Request Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8181/info It has been reported that Twilight WebServer may be prone to a remote buffer overflow vulnerability. The problem may be present due to a lack of bounds checking performed on incoming GET requests. Arbitrary code...
Drummond Miles A1Stats 1.0 a1disp3.cgi Traversal Arbitrary File Read
No description provided by source. source: http://www.securityfocus.com/bid/2705/info A1Stats is a CGI product by Drummon Miles used to report on a website's visitor traffic. Versions of this product fail to properly validate user-supplied input submitted as querystrings to the A1Stats script. An...
Microsoft Log Sink Class ActiveX Control Arbitrary File Creation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12646/info Microsoft Log Sink Class ActiveX control can allow remote attackers to create arbitrary files on an affected computer. A remote attacker can exploit this issue by crafting a malicious Web site that triggers thi...
Dede CMS All Versions SQL Injection Vulnerability
No description provided by source. Dede Cms All Versions Sql Vulnerability Exploit / No Priv8 , Everything is Public Date: 30/12/2011 - 13:00 Author: CWH | Finded By : Nafsh We Are : Mr.M4st3r , Nafsh , SkoteVahshat , HijaX Support: Cyberwh.org Mail: [email protected] Software Website:...
iOS iFTPStorage <= 1.3 - Directory Traversal
No description provided by source. x3l http://gahor-krisztian.hu/xel [email protected] Exploit: iFTPStorage for iPhone / iPod touch = 1.3 - Directory Traversal Date: 02/12/2010 Author: x3l Software Link: http://itunes.apple.com/us/app/iftpstorage/id333357690?mt=8 Version: 1.3 Tested on: iPho...
CandyPress Store 3.5.2 14 openPolicy.asp policy Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/21090/info CandyPress Store is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...