56796 matches found
Safari 5.0.1 - DLL Hijacking Exploit (dwmapi.dll)
No description provided by source. / Version: Safari 5.0.1 Tested on: Windows XP SP3 Author : Secfence Exploit By: Vinay Katoch, Secfence Technologies www.secfence.com http://twitter.com/secfence Place a .htm .mht .mhtml .xht .xhtm .xhtl file and dwmapi.dll in same folder and run file in safari...
Tugux CMS 1.2 (pid) Arbitrary File Deletion Vulnerability
No description provided by source. Tugux CMS 1.2 pid Remote Arbitrary File Deletion Vulnerability Vendor: Tugux Studios Product web page: http://www.tugux.com Affected version: 1.2 Summary: Tugux CMS is a free, open-source content Management system CMS and application that powers the entire web...
AVM KEN! 1.3.10/1.4.30 Malformed Request Remote DoS
No description provided by source. source: http://www.securityfocus.com/bid/1103/info A remote user on the local network is capable of retrieving any known file from a machine running AVM KEN!. This is accomplished by appending ../ to a URL utilizing port 3128 to escape the regular web file...
Fantastic News 2.1.1 - SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16842/info Fantastic News is prone to an SQL-injection vulnerability. Successful exploitation could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying...
ProFTPd Local pr_ctrls_connect Vulnerability - ftpdctl
No description provided by source. / This is simple local exploit Proof of Concept? for local bug in ProFTPd not in default options must be configured with option --enable-ctrls. Bug exist in function prctrlsconnect in file src/ctrls.c, look: src/ctrls.c int prctrlsconnectconst char socketfile...
Image gallery with Access Database dispimage.asp id Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/21131/info Image gallery with Access Database is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could...
Linux/x86 Reverse TCP Bind Shellcode (92 bytes)
No description provided by source. / Title : reversetcpbindshell 92 bytes Date : 16 May 2013 Author : Russell Willis [email protected] Testd on: Linux/x86 SMP Debian 3.2.41-2 i686 $ objdump -D reversetcpbindshell -M intel reversetcpbindshell: file format elf32-i386 Disassembly of section .text:...
Apple QuickTime 7.3 RTSP Response Header Buffer Overflow
No description provided by source. $Id: applequicktimertspresponse.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing an...
SOTEeSKLEP <= 3.5RC9 (file) Remote File Disclosure Vulnerability
No description provided by source. SOTEeSKLEP Remote File Disclosure Vulnerability Script : SOTEeSKLEP Versions: 3.1RC8, 3.5RC1, 3.5RC4, 3.5RC9, and i think other. Site : http://www.sote.pl Bug: ... if ! empty$REQUESTfile $file=$REQUEST'file';...
NO-IP.com Dynamic DNS Update Client 2.2.1 - "Request" Insecure Encoding Algorithm
No description provided by source. !/usr/bin/python |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | |...
ExpressionEngine 1.2.1 HTTP Response Splitting and Cross Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/27128/info ExpressionEngine is prone to an HTTP-response-splitting vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to...
Microsoft PowerPoint 2003 mso.dll PPT Processing Unspecified Code Execution
No description provided by source. source: http://www.securityfocus.com/bid/18993/info Microsoft PowerPoint is prone to multiple remote vulnerabilities. Three proof-of-concept exploit files designed to trigger vulnerabilities in PowerPoint have been released. It is currently unknown if these thre...
HP OpenView Network Node Manager OvWebHelp.exe CGI Buffer Overflow
No description provided by source. $Id: hpnnmovwebhelp.rb 10998 2010-11-11 22:43:22Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
Claroline 1.8.9 wiki/wiki.php URL XSS
No description provided by source. source: http://www.securityfocus.com/bid/30269/info Claroline is prone to multiple input-validation vulnerabilities: 1. Multiple cross-site scripting vulnerabilities. 2. A remote URI-redirection vulnerability. An attacker may leverage these issues to execute...
HazelPress Lite <= 0.0.4 (Auth Bypass) SQL Injection Vulnerability
No description provided by source. HazelPress Lite = 0.0.4 Auth Bypass SQL Injection Vulnerability By cr4wl3r Download: http://hazelpress.org/index.php?hazel=downloads PoC: path/login.php Username: ' or '1=1 password: ' or '1=1...
Claroline 1.8 learnPath/calendar/myagenda.php Query String XSS
No description provided by source. source: http://www.securityfocus.com/bid/30346/info Claroline is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the brows...
wu-ftpd 2.4.2/2.5 .0/2.6 .0 - Remote Format String Stack Overwrite (2)
No description provided by source. source: http://www.securityfocus.com/bid/1387/info Washington University ftp daemon wu-ftpd is a very popular unix ftp server shipped with many distributions of Linux and other UNIX operating systems. Wu-ftpd is vulnerable to a very serious remote attack in the...
Microsoft Internet Explorer Fixed Table Col Span Heap Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
Horde Horde_Image::factory driver Argument Local File Inclusion
No description provided by source. Exploit Title: Horde HordeImage::factory driver Argument Local File Inclusion Google Dork: intitle:horde Date: 10-02-2011 Author: skysbsb Software Link: http://www.horde.org/download/ Version: Horde 3.3.2 Tested on: linux CVE : CVE-2009-0932 The original...
zKup CMS 2.0 <= 2.3 - Remote Upload Exploit
No description provided by source. !/usr/bin/php ?php / Name: zKup CMS v2.0 = v2.3 0-day exploit upload Credits: Charles real F. charlesfolathotmail.fr Date: 03-08-2008 Conditions: PHP Version, magicquotesgpc=Off This exploit spawn a php uploader in your victim's server. Okay, you may need...
LIVE555 Media Server 2007.11.1 ParseRTSPRequestString Remote Denial Of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26488/info LIVE555 Media Server is prone to a remote denial-of-service vulnerability because it fails to adequately sanitize user-supplied input. Attackers can exploit this issue to crash the application, resulting in...
tellmatic 1.0.7 - Multiple Remote File Inclusion Vulnerabilities
No description provided by source. tellmatic 1.0.7 RFI --------------------- Author : ShAy6oOoN --------------------- Group : PitBull Crew --------------------- Script : tellmatic 1.0.7 --------------------- Download :...
VariCAD 2010-2.05 EN (DWB File) Stack Buffer Overflow
No description provided by source. $Id: varicaddwb.rb 9020 2010-04-05 20:45:21Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
4images <= 1.7.7 (image_utils.php) Remote Command Execution Vulnerability
No description provided by source. || || | || o,7 || . o7 || 4||| ow, : / / . +----------------------------------------------------------------------- -+ | ....... | | ..''xxxxxxxxxxxxxxx'... | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxx.. | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'. | |...
Adobe Acrobat Reader - JBIG2 Local Buffer Overflow PoC (2) (0day)
No description provided by source. !/usr/bin/perl ksOSe 02/22/2009 http://vrt-sourcefire.blogspot.com/2009/02/have-nice-weekend-pdf-love.html my $size = \x40\x00; my $factor = ABCD; my $data = A x 8314; print pdf; sub pdf %PDF-1.5\n . %\xec\xf5\xf2\xe1\xe4\xef\xe3\xf5\xed\xe5\xee\xf4\n . 3 0 \n...
SmartVMD 1.3 ActiveX Control 'VideoMovementDetection.dll' Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/36217/info SmartVMD ActiveX control is prone to a buffer-overflow vulnerability because the application fails to adequately check boundaries on user-supplied input. An attacker can exploit this issue to execute arbitrary...
Rosoft Media Player 4.2.1 - Local Buffer Overflow Exploit (multi target)
No description provided by source. / rsmpf.c Rosoft media player free local buffer overflow Exploit multi targets Coded By : SimO-s0fT [email protected] thanks To : Stack & fl0 fl0w & SKD and special thanks to str0ke for his advices and support you are the best brotha example : Cod...
Rosoft media player 4.4.4 SEH buffer overflow PoC
No description provided by source. rosoft media player 4.4.4 SEH buffer overflow POC vulnerble application link http://download.cnet.com/Rosoft-Media-Player/3000-21394-10044022.html tested on XP SP2 !/usr/bin/python filename = crash.m3u junk = \x41 4500 textfile = openfilename , 'w'...
Windows 95/98 UNC Buffer Overflow Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/779/info There is a overflowable buffer in the networking code for Windows 95 and 98 all versions. The buffer is in the part of the code that handles filenames. By specifying an exceptionally long filename, an attacker ca...
Joomla Component Contact Info 1.0 - SQL Injection Vulnerability
No description provided by source. Joomla comcontactinfocatid SQL-injection vulnerability Author : boom3rang Kosova Hackers Group www.khg-crew.ws Greetz : H!tm@N, KHG, chs, redc00de, pr0xy-ki11er, LiTTle-Hack3r, L1RIDON1. ! ModuleName: comcontactinfo ! ScriptName: Joomla ! GoogleDork:...
shop7z 注入漏洞2
简要描述： shop7z 注入漏洞2 详细说明： News.asp 漏洞证明： 测试 192.168.236.131/news.asp?lid=1' http://www.shop7z.com/Demo/news.asp?lid=1%27...
mySeatXT 0.1781 SQL Injection Vulnerability
No description provided by source. ------------------------------------------------------------------------ Software................mySeatXT 0.1781 Vulnerability...........SQL Injection Threat Level............Critical 4/5 Download................http://sourceforge.net/projects/myseat/ Discovery...
RedHat Linux 4.2,SGI IRIX <= 6.3,Solaris <= 2.6 mailx Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/393/info A buffer overrun exists in the /bin/mailx program. This program was originally developed as part of BSD, and is available on many Unix systems. By supplying a long, well crafted buffer as the username argument, a...
Adobe Acrobat Reader and Flash - 'newfunction' Remote Code Execution Vulnerability
No description provided by source. ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-23-adobe-acrobat-and-reader-newfunction-remote-code-execution-vulnerability/...
Adobe Acrobat Reader <= 8.1.2 Malformed PDF Remote DoS PoC
No description provided by source. Adobe Acrobat Reader = 8.1.2 Reader Remote Denial Of Service the reader deadly crash when a malformed Pdf file is opened: 00414141 AcroRd32.00414141 greetz to : Deimos, benjilenoob, Berga , http://spiritofhack.net/ Poc : http://exploit-db.com/sploits/2008-HI2.pd...
SecureCRT <= 4.0 Beta 2 SSH1 Buffer Overflow
No description provided by source. $Id: securecrtssh1.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of us...
Zoidcom 0.6.x Malformed Packet Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/25326/info The Zoidcom network library is prone to a denial of service vulnerability when handling malformed packets. An attacker could exploit this to crash a network service that is implemented with the library. / by...
phpBB Chart Mod 1.1 charts.php id Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/17952/info Chart Mod is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly...
video cam server 1.0 - Directory Traversal vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13456/info Video Cam Server is prone to a directory traversal vulnerability that could allow attackers to read files outside the Web root. http://www.example.com/......................\windows\system.ini GET...
Folder Lock 5.9.5 Weak Password Encryption Local Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30766/info Folder Lock is prone to an information-disclosure vulnerability because it stores credentials in an insecure manner. A local attacker can exploit this issue to obtain passwords used by the application, which ma...
KDE Konqueror 3.x/IOSlave - FTP PASV Port-Scanning Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/23091/info KDE Konqueror is prone to a vulnerability that may allow attackers to obtain potentially sensitive information. A successful exploit of this issue would cause the affected application to connect to arbitrary TC...
Aptgp.1.3.0c - Cross Site Scripting Vulnerability
No description provided by source...
Novell Netware 4.1/4.11 SP5B Remote.NLM Weak Encryption Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/482/info The encrypted passwords for Remote.NLM are remotely accessible to anyone with the ability to view SYS:System\LDRemote.NCF. The password encryption algorithm for Remote.NLM has been broken and can be decrypted wit...
Microsoft Windows XP/2003 - RPCSS Service Isolation Local Privilege Escalation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/34443/info Microsoft Windows is prone to a privilege-escalation vulnerability. Successful exploits may allow attackers to elevate their privileges to LocalSystem, which would facilitate the complete compromise of affected...
29 bytes chmod("/etc/shadow", 0777) shellcode
No description provided by source. include stdio.h include string.h / by Magnefikko 20.04.2010 [email protected] promhyl.oz.pl Subgroup: PRekambr Name: 29 bytes chmod/etc/shadow, 0777 shellcode Platform: Linux x86 chmod/etc/shadow, 0777; gcc -Wl,-z,execstack filename.c shellcode:...
Web Protector 2.0 Trivial Encryption Weakness
No description provided by source. source: http://www.securityfocus.com/bid/7409/info Web protector has been reported prone to a trivial encryption weakness. It has been reported that the method used to obfuscate and protect the HTML source of web pages implementing Web Protector is flawed and ma...
E-Guest 1.1 Server Side Include Arbitrary Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5129/info E-Guest guest book is a freely available, open source guest book. It is designed for Unix and Linux operating systems. E-Guest does not adequately sanitize user-supplied input in guest book entries. Because of...
Novell NetIQ Privileged User Manager 2.3.1 ldapagnt.dll ldapagnt_eval() Perl Code Evaluation RCE
No description provided by source. Novell NetIQ Privileged User Manager 2.3.1 ldapagnt.dll ldapagnteval Perl Code Evaluation RCE pre auth/SYSTEM Tested against: Microsoft Windows 2003 r2 sp2 download url: http://download.novell.com/index.jsp search Privileged User Manager file tested:...
Calendar Express 2.2 Search.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14505/info Calendar Express is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitra...
BBpress 0.8.1 BB-Login.PHP Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/24422/info BBpress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on...