Varnish 2.0.6 Terminal Escape Sequence in Logs Command Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/37713/info Varnish is prone to a command-injection vulnerability because it fails to adequately sanitize user-supplied input in logfiles. Attackers can exploit this issue to execute arbitrary commands in a terminal. Varni...

Jaow <= 2.4.5 - Blind SQL Injection

No description provided by source. Exploit Title: Jaow = 2.4.5 Blind Sql Injection Google Dork: intext:propuls? par jaow 2.4.5 Date: 23/05/2012 Software Link: http://www.jaow.net/telechargements/JaowV2.4.5.zip Version: 2.4.5 Tested on: Debian GNU/Linux Author: kallimero = Introduction = Jaow is a...

Sagem F@ST 2604 CSRF Vulnerability (ADSL Router)

No description provided by source...

MCPWS Personal WebServer <= 1.3.21 Denial of Service Exploit

No description provided by source. !/usr/bin/perl MCPWS Personal - Webserver = 1.3.21 DoS Exploit Vendor: http://www.mcpsoftware.de The coder used a unsecure VB-function Open to open requested files and didn't include a working error handling On Error Goto etc. It's possible to exploit this...

Chilkat Zip ActiveX Component 12.4 - Multiple Insecure Methods Exploit

No description provided by source. pre codespan style=font: 10pt Courier New;span class=general1-symbol------------------------------------------------------------------------------ bChilkat Software Chilkat Zip ActiveX Component ChilkatZip2.dll v. 12.4.2.0 SaveLastError and WriteExe Insecure...

phpldapadmin 0.9.8 rename_form.php dn Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/17643/info PHPLDAPAdmin is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to execute...

Linux Kernel 2.6.x - 'make_indexed_dir()' Local Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/33618/info The Linux kernel is prone to a local denial-of-service vulnerability because it fails to properly handle malformed filesystem images. Attackers can exploit this issue to cause the kernel to crash, denying servi...

The Includer CGI <= 1.0 - Remote Command Execution

No description provided by source. Remote Command Execution on: Example I.: www.host-vulnerable.com/includer.cgi?|id| Example II.: www.host-vulnerable.com/includer.cgi?template=|id| milw0rm.com 2005-03-07...

Linux/x86 Reverse TCP Bind Shellcode (92 bytes)

No description provided by source. / Title : reversetcpbindshell 92 bytes Date : 16 May 2013 Author : Russell Willis [email protected] Testd on: Linux/x86 SMP Debian 3.2.41-2 i686 $ objdump -D reversetcpbindshell -M intel reversetcpbindshell: file format elf32-i386 Disassembly of section .text:...

MYRE Realty Manager Multiple Vulnerabilities

No description provided by source. Exploit Title:MYRE Realty Manager Multiple Vulnerabilities Date: 13.10.201 Exploit Author: d3b4g Vendor Homepage:http://myrephp.com Software Link: http://myrephp.com/demo2/ Tested on: Windows 7 Blog: d3b4g.me...

Mega File Manager - File Download Vulnerability

No description provided by source. Exploit Title: MegaFileManager FileDownload Vulnerability date: 2012-04-19 Author: i2sec-Min Gi Jo Software Link: http://www.awesomephp.com/?Download5 Version: Mega File Manager V 1.0 Tested on: Windows Description : There is no filtering on 'cimages.php'...

Wordpress Spicy Blogroll Plugin - File Inclusion Vulnerability

No description provided by source. ?php // Title: Wordpress Plugin Spicy Blogroll File Inclusion Vulnerability // Date: 12-07-2013 GMT+8 Kuala Lumpur // Author: Ahlspiess // Greetz: All TBDIAN - http://w3.tbd.my : // Screenshot: http://i.imgur.com/jIrUznC.png / Details: File:...

Microsoft IIS 5.0 "Translate: f" Source Disclosure Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/1578/info Microsoft IIS 5.0 has a dedicated scripting engine for advanced file types such as ASP, ASA, HTR, etc. files. The scripting engines handle requests for these file types, processes them accordingly, and then...

Microsoft Windows 9x / Me Share Level Password Bypass Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/1780/info Share level password protection for the File and Print Sharing service in Windows 95/98/ME can be bypassed. Share level access provides peer to peer networking capabilities in the Windows 9x/ME environment. It...

Chasys Media Player 1.1 - (.pls) Stack Overflow Exploit (2)

No description provided by source. !/usr/bin/python Chasys Media Player 1.1 .pls Stack Overflow Exploit By: Encrypt3d.M!nd Credit flys to: zAx the good thing in this one that the program won't crash when the playlist file imported,and will keep running. header =...

Topic Calendar 1.0.1 Calendar_Scheduler.PHP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/12893/info Topic Calendar is reportedly affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to...

Clear iSpot/Clearspot 2.0.0.0 - CSRF Vulnerabilities

No description provided by source. Trustwave's SpiderLabs Security Advisory TWSL2010-008: Clear iSpot/Clearspot CSRF Vulnerabilities https://www.trustwave.com/spiderlabs/advisories/TWSL2010-008.txt Published: 2010-12-10 Version: 1.0 Vendor: Clear http://www.clear.com http://www.clear.com/ Product...

Microsoft Internet Explorer 5.0.1/6.0 Content-Disposition Handling File Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4752/info An issue exists in the way Microsoft Internet Explorer handles conflicting information in some HTTP headers used to describe non-HTML content. A malicious web server may provide content with misleading values in...

phpCheckZ 1.1.0 - Blind SQL Injection Vulnerability

No description provided by source. phpCheckZ 1.1.0 Blind SQL Injection Vulnerability Name phpCheckZ Vendor http://www.phpcheckz.com Versions Affected 1.1.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-10-19 X. IND...

Viscom VideoEdit Gold ActiveX 8.0 - Remote Code Execution Exploit

No description provided by source. !-- Title: Viscom VideoEdit Gold ActiveX 8.0 Remote Code Execution Exploit Date: Dec 5, 2010 Author: Rew Email: rew splat leethax.info Link: http://www.viscomsoft.com/products/videoeditgold/index.html Version: 8.0.0.0 Tested on: WinXP - IE 6 CVE: NA 0day Impact ...

Live For Speed S1/S2 - Multiple Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/25327/info Live For Speed is prone to four vulnerabilities, including buffer-overflow and denial-of-service issues. Successful exploits could allow attackers to execute arbitrary code or to crash game servers...

portal modulnet <= 1.0 - (id) SQL Injection Vulnerability

No description provided by source...

WordPress AdRotate plugin <= 3.6.5 - SQL Injection

No description provided by source. Exploit Title: WordPress AdRotate plugin = 3.6.5 SQL Injection Vulnerability Date: 2011-09-22 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/adrotate.3.6.5.zip Version: 3.6.5 tested Note:...

BS Events Directory (articlesdetails.php) SQL Injection Vulnerability Proof of Concept

No description provided by source. ----------------------------Information------------------------------------------------ +Autor : Easy Laster +ICQ : 11-051-551 +Date : 06.07.2010 +Script : BS Events Directory +Price : $24.95 +Language :PHP +Discovered by Easy Laster 4004-security-project.com...

Kwik Pay Payroll 4.10.3 - (.zip) DoS

No description provided by source. Exploit Title: Kwik Pay Payroll .zip DoS Date: April 1, 2010 Tested on: Windows XP SP3 Cost: 100.00 AU Author: anonymous Site: http://www.setfreesecurity.com File - Restore Database - Find Locate zip file Click the restore button at the bottom Program Crash, and...

SCO UnixWare < 7.1.4 p534589 (pkgadd) Local Root Exploit

No description provided by source. !/bin/ksh 04/2008: public release SCO UnixWare 7.1.4 p534589 if id -un = 'root' ; then grep -v $1-root$ /var/adm/sulog su.log cp su.def /etc/default/su cp su.log /var/adm/sulog rm -f su.def su.log woot.log else echo ------------------------------------ echo...

FVWM 2.4/2.5 fvwm-menu-directory Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9161/info It has been reported that FVWM may be prone to a command execution vulnerability that may allow an attacker to execute malicious commands on a vulnerable system. It has been reported that the fvwm-menu-directory...

HylaFAX+ 5.2.4 - 5.5.3 - Buffer Overflow

No description provided by source...

Microsoft IIS 4.0/5.0 FTP Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2717/info Due to a flaw in the pattern-matching function used by FTP commands, denial of service attacks can be successfully launched. If a user submits an FTP command along with a filename containing specially placed...

Adobe Flash Player <= 10.0.22 and AIR - 'intf_count' Integer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/35907/info Adobe Flash Player and Adobe AIR are prone to an integer-overflow vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the application. Failed attacks may cause a...

Apache Geronimo 2.1.x Multiple Admin Function CSRF

No description provided by source. source: http://www.securityfocus.com/bid/34562/info Apache Geronimo Application Server is prone to multiple remote vulnerabilities: - Multiple directory-traversal vulnerabilities - A cross-site scripting vulnerability - Multiple HTML-injection vulnerabilities - ...

impleo music collection 2.0 (sql/xss) Multiple Vulnerabilities

No description provided by source. + Impleo Music Collection 2.0 SQL/XSS Multiple Remote Vulnerabilities + Download: http://sappy.dk/impleo/download-impleo + Discovered By SirGod + www.mortal-team.org + SQL Injection Auth Bypass - Requirements : magicquotesgpc = off - Vulnerable code in...

WEBgais 1.0 websendmail Remote Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2077/info WEBgais is a package that provides a web interface to the gais Global Area Intelligent Search search engine tool. This package contains a vulnerable script, websendmail, which can be used to execute arbitrary...

WebCalendar 1.2.4 Pre-Auth Remote Code Injection

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

Joomla 1.5.x com_joomgallery&func Incorrect Flood Filter

No description provided by source. ?php $ch = curlinit; curlsetopt$ch, CURLOPTURL, http://server/index.php?option=comjoomgallery&func=votepic&id=here id de voto&Itemid=85; curlsetopt$ch, CURLOPTHEADER, false; curlsetopt$ch, CURLOPTPOSTFIELDS,imgvote=5&Votar%21=Votar%21; curlexec$ch; curlclose$ch;...

Peter's Math Anti-Spam for WordPress 0.1.6 Plugin Audio CAPTCHA Security Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27287/info Peter's Math Anti-Spam for WordPress is prone to a security-bypass vulnerability. This issue occurs when presenting a visitor with challenge data to determine if they are a legitimate user or an automaton. The...

Joomla! Prior to 1.5.11 Multiple Cross Site Scripting and HTML Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/35189/info Joomla! is prone to multiple cross-site scripting and HTML-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied input. These issues affect the 'comuser' component, the...

Sunway Forcecontrol SNMP NetDBServer.exe Opcode 0x57

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

Wordpress PICA Photo Gallery Plugin 1.0 - Remote File Disclosure

No description provided by source. Description : Wordpress Plugins - PICA Photo Gallery Remote File Disclosure Vulnerability Version : 1.0 Link : http://wordpress.org/extend/plugins/pica-photo-gallery/ Plugins : http://downloads.wordpress.org/plugin/pica-photo-gallery.zip Date : 30-05-2012 Google...

The Rat CMS viewarticle2.php id Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/29959/info The Rat CMS is prone to multiple input-validation vulnerabilities, including SQL-injection issues and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these...

MiniWeb MiniWeb HTTP Server (build 300) - Crash PoC

No description provided by source. MiniWeb HTTP server build 300, built on Feb 28 2013 by Stanley Huang http://sourceforge.net/projects/miniweb/files/miniweb/0.8/miniweb-win32-20130309.zip/download Heap corruption PoC - remote DoS Tested on Win7 SP1 RUS x dmnt 2013 import socket print 'Mini Web...

PHPOpenChat 3.0.1 - Multiple HTML Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/12841/info PHPOpenChat is reportedly affected by multiple remote HTML injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in dynamically...

SimpleNews <= 1.0.0 FINAL (print.php news_id) SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w SimpleNews = 1.0.0 FINAL SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code print.php: $newsid = $GET'newsid'; $query = SELECT FROM simplenewsarticles WHERE news...

Oracle 11.1 Database Network Foundation Heap Memory Corruption Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/35677/info Oracle Database is prone to a remote heap memory-corruption vulnerability in Network Foundation. The vulnerability can be exploited over the 'Oracle Net' protocol. An attacker doesn't require privileges to...

Gearbox Software Halo Game 1.x Client Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11724/info The Halo game client is reported prone to a remote denial of service vulnerability. It is reported that when using the in game browser to view a server list, a malicious reply from a server may crash the affect...

Microsoft MSN Messenger <= 8.0 - Video Conversation Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/25461/info Microsoft MSN Messenger is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Successfully exploiting this issue allows remote attackers to...

NoAh <= 0.9 pre 1.2 (mfa_theme.php) Remote File Inclusion Vulnerability

No description provided by source. NoAh 0.9 The PHP Content Architect = Remote File Inclusion Vulnerability Dork:: Vuln Code ERROR:noah/modules/noevents/templates/mfatheme.php ?php include$tpls1; ? BUG: Example:http://site.com/path/noah/modules/noevents/templates/mfatheme.php?tpls1=Sh3LL Script...

Interbase 6.x External Table File Verification Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7291/info A vulnerability has been reported for Interbase that may result in the corruption of arbitrary system files. The vulnerability exists due to insufficient checks performed when creating or manipulating external...

Contrexx 1.0.4 - Multiple Input Validation Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/14352/info Contrexx is affected by multiple input validation vulnerabilities. These issues can allow an attacker to carry out HTML injection, SQL injection and information disclosure attacks. Contrexx versions prior to...

cPanel 10.8.1 - Multiple Cross-Site Scripting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/16482/info cPanel is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input. An attacker may leverage these issues to have arbitrary script cod...