Lucene search
+L
SeebugRecent

56796 matches found

seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•32 views

DIY (index_topic did) Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print \n; print VIVA ISlAME VIVA ISLAME \n; print VIVA ISlAME VIVA ISLAME \n; print \n; print DIY Blind SQL Injection Exploit indextopic did \n; print \n; print Author: Mr.SQL \n; print EMAIL :...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•14 views

vBulletin 3.5.2 - XSS Vulnerabilities

No description provided by source. Title: vBulletin Version 3.5.2 - Introduction XSS scripting Author: Discovered by ROOTEGY Version: vBulletin Version 3.5.2 =============================================== WWW.sec-war.com =============================================== 3.5.2 - Introduction XSS...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•24 views

ASX to MP3 Converter 3.0.0.100 - Local Stack Overflow PoC

No description provided by source. !/usr/bin/perl ASX to MP3 Converter Version 3.0.0.100 Local Stack Overflow POC Exploited By mat EAX 00000001 ECX 41414141 EDX 00D30000 EBX 00333ED8 ESP 000F6C90 EBP 000FBFB4 ESI 77C2FCE0 msvcrt.77C2FCE0 EDI 00006619 EIP 41414141 my $ex=http://.\x41 x 26121;...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•22 views

MIRC 2.x/3.x/4.x/5.x Nick Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4027/info mIRC is a popular Internet Relay Chat client whichs runs of Microsoft Windows 9x/ME/NT/2000/XP operating systems. A remote exploitable buffer overflow condition has been discovered in mIRC. This issue is due to...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•14 views

Xomol CMS 1.2 'index.php' HTML Injection and Cross-Site Scripting Vulnerabilities

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•26 views

Lore 1.5.4/1.5.6 'article.php' SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15665/info Lore is prone to an SQL injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•30 views

Samba 2.2.0 - 2.2.8 - trans2open Overflow (OS X)

No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•8 views

myNewsletter 1.1.2 UserName SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/18287/info myNewsletter is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•15 views

WordPress Tune Library plugin <= 2.17 SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress Tune Library plugin = 2.17 SQL Injection Vulnerability Date: 2011-09-10 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/tune-library.zip Version: 1.5.1 tested Notes:...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•18 views

Gkrellmd 2.1 - Remote Buffer Overflow Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/8022/info GKrellMd has been reported prone to a remote buffer overflow vulnerability, arbitrary code execution is possible. The issue presents itself due to a lack of sufficient bounds checking performed on network-based...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•19 views

Sun Microsystems Solaris SRSEXEC 3.2.x Arbitrary File Read Local Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/23915/info Sun Microsystems Solaris is prone to a local information-disclosure vulnerability due to a design error. A local attacker may exploit this issue to access sensitive information, including superuser password...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•13 views

Empire <= 4.3.2 (strncat) Denial of Service Exploit

No description provided by source. Empire = 4.3.2 strncat Denial of Service Exploit http://www.exploit-db.com/sploits/05132006-empiredos.zip milw0rm.com 2006-05-14...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•16 views

Blog Mod <= 0.1.9 (index.php, month parameter) SQL Injection

No description provided by source. ?php / Exploit Title: BlogMod = 0.1.9 SQLi Exploit Date: 04th october 2012 Exploit Author: WhiteCollarGroup Software Link: http://www.codigofonte.net/scripts/php/blog/367blog-mod Version: 0.1.9 How does this exploit works? It exploits one of the several SQL...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•27 views

Dell IT Assistant detectIESettingsForITA.ocx ActiveX Control

No description provided by source. !-- Dell IT Assistant detectIESettingsForITA.ocx ActiveX Control readRegVal Remote Registry Dump Vulnerability download uri: ftp://ftp.us.dell.com/sysman/OM-ITAssistant-Dell-Web-WIN-6.5.0-2247A01.21.exe ActiveX settings: CLSID: 6286EF1A-B56E-48EF-90C3-743410657F...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•24 views

Symantec Norton AntiVirus 2002 Nested File Manual Scan Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10164/info A vulnerability has been reported in Symantec Norton AntiVirus 2002 that may potentially cause deeply nested files with specific names to bypass manual scanning. This could permit malicious executable content t...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•27 views

P-News 1.16 Administrative Account Creation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7689/info A vulnerability has been reported that could enable a P-News member to create and access an administrative account. This is due to insufficient validation of data supplied to account editing input fields of...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•15 views

MyBulletinBoard RC4 member.php Multiple Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/14553/info MyBulletinBoard is prone to multiple SQL injection vulnerability. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•32 views

ABBS Electronic Flashcards 2.1 - Buffer Overflow Exploit (MSF)

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•17 views

PHP iCalendar 1.1/2.x print.php getdate Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/21792/info PHP icalendar is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script cod...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•25 views

Joomla! 'com_gambling' Component 'gamblingEvent' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/38033/info The 'comgambling' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•20 views

Connect Daily 3.2.8/3.2.9 ViewYear.html Multiple Parameter XSS

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•20 views

NPDS 4.8 /5.0 Glossaire Module terme Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/13803/info NPDS is affected by multiple vulnerabilities resulting from input validation errors. These issues may allow remote attackers to carry out HTML injection, cross-site scripting and SQL injection attacks. This may...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•16 views

PHP iCalendar 1.1/2.x search.php Multiple Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/21792/info PHP icalendar is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script cod...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•15 views

Cisco ATA-186 HTTP Device Configuration Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4711/info The Cisco ATA-186 Analog Telephone Adapter is a hardware device designed to interface between analog telephones and Voice over IP VoIP. It includes support for web based configuration. Reportedly, HTTP requests...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•19 views

Accmeware MP3 Cut 5.0.9 - DoS PoC

No description provided by source. Exploit Title: Accmeware MP3 Cut 5.0.9 DoS PoC Date: 12/20/2010 Author: 0v3r Software Link: http://www.mp3-cutter-splitter.com/Files/MCSetup.exe Version: 5.0.9 Tested on: Windows XP SP3 EN VirtualBxox CVE: N/A The application crashes when trys to cut a malformed...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•34 views

Nokia Multimedia Player 1.0 SEH Unicode Exploit

No description provided by source. ? Exploit Title: Nokia Multimedia player SEH Unicode Date: January 11 2011 Author: Carlos Mario Penagos Hollmann Software Link: http://www.brothersoft.com/nokia-multimedia-player-download-46238.html Version: 1.00.55.5010 Tested on: Windows xp sp3 running on VMwa...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•36 views

Exim 4.63 - Remote Root Exploit

No description provided by source. Exim 4.63 RedHat/Centos/Debian Remote Root Exploit by Kingcope Modified perl version of metasploit module =for comment use this connect back shell as trojanurl and be sure to setup a netcat, ---snip--- $system = '/bin/sh'; $ARGC=@ARGV; if $ARGC!=2 print Usage: $...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•36 views

Immo Makler Script SQL Injection Vulnerability

No description provided by source. ----------------------------Information------------------------------------------------ +Name : Immo Makler = SQL injection Vulnerability Proof of Concept +Autor : Easy Laster +Date : 17.12.2010 +Script : Immo Makler +Vendor http://www.mhproducts.de/ +Price :...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•15 views

minimal Gallery 0.8 - Remote File Disclosure Vulnerability

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•21 views

Linux Kernel utrace and ptrace Local Denial of Service Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/29945/info The Linux kernel is prone to a local denial-of-service vulnerability caused by a race condition. Attackers can exploit this issue to cause the kernel to become unresponsive, denying service to legitimate users...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•16 views

OpenFiler 2.99.1 - Multiple persistent XSS Vulnerabilities

No description provided by source. Exploit Title: Multiple persistent XSS in Openfiler Exploit author: Dolev Farhi @f1nhack Date 07/05/2014 Vendor homepage: http://www.openfiler.com Affected Software version: 2.99.1 Alerted vendor: 7.5.14 Software Description ===================== Openfiler is a...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•23 views

Microsoft Windows 2000/NT 4 Local Descriptor Table Local Privilege Escalation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10122/info Microsoft Windows Local Descriptor Table programming interface is prone to a privilege-escalation vulnerability. A local attacker may be able to create a malicious entry in the Local Descriptor Table. This entr...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•12 views

Ubisoft Rayman Legends 1.2.103716 - Remote Stack Buffer Overflow Vulnerability

No description provided by source. !/usr/bin/perl Ubisoft Rayman Legends v1.2.103716 Remote Stack Buffer Overflow Vulnerability Vendor: Ubisoft Entertainment S.A. Product web page: http://www.ubi.com Affected version: 1.2.103716, 1.1.100477 and 1.0.95278 Summary: Rayman Legends is a 2013 platform...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•17 views

Rapid Classified 3.1 viewad.asp id Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/21197/info Rapid Classified is prone to multiple input-validation issues, including multiple cross-site scripting issues and an SQL-injection issue, because the application fails to properly sanitize user-supplied input. ...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•35 views

SugarCRM CE <= 6.3.1 "unserialize()" PHP Code Execution

No description provided by source. ?php / ------------------------------------------------------- SugarCRM CE = 6.3.1 unserialize PHP Code Execution ------------------------------------------------------- author...........: Egidio Romano aka EgiX mail.............: n0b0d13satgmaildotcom software...

0.2AI score0.67256EPSS
SaveExploits13
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•35 views

CakePHP <= 1.3.5 / 1.2.8 Cache Corruption Exploit

No description provided by source. $Id: cakephpcachecorruption.rb 11579 2011-01-14 16:25:37Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•16 views

Ultimate PHP Board 1.8/1.9 ViewForum.PHP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13621/info Ultimate PHP Board is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•30 views

Solaris 2.7 / 2.8 Catman - Local Insecure tmp Symlink Exploit

No description provided by source. !/usr/local/bin/perl -w The problem is catman creates files in /tmp insecurly. They are based on the PID of the catman process, catman will happily clobber any files that are symlinked to that file. The idea of this script is to create a block of symlinks to the...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•19 views

TRIBISUR <= 2.0 - Local File Include Vulnerability

No description provided by source. TRIBISUR = 2.0 Local File Include Vulnerability 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ 0 0 \ \ /\ /\ \ \ \ /\ \ \ /...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•21 views

CMS Mini <= 0.2.2 - Remote Command Execution Exploit

No description provided by source. --+++================================================================+++-- --+++====== CMS Mini = 0.2.2 Remote Command Execution Exploit ======+++-- --+++================================================================+++-- ?php function usage exit \nCMS Mini =...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•30 views

IPSwitch IMail Server <= 8.20 IMAPD Remote Buffer Overflow Exploit

No description provided by source. / Dreatica-FXP crew ---------------------------------------- Target : Ipswitch IMAIL Server IMAPD 7.13 - 8.20 exploit Site : http://www.ipswitch.com Found by : iDEFENSE Security http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=243...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•88 views

Linux Kernel < 2.6.36-rc6 pktcdvd Kernel Memory Disclosure

No description provided by source. / cve-2010-3437.c Linux Kernel 2.6.36-rc6 pktcdvd Kernel Memory Disclosure Jon Oberheide [email protected] http://jon.oberheide.org Information: https://bugzilla.redhat.com/showbug.cgi?id=638085 The PKTCTRLCMDSTATUS device ioctl retrieves a pointer to a...

6.6CVSS6.6AI score0.02396EPSS
SaveExploits7
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•29 views

TFTPUtil GUI 1.4.5 - DoS (Meta)

No description provided by source. Title: TFTPUtil GUI v1.4.5 Invalid Request DoS CVE-ID: OSVDB-ID: Author: Vuk Ivanovic Published: 2010-12-04 Verified: yes This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•35 views

Allaire ColdFusion Server <= 4.0.1 CFCRYPT.EXE Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/275/info A vulnerability in ColdFusion allows pages encrypted with the CFCRYPT.EXE utility to be decrypted. ColdFusion supports the ability to encrypt the CFML templates in an application or component, using the CFCRYPT.E...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•24 views

AnalogX SimpleServer:WWW 1.0.5 DoS Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1349/info If a long url is sent to port 80 on a SimpleServer WWW 1.05 it could cause the service to stop responding. A restart of the server service is required inorder to regain normal functionality...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•24 views

Calendarix (cal_cat.php) SQL Injection Vulnerability

No description provided by source. =============================================================================== Calendarix calcat.php SQL Injection Vulnerability =============================================================================== Author : SixP4ck3r Email & msn : [email protected]...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•19 views

Joomla! Jobads 'type' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/37686/info The Jobads component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•19 views

Kaillera 0.86 Message Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/18871/info Kaillera is prone to a buffer-overflow vulnerability because it fails to properly bounds-check messages before copying them to an insufficiently sized memory buffer. Successful exploits can allow remote attacke...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•15 views

Maxwebportal <= 1.36 password.asp Change Password Exploit (2 - php)

No description provided by source. ?php / ------Trap-Set Underground Hacking Team-----------------mhp0rtal---------------------- Greetz to : Alphaprogrammer , Oilkarchack , Str0ke And Iranian Hacking & Security Teams : Alphast , IHS Team , Shabgard Security Team , Emperor Hacking TEam , CrouZ...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•16 views

Inso DynaWeb httpd 3.1/4.0.2/4.1 Format String Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5384/info Inso DynaWeb webserver, dwhttpd, is used as a subcomponent in products such as Sun's AnswerBook2, which is shipped as part of the Solaris operating environment. The dwhttpd webserver is prone to a remotely...

7.1AI score
SaveExploits0
Total number of security vulnerabilities56796