56796 matches found
Tunez 1.21 songinfo.php song_id Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/15548/info Tunez is prone to multiple input validation vulnerabilities. The application is affected by an SQL injection vulnerability and a cross-site scripting issue. Successful exploitation of the SQL injection issue...
contentserver 5.6.2929 errors/transaction.asp msg Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/24895/info activeWeb contentserver is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitra...
LeadTools Raster ISIS Object (LTRIS14e.DLL 14.5.0.44) - Remote BoF
No description provided by source. pre span style=font: 14pt Courier New;p align=centerb2007/05/27/b/p/span codespan style=font: 10pt Courier New;span class=general1-symbol----------------------------------------------------------------------------------------- bLeadTools Raster ISIS Object...
Mozilla Firefox <= 1.5.0.6 (FTP Request) Remote Denial of Service Exploit
No description provided by source. !/usr/bin/perl author: tomas kempinsky use strict; use Socket; my $port = shift || 2121; my $proto = getprotobyname'tcp'; my $payload = \x32\x32\x30\x20\x5a\x0d\x0a\x33. \x33\x31\x20\x5a\x0d\x0a\x35\x30. \x30\x20\x44\x6f\x53\x0d\x0a\x35. \x30\x30\x20\x5a\x0d\x0a...
PHP <= 5.4.3 (com_event_sink) Denial of Service
No description provided by source. ?php / PHP = 5.4.3 comeventsink Code Execution Proof of Concept Found by condis Website: http://cond.psychodela.pl Tested on: PHP 5.3.8 + Windows XP SP3 Professional PL PHP 5.3.10 + Windows XP SP3 Professional PL PHP 5.4.0 + Windows XP SP3 Professional PL PHP...
WordPress SendIt plugin <= 1.5.9 - Blind SQL Injection Vulnerability
No description provided by source. Exploit Title: WordPress SendIt plugin = 1.5.9 Blind SQL Injection Vulnerability Google Dork: inurl:wp-content/plugins/sendit/submit.php Date: 2011-08-25 Author: evilsocket evilsocket at gmail dot com Software Link: http://wordpress.org/extend/plugins/sendit/...
Yahoo Messenger 5.5 - Remote Exploit (DSR-ducky.c)
No description provided by source. / --- Remote yahoo Messenger V5.5 exploiter on Windows XP --- Dtors Security Research DSR Code by: Rave The buffer looks like this |-----| Fillup x offsetJMP 0x3EIPNOPSSHELLCODE ^^ / include windows.h include stdio.h include stdlib.h include string.h include...
WordPress wp-people Plugin 2.0 'wp-people-popup.php' SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27858/info The WordPress 'wp-people' plugin is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...
WordPress Paid Downloads plugin <= 2.01 SQL Injection Vulnerability
No description provided by source. Exploit Title: WordPress Paid Downloads plugin = 2.01 SQL Injection Vulnerability Date: 2011-09-07 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/paid-downloads.2.01.zip Version: 2.01 tested...
RMSOFT Downloads Plus (rmdp) 1.5/1.7 Module for XOOPS down.php id Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/30620/info RMSOFT Downloads Plus is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code ...
Rediff Bol 2.0.2 URL Handling Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6670/info It has been reported that a problem in Rediff Bol may allow remote users to log other users out of the Bol chat client. Due to improper handling of some types of requests, a remote user could send an URL request...
MS Windows XP/2003 - (IGMP v3) Denial of Service Exploit (MS06-007) (2)
No description provided by source. / MS06-007 Denial of Service POC exploit created by Firestorm, based on zloSend.exe win32 exploit http://www.securitylab.ru/poc/264136.php Tested on Windows XP SP2 as victim compiled/runned on Fedore Core 4 x86 FOR EDUCATIONAL PURPOSE ONLY !!! / include stdio.h...
xmlrpc.php Library <= 1.3.0 - Remote Command Execute Exploit (2)
No description provided by source. ------------------------------------------------------- /| | | | | /\ | | / \ \ / / |\ | | / /\ \ \ | | / | | | || \ || | | | / /\ | \ || | / | | | ||/ || | || / \ | || || | / | | | || \ || | | / / \ \ | || || | / | | ||| || | | / |/ | || || | | | | || /| |...
MailEnable 1.501x Email Server Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6197/info A buffer overflow vulnerability has been reported for MailEnable's POP3 server. The vulnerability is due to insufficent bounds checking of the USER login field. An attacker can exploit this vulnerability by...
Quick Classifieds 1.0 - controlpannel/createP.php3 DOCUMENT_ROOT Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/28417/info Quick Classifieds is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the applicati...
Looking Glass Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14680/info Looking Glass is prone to a cross-site scripting vulnerability. This issue may be exploited to steal cookie-based authentication credentials from legitimate users of the software. Other attacks are also possibl...
Bolthole Filter 2.6.1 Address Parsing Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11977/info Bolthole Filter is prone to a buffer overflow vulnerability. This issue is exposed when the software parses email address data. If successfully exploited, this vulnerability could result in execution of arbitra...
Novell Access Manager 3 Identity Server IssueInstant Parameter Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/21921/info Access Manager Identity Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary scri...
NooMS CMS 1.1.1 - CSRF
No description provided by source. NooMS CMS version 1.1.1 CSRF Bug Found: April 9th 2011 Found by: loneferret as far as I know anyway Software Download Link: http://phpkode.com/download/p/2381nooms1.1.1.tar.bz2 Nods to exploit-db Team Well, I didn't have much to do this morning so figured I'd tr...
nensor cms 2.01 Multiple Vulnerabilities
No description provided by source. =============================================== Nensor CMS 2.01 Multiple Remote Vulnerabilities =============================================== + Nensor CMS 2.01 Multiple Remote Vulnerabilities...
Logaholic update.php page Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/27003/info Logaholic is prone to multiple input-validation vulnerabilities, including multiple SQL-injection issues, a cross-site scripting issue, and an HTML-injection issue. The issues occur because the application fail...
Skype Technologies Skype 0.92/1.0/1.1 Insecure Temporary File Creation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14293/info Skype is affected by an insecure temporary file creation vulnerability. Exploitation would most likely result in loss of data or a denial of service if critical files are overwritten in the attack. Other attack...
NVidia Display Driver Service (Nsvr) Exploit
No description provided by source. / NVidia Display Driver Service Nsvr Exploit - Christmas 2012 - Bypass DEP + ASLR + /GS + CoE ============================================================= @peterwintrsmith Initial release 25/12/12 Update 25/12/12 - Target for 30 Aug 2012 nvvsvc.exe Build - than...
myEvent 1.2/1.3 Myevent.PHP Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19246/info myEvent is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote files containing malicious PHP...
MyEvent <= 1.3 (myevent_path) Remote File Inclusion Vulnerability
No description provided by source. Script : MyEvent Version : 1.2 Risk : High Class : Remote Credits : b3g0k,Nistiman,flot,Netqurd etc.. my forget other friends Google look for : = MyEvent 1.2 or /calendar/myevent.php...
k_shoutbox <= 4.4 - Remote File Inclusion Vulnerability
No description provided by source. Kurdish Security ShoutBox Remote Command Execution Freedom For Ocalan Contact : irc.gigachat.net kurdhack & www.PatrioticHackers.com Rish : High Class : Remote Script : ShoutBox Site : http://www.knusperleicht.at Code : // // INCLUDE PATH define'SBINCLUDEPATH',...
joomla module autostand 1.0 - Remote File Inclusion Vulnerability
No description provided by source. ======================================================= Joomla Module AutoStand Category = 1.1 Remote File include Vulnerabilities ======================================================= Found By : Cold z3ro , [email protected]...
NETGEAR DGN2200 1.0.0.29_1.7.29_HotS - Stored XSS Vulnerability
No description provided by source. Exploit Title: Stored XSS Vulnerability in NETGEAR DGN2200 Web interface Date 30/04/2014 Exploit author: Dolev Farhi @f1nhack Vendor homepage: http://netgear.com Affected Firmware version: 1.0.0.291.7.29HotS Affected Hardware: NETGEAR DGN2200 Wireless ADSL Route...
Yahoo! Messenger 5.0 Call Center Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4837/info Yahoo! Messenger configures the 'ymsgr:' URI handler when it is installed. The handler invokes YPAGER.EXE with the supplied parameters. YPAGER.EXE accepts the 'call' argument; it is used for starting the 'Call...
KorWeblog 1.6.2 - Remote Directory Listing Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11744/info A vulnerability is reported in the KorWeblog software that may allow a remote user to disclose directory listings. The problem presents itself when a malicious user crafts an URI request containing directory...
Wordpress Lazy SEO plugin 1.1.9 - Shell Upload Vulnerability
No description provided by source. Exploit Title : Wordpress Lazy SEO plugin Shell Upload Vulnerability Exploit Author : Ashiyane Digital Security Team Google Dork: : inurl:/wp-content/plugins/lazy-seo/ Date: 2013/09/21 Vendor Homepage : http://wordpress.org/plugins/lazy-seo Software Link :...
X-Chat 1.2/1.3/1.4/1.5 Command Execution Via URLs Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1601/info A vulnerability exists in versions 1.4.2 and earlier of the X-Chat IRC client. By supplying commands enclosed in backticks in URL's sent to X-Chat, it is possible to execute arbitrary commands should the X-Chat...
Apple iOS pdf Jailbreak Exploit
No description provided by source. The files contained in the archive link below are those that make use of a pdf exploit in order to jailbreak devices running Apple iOS. These pdf's are of interest in that they originate in userland and give root access to the devices...
Ektron CMS 8.5.0 - Multiple Vulnerabilities
No description provided by source. Sense of Security - Security Advisory - SOS-12-009 Release Date. 05-Sep-2012 Last Update. - Vendor Notification Date. 07-May-2012 Product. Ektron CMS Platform. ASP.NET Affected versions. Ektron CMS version 8.5.0 and possibly others Severity Rating. High Impact...
WHMCompleteSolution 3.x/4.x Multiple Vulnerabilities
No description provided by source. $b0x WHMCS WHMCompleteSolution 3.x / 4.x Multiple Vulnerability ! $b0x ZxH-Labs $b0x 1st-NOV-11 $b0x Www.Sec4ever.coM $b0x WH-03 On Windows IIS 6.0 ======================================================== b0x@1337b0x:/b0x/Exploits/WebAPP whoami ZxH-Labs |...
Systrace 1.x 64-Bit Aware Linux Kernel Privilege Escalation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/33417/info Systrace is prone to a local privilege-escalation vulnerability. A local attacker may be able to exploit this issue to bypass access control restrictions and make unintended system calls, which may result in an...
RogioBiz PHP Fle Manager 1.2 - Bypass Admin Exploit
No description provided by source...
Sun Solaris <= 2.6 power management Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/160/info A vulnerability exists in Sun's power management software under Solaris versions 2.4-2.6 although only 2.6 as part of the main distribution. The sys-suspend program is initiated when a user runs the program, or...
Beetel 450TC2 Router Admin Password CSRF Vulnerability
No description provided by source. ??!-- Exploit Title: Beetel 450TC2 Router Admin Password Cross Site Request Forgery Vulnerability Date: 30/04/2014 Exploit Author: shyamkumar somana Vendor Homepage: www.beetel.in Version: 450TC2 - Firmware version : TX6-0Q-005retail Tested on: Windows 8 Beetel...
Alt-N SecurityGateway username Buffer Overflow
No description provided by source. $Id: altnsecuritygateway.rb 9719 2010-07-07 17:38:59Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms...
httpdx <= 1.5.4 - Remote Heap Overflow
No description provided by source. !/usr/bin/perl -w ====================================================================== Exploit Title: httpdx = 1.5.4 Remote Heap Overflow Date: 28 July 2012 Exploit Author: st3n at sign funoverip dot net Vendor Homepage: http://httpdx.sourceforge.net Download...
PHP Uploader Downloader 2.0 - Cross Site Scripting Vulnerability
No description provided by source...
Vikingboard Viking board 0.1.2 forum.php debug Variable Information Disclosure
No description provided by source. source: http://www.securityfocus.com/bid/25060/info Vikingboard is prone to multiple information-disclosure weaknesses because attackers may disclose sensitive information that may be used in other attacks on the system. Vikingboard 0.1.2 is vulnerable; other...
Novell Groupwise 5.5/6.0 Servlet Gateway Default Authentication Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3697/info Novell Groupwise Servlet Gateway is a product that allows Java servlets to be run with NetWare, using Novell JVM for NetWare v1.1.7b and NetWare Enterprise Web Server. A remote attacker may gain access to the...
interphoto gallery - Multiple Vulnerabilities
No description provided by source. ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | Day 6 0day | | | | || / \ || | | | || ||// \/|/ ''' - Title : InterPhoto Gallery Multiple Remote Vulnerabilities - Affected Version : = 2.4.0 - Vendor Site :...
phpMyConferences <= 8.0.2 (menu.inc.php) File Include Vulnerability
No description provided by source. phpMyConferences = 8.0.2 Remote File Inclusion Download Source : http://sedre.loria.fr/phpMyConference/phpMyConferences8.0.2.zip Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg file ; menus.inc.php bugs ;...
Visitors Google Map Lite 1.0.1 (FREE) module mod_visitorsgooglemap SQL Injection
No description provided by source...
Valve Software Source Engine - Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/36061/info Source Engine is prone to a format-string vulnerability because it fails to properly sanitize user-supplied input before passing it as the format specifier to a formatted-printing function. An attacker may...
Ubisoft Rayman Legends 1.2.103716 - Remote Stack Buffer Overflow Vulnerability
No description provided by source. !/usr/bin/perl Ubisoft Rayman Legends v1.2.103716 Remote Stack Buffer Overflow Vulnerability Vendor: Ubisoft Entertainment S.A. Product web page: http://www.ubi.com Affected version: 1.2.103716, 1.1.100477 and 1.0.95278 Summary: Rayman Legends is a 2013 platform...
cPanel < 11.25 CSRF - Add User php Script
No description provided by source. Exploit Title: cPanel 11.25 CSRF - Add php script Date: 27.05.2011 Author: ninjashell Software Link: http://cpanel.net Version: 11.25 see details below Tested on: Linux CVE : N/A I. Introduction cPanel versions below and excluding 11.25 , are vulnerable to CSRF...