56796 matches found
ARTIS ABTON CMS Multiple SQL Injection Vulnerabilities
No description provided by source...
Sun Solaris <= 7.0 lpset Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/251/info A stack buffer overflow vulnerability in the handling of the -a command in the lpset program allows arbitrary execution of code with root privileges. The lpset utility sets printing configuration information in t...
Java Web Start Launcher ActiveX Control - Memory Corruption
No description provided by source. SEC Consult Vulnerability Lab Security Advisory 20130417-1 ======================================================================= title: Java ActiveX Control Memory Corruption product: JavaTM Web Start Launcher vulnerable version: Sun Java Version 7 Update 17 a...
Jason Rahaim MP3Mystic 1.0.x Server Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2699/info A vulnerability exists in Jason Rahaim's MP3Mystic Server which allows a remote user to traverse the directories of a target host. This may lead to the disclosure of file and directory contents. Arbitrary...
Easy Banner Pro 2.8 info.PHP Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/21967/info Easy Banner Pro is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the...
MySource CMS <= 2.16.2 (init_mysource.php) Remote File Include Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? print ' | \\ | \\ | \ . . |\ \ \ /\ \ / /| || | | | | \ | \ Y / | || | | \ | \ \ / | || | |/ // / / ||| \ | / / \ / \ |\ /\ / / \ / \ | | | | / /\ \ / \ / \ | | | | / | / Y \ || / /| /| /...
phpg 1.6 (xss/pd/dos) Multiple Vulnerabilities
No description provided by source. PHPg 1.6 has a few XSSes, path disclosures, and a DoS vulnerability. Home: http://black-dwarf.com HS: http://www.hotscripts.com/Detailed/86225.html Found by: Anarchy Angel - http://hha.zapto.org Temp XSS: http://site.com/phpg/index.php?url= XSS Temp XSS:...
Mollensoft Software Enceladus Server Suite 3.9 FTP Command Buffer Overflow
No description provided by source. source: http://www.securityfocus.com/bid/6345/info Enceladus Server Suite is prone to a remotely exploitable buffer overflow vulnerability. It is possible to trigger this condition by supplying an overly long value for several FTP commands. To exploit this issue...
phpMyAdmin 2.5.7 - Remote code injection Exploit
No description provided by source. / phpmy-explt.c written by Nasir Simbolon nasir kecapi com eagle kecapi com Jakarta, Indonesia June, 10 2004 A phpMyAdmin-2.5.7 exploite program. This is a kind of mysql server wrapper acts like a proxy except that it will sends a fake table name, when client...
WebPortal CMS <= 0.7.4 (download.php aid) SQL Injection Exploit
No description provided by source. !/usr/bin/perl --==+============================================================================+==-- --==+ WebPortal = 0.7.4 Remote SQL Injection Exploit +==-- --==+============================================================================+==-- Discovered By:...
eStore 1.0.2 - SQL Injection Vulnerability
No description provided by source. ===================================================================================================== .::Powered by eStore v1.0.2::. ===================================================================================================== x Author : R3VANBASTARD x W...
Trend Micro Internet Security Pro 2010 ActiveX extSetOwner Remote Code Execution
No description provided by source. !-- | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | Day 3 Binary Analysis | | | | || / \ || | | | || ||// \/|/ Title : Trend Micro Internet Security Pro 2010 ActiveX extSetOwner Remote Code Execution Version : UfPBCtrl.DLL...
Microsoft Windows 7 wab.exe DLL Hijacking Exploit (wab32res.dll)
No description provided by source. / Exploit Title: Microsoft Windows 7 wab.exe DLL Hijacking Exploit wab32res.dll Date: 24/08/2010 Author: TheLeader Email: gsog2009 a7 hotmail d0t com Version: 6.1.7600 and prior Tested on: Windows 7 x86 6.1.7600 There's a chance this one works with vista...
Noah's Classifieds 1.3 Index.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14835/info Noah's Classifieds is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...
TORCS 1.3.1 acc Buffer Overflow
No description provided by source. / Exploit Title: TORCS acc Buffer Overflow Date: 20/12/2011 Author: Andres Gomez Software Link: http://torcs.sourceforge.net/ Version: torcs 1.3.1 Tested on: Windows CVE : / / This exploit generates a corrupted acc file which has to be saved in the directories...
11in1 CMS 1.0.1 (do.php) - CRLF Injection Vulnerability
No description provided by source. 11in1 CMS v1.0.1 do.php CRLF Injection Vulnerability Vendor: 11in1 Product web page: http://www.11in1.org Affected version: 1.0.1 Summary: Eleven in One is an open-source content management system CMS that is powered by PHP and MySQL. It does not only help you...
i-Gallery 3.4 igallery.ASP Remote Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26348/info i-Gallery is prone to a remote information-disclosure vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized remote user to view arbitrary local...
Microsoft PowerPoint 2003 powerpnt.exe Unspecified Issue
No description provided by source. source: http://www.securityfocus.com/bid/18993/info Microsoft PowerPoint is prone to multiple remote vulnerabilities. Three proof-of-concept exploit files designed to trigger vulnerabilities in PowerPoint have been released. It is currently unknown if these thre...
NC LinkList 1.3.1 - Remote Command Injection Exploit
No description provided by source. -------------------------------------------------------------- NC LinkList 1.3.1 Remote Command injection Exploit --------------------------------------------------------------- Founder :ThE g0bL!N Vendor:http://www.php-linkverzeichnis.de Thank You Very Much...
Valid tiny-erp <= 1.6 - SQL Injection Vulnerability
No description provided by source. ------------------------------------------------------------------------ Valid tiny-erp = 1.6 SQL Injection Vulnerability ------------------------------------------------------------------------ author............: muuratsalo Revshell.com contact...........:...
DynPG CMS 4.1.0 - Multiple Vulnerabilities
No description provided by source. DynPG CMS v4.1.0 Multiple Vulnerability fucking the Web Apps attack edition /\ \ /\ \ /\ /\ \ \ \ \L\ \ \ /'\ /\ \ \ ,\ \ \ \ \ /\ /\ \ /'\ \ , /\ \ /' \ /' \ \ \ /\ \ \ /'\ \ \ /\ \ \ /\ /\ \ \\ \ /\ /\ /\ \L\ \ \ \ \ \ \ \ /\ / \ \ \ /\ \...
Claroline <= 1.8.0 rc1 (import.lib.php) Remote File Include Vulnerability
No description provided by source. claroline = 180rc1 Remote File Inclusion Download Source : http://www.claroline.net/dlarea/claroline180rc1.tar.gz Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg file ; claroline/inc/lib/import.lib.php bugs ; begin line 8 requireonc...
Trawler Web CMS <= 1.8.1 - Multiple Remote File Include Vulnerabilities
No description provided by source. trawler = 1.8.1 Remote File Inclusion Download Source : http://harald-kampen.de/trawler1.8.1.zip Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg @irc.dal.net exploit;...
MollenSoft Lightweight FTP Server 3.6 - Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10409/info A denial of service condition is reported to exist in the MollenSoft Lightweight FTP Server that may allow a remote user to deny service to legitimate FTP users. The vulnerability is due to a lack of sufficient...
httpdx 1.5.4 - Remote HTTP Server Denial of Service
No description provided by source. !/usr/bin/perl -w ====================================================================== Exploit Title: httpdx v1.5.4 Remote HTTP Server DoS using wildcards Date: 18 July 2012 Exploit Author: st3n at sign funoverip dot net Vendor Homepage:...
Novell Iprint LPD Remote Code Execution Vulnerability
No description provided by source. !/usr/bin/perl Source: http://www.protekresearchlab.com/index.php?option=comcontent&view=article&id=21&Itemid=21 use Getopt::Std; use IO::Socket::INET; $SIGINT = \ my $host = '10.102.3.79'; my $port = 515; my $proto = 'tcp'; my $sockType = SOCKSTREAM; my $timeou...
Joomla RokModule Component (index.php, module parameter) Blind SQLi
No description provided by source. Titulo: Joomla Component RokModule Blind SQLi module Vulnerability Nombre del Componente: Comrokmodule Empresa: http://www.rockettheme.com/ Testeado: Linux Backtrack Autor: Yarolinux Para WebSecurityDev Twitter: @Yarolinux Fecha: 09/09/2012 Bueno la Injeccion Va...
Millenium MP3 Studio 1.x - (.m3u File) Local Stack Overflow
No description provided by source...
BtiTracker 1.3.x - 1.4.x - Exploit
No description provided by source. !/usr/bin/env python xpl0it /\ \ /\ \ /\ \ //\ / \ ,\L\ /\ \ ,\ \ \ \ /' /\ \ /'\ /'/\ /\ /'/\ \ \ / /\ /\ \ \ /\ /\ /\ \L\ /\ //\ /\ \ \ \ \ / \ \ \ \ \ \ \ \ /\ \ \ \ \ \\ /\ \ \ \ \/ \ //////////// // // //// // \ //...
VWar <= 1.50 R14 (online.php) Remote SQL Injection Vulnerability
No description provided by source. .: insecurity research team :. ....:...:. . .:. | |/ :/ // :/ .:. : | | | \\ /\ / :. . ..: ||| / \ \ .: .:.. .. ./ .:/:. ./. .:/: . ...:. .advisory. .:... :..................: 1o.o8.2oo6 .. Affected Application: VWar = v1.50 R14 . . : contact :...
eZip Wizard 3.0 Stack Buffer Overflow
No description provided by source. $Id: ezipwizardbof.rb 12428 2011-04-25 01:06:34Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
Aptgp.1.3.0c - Cross Site Scripting Vulnerability
No description provided by source...
UltraVNC 1.0.1 - Multiple Remote Error Logging Buffer Overflow Vulnerabilities (2)
No description provided by source. source: http://www.securityfocus.com/bid/17378/info UltraVNC is susceptible to multiple error-logging remote buffer-overflow vulnerabilities. These issues are due to the application's failure to properly bounds-check user-supplied input before copying it to...
Cart Software Multiple Vulnerabilities
No description provided by source. ========================================================= sabadkharid CMS Multiple Vulnerabilities ========================================================= Exploit Title: sabadkharid CMS Multiple Vulnerabilities Date: 8/07/2011 Author: hosinn Software Link:...
MyHobbySite 1.01 SQL Injection and Authentication Bypass Vulnerability
No description provided by source. Exploit Title: MyHobbySite 1.01 SQL injection, Bypass Authentication Vulnerability Date: 12-09-2010 Author: YuGj VN Email: [email protected] Software Link: http://www.myhobbysite.net/index.php?page=15 Version: v1.01 Bug Code: if isset$REQUEST'username' an...
Magix Musik Maker 16 .mmm Stack Buffer Overflow
No description provided by source. $Id: magixmusikmaker16mmm.rb 12688 2011-05-22 23:41:15Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...
VWar 1.5 stats.php vwar_root Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/19387/info VWar is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file...
Joomla En Masse Component 1.2.0.4 - SQL Injection
No description provided by source...
DMXReady BillboardManager <= 1.1 Contents Change Vulnerability
No description provided by source. Title : DMXReady BillboardManager = 1.1 Remote Contents Change Vulnerability Author : x0r Contact : [email protected] \ [email protected] S.Page : http://www.dmxready.com $$ : 49.97 $ Permissions: Update Delete Insert Category / Sub Category Example: You Find -...
MAXdev MD-Pro 1.0.76 User.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/20752/info MAXdev MD-Pro is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser...
TFTPGUI 1.4.5 - Long Transport Mode Overflow DoS (Meta)
No description provided by source. Title: TFTPGUI v1.4.5 Long Transport Mode Overflow EDB-ID: 12482 CVE-ID: OSVDB-ID: Author: Jeremiah Talamantes Published: 2010-05-02 Verified: yes This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions...
WvTFTPd 0.9 - Remote Root Heap Overflow Exploit
No description provided by source. / wvtftp option name heap overflow remote root exploit infamous42md AT hotpop DOT com exploitation is not exactly straight forward. When we overflow our buffer, we overwrite a pointer that is freed before we get to trigger our overwrite. so we have to restore th...
MagpieRSS 0.72 CDATA HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/33044/info MagpieRSS is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script...
Geeklog <= 1.5.2 - savepreferences()/*blocks[] SQL Injection Exploit
No description provided by source. ?php / Geeklog = 1.5.2 savepreferences/blocks remote sql injection exploit by Nine:Situations:Group::bookoo our site: http://retrogod.altervista.org/ software site: http://www.geeklog.net/ PHP and MySQL version independent vulnerability, see usersettings.php nea...
bcoos 1.0.13 'modules/banners/click.php' SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/31941/info The 'bcoos' program is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...
iGaming CMS <= 1.3.1/1.5 - Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl use Tk; use Tk::BrowseEntry; use Tk::DialogBox; use LWP::UserAgent; $mw = new MainWindowtitle = UnderWHAT?! ; $mw-geometry '395x180' ; $mw-resizable0,0; $mw-Label-text = '', -font = 'Verdana 2',-foreground='red'-pack; $mw-Label-text = 'iGaming cms...
vlinks 2.0.3 (site.php id parameter) SQL Injection
No description provided by source. !x! Informations: Name : vlinks Download : http://www.vlinks.org/ =http://www.vlinks.org/telechargements/Vlinks2.0.3.zip And All Version Vulnerability : Sql Injection Author : JIKOJAWAD Contact : [email protected] Site : No-ExploiT.CoM Is Back Notes :...
EasyPHPCalendar 6.1.5/6.2.x datePicker.php serverPath Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/14131/info EasyPHPCalendar is prone to multiple remote file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these...
Logics Software LOG-FT Arbitrary File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12998/info LOG-FT is reported prone to an arbitrary file disclosure vulnerability. This issue results from an access validation error and can allow a remote attacker to disclose sensitive data. It is reported that an...
XChat Heap Overflow DoS
No description provided by source. !/usr/bin/python Exploit Title: XChat Heap Overflow DoS Proof of Concept Date: June 2011 Author: th3p4tri0t Software Link: http://xchat.org/ Version: = 2.8.9 This only works on XChat on KDE, I'm not sure about windows. It has been tested on Ubuntu failed, Kubunt...