OvBB 0.x profile.php userid Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/15566/info OvBB is prone to multiple SQL injection vulnerabilities. Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit...

MS Word 95/97/98/2000/2002 Excel 2002 INCLUDETEXT Document Sharing File Disclosure

No description provided by source. source: http://www.securityfocus.com/bid/5586/info The Microsoft Word and Excel INCLUDETEXT Field Code may be used to insert an arbitrary local file into a document. The INCLUDETEXT Field Code is reported to, under some circumstances, present a security threat. ...

Metainfo Sendmail 2.0/2.5,MetaIP 3.1

No description provided by source. source: http://www.securityfocus.com/bid/110/info MetaInfo www.metainfo.com puts out many NT service products, including MetaIP DHCP/DNS manager and Sendmail Unix port. Both products allow remote administration via Web UIs, and MetaIP uses Java to communicate ba...

HiveMail 1.2.2/1.3 addressbook.update.php contactgroupid Variable Arbitrary PHP Command Execution

No description provided by source. source: http://www.securityfocus.com/bid/16591/info HiveMail is prone to multiple vulnerabilities. These vulnerabilities may allow the execution of arbitrary PHP code, cross-site scripting attacks, and SQL injection. The PHP code-execution issues are the result ...

VbsEdit 4.6.1.0 - Denial of Service Vulnerability

No description provided by source. Exploit Title: VbsEdit v4.6.1.0 DoS Date: 8 / 12 / 2010 Author: C G Tan Software Link: http://www.vbsedit.com/trdownload.asp Version: v4.6.1.0 32-bit Version Tested on: Windows XP SP 2, Windows XP SP 3 CVE : N / A Description : This is the latest version from th...

Blue Dove SQL Injection Vulnerability

No description provided by source. .:. Author : HackXBack [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : Blue Dove Word Press Development .:. Bug Type : Sql Injection .:. Dork : powered by Blue Dove Web Design === Exploit ===...

Invision Community Blog Mod 1.2.4 - SQL Injection Vulnerability

No description provided by source. 1. Open any blog entry 2. Try to reply to any message 3. Push Preview message button Do not post your reply 4. Save source code of opened page to your PC 5. Find this string input type='hidden' name='eid' value='BLOGENTRYID' / 6. Change BLOGENTRYID with this SQL...

Mozilla Firefox XSL - Parsing Remote Memory Corruption PoC (2)

No description provided by source. ------------- by DATASNIPER GREETZ TO THE FOUNDER ; fore more information and bug analyses: http://www.at4re.com/f/showthread.php?p=47560 i tray to manipulate the POC for new idea,you now that the call is calling invalid address 00000000 so i can change it to...

AWBS <= 2.7.1 (news.php viewnews) Remote SQL Injection Vulnerability

No description provided by source. Viva IslaM Viva IslaM Remote SQL Injection Vulnerability AWBS Versions 2.3.3 - v2.5.0 - v2.6.3 - 2.7.0 - V2.7.1 news.php viewnews AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] !! SYRIAN HaCkErS !! Script : AWBS Versions : 2.3.3 - v2.5.0 - v2.6...

DD-WRT Site Survey SSID Script Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/30573/info DD-WRT is prone to a script-injection vulnerability because it fails to adequately sanitize user-supplied data to the 'Site Survey' section of the administrative web interface. Attackers can exploit this issue ...

Oxynews Index.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/17132/info Oxynews is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow a...

Open Realty 2.x and 3.x Persistent XSS Vulnerability

No description provided by source...

WSN Guest Database Disclosure Vulnerability

No description provided by source. .:. Author : HackXBack [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : WSN Guest .:. Bug Type : Database Disclosure .:. Dork : Powered by WSN Guest === Exploit === http://server/wsnguest/admin/backup.sql Greats T0: All Member...

Joomla Component (com_ckforms) Local File Inclusion Vulnerability

No description provided by source...

farsinews <= 2.5 - Directory Traversal arbitrary (users.db) access exploit

No description provided by source. !/usr/bin/perl FarsiNews 2.5pro Show User&Passowrd Exploit by Hessam-x www.hessamx.net / | \ | | / \ \ / | |/ // \ \ / \ Y // \ | \ /| | // / | / /\ | \ | / \ / / / / / / Iran Hackerz Security Team WebSite: www.hackerz.ir Description Name : FarsiNews...

PBBoard 2.1.4 - Multiple SQL Injection Vulnerabilities

No description provided by source. Title: PBBoard v2.1.4 multiple SQLi Vulnerabilities Version: 2.1.4 Author/Found by: loneferret Software Site: http://www.pbboard.com/PBBoardv2.1.4.zip Other vulnerabilities: http://www.exploit-db.com/exploits/18937/ Date found: May 29th 2012 Tested on: Ubuntu...

Linux Kernel 2.6.29 - ptrace_attach() Local Root Race Condition Exploit

No description provided by source. / GNU/Linux kernel 2.6.29 ptraceattach local root race condition exploit. ========================================================================== This is a local root exploit for the 2.6.29 ptraceattach race condition that allows a process to gain elevated...

Microsoft Outlook2000/Express 6.0 Arbitrary Program Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6923/info Microsoft Outlook and Outlook Express may execute arbitrary programs through objects embedded in HTML email messages. When an email message or newsgroup message is viewed using Outlook, a temporary object is...

Maxwebportal <= 1.36 password.asp Change Password Exploit (2 - php)

No description provided by source. ?php / ------Trap-Set Underground Hacking Team-----------------mhp0rtal---------------------- Greetz to : Alphaprogrammer , Oilkarchack , Str0ke And Iranian Hacking & Security Teams : Alphast , IHS Team , Shabgard Security Team , Emperor Hacking TEam , CrouZ...

open auto classifieds <= 1.5.9 - Multiple Vulnerabilities

No description provided by source. MorningStar Security - Advisory http://www.morningstarsecurity.com/ Multiple security issues in Open Auto Classifieds 1. Advisory Information ---------------------------------------------------------------------------------------------- Title: Multiple security...

Online Community CMS by I-net SQL Injection Vulnerability

No description provided by source. Exploit Title: Online Community CMS by I-net SQL Injection Vulnerability Date: 16-03-2010 Author: Th3 RDX Software Link: www.i-netsolution.com/online-community-php-scripts.html Version: Tested on: Projects Made By Them category: webapp Code :...

wordpress mini mail dashboard widget 1.42 - Stored XSS

No description provided by source. !/usr/bin/python ''' Author: loneferret of Offensive Security Product: Mini Mail Dashboard Widget Version: 1.42 Software Download: http://wordpress.org/extend/plugins/mini-mail-dashboard-widget/ Timeline: 29 May 2012: Vulnerability reported to CERT 30 May 2012:...

redaxo cms 4.2.1 - Remote File Inclusion Vulnerability

No description provided by source...

TextPattern <= 1.19 (publish.php) Remote File Inclusion Vulnerability

No description provided by source. ---------------------------------------------------------------------------- TextPattern =g1.19 txpcfgtxpath Remote File Inclusion Vulnerability ---------------------------------------------------------------------------- Author : Zeni Susanto A.K.A Bithedz Date...

ilchClan <= 1.0.5 (cid) SQL Injection Vulnerability & Exploit

No description provided by source. ----------------------------Information------------------------------------------------ +Name : ilchClan = 1.0.5 SQL Injection Vulnerability & Exploit +Autor : Easy Laster +Date : 05.04.2010 +Script : ilchClan = 1.0.5 +Price : for free +Language : PHP +Discovere...

Interbase 6.0 GDS_Drop Interbase Environment Variable Buffer Overflow (1)

No description provided by source. source: http://www.securityfocus.com/bid/5044/info Interbase is a database distributed and maintained by Borland. It is available for Unix and Linux operating systems. A buffer overflow has been discovered in the gdsdrop program packaged with Interbase. This...

dreamlive auktionshaus script news.php - (id) SQL Injection Vulnerability

No description provided by source. ----------------------------Information------------------------------------------------ +Name : dreamlive Auktionshaus script news.php id SQL Injection +Autor : Easy Laster +Date : 12.03.2010 +Script : dreamlive Auktionshaus script +Language :PHP +Discovered by...

smartplugs 1.3 - SQL Injection showplugs.php

No description provided by source. ----------------------------Information------------------------------------------------ +Name : smartplugs 1.3 SQL Injection showplugs.php +Autor : Easy Laster +Date : 03.03.2010 +Script : smartplugs 1.3 http://www.smart-plugs.com/spv1/ +Download : -------------...

dew-newphplinks 2.0 (lfi/xss) Multiple Vulnerabilities

No description provided by source. ------------------------------------------------------------------------------------------------ DEW-NEWphpLinks 2.0 LFI/XSS Multiple Remote Vulnerabilities http://www.dew-code.com...

ASP Forum Script new_message.asp forum_id Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/32571/info ASP Forum Script is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an...

Wikiwig <= 4.1 (wk_lang.php) Remote File Include Vulnerability

No description provided by source. $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ Wikiwig = V4.1 Remote File Include Vulnerability $$ Script site: http://wikiwig.sourceforge.net/ $$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$ $$ Find by: Kacper a.k.a...

BS Auto Classifieds (info.php) SQL Injection Vulnerability Proof of Concept

No description provided by source. ----------------------------Information------------------------------------------------ +Autor : Easy Laster +ICQ : 11-051-551 +Date : 06.07.2010 +Script : BS Auto Classifieds +Price : $24.95 +Language :PHP +Discovered by Easy Laster 4004-security-project.com...

SaurusCMS 4.7.0 - Remote File Inclusion Vulnerability

No description provided by source. Exploit Title: SaurusCMSupdate4.7.0 Remote File Include Date: 11-8-2010 Author: LoSt.HaCkEr Software Link: http://www.brothersoft.com/saurus-cms-download-17626.html Version: v 4.7.0 Tested on: Windows XP CVE : ??? ?????? ContactLoSt.HaCkEratyahoodotcom Exploit:...

Quickzip 5.1.8.1 - Denial of Service Vulnerability

No description provided by source. Exploit Title: Quickzip 5.1.8.1 Denial of Service Vulnerability Date: 2010/11/02 Author: moigai e-mail: [email protected] Version: 5.1.8.1 Tested on: Windows XP SP3 En VM Greetz to: Yoji my $file = boom.zip; my $localHeader = \x50\x4b\x03\x04 . Local file head...

Maxwebportal <= 1.36 password.asp Change Password Exploit (1 - html)

No description provided by source. !-- Hi, I'm Soroush Dalili from Grayhatz Security Group GSG . I found dangerous sql injection in Maxwebportal version 1.35,1.36,2.0, 20050418 Next Remote user can inject his/her code in memKey var. and change other users password in password.asp Exploit codes to...

MagnetoSoft SNTP 4.0.0.7 - ActiveX SntpSendRequest Crash PoC

No description provided by source. html object classid='clsid:A3010B66-C229-11D5-B7BA-00C0F02DFC67' id='target' //object script language='vbscript' 'Magneto Software SNTP ActiveX SntpSendRequest BOF POC 'Discovered by: s4squatch 'Site: www.securestate.com 'www:...

Ciamos CMS <= 0.9.5 (module_path) Remote File Inclusion Vulnerability

No description provided by source. Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg Ciamos CMS = 0.9.5 modulepath Remote File Include Vulnerability Download Script : http://sourceforge.net/projects/ciamosmodules/files/ Dork : dieHacking attempt; :D Vuln : ./ciamos/modules/pms/index.php line 13 ?p...

SapGUI BI 7100.1.400.8 - Heap Corruption Exploit

No description provided by source. !-- Product: SapGUI BI File: c:\program files\sap\business explorer\bi\wadmxhtml.dl Version: 7100.1.400.8 ClassID: 30DD068D-5AD9-434C-AAAC-46ABE37194EB RegKey Safe for Script: False RegKey Safe for Init: False Implements IObjectSafety: True IDisp Safe: Safe for...

Ascend CascadeView/UX 1.0 tftpd - Symbolic Link Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/910/info The tftpd bundled with CascadeView for Ascend's B-STDX 8000/9000 network devices creates a log in /tmp called tftpdxferstatus.log. If /tmp/tftpdxferstatus.log already exists as a symbolic link, tftpd will follow ...

iDevSpot iDevCart 1.10 Multiple Local File Inclusion Vulnerabilities

No description provided by source. / / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID...

Yahoo Messenger 5.5 - Remote Exploit (DSR-ducky.c)

No description provided by source. / --- Remote yahoo Messenger V5.5 exploiter on Windows XP --- Dtors Security Research DSR Code by: Rave The buffer looks like this |-----| Fillup x offsetJMP 0x3EIPNOPSSHELLCODE ^^ / include windows.h include stdio.h include stdlib.h include string.h include...

YPNinc JokeScript (ypncat_id) SQL Injection Vulnerability

No description provided by source. / / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID...

phpGraphy 0.9.13b Multiple Vulnerabilities

No description provided by source. ===================================== Vulnerability ID: HTB22959 Reference: http://www.htbridge.ch/advisory/csrfcrosssiterequestforgeryinphpgraphy.html Product: phpGraphy Vendor: http://phpgraphy.sourceforge.net/ http://phpgraphy.sourceforge.net/ Vulnerable...

Glassfish Enterprise Server 2.1 Admin Console /customMBeans/customMBeans.jsf URI XSS

No description provided by source. source: http://www.securityfocus.com/bid/34824/info GlassFish Enterprise Server is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Attacker-supplied HTML and script code would run in the conte...

Netgear FM114P Wireless Firewall File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6807/info Netgear FM114P Wireless Firewalls allow directory traversal using escaped character sequences. It is possible for an unauthenticated user to retrieve the firewall's configuration file by escaping from the...

Mambo Colophon Component <= 1.2 - Remote Inclusion Vulnerability

No description provided by source. Command Mambo Colophon =1.2 by Drago84 Found By Drago84 Exclusive Security Italian Security This bug allows a remote atacker to execute commands via rfi page: admin.colophon.php bug:...

netrisk 1.9.7 (xss/sql) Multiple Vulnerabilities

No description provided by source. ...:::::netrisk 1.9.7 Multiple Remote Vulnerabilities::::.... sql injection/xss Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By : virangar security team hadihadi --------------------------------- special tnx...

MambWeather Mambo Module <= 1.8.1 - Remote Include Vulnerability

No description provided by source. Bug Found by h4ntu http://h4ntu.com batamhacker crew Another Mambo module remote inclusion vulneribility download : http://mamboxchange.com/frs/download.php/1498/MambWeather181.zip bug found in file : MambWeather/Savant2/Savant2Pluginoptions.php ?php / Base plug...

MagnetoSoft NetworkResources 4.0.0.5 - ActiveX NetFileClose SEH Overwrite PoC

No description provided by source. html object classid='clsid:61251370-92BF-4A0E-8236-5904AC6FC9F2' id='target' //object script language='vbscript' 'Magneto Software Net Resource ActiveX NetFileClose SEH Overwrite POC 'Discovered by: s4squatch of SecureState R&D Team 'Site: www.securestate.com...

Wordpress wp-gpx-map 1.1.21 - Arbitrary File Upload Vulnerability

No description provided by source. Exploit Title: Wordpress wp-gpx-map version 1.1.21 Arbitrary File Upload Google Dork: inurl:wp-content/plugins/wp-gpx-maps/ Date: 11/05/2012 Exploit Author: Adrien Thierry Vendor Homepage: http://www.darwinner.it/ Software Link:...