Lucene search
+L
SeebugRecent

56796 matches found

seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•13 views

SAP Message Server Group Parameter Remote Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/24765/info SAP Message Server is prone to a remote heap-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data before copying it to an insufficiently...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•37 views

True North Software Internet Anywhere Mail Server 2.3.x Mail Server Multiple Buffer Overflow

No description provided by source. source: http://www.securityfocus.com/bid/730/info True North Software's Internet Anywhere Mail Server has various weaknesses that could allow an attacker to remotely crash the server running this software.. The POP3 commands list, retr .uidl and user and the SMT...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•26 views

PRADO PHP Framework 3.2.0 Arbitrary File Read Vulnerability

No description provided by source. PRADO PHP Framework 3.2.0 Arbitrary File Read Vulnerability Vendor: Prado Software Product web page: http://www.pradosoft.com Affected version: 3.2.0 r3169 Summary: PRADO is a component-based and event-driven programming framework for developing Web applications...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•25 views

Horizon Web Builder (fshow.php) SQL Injection Vulnerability

No description provided by source. Exploit Title: Horizon SQLi Google Dork: intext:Site by Horizon : inurl:uid=HORIZON3 Date: 03/05/2011 Author: Iolo Morganwg Category: Web App Version: PHP Tested on: Windows XP Vendor: http://www.horizonsolutions.tv/ Notes: Both params are vulnerable to union...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•20 views

Oracle Endeca Server Remote Command Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•51 views

FireStats WordPress Plugin 1.0.2 Multiple Cross Site Scripting and Authentication Bypass Vulnerabilities (2)

No description provided by source. source: http://www.securityfocus.com/bid/37099/info The FireStats plugin for WordPress is prone to multiple cross-site scripting vulnerabilities and an authentication-bypass vulnerability. An attacker may leverage these issues to gain unauthorized access to the...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•23 views

DConnect Daemon DC Chat Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/19370/info DConnect Daemon is prone to a denial-of-service vulnerability. This issue occurs because the application fails to handle null-pointer exceptions properly. An attacker can exploit this issue to crash the server,...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•146 views

Linux & BSD umount Local Root Exploit

No description provided by source. / Reminder - Be sure to fix the includes /str0ke / -------------------------------------- linuxumountexploit.c ---------- include include include include include include define PATHMOUNT /bin/umount define BUFFERSIZE 1024 define DEFAULTOFFSET 50 ulong getesp...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•14 views

Haberx 1.02 <= 1.1- (tr) Remote SQL Injection Vulnerability

No description provided by source. +++++++++++++++++++++++++++++++++++++++++++++++++++ + Haberx v1.1 tr SQL Injection Vulnerability + + Author : Fix TR + + Site : www.hack.gen.tr + + Contact : fixtratbsdmail.com + +++++++++++++++++++++++++++++++++++++++++++++++++++ + Download:...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•18 views

Advantech WebAccess HMI/SCADA Software Persistence XSS Vulnerability

No description provided by source. Title : Advantech WebAccess HMI/SCADA Software Persistence Cross-Site Scripting Vulnerability Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor : http://webaccess.advantech.com/ Advisory : http://secpod.org/blog/?p=569...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•21 views

Claroline e-Learning <= 1.6 - Remote Hash SQL Injection Exploit

No description provided by source. ?php T r a p - S e t U n d e r g r o u n d H a c k i n g T e a m Vulnerable: Claroline E-Learning Application Exploit By : MHp0rtal Discovered By: Sieg Fried Gr33tz To == Alphaprogrammer , Oilkarchack , DrCephaleX , Str0ke And Iranian Hacking & Security Teams :...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•21 views

CustomCMS 3.1 'vars.php' SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27069/info CustomCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•22 views

Citrix Provisioning Services 5.6 SP1 Streamprocess Opcode 0x40020006 Buffer Overflow

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•16 views

WGCC <= 0.5.6b (quiz.php) Remote SQL Injection Vulnerability

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•40 views

U.S. Robotics USR808054 Wireless Access Point Web Administration Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10840/info The USR808054 wireless access point is reported to contain a denial of service vulnerability in its embedded web server. When malicious requests are received by the device, it will reportedly crash, denying...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•33 views

CA BrightStor ARCserve Message Engine Heap Overflow

No description provided by source. $Id: messageengineheap.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms o...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•103 views

Java Web Start Launcher ActiveX Control - Memory Corruption

No description provided by source. SEC Consult Vulnerability Lab Security Advisory 20130417-1 ======================================================================= title: Java ActiveX Control Memory Corruption product: JavaTM Web Start Launcher vulnerable version: Sun Java Version 7 Update 17 a...

5CVSS0.6AI score0.2258EPSS
SaveExploits5
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•19 views

SimpleNews <= 1.0.0 FINAL (print.php news_id) SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w SimpleNews = 1.0.0 FINAL SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code print.php: $newsid = $GET'newsid'; $query = SELECT FROM simplenewsarticles WHERE news...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•14 views

Cool PDF Image Stream Buffer Overflow

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•18 views

EffectOffice Server 2.6 - Remote Service Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9077/info A problem has been reported the service used by EffectOffice Server. Because of this, it may be possible for a remote user to deny service to legitimate users of the software. hacker telnet telnet open to...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•35 views

Guru JustAnswer Professional 1.25 Multiple SQL Injection Vulnerabilities

No description provided by source. / / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•29 views

WebprojectDB <= 0.1.3 (INCDIR) Remote File Include Vulnerability

No description provided by source. $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ WebprojectDB INCDIR = v.0.1.3 Remote File Include Vulnerability $$ script site: http://sourceforge.net/projects/webprojectdb/ $$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•25 views

ZyXEL ZyWALL 2 3.62 Forms/General_1 sysSystemName Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/25262/info ZyXEL ZyWALL 2 is prone to multiple remote vulnerabilities that affect the management interface. An attacker can exploit these issues to carry out cross-site request forgery, HTML-injection, and denial-of-servi...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•14 views

FlexPHPNews 0.0.6 & PRO (Auth Bypass) SQL Injection Vulnerability

No description provided by source. START 0x01 Informations: Script : FlexPHPNews PRO 0.0.6 Script : FlexPHPNews 0.0.6 Download : http://www.hotscripts.com/jump.php?listingid=24219&jumptype=1 0.0.6 Pro Download : http://www.hotscripts.com/jump.php?listingid=22130&jumptype=1 0.0.6 Vulnerability : S...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•33 views

Yealink VoIP Phone SIP-T38G - Local File Inclusion

No description provided by source. Title: Yealink VoIP Phone SIP-T38G Local File Inclusion Author: Mr.Un1k0d3r & Doreth.Z10 From RingZer0 Team Vendor Homepage: http://www.yealink.com/Companyprofile.aspx Version: VoIP Phone SIP-T38G CVE: CVE-2013-5756, CVE-2013-5757 Description: Web interface...

4CVSS0.1AI score0.03059EPSS
SaveExploits12
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•12 views

Quick Classifieds 1.0 - controlpannel/alterTheme.php3 DOCUMENT_ROOT Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/28417/info Quick Classifieds is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the applicati...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•25 views

ms frontpage personal webserver 1.0/personal web server 4.0 - Directory Traversal

No description provided by source. source: http://www.securityfocus.com/bid/989/info Microsoft's Personal Web Server and Front Page Personal Web Server will follow '/..../' strings in requested URLs, allowing remote users to obtain unauthenticated read access to files and directories on the same...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•11 views

Forum 5 PM.PHP Local File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/18967/info Forum 5 is prone to a local file-include vulnerability. The application fails to sanitize user input when executing the script. In particular the script fails to check for the presence of a directory-traversal...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•32 views

MODx CMS <= 0.9.2.1 (FCKeditor) Remote File Include Vulnerability

No description provided by source. +------------------------------------------------------------------------------------------- + MODx CMS 0.9.2.1 basepath Remote File Include Vulnerability +------------------------------------------------------------------------------------------- + Affected...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•32 views

Joomla Component com_searchlog SQL Injection

No description provided by source. Exploit Title: Joomla Component comsearchlog SQL Injection Date: 05/06/2010 Author: d0lc3 d0lc3xatgmaildomcom Software Link: http://www.kanich.net/radio/site/searchlog/searchlog-download Version: 3.1.0 Tested on: Linux ubuntu32 2.6.32-22-generic x64 Summary: Goo...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•67 views

Microsoft Windows NT 4/2000 NetBIOS Name Conflict Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1514/info An attacker can send the NetBIOS name service a NetBIOS Name Conflict message even when the receiving machine is not in the process of registering its NetBIOS name. The target will then not attempt to use that...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•11 views

Cisco CallManager 3.x/4.x Web Interface ccmadmin/phonelist.asp pattern Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/18504/info Cisco CallManager is prone to a cross-site scripting vulnerability. This issue is due to a failure in the web-interface to properly sanitize user-supplied input. An attacker may leverage this issue to have...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•28 views

Opera Web Browser 9.26 - Multiple Security Vulnerabilities

source: http://www.securityfocus.com/bid/28585/info Opera Web Browser is prone to multiple security vulnerabilities that may allow remote attackers to execute code. These issues lead to memory corruption and may result in remote unauthorized access and denial-of-service attacks. Versions prior to...

7.7AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•22 views

Pserv 2.0 - HTTP Version Specifier Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6285/info A buffer overflow vulnerability has been reported in Pserv. The buffer overflow condition is due to the way Pserv handles data streams from remote connections. An attacker can exploit this vulnerability by issui...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•156 views

Microsoft Windows NT 4.0/SP1/SP2/SP3/SP4/SP5/SP6 Services.exe Denial of Service (2)

No description provided by source. source: http://www.securityfocus.com/bid/754/info A specially crafted packet can cause a denial of service on an NT 4.0 host, rendering local administration and network communication nearly unusable. This attack will crash the services executable, which in turn,...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•19 views

Mozilla Browser 0.8/0.9/1.x Refresh Security Property Spoofing Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10796/info Mozilla and Firefox may permit malicious Web pages to spoof security properties of a trusted site. An attacker can exploit this issue to spoof the URI and SSL certificate of a site trusted by an unsuspecting...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•34 views

PostNuke Phoenix 0.760 RC3 SID Parameter Remote SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13077/info A remote SQL Injection vulnerability affects PostNuke Phoenix. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in SQL queries. An attacker may...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•25 views

WinArchiver 3.2 - SEH Buffer Overflow

No description provided by source. /usr/bin/python Exploit Title: Winarchiver V 3.2 SEH Overflow Date: April 24, 2013 Exploit Author: Josep Pi Rodriguez, Pedro Guillen Nunez , Miguel Angel de Castro Simon Organization: RealPentesting Vendor Homepage: http://winarchiver.com Software Link:...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•30 views

PostNuke 0.72x Phoenix Glossary Module SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7697/info A vulnerability has been discovered in PostNuke Phoenix v0.723 and earlier. Specifically, the Glossary module fails to sufficiently sanitize user-supplied input, making it prone to SQL injection attacks...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•24 views

WordPress Eventify - Simple Events plugin <= 1.7.f SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress Eventify - Simple Events plugin = 1.7.f SQL Injection Vulnerability Date: 2011-09-07 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/eventify.zip Version: 1.7.f tested...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•15 views

ezcms <= 1.2 (bsql/admin byapss) Multiple Vulnerabilities

No description provided by source. -+================================================================================+- -+ EZCMS = 1.2 Multiple Remote Vulnerabilitys +- -+================================================================================+- Discovered By: t0pP8uZz Discovered On: 19 M...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•52 views

Nokia Symbian OS 3rd Edition - Multiple Web Browser Vulnerabilities

No description provided by source. My name is Nishant Das Patnaik, an independent security researcher from India. I have discovered multiple vulnerabilities in the Web Browser of the high end smartphones manufactured by Nokia running Symbian OS 3rd Edition. The detailed vulnerability disclosures...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•25 views

Solaris 2.6/7.0/8 snmpXdmid Buffer Overflow Vulnerability (msf)

No description provided by source. source: http://www.securityfocus.com/bid/2417/info Versions 2.6, 7, and 8 of Sun Microsystem's Solaris operating environment ship with service called 'snmpXdmid'. This daemon is used to map SNMP management requests to DMI requests and vice versa. SnmpXdmid...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•23 views

WordPress <= 2.0.2 (cache) Remote Shell Injection Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo --------------------------------------------------------------------\r\n; echo | WordPress = 2.0.2 'cache' shell injection exploit |\r\n; echo | by rgod [email protected] |\r\n; echo | site:...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•22 views

Grayscale BandSite CMS 1.1 shows_content.php the_band Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/20137/info Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data. These issues may allow an attacker to access sensitive informatio...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•16 views

MCPWS Personal WebServer <= 1.3.21 Denial of Service Exploit

No description provided by source. !/usr/bin/perl MCPWS Personal - Webserver = 1.3.21 DoS Exploit Vendor: http://www.mcpsoftware.de The coder used a unsecure VB-function Open to open requested files and didn't include a working error handling On Error Goto etc. It's possible to exploit this...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•37 views

SOOP Portal Raven 1.0b Shell Upload Vulnerability

No description provided by source. Exploit Title: SOOP Portal Raven 1.0b Remote Upload Shell Vulnerability Google Dork: Powered by SOOP Portal Raven 1.0b Date: 06-12-2010 Author: Sun Army Version: Raven 1.0b Tested on: Win 2003 Exploit 1.Register On Site 2.Shell Renamed to .asp.jpg shell.asp.jpg...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•16 views

Evince PDF Reader - 2.32.0.145 (Windows) and 3.4.0 (Linux) - Denial of Service

No description provided by source. Advisory Information : ====================== Title : Evince 2.32.0.145 - Denial Of Service Product : Evince pdf reader Vendor Homepage: https://projects.gnome.org/evince/ Vulnerable Versions : Windows 2.32.0.145, Linux 3.4.0 and probably prior release Tested...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•22 views

Invision Power Board 2.0 Index.PHP Post Action SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11703/info A remote SQL injection vulnerability affects Inivision Power Board. This issue is due to a failure of the application to properly validate user-supplied input prior to using it in an SQL query. An attacker may...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•25 views

Savant 3.1 Web Server Overflow

No description provided by source. $Id: savant31overflow.rb 10546 2010-10-04 20:53:51Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms o...

7.1AI score
SaveExploits0
Total number of security vulnerabilities56796