56796 matches found
Joomla 1.5.12 read/exec remote files
No description provided by source. ?php / Copyright c ITIX LTD This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or at your option any later...
Intel Graphics Accelerator Driver Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16127/info The Intel Graphics Accelerator driver is susceptible to a remote denial of service vulnerability. This issue is demonstrated to occur when the affected driver attempts to display an overly long text in a text...
KISGB <= 5.1.1 (authenticate.php) Remote File Include Vulnerability
No description provided by source. KISGB Keep It Simple Guest Book defaultpathforthemes Remote File Include +class : Remote File Include Vulnerability + +download link : http://phpnuke-downloads.com/modules.php?name=Downloads&dop=nsgetit&cid=14&lid=156&type=urlget +Author : mdx +Files :...
Joomla Component com_mycontent 1.1.13 - Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print \n; print \n; print Joomla Component mycontent Blind SQL Injection Exploit \n; print Author:His0k4 ALGERIAN HaCkeR \n; print \n; print Conctact: His0k4.hlmatgamil.com \n; print Greetz: All...
TIPS MailPost 5.1.1 APPEND Variable Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11596/info MailPost is reported prone to a cross-site scripting vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data and can allow an attacker to execute arbitrary HTML and scri...
Quantum vmPRO 3.1.2 - Privilege Escalation
No description provided by source. ----------- Author: ----------- xistence xistenceat0x90.nl ------------------------- Affected products: ------------------------- Quantum vmPRO 3.1.2 and below ------------------------- Affected vendors: ------------------------- Quantum http://quantum.com/...
Microsoft Foundation Class Library 7.0 ISAPI Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5188/info The Microsoft Foundation Class Library is a library used to develop applications for Microsoft Windows. Some versions of the MFC include an ISAPI class, which can be used to construct applications which extend w...
OpenFTPD (<= 0.30.2) Remote Exploit
No description provided by source. / hoagieopenftpd.c LINUX/X86 OPENFTPD REMOTE EXLPOIT = 0.30.2 Searching for those warez ftpd's out there and leeching 'free' movies Remote Linux/OpenFTPD exploit for the format string bug in the message system. This vulnerability was rediscovered by a VOID.AT...
DUware DUamazon Pro 3.0/3.1 review.asp iPro Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/14033/info DUamazon Pro is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful...
Anzio Web Print Object <= 3.2.30 ActiveX Buffer Overflow Exploit
No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Anzio Web Print Object Buffer Overflow Advisory Information Title: Anzio Web Print Object Buffer Overflow Advisory ID: CORE-2008-06...
WMMon 1.0 b2 Memory Character File Open File Descriptor Read Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5718/info It has been reported that wmmon is vulnerable to a leakage of open file descriptors that may result in unauthorized disclosure of kernel memory. It is allegedly possible for attackers to inherit the open file...
tribiq cms 5.0.12c (xss/lfi) Multiple Vulnerabilities
No description provided by source...
Mozilla Bonsai Multiple Cross Site Scripting Vulnerabilities
No description provided by source...
Joomla Commedia Plugin (index.php, task parameter) SQL Injection
No description provided by source. Exploit Title: Joomla commedia Remote Exploit dork: inurl:index.php?option=comcommedia Date: 18-10-2012 Author: Daniel Barragan D4NB4R Twitter: @D4NB4R Vendor: http://www.ecolora.org/ Version: 3.1 last update on Oct 7, 2012 and lowers License: Commercial and...
Windows Internet Communication Settings DLL Hijacking Exploit (schannel.dll)
No description provided by source. / Exploit Title: Windows Internet Communication Settings DLL Hijacking Exploit schannel.dll Date: 25/08/2010 Author: ALPdaemon Email: ALPdaemon at yahoo dot com Software Link: N/A Tested on: Windows XP SP3 English Extension: .isp / include windows.h int alpdaemo...
AoA Audio Extractor Basic 2.3.7 - ActiveX Exploit
No description provided by source. !-- Exploit Title: AoA Audio Extractor Basic ActiveX Date: 19.05.2014 Author: metacom Website: www.rstforums.com Software Link: www.aoamedia.com/audioextractor.exe Version: 2.3.7 Tested on: Windows xp sp3EN IE 6.0 -- html object...
LeapFTP Client 2.7.3/2.7.4 LSQ File Remote Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14655/info LeapFTP client is prone to a remote buffer overflow vulnerability. The issue arises when the client handles a malformed LeapFTP Site Queue .lsq file. A remote attacker may gain unauthorized access in the contex...
Integard Pro 2.2.0.9026 - (Win7 ROP-Code Metasploit Module)
No description provided by source. Exploit Title: Integard Pro 2.2.0.9026 Win7 ROP-Code Metasploit Module Date: 2010-09-15 Author: Node Software Link: http://www.exploit-db.com/application/14941 Version: Race River Integard Pro 2.2.0.9026, integard32.dllv.2.0.0.306 Tested on: Windows 7 x64 Eng CV...
Microsoft Internet Explorer 6/7/8 'li' Element Denial of Service Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/36070/info Microsoft Internet Explorer is prone to a remote denial-of-service vulnerability. Successful exploits can allow attackers to crash the affected browser, resulting in denial-of-service conditions. Given the natu...
SCPOnly 2.3/2.4 SSH Environment Shell Escaping Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5526/info scponly is a freely available, open source restricted secure copy client. It is available for Unix and Linux operating systems. The default installation of scponly does not place sufficient access controls on th...
VMCPlayer 1.0 - Denial of Service
No description provided by source. done by BraniX [email protected] www.hackers.org.pl found: 2011.03.22 published: 2011.03.22 tested on: Windows XP SP3 Home Edition App: VMCPlayer 1.0 App Url: http://files.videomobileconverter.com/vmcplayer.exe VMCPlayer.exe MD5:...
SAP Message Server Group Parameter Remote Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/24765/info SAP Message Server is prone to a remote heap-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data before copying it to an insufficiently...
True North Software Internet Anywhere Mail Server 2.3.x Mail Server Multiple Buffer Overflow
No description provided by source. source: http://www.securityfocus.com/bid/730/info True North Software's Internet Anywhere Mail Server has various weaknesses that could allow an attacker to remotely crash the server running this software.. The POP3 commands list, retr .uidl and user and the SMT...
PRADO PHP Framework 3.2.0 Arbitrary File Read Vulnerability
No description provided by source. PRADO PHP Framework 3.2.0 Arbitrary File Read Vulnerability Vendor: Prado Software Product web page: http://www.pradosoft.com Affected version: 3.2.0 r3169 Summary: PRADO is a component-based and event-driven programming framework for developing Web applications...
Horizon Web Builder (fshow.php) SQL Injection Vulnerability
No description provided by source. Exploit Title: Horizon SQLi Google Dork: intext:Site by Horizon : inurl:uid=HORIZON3 Date: 03/05/2011 Author: Iolo Morganwg Category: Web App Version: PHP Tested on: Windows XP Vendor: http://www.horizonsolutions.tv/ Notes: Both params are vulnerable to union...
Oracle Endeca Server Remote Command Execution
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
FireStats WordPress Plugin 1.0.2 Multiple Cross Site Scripting and Authentication Bypass Vulnerabilities (2)
No description provided by source. source: http://www.securityfocus.com/bid/37099/info The FireStats plugin for WordPress is prone to multiple cross-site scripting vulnerabilities and an authentication-bypass vulnerability. An attacker may leverage these issues to gain unauthorized access to the...
DConnect Daemon DC Chat Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19370/info DConnect Daemon is prone to a denial-of-service vulnerability. This issue occurs because the application fails to handle null-pointer exceptions properly. An attacker can exploit this issue to crash the server,...
Linux & BSD umount Local Root Exploit
No description provided by source. / Reminder - Be sure to fix the includes /str0ke / -------------------------------------- linuxumountexploit.c ---------- include include include include include include define PATHMOUNT /bin/umount define BUFFERSIZE 1024 define DEFAULTOFFSET 50 ulong getesp...
Haberx 1.02 <= 1.1- (tr) Remote SQL Injection Vulnerability
No description provided by source. +++++++++++++++++++++++++++++++++++++++++++++++++++ + Haberx v1.1 tr SQL Injection Vulnerability + + Author : Fix TR + + Site : www.hack.gen.tr + + Contact : fixtratbsdmail.com + +++++++++++++++++++++++++++++++++++++++++++++++++++ + Download:...
Advantech WebAccess HMI/SCADA Software Persistence XSS Vulnerability
No description provided by source. Title : Advantech WebAccess HMI/SCADA Software Persistence Cross-Site Scripting Vulnerability Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor : http://webaccess.advantech.com/ Advisory : http://secpod.org/blog/?p=569...
Claroline e-Learning <= 1.6 - Remote Hash SQL Injection Exploit
No description provided by source. ?php T r a p - S e t U n d e r g r o u n d H a c k i n g T e a m Vulnerable: Claroline E-Learning Application Exploit By : MHp0rtal Discovered By: Sieg Fried Gr33tz To == Alphaprogrammer , Oilkarchack , DrCephaleX , Str0ke And Iranian Hacking & Security Teams :...
CustomCMS 3.1 'vars.php' SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27069/info CustomCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...
Citrix Provisioning Services 5.6 SP1 Streamprocess Opcode 0x40020006 Buffer Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
WGCC <= 0.5.6b (quiz.php) Remote SQL Injection Vulnerability
No description provided by source...
U.S. Robotics USR808054 Wireless Access Point Web Administration Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10840/info The USR808054 wireless access point is reported to contain a denial of service vulnerability in its embedded web server. When malicious requests are received by the device, it will reportedly crash, denying...
CA BrightStor ARCserve Message Engine Heap Overflow
No description provided by source. $Id: messageengineheap.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms o...
Java Web Start Launcher ActiveX Control - Memory Corruption
No description provided by source. SEC Consult Vulnerability Lab Security Advisory 20130417-1 ======================================================================= title: Java ActiveX Control Memory Corruption product: JavaTM Web Start Launcher vulnerable version: Sun Java Version 7 Update 17 a...
SimpleNews <= 1.0.0 FINAL (print.php news_id) SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w SimpleNews = 1.0.0 FINAL SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code print.php: $newsid = $GET'newsid'; $query = SELECT FROM simplenewsarticles WHERE news...
Cool PDF Image Stream Buffer Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
EffectOffice Server 2.6 - Remote Service Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9077/info A problem has been reported the service used by EffectOffice Server. Because of this, it may be possible for a remote user to deny service to legitimate users of the software. hacker telnet telnet open to...
Guru JustAnswer Professional 1.25 Multiple SQL Injection Vulnerabilities
No description provided by source. / / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID...
WebprojectDB <= 0.1.3 (INCDIR) Remote File Include Vulnerability
No description provided by source. $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ WebprojectDB INCDIR = v.0.1.3 Remote File Include Vulnerability $$ script site: http://sourceforge.net/projects/webprojectdb/ $$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$...
ZyXEL ZyWALL 2 3.62 Forms/General_1 sysSystemName Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/25262/info ZyXEL ZyWALL 2 is prone to multiple remote vulnerabilities that affect the management interface. An attacker can exploit these issues to carry out cross-site request forgery, HTML-injection, and denial-of-servi...
FlexPHPNews 0.0.6 & PRO (Auth Bypass) SQL Injection Vulnerability
No description provided by source. START 0x01 Informations: Script : FlexPHPNews PRO 0.0.6 Script : FlexPHPNews 0.0.6 Download : http://www.hotscripts.com/jump.php?listingid=24219&jumptype=1 0.0.6 Pro Download : http://www.hotscripts.com/jump.php?listingid=22130&jumptype=1 0.0.6 Vulnerability : S...
Yealink VoIP Phone SIP-T38G - Local File Inclusion
No description provided by source. Title: Yealink VoIP Phone SIP-T38G Local File Inclusion Author: Mr.Un1k0d3r & Doreth.Z10 From RingZer0 Team Vendor Homepage: http://www.yealink.com/Companyprofile.aspx Version: VoIP Phone SIP-T38G CVE: CVE-2013-5756, CVE-2013-5757 Description: Web interface...
Quick Classifieds 1.0 - controlpannel/alterTheme.php3 DOCUMENT_ROOT Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/28417/info Quick Classifieds is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the applicati...
Wordpress TimThumb 2.8.13 WebShot - Remote Code Execution (0-day)
No description provided by source...
ms frontpage personal webserver 1.0/personal web server 4.0 - Directory Traversal
No description provided by source. source: http://www.securityfocus.com/bid/989/info Microsoft's Personal Web Server and Front Page Personal Web Server will follow '/..../' strings in requested URLs, allowing remote users to obtain unauthenticated read access to files and directories on the same...
Forum 5 PM.PHP Local File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18967/info Forum 5 is prone to a local file-include vulnerability. The application fails to sanitize user input when executing the script. In particular the script fails to check for the presence of a directory-traversal...