56796 matches found
Windows Explorer 6.0.2900.5512 (Shmedia.dll 6.0.2900.5512) AVI Preview DoS PoC
No description provided by source. done by BraniX [email protected] www.hackers.org.pl found: 2011.03.27 published: 2011.03.29 tested on: Windows XP SP3 Home Edition tested on: Windows XP SP3 Professional Edition App: Windows Explorer 6.0.2900.5512 Shmedia.dll 6.0.2900.5512 App Url:...
Measuresoft ScadaPro <= 4.0.0 - Remote Command Execution
No description provided by source. $Id: scadaprocmdexe.rb 13737 2011-09-16 08:23:59Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
webcaf <= 1.4 (lfi/rce) Multiple Vulnerabilities
No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP YmmMMMM MMM YM Discovered by dun \ dunatstrcpy.pl webcaf = 1.4 Multiple Remote Vulnerabilities Script: WebCAF is a web-based child and family database...
Mirabilis ICQ 0.99 b 1.1.1.1/3.19 Remote Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/929/info ICQ is an individual to individual chat network which has clients installed on millions of computers around the world. It is, by far, the most widely used and is vulnerable to a remote buffer overflow. When the...
DMXReady Blog Manager <= 1.1 - Remote File Delete Vulnerability
No description provided by source. Title : DMXReady Blog Manager = 1.1 Remote Files Delete Vulnerability Author : ajann from Turkey Contact : : S.Page : http://www.dmxready.com $$ : 199.97 $ Dork : inurl:incwebblogmanager.asp DorkEx :...
Blogs manager <= 1.101 SQL Injection Vulnerability
No description provided by source. ------------------------------------------------------------------------ Blogs manager = 1.101 SQL Injection Vulnerability ------------------------------------------------------------------------ author............: muuratsalo Revshell.com contact...........:...
Maxthon Web Browser 1.2 Search Bar Information Disclosure Vulnerability
source: http://www.securityfocus.com/bid/12898/info Maxthon Web Browser is reported prone to an information disclosure vulnerability. This issue may allow an attacker to disclose search bar contents from an affected browser. Information disclosed through the exploitation of this vulnerability may...
ttCMS 5.0 - Remote File Inclusion Vulnerability
No description provided by source. html head meta http-equiv=Content-Type content=text/html; charset=windows-1254 titlecoded by ahmadbady/title script language=JavaScript //=========================================================================== // Topic : ttCMSv5 // Bug type : remote file...
QNX Photon phlocale -s Parameter Overflow
No description provided by source. source: http://www.securityfocus.com/bid/11164/info Reportedly QNX Photon MicroGUI is affected by multiple buffer overflow vulnerabilities in MicroGUI utilities. These issues are due to a failure of the affected applications to validate user-supplied string...
Snort <= 2.8.5 - IPv6 DoS
No description provided by source. ============================================= - Date: October 22th, 2009 - Discovered by: Laurent Gaffi - Severity: Low ============================================= I. VULNERABILITY ------------------------- Snort = 2.8.5 IPV6 Remote DoS II. DESCRIPTION...
IBM AIX <= 4.2 ping Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/387/info A buffer overflow condition exists in some versions of /usr/sbin/ping under AIX. Given that ping is SUID root, this overflow allows malicious users to gain root from it. / /usr/sbin/ping exploit kinda' coded by...
Opera 6.0/7.0 Long Filename Download Buffer Overrun Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7056/info A buffer overrun vulnerability has been discovered in the Opera web browser. The issue affects Opera versions 6 and 7 on the Microsoft Windows platform. Due to insufficient bounds checking when copying file name...
AIOCP 1.3.x cp_dpage.php choosed_language Parameter XSS
No description provided by source...
Ipswitch IMail 5.0 Whois32 Daemon Buffer Overflow DoS Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/506/info IMail's whois server can be crashed due to an unchecked buffer. Telnet to target machine, port 43 Send glob1 Where glob1 is 1000 characters...
mks_vir 9b < 1.2.0.0b297 (mksmonen.sys) Privilege Escalation Exploit
No description provided by source. //////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | MKS Sp. z o. o. - http://www.mks.com.pl/ | // // | | // // | Affected Softwar...
BIND 8.2.x - (TSIG) Remote Root Stack Overflow Exploit (2)
No description provided by source. / copyright LAST STAGE OF DELIRIUM feb 2001 poland ://lsd-pl.net/ / / bind 8.2 8.2.1 8.2.2 8.2.2-PX Slackware 4.0/RedHat 6.2 / / The code establishes a TCP connection with port 53 of a target system. / / It makes use of the infoleak bug through UDP to obtain the...
freeSSHd <= 1.0.9 Key Exchange Algorithm Buffer Overflow Exploit
No description provided by source. !/usr/bin/env python Coded by Tauqeer Ahmad a.k.a 0x-Scientist-x0 ahmadtauqeeratyahoo.com Disclaimer: This Proof of concept exploit is for educational purpose only. Please do not use it against any system without prior permission. You are responsible for yoursel...
TextAds delete.php id Parameter XSS
No description provided by source...
SpoonFTP 1.2 - RETR Denial of Service Vulnerability
No description provided by source. !/usr/bin/python +Exploit Title: Exploit Denial of Service SpoonFTP 1.2 +Date: 21\03\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.softpedia.com/progDownload/SpoonFTP-Download-49969.html +Version: 1.2 +Tested On: WIN-XP SP3 Portuguese Brazil +CVE: N/A xx...
beLive 0.2.3 (arch.php arch) - Local File Inclusion Vulnerability
No description provided by source...
mIRC 6.1 DCC SEND Buffer Overflow Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/8818/info A vulnerability has been reported to exist in the mIRC client that may allow a remote attacker to crash a vulnerable mIRC client. The condition is most likely present due to insufficient boundary checking...
Symantec Endpoint Protection Manager - Remote Command Execution
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'msf/core/exploit/powershell' class Metasploit3 Msf::Exploit::Remote Rank = ExcellentRanking include REXML...
Internet Explorer 8 & Internet Explorer 9 - Steal any Cookie
No description provided by source. Exploit Title: Internet Explorer 8 & Internet Explorer 9 steal any Cookie Date: 27.01.2013 Exploit Author: Christian Haider; Email: christian.haider.poc @ gmail dot com; linkedin: http://www.linkedin.com/in/chrishaider Category: remote Vendor Homepage:...
Py-Membres 3.1 Index.PHP Unauthorized Access Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5849/info A vulnerability has been reported for Py-Membres 3.1 that allows remote attackers to obtain administrative privileges on vulnerable installations. Reportedly, Py-Membres does not fully check some URI parameters...
PiXie CMS <= 1.04 - Multiple CSRF Vulnerabilities
No description provided by source. Add Super User: html !-- Exploit Title: PiXie CMS v1.04 = CSRF Add Super User Google Dork: allintext: Pixie Powered Date: 28/12/2010 Author: Ali Raheem AKA wolfmankurd Software Link: http://pixie-cms.googlecode.com/files/pixiev1.04.zip Version: =1.04 Tested on:...
cms -db <= 0.7.13 - Multiple Vulnerabilities
No description provided by source. Author: cp77fk4r | Empty0pagESHIFT+2Gmail.com Software Link: http://cms-db.de/download Version: cms -db = v0.7.13 CSRF -Add super-user: POST URL: /cms/admin/newuser.php PARAMS: POST...
Joomla Ozio Gallery Component (com_oziogallery) SQL Injection Vulnerability
No description provided by source. Exploit Title: Joomla Component comoziogallery SQL Injection Vulnerability Date: 2010/07/25 Author: ViRuS Qalaa Email: [email protected] My Sites : www.pal-mafia.com & www.vbspiders.com Tested on: Windows Team hacker:ViRuS Qalaa & HaCkEr aRaR X-MaN HaCk3r TeaM HaCkEr...
T. Hauck Jana Server 1.45/1.46 Hex Encoded Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2703/info It is possible for a remote user to traverse the directories of a host running Jana Server. Submitting a specially crafted URL using hex encoded 'double dot' sequences will reveal arbitrary directories. In...
SUSE 7.0 KFM Insecure TMP File Creation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2629/info KFM is the KDE File Manager, included with version 1 of the KDE base package in most Linux installations. KFM is designed as a graphical, easily navigated interface to the Linux Filesystem. A problem with KFM...
Axis Network Camera 2.x And Video Server 1-3 virtualinput.cgi Arbitrary Command Execution
No description provided by source. source: http://www.securityfocus.com/bid/11011/info 1. A shell metacharacter command-execution vulnerability allows an anonymous user to download the contents of the '/etc/passwd' file on the device. Other commands are also likely to work, facilitating other...
joomla component joom12pic 1.0 - Remote File Inclusion Vulnerability
No description provided by source. Joom!12Pic Component RFI Bug in : /administrator/components/comjoom12pic/admin.joom12pic.php?mosConfiglivesite= Variable : $mosConfiglivesite Dork: comjoom12pic Example:...
Linux Kernel <= 2.4.23, <= 2.6.0 - "do_mremap" Local Proof of Concept
No description provided by source. / Proof-of-concept exploit code for domremap Copyright C 2004 Christophe Devine and Julien Tinnes This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software...
Magic Photo Storage Website admin/admin_email.php _config[site_path] Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/21965/info Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the...
Pearl For Mambo <= 1.6 - Multiple Remote File Include Vulnerabilities
No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import Output, POCBase from pocsuite.utils import register class TestPOCPOCBase: vulID = '63674' ssvid version = '1.0' author = '皮皮' vulDate = '2006-07-03' createDate = '2015-12-24...
WebPageTest Arbitrary PHP File Upload
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
iGENUS WebMail <= 2.0.2 (config_inc.php) Remote Code Execution Exploit
No description provided by source. !/usr/bin/perl use IO::Socket; print \r\n; print iGENUS WebMail = 2.0.2 remote commads xctn\r\n; print - works against PHP5 with registerglobals = On\r\n; print & allowurlfopen = On\r\n; print by rgod rgodATautisticiDOTorg\r\n; print site:...
Microsoft Internet Explorer and Mozilla Firefox URI Handler Command Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/24837/info Microsoft Internet Explorer, Mozilla Firefox and Netscape Navigator are prone to a vulnerability that lets attackers inject commands through the 'firefoxurl' and 'navigatorurl' protocol handlers. Exploiting the...
phpMyFamily <= 1.4.0 Admin Bypass SQL Injection
No description provided by source. Tested with version 1.2.5 /str0ke Login as admin without pass: Login: ' OR 'a'='a' AND admin='Y'/ without quotes Password: empty milw0rm.com 2005-03-21...
Alcatel-Lucent OmniPCX Enterprise masterCGI Arbitrary Command Execution
No description provided by source. $Id: alcatelomnipcxmastercgiexec.rb 10556 2010-10-05 23:13:04Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing...
IE wshom.ocx (Run) ActiveX Remote Code Execution (add admin user)
No description provided by source. Exploit Title: IE wshom.ocx Run ActiveX Remote Code Execution add admin user Date: 22/01/2010 Author: Stack Version: ALL Tested on: winsp2 html /font/b/p p object classid='clsid:72C24DD5-D70A-438B-8A42-98424B88AFB8' id='target' /object script language='vbscript'...
Windows XP TCP Packet Fragmentation Handling Denial of Service Vulnerability (3)
No description provided by source. source: http://www.securityfocus.com/bid/11258/info Multiple vendor implementations of the TCP stack are reported prone to a remote denial-of-service vulnerability. The issue is reported to present itself due to inefficiencies present when handling fragmented TC...
Windu CMS 2.2 - Multiple Vulnerabilities
No description provided by source. !-- Windu CMS 2.2 CSRF Add Admin Exploit Vendor: Adam Czajkowski Product web page: http://www.windu.org Affected version: 2.2 rev 1430 Summary: Windu CMS is a simple, lightweight and fun-to-use website content management software. Desc: Windu CMS suffers from a...
GeekLog 1.7.0 (fckeditor) Arbitrary File Upload Vulnerability
No description provided by source. db 88 88 ,ad8888ba, d88b 88 88 d8' 8b d8'8b 88 88 d8' d8' 8b 88aaaaaaaa88 88 d8YaaaaY8b 8888 88 88888 d88b 88 88 Y8, 88 d8' 8b 88 88 Y8a. .a88 d8' 8b 88 88 Y88888P Exploit Title: Geeklog Date: 18-10-2010 Author: Kubanezi AHG Software Link: http://www.geeklog.net...
Phaos <= 0.9.2 basename() Remote Command Execution Exploit
No description provided by source...
PotPlayer 1.5.39036 (.wav) - Crash PoC
No description provided by source. Exploit Title: PotPlayer Version 1.5.39036 - Beta .wav - Crash POC Date: 03-09-2013 Exploit Author: ariarat Software Link: http://download.cnet.com/Daum-Potplayer/3000-136324-75587055.html Version: 1.5.39036 Tested on: Windows XP sp3...
GWExtranet 3.0 Scp.DLL Multiple HTML Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/26582/info GWExtranet is prone to multiple HTML-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied input data before using it in dynamically generated content. Attacker-supplied...
Service d'upload 1.0.0 - Shell Upload Vulnerability
No description provided by source...
Acme.Serve 1.7 - Arbitrary File Access Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2809/info Acme.Serve is a free, open-source, embeddable webserver written in Java. It is small, is intended to provide minimal functionality, and is fully compatible with JavaServer. Acme.Serve 1.7 comes with a webserver...
Business Objects Infoview - 'cms' Parameter Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28762/info Business Objects is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input via the Infoview web portal. An attacker may leverage this issue to execu...
Wordpress Age Verification Plugin <= 0.4 Open Redirect
No description provided by source. Exploit Title: Wordpress Age Verification plugin = 0.4 Open Redirect Date: 2012/01/10 Dork: inurl:wp-content/plugins/age-verification/age-verification.php Author: Gianluca Brindisi gATbrindi.si @gbrindisi http://brindi.si/g/ Software Link:...