56796 matches found
KrisonAV CMS 3.0.1 - Multiple Vulnerabilities
No description provided by source...
Fiomental & Coolsis Backoffice - Multiple Vulnerabilities
No description provided by source...
phpBB Ajax Shoutbox <= 0.0.5 - Remote File Include Vulnerability
No description provided by source. Title: phpBB Ajax Shoutbox = 0.0.5 phpbbrootpath Remote File Inclusion Author/Discovery: boecke Vulnerability Type: Remote File Inclusion Risk: High Risk Software Affected: phpBB Ajax Shoutbox = 0.0.5 Release Source:...
Blursoft Blur6ex 0.3.462 Index.PHP Local File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17554/info Blur6ex is prone to a local file-include vulnerability that may allow an unauthorized user to view files and to execute local scripts...
ActiveCampaign SupportTrio 2.50.2 - Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. ActiveCampaign SupportTrio is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in t...
ASPSiteWare Home Builder 1.0/2.0 - SQL Injection Vulnerability
No description provided by source. -------------------------------AlpHaNiX---------------------------------- Found By : AlpHaNiX website : www.offensivetrack.org contact : AlpHaATHACKERDOTBZ script : Home Builder V1.0 / V2.0 download : null Demo : http://www.aspsiteware.com/Home1/...
Wyse Rapport Hagent Fake Hserver - Command Execution
No description provided by source. $Id: hagentuntrustedhsdata.rb This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Doop Content Management System 1.3.x Multiple Input Validation Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/23482/info Doop Content Management System is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. Exploiting these issues could allow an attacker to...
fkey <= 0.0.2 - Local File Accessibility Exploit
No description provided by source. / fkeyv0.0.2: local/remote file accessibility exploit. by: vade79/v9 [email protected] fakehalo/realhalo netris homepage/URL: http://www.freshmeat.net/projects/fkey compile: gcc xfkey.c -o xfkey syntax: ./xfkey /etc/shadow 2/savefilename bug: fkey is a finger-like...
Flynax General Classifieds 4.0 - CMS Multiple Vulnerabilities
No description provided by source. Title: ====== Flynax General Classifieds v4.0 CMS - Multiple Vulnerabilities Date: ===== 2012-07-13 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=659 VL-ID: ===== 659 Common Vulnerability Scoring System:...
osCMax 2.0 (fckeditor) Remote File Upload
No description provided by source. Title: osCMax 2.0 fckeditor Remote File Upload Vendor: http://www.oscdox.com Dork: Powered by osCMax v2.0 , Copyright @ RahnemaCo.com AUTHOR: ITSecTeam Email: [email protected] Website: http://www.itsecteam.com Forum : http://forum.ITSecTeam.com Original Advisor...
IrfanView 4.33 Format PlugIn ECW Decompression Heap Overflow
No description provided by source. Application: IrfanView 4.33 Format PlugIn ECW Decompression Heap Overflow Plateform: Windows Exploitation: Remote code execution Secunia Number: SA49204 PRL: 2012-10 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/...
Denicomp Winsock RSHD/NT Standard Error 2.21.00 Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3659/info Winsock RSHD/NT is a Remote Shell Daemon for Windows NT and Windows 2000. It uses the standard Unix rsh and rcp commands. rsh ie remote shell allows the execution of a non-interactive program on another system...
RedHat Linux 5.2 i386/6.0 No Logging Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/320/info A vulnerability in PAM allows local malicious users to brute force passwords via the su command without any logging of their activity. su is a command that allows users to change identifies by supplying a passwor...
Moodle Help Script 1.x Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10718/info It is reported that Moodle is susceptible to a cross-site scripting vulnerability in the 'help.php' script. This issue is due to a failure of the application to properly sanitize user-supplied input prior to...
WFTPD Server <= 3.21 Remote Buffer Overflow Exploit
No description provided by source. / WFTPD buffer overflow exploit, c axl 2004, [email protected] Discovered by the very same guy :p Tested WFTPD versions: - WFTPD Pro Server 3.21 Release 1 trial latest version - WFTPD Pro Server 3.20 Release 2 trial - WFTPD Server 3.21 Release 1 trial latest...
EasyMoblog 0.5 Img.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17199/info EasyMoblog is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary...
Youbin 2.5/3.0/3.4 HOME Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7503/info It has been reported that youbin is vulnerable to a locally exploitable buffer overflow. The problem is said to occur while processing environment variables. Specifically, an internal memory buffer may be overru...
Winamp <= 5.12 - (.pls) Remote Buffer Overflow Exploit (0Day)
No description provided by source. / Winamp 5.12 Remote Buffer Overflow Universal Exploit Zero-Day Bug discovered & exploit coded by ATmaCA Web: http://www.spyinstructors.com && http://www.atmacasoft.com E-Mail: [email protected] Credit to Kozan / / Tested with : Winamp 5.12 on Win XP Pro Sp2 / ...
phpBB <= 2.0.12 Change User Rights Authentication Bypass (c code)
No description provided by source. / Paisterist's code was nice but heres mil's version. precompiled: http://www.milw0rm.com/sploits/897.rar Usage: bcc32 897.cpp and place the exe in your firefox profile dir. Usually C:\Documents and Settings\Application...
Procyon Core Server HMI <= 1.13 - Coreservice.exe Stack Buffer Overflow
No description provided by source...
pppBlog <= 0.3.8 (randompic.php) System Disclosure Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo pppBlog = 0.3.8 system disclosure exploit\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n\r\n; echo dork: intext:\Powered by pppblog\r\n\r\n; / works with: registerglobals=On / if...
Invision Power Board 1.x/2.0.3 SML Code Script Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12607/info Invision Power Board is reported prone to a JavaScript injection vulnerability. It is reported that the SML Code 'COLOR' tag is not sufficiently sanitized of malicious script content. Since this could permit an...
AIX 4.3/5.1 diagrpt Arbitrary Privileged Program Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2916/info AIX ships with a diagnostic reporting utility called 'diagrpt'. This utility is installed setuid root by default. When 'diagrpt' executes, it relies on an environment variable to locate another utility which it...
php live helper <= 2.0.1 - Multiple Vulnerabilities
No description provided by source. GulfTech Security Research August 16, 2008 Vendor : Turnkey Web Tools, Inc URL : http://www.turnkeywebtools.com Version : PHP Live Helper = 2.0.1 Risk : Multiple Vulnerabilities Description: PHP Live Helper is an online support system written in php that allows...
Astaro Security Linux 6.0 01 HTTP CONNECT Unauthorized Access Weakness
No description provided by source. source: http://www.securityfocus.com/bid/14665/info Astaro Security Linux is prone to a weakness that may allow remote attackers to connect to arbitrary ports on a vulnerable computer. This weakness may be combined with other attacks to exploit latent...
Gazelle CMS 1.0 - Multiple Vulnerabilities / RCE Exploit
No description provided by source. !/bin/bash Gazelle CMS 1.0 Multiple Vulnerabilities Script Download: http://www.anantasoft.com/index.php?Gazelle%20CMS/Download Found by whitesheep on 11/08/2009 Contact: [email protected] - https://www.ihteam.net Need magicquotegpc Off for RCE and LFI...
WolfPack Development XSHIPWARS 1.0/1.2.4 - Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/863/info Xshipwars a graphical 'star battle' client/server based game which runs a variety of platforms. Certain versions of the server which facilitates this game versions before 1.25 had a remotely exploitable buffer...
IBM GINA for NT 1.0 Privilege Escalation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/608/info IBM has written a replacement GINA for Windows NT to allow NT hosts to authenticate against OS/2 domains. On machines running the modified GINA, the creation of a specific Registry key under...
Google Chrome 4.1.249.1064 Remote Memory Corrupt
No description provided by source. !-- Google Chrome 4.1.249.1064 Remote Memory Corrupt Local Crash Exploit 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ 0 0 \ \ /...
quate cms <= 0.3.5 (rfi/lfi) Multiple Vulnerabilities
No description provided by source. Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg Quate CMS = 0.3.5 RFI/LFI Multiple Remote Vulnerability Download Script : http://quate.net/quatecms Dork : dielamers attempt; :P Vuln RFI : ./QuateCMS035/admin/includes/header.php line 27 ?php if $bypassrestrict !...
8Pixel.net SimpleBlog 2.1 - Multiple Input Validation Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/16243/info SimpleBlog is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities...
Softwin BitDefender AvxScanOnlineCtrl COM Object Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10175/info Reportedly the BitDefender AvxScanOnlineCtrl COM object is affected by an information disclosure vulnerability. This issue is due to a design error that allows a remote user to execute a method in the offending...
Delivering Digital Media CMS - SQL Injection Vulnerability
No description provided by source. Title: Delivering Digital Media CMS SQL Injection Vulnerability EDB-ID: CVE-ID: OSVDB-ID: Author: Dr.0rYX and Cr3w-DZ Published: Verified: Download Exploit Code Download N/A N.A.S.T ALGERIAN HACKER - NORTH-AFRICA SECURITY TEAM - ! Delivering Digital Media CMS SQ...
Inferno vBShout <= 2.5.2 - SQL Injection
No description provided by source. ==================================================================== Inferno vBShout SQLI 0day = 2.5.2 ==================================================================== / / / / / / / / / // / / / / // / / / / / // / / // /// ///...
Log1 CMS 2.0 - Multiple Vulnerabilities
No description provided by source. +---------------------------------------+ | Log1 CMS 2.0 Multiple Vulnerabilities | +---------------------------------------+ Vulnerable Web-App : Log1 CMS 2.0 Vulnerability : Multiple Vulnerabilities. Author : Aodrulez. Atul Alex Cherian Email :...
RapidWareX 2.0.1 - (WebUI) CSRF Exploit
No description provided by source. RapidWareX v2.0.1 WebUI CSRF Exploit Author: l3D Sites: http://xraysecurity.blogspot.com, http://nullbyte.org.il IRC: irc://irc.nix.co.il Email: [email protected] RapidWareX v2.0.1 WebUI is prone to a post-authentication CSRF vulnerability, which allows the...
EJ3 BlackBook 1.0 - header.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/29015/info BlackBook is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the...
Mambo mambatStaff Component <= 3.1b Remote Inclusion Vulnerability
No description provided by source. mambatstaff Mambo Component = Remote Include Vulnerability Rish : High Class : Remote Script : mambatstaff Thanx : www.lezr.com/vb & All kuwait hackers d0rkiz : allinurl:commambatstaff...
kooora 3.0 - AR Cross Site Scripting Vulnerability
No description provided by source. ======================================================================================== | Title : kooora v 3.0 AR Cross Site Scripting Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi -...
phpDatingClub 3.7 - Remote SQL/XSS Injection Vulnerabilities
No description provided by source. phpDatingClub v 3.7ansubdepartmentsid SQL/XSS Injection Vulnerability Note: Algeria 2-0 Zambia Founder : ThE g0bL!N Home:WwW.Snakespc.CoM More info:http://www.w2b.ru/webapp.php?cat=phpDatingClub SQL Injection Vulnerability Exploit...
outgun <= 1.0.3 bot 2 Multiple Vulnerabilities exploit
No description provided by source. Outgun = 1.0.3 bot 2 Multiple Remote Vulnerabilities Exploit http://www.exploit-db.com/sploits/05132006-outgunx.zip milw0rm.com 2006-05-14...
Audiotran 1.4.2.4 SEH Overflow Exploit
No description provided by source. Audiotran 1.4.2.4 SEH Overflow Exploit 0 day Author Abhishek Lyall - abhilyallatgmaildotcom, infoataslitsecuritydotcom Web - http://www.aslitsecurity.com/ Blog - http://www.aslitsecurity.blogspot.com/ Download Vulnerable application from...
Messageriescripthp 2.0 Contact/contact.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/21513/info Messageriescripthp is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these...
Joomla <= 1.0.10 - (poll component) Arbitrary Add Votes Exploit
No description provided by source. ?php Joomla poll component add unlimited votes Computer Security Researchers Institute works regardless of php.ini settings by trueend5 http://www.KAPDA.ir errorreporting0; inisetmaxexecutiontime,0; inisetdefaultsockettimeout, 2; obimplicitflush 1; echo...
KDE LibkHTML 4.2 NodeType Function Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/21662/info KDE libkhtml is prone to a denial-of-service vulnerability. This issue is triggered when an attacker convinces a victim user to open a malicious HTML document via an affected application such as kmail or...
MetaDot Portal Server 5.6.x userchannel.pl op Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/9439/info A number of vulnerabilities have been found in all version of MetaDot Corporation's MetaDot Portal Server. Due to a failure of the software to properly validate user input, an attacker may be able to corrupt dat...
SolidWorks Workgroup PDM 2014 SP2 Opcode 2001 - Denial of Service
No description provided by source. ''' Exploit Title: SolidWorks Workgroup PDM 2014 SP2 Opcode 2001 Remote Code Execution Vulnerability Date: 2-18-2014 Author: Mohamed Shetta Email: mshetta |at| live |dot| com Vendor Homepage:...
IMAP4rev1 12.261/12.264/2000.284 - (lsub) Remote Exploit
No description provided by source. / !!! Private !!! imapd IMAP4rev1 v12.261, v12.264 and 2000.284 Remote Exploit. Others? Yes! By: SkyLaZarT [email protected] .aka. Felipe Cerqueira Homepage: www.BufferOverflow.Org Thankz: cync, oldm and Jans. BufferOverflow.org Team Antonio Marcelo...
Microsoft SQL Server 2000 User Authentication Remote Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5411/info A vulnerability has been discovered in Microsoft SQL Server that could make it possible for remote attackers to gain access to target hosts. It is possible for an attacker to cause a buffer overflow condition on...