56796 matches found
Silc Server 1.0.2 New Channel Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/22846/info SILC Server is prone to a denial-of-service vulnerability because the application fails to handle exceptional conditions. An attacker can exploit this issue to crash the affected server, effectively denying...
CASTOR <= 1.1.1 (lib/rs.php) Remote File Include Exploit
No description provided by source. !/usr/bin/perl CASTOR = 1.1.1 Remote Command Execution Vulnerability Risk : High Remote Code Execution Url: svn.gna.org/svn/castor/trunk Exploit: http://www.site.com/path/lib/rs.php?rootpath=EvilScript coded and f0und3d by Kw3RLn ciriboflacsATYaHOo.com Romanian...
Apple Quicktime /w IE .qtl Version XAS - Remote Exploit PoC
No description provided by source. !-- Performing XAS Cross Application Scripting attacks automatically read no user interaction is very easy, as I showed before in my shutting down skype proof-of-concept. But, what if you are using a limited web environment, where you can't use iframes or script...
Netquery 3.1 nqports2.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/14373/info Netquery is affected by multiple remote vulnerabilities. These issues can allow remote attackers to execute arbitrary commands, disclose sensitive information and carry out cross-site scripting attacks. Netquer...
Phorum 5.1.20 include/admin/banlist.php delete Parameter CSRF Banlist Deletion
No description provided by source. source: http://www.securityfocus.com/bid/23616/info Phorum is prone to multiple input-validation vulnerabilities, including an unauthorized-access issue, privilege-escalation issue, multiple SQL-injection issues, and cross-site scripting issues, because the...
weborf <= 0.12.2 - Directory Traversal vulnerability
No description provided by source. Title: Weborf httpd = 0.12.2 Directory Traversal Vulnerability Date: Sep 6, 2010 Author: Rew Link: http://galileo.dmi.unict.it/wiki/weborf/doku.php Version: 0.12.2 Tested On: Debian 5 CVE: N/A ============================================================= Weborf...
Digishop 4.0 Cart.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/20297/info digiSHOP is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to have arbitrary script code execute in the browser of an...
Mambo/Joomla 'com_buslicense' Component - 'aid' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27508/info The 'combuslicense' component for Mambo/Joomla is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue coul...
Working Resources 1.7.x/2.15 BadBlue Ext.DLL Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7387/info BadBlue is prone to a vulnerability that could allow remote attackers to gain unauthorized access. This is due to an input validation issue in the 'ext.dll' component that could allow a remote attacker to cause...
Goople Cms 1.7 - Remote File Upload Vulnerability
No description provided by source. -============================================- Autore: x0r - Evolution Team Msn: [email protected] Cms: Goople Cms 1.7 Bug: Arbitrary File Upload Download: http://ovh.dl.sourceforge.net/sourceforge/gooplecms/GoopleCMS1.7.rar...
vBulletin 2.2.7/2.2.8 HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6337/info Problems with vBulletin could make it possible for an attacker to inject arbitrary HTML in vBulletin forum messages. vBulletin does not sufficiently filter potentially malicious HTML code from posted messages. A...
Wired Community Software WWWThreads 5.0 SQL Command Input Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/967/info WWWThreads is a web bulletin board program that uses an SQL backend. Due to incomplete input validation, it is possible for an attacker to submit SQL commands through forms and manipulate the contents of the...
Linux Kernel 'setup_arg_pages()' Denial of Service Vulnerability
No description provided by source. //source: http://www.securityfocus.com/bid/44301/info / known for over a year, fixed in grsec bug is due to a bad limit on the max size of the stack for 32bit apps on a 64bit OS. Instead of them being limited to 1/4th of a 32bit address space, they're limited to...
Serendipity 1.6 Backend XSS And SQLi Vulnerability
No description provided by source. Advisory: Serendipity 1.6 Backend Cross-Site Scripting and SQL-Injection vulnerability Advisory ID: KORAMIS-ADV2012-001 Contact: [email protected] Author: Stefan Schurtz Affected Software: Successfully tested on Serendipity 1.6 Vendor URL: http://www.s9y.org...
Open&Compact FTP Server 1.2 (Gabriel's FTP Server) - Auth Bypass & Directory Traversal SAM Retrieval Exploit
No description provided by source. !/usr/bin/python Exploit Title: Open&Compact Ftp Server = 1.2 Auth bypass & directory traversal sam retrieval Date: Aug 7, 2013 By Wireghoul - http://www.justanotherhacker.com Based on Serge Gorbunov's auth bypass http://www.exploit-db.com/exploits/13932/ Softwa...
Meeting Room Booking System (MRBS) 1.2.6 day.php area Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/30531/info MRBS Meeting Room Booking Software is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary...
Sun Microsystems Java Virtual Machine 1.x Security Manager Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8892/info A problem has been reported in the Sun Microsystems Java Virtual Machine that occurs when implementing the Security Manager. Because of this, an attacker may be able to crash the virtual machine. /...
City Directory Review and Rating Script (search.php) SQL Injection Vulnerability
No description provided by source. Exploit Title: City Directory Review and Rating Script SQL Injection Vulnerability Date: 22.12.2012 Author: 3spi0n Script Vendor or Software Link: http://b-scripts.com/en/18-city-reviewer-yelp-clone.html Category: WebApps Type: SQL Injection MySQLi Tested On:...
Fantastic News <= 2.1.2 (script_path) Remote Code Execution Exploit
No description provided by source...
Wordpress NOSpamPTI Plugin - Blind SQL Injection
No description provided by source...
Xerver 4.17 Server URI Null Character XSS
No description provided by source. source: http://www.securityfocus.com/bid/15135/info Xerver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit a vulnerability to disclose t...
Allomani E-Store 1.0 - CSRF Vulnerability (Add Admin)
No description provided by source. E-Store 1.0 XSRF Vulnerability Add Admin ==================================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Script : http://allomani.com/en/storescript.html === Exploit === form method=POST name=form0...
webasyst shop-script (bsql/xss) Multiple Vulnerabilities
No description provided by source. ============================================================================================= Title : Blind SQL/XSS Multiple Remote Vulnerabilities Software : WebAsyst Shop-Script Vendor : http://www.webasyst.net Date : 03 July 2009 Indonesia Author : Vrs-hCk...
JSFTemplating, Mojarra Scales, GlassFish File Disclosure Vulnerabilities
No description provided by source. SEC Consult Security Advisory 20090901-0 ======================================================================= title: File disclosure vulnerability in JSFTemplating, Mojarra Scales and GlassFish Application Server v3 Admin console products: JSFTemplating...
Jan Erdmann Jebuch 1.0 HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11463/info It is reported that Jebuch is susceptible to an HTML injection vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied input. This may allow an attacker to inject...
BigAnt Server 2.50 SP1 - Buffer Overflow
No description provided by source. $Id: bigantserver250.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
catviz 0.4.0b1 (lfi/xss) Multiple Vulnerabilities
No description provided by source. @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @===C4TEAM.ORG====ByALBAYX====C4TEAM.ORG====@ @=======================================@ @=Author : ByALBAYX @ @ @ @=Website : WWW.C4TEAM.ORG @ @ @ @@@@@@@@@@@@@@@@@@TURKISH@@@@@@@@@@@@@@@@@@@@ @ @ .----. @ .' '. @ / ...
Audiotran - (.PLS File) Stack Buffer Overflow
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = GoodRanking include Msf::Exploit::FILEFORMAT include...
8E6 Technologies R3000 Host Header Internet Filter Security Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30541/info 8e6 Technologies R3000 Internet Filter is prone to a vulnerability that allows attackers to bypass URI filters. Attackers can exploit this issue by sending specially crafted HTTP request packets for an arbitrar...
Destiny Media Player 1.61 - PLS .M3U Buffer Overflow
No description provided by source. $Id: destinymediaplayer16.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and term...
Cherokee <= 0.5.4 - Directory Traversal
No description provided by source. Cherokee Web Server = 0.5.4 Directory Traversal Exploit Found By: DrIDE Tested On: Windows XPSP3 Download: www.cherokee-project.com/download/windows - Description - Cherokee Web Server = 0.5.4 is a Windows based HTTP server. This is the latest version of the...
Eudora Qualcomm WorldMail 9.0.333.0 - IMAPd Service UID - Buffer Overflow
No description provided by source. !/usr/bin/python import sys,socket banner = Coded by: Muhammad EL Harmeel m.harmeelatgmaildotcom Details: - PRE AUTHENTICATION Eudora Qualcomm WorldMail 9.0.333.0 IMAPd Service Preauthentication Buffer Overflow. - Tested on: Windows Server 2003 SP1. - SEH gets...
qualcomm worldmail server 3.0 - Directory Traversal vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15488/info Qualcomm Worldmail server is prone to a directory traversal vulnerability. Successful exploitation could allow an attacker to gain access to files owned by other users of the application. Sensitive information...
Eudora WorldMail 2.0 Search Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8403/info It has been reported that a cross-site scripting issue exists in the search utility of the software. It is possible that an attacker may create a malicious link containing script code that could be executed in a...
mysource 2.14.8/2.16 - Multiple Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/20153/info MySource products are prone to multiple input-validation vulnerabilities. Exploiting these issues will allow an attacker to manipulate the application into becoming an HTTP proxy and to conduct cross-site...
Ocean12 Technologies Calendar Manager Pro 1.0 1 admin/main.asp date Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/17877/info Calendar Manager Pro is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to...
DMXReady Members Area Manager <= 1.2 - SQL Injection Vulnerability
No description provided by source. Title : DMXReady Members Area Manager = 1.2 SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.dmxready.com $$ : 149.97 $ Dork : inurl:incmembersareamanager.asp DorkEx :...
Mazens PHP Chat V3 (basepath) - Remote File Inclusion Vulnerabilities
No description provided by source. Mazen's PHP Chat V3.0.0 Beta1 Remote file inclusion Download script : http://www.scriptbrasil.com.br/script/php/batepapo/mazenphpopenchmt221.tar.gz Thanks Str0ke :D Exploit : http://victim.com/chatpath/include/pear/ITX.php?basepath=shell.txt?...
Mocha LPD 1.9 - Remote Buffer Overflow DoS PoC
No description provided by source. !/usr/bin/python Mocha LPD v1.9 Remote Heap Overflow Exploit ol skool 'write 4' whoops, I said it was a DoS. My bad. btw yes, I know its 2010 :0 CVE: 2010-1687 tested on XP sp1 use anti debugging to see it work - !hidedebug zwqueryinformationprocess call trace:...
Oracle 11.1 Database Network Foundation Heap Memory Corruption Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/35677/info Oracle Database is prone to a remote heap memory-corruption vulnerability in Network Foundation. The vulnerability can be exploited over the 'Oracle Net' protocol. An attacker doesn't require privileges to...
Concatus IMate Web Mail Server 2.5 - Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1286/info Sending an email to a Concatus IMate Web Mail Server 2.5 with a server name consisting of over 1119 characters will cause the application to crash. Restarting the program is required in order to regain normal...
CamShot WebCam 2.6 Trial - Remote Buffer Overflow
No description provided by source. source: http://www.securityfocus.com/bid/1685/info CamShot is a Windows 95/98/2000/NT web server that serves up web pages containing time stamped images captured from a video camera. The images can be viewed from anywhere on the network with a web browser. CamSh...
bacula-web 1.3.x - 5.0.3 - Multiple Vulnerabilities
No description provided by source. GotGeek Labs http://www.gotgeek.com.br/ Bacula-web 1.3.x - 5.0.3 Multiple Remote Vulnerabilities + Description Bacula-Web is a web based tool that provide you a summarized view of your bacula director. It obtain his information from your bacula catalog's databas...
SNewsCMS 2.1 News_page.PHP Cross-Site Scripting Vulnerability
No description provided by source...
firefly media server (mt-daapd) 2.4.1 / svn 1699 - Multiple Vulnerabilities
No description provided by source. Luigi Auriemma Application: Firefly Media Server mt-daapd http://www.fireflymediaserver.org Versions: = 2.4.1 and SVN = 1699 Platforms: nix, Windows, Mac and others Bugs: A partial directory traversal on Windows B authentication bypass on Windows C duplicated HT...
Ruby <= 1.9 Safe Level Multiple Function Restriction Bypass
No description provided by source. source: http://www.securityfocus.com/bid/30644/info Ruby is prone to multiple vulnerabilities that can be leveraged to bypass security restrictions or cause a denial of service: - Multiple security-bypass vulnerabilities occur because of errors in the 'safe leve...
Microsoft Windows XP/2000/2003 Graphical Device Interface Plus Library Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19221/info Reportedly, the Microsoft Windows GDI+ library 'gdiplus.dll' is prone to a denial-of-service vulnerability because the software fails to handle malformed image files properly. An attacker may leverage this issu...
Adobe Flash Player Regular Expression Heap Overflow
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = NormalRanking include Msf::Exploit::Remote::BrowserExploitServer def...
PHP Lite Calendar Express 2.2 auth.php cid Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/14504/info Calendar Express is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an...
Oracle Outside-In FPX File Parsing Heap Overflow
No description provided by source. Application: Oracle Outside-In FPX File Parsing Heap Overflow Version: he vulnerabilities are reported in versions 8.3.5 and 8.3.7. Exploitation: Remote code execution Secunia Number: SA49936 PRL: 2012-26 Author: Francis Provencher Protek Research Lab's Website:...