Sharetronix 3.3 - Multiple Vulnerabilities

No description provided by source. Advisory ID: HTB23214 Product: Sharetronix Vendor: Blogtronix, LLC Vulnerable Versions: 3.3 and probably prior Tested Version: 3.3 Advisory Publication: May 7, 2014 without technical details Vendor Notification: May 7, 2014 Vendor Patch: May 27, 2014 Public...

Galette (picture.php) SQL Injection Vulnerability

No description provided by source. Source: http://www.securityfocus.com/bid/53463/info Galette is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Wordpress Plugin Photo Album Plus <= 4.1.1 - SQL Injection Vulnerability

No description provided by source. Exploit Title: WP Photo Album Plus = 4.1.1 SQL Injection Vulnerability Date: 2011-10-14 Author: Skraps jackie.craig.sparksatlive.com jackie.craig.sparksatgmail.com @skrapsfoo Plugin Page: http://wordpress.org/extend/plugins/wp-photo-album-plus/ Software Link:...

MVDSV 0.165 b/0.171 Quake Server Download Buffer Overrun Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9218/info The mvdsv Quake Server implementation is prone to a remotely exploitable buffer overrun vulnerability. This could permit execution of arbitrary code in the context of the server...

MS IE 4/5/5.5/5.0.1 external.NavigateAndFind() Cross-Frame Vulnerability

No description provided by source. Microsoft Internet Explorer 4.0 for WfW/Windows 3.1/Windows 95/Windows NT 3/Windows NT 4,Internet Explorer 5.0 for Windows 2000/Windows 95/Windows 98/Windows NT 4,Internet Explorer 5.5,Internet Explorer 5.0.1,Internet Explorer for Unix 5.0 external.NavigateAndFi...

PlumeCMS <= 1.2.4 - Multiple Persistent XSS

No description provided by source. +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : PlumeCMS = 1.2.4 Multiple Persistent XSS Date : 04-04-2012 Author : Ivano Binetti http://www.ivanobinetti.com...

WoltLab Burning Board 2.3.1 Thread.PHP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13325/info WoltLab Burning Board is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary code in th...

phpGroupWare 0.9.x viewticket_details.php ticket_id Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/11952/info Reportedly PHPGroupWare contains multiple input validation vulnerabilities; it is prone to multiple SQL injection and cross-site scripting issues. These issues are all due to a failure of the application to...

Orbz Game <= 2.10 Remote Buffer Overflow Exploit

No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h include time.h / Read/Write bits to buffer 0.1.1 by Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org max 32 bits numbers supported from 0 to 4294967295. Probabl...

IBM AIX <= 4.2 lchangelv Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/389/info A buffer overflow can occur in lchangelv under some versions of AIX. Note that an attacker must already have the GID or EGID of 'system' to execute lchangelv. Because lchangelv is SUID root, this overflow will...

Xilisoft Video Converter Wizard '.yuv' File Stack Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/38854/info Xilisoft Video Converter is prone to a stack-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied input. Attackers may leverage this issue to...

Minerva <= 2.0.8a Build 237 (phpbb_root_path) File Include Vulnerability

No description provided by source. $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ Minerva phpbbrootpath = 2.0.8a Build 237 Remote File Include Vulnerability $$ script site: http://sourceforge.net/projects/minerva/ $$ dork: Powered by Minerva 237 $$...

phpBP <= RC3 (2.204) (sql/cmd) Remote Code Execution Exploit

No description provided by source. ? // //Kacper & str0ke Settings $exploitname = phpBP = RC3 2.204 sql/cmd Remote Code Execution Exploit; $scriptname = phpBP RC3 2.204; $scriptsite = http://www.phpbp.com/; $dork = 'Silnik strony jest chroniony prawami autorskimi PHP BP Team'; //to work exploit y...

Solaris 7/8 kcms_configure Command-Line Buffer Overflow Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/2558/info The Kodak Color Management System, or KCMS, is a package that ships with workstation installations of Solaris 7 and 8. kcmsconfigure, a part of KCMS, is vulnerable to a buffer overflow if it is passed an overly...

Yahoo! Toolbar 1.4.1 Helper Class ActiveX Control Remote Buffer Overflow Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/26656/info Yahoo! Toolbar ActiveX Control is prone to a buffer-overflow vulnerability. An attacker can exploit this issue to trigger denial-of-service conditions in Internet Explorer or other applications that use the...

Simple Document Management System 2.0 list.php folder_id Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/15596/info Simple Document Management System SDMS is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...

RoseOnlineCMS <= 3 B1 (admin) Local File Inclusion

漏洞出现在modules/admincp.php中 Click here to go back home'; obendflush; ? $admin直接通过GET方式获取 没有经过过滤 后面直接用include包含了 所以在PHP5.3的情况下 可以 通过%00截断 达到任意文件包含 payload http://0.0.0.0/modules/admincp.php?admin=LFI%00 '/ -.- --------------------oOO------OOo------------------- | RoseOnlineCMS = 3 B1 admin Local Fil...

Microsoft Windows Media Player 7 Embedded OCX Control Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1714/info Due to a flaw in the method Microsoft Windows Media Player 7 handles OCX controls ActiveX containers in embedded in RTF email messages, it is possible to crash RTF-enabled email clients such as Microsoft Outlook...

EditTag 1.2 edittag_mp.cgi file Variable Arbitrary File Disclosure

No description provided by source. source: http://www.securityfocus.com/bid/21890/info EditTag is prone to multiple directory-traversal vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow a remote attacker to access any file...

Evince PDF Reader - 2.32.0.145 (Windows) and 3.4.0 (Linux) - Denial of Service

No description provided by source. Advisory Information : ====================== Title : Evince 2.32.0.145 - Denial Of Service Product : Evince pdf reader Vendor Homepage: https://projects.gnome.org/evince/ Vulnerable Versions : Windows 2.32.0.145, Linux 3.4.0 and probably prior release Tested...

XOOPS Module XFsection <= 1.07 (articleid) BLIND SQL Injection Exploit

No description provided by source. html head titleXOOPS Module XFsection = 1.07 articleid BLIND SQL Injection Exploit/title script type=text/javascript //'=============================================================================================== //'Script Name: XOOPS Module XFsection = 1.07...

Pcshey Portal 'kategori.asp' SQL Injection Vulnerability

No description provided by source. !/usr/bin/perl Coded By U238 Discovered By U238 mail : setuid.noexec0x1athotmail.com From : Türkiye / Erzincan Thnx : TheBekiR - ZeberuS - Fahn - ka0x - Deep Power - Marco Almeida Gretz: http://bilisimMimarileri.com : http://bilgiguvenligi.gov.tr Mesut Timur &...

Openurgence vaccin 1.03 (RFI/LFI) Multiple File Include Vulnerability

No description provided by source. ===================================================================== Openurgence vaccin 1.03 RFI/LFI Multiple File Include Vulnerability ===================================================================== + Openurgence vaccin 1.03 RFI/LFI Multiple File Includ...

Zlib 1.1.4 Compression Library gzprintf() Buffer Overrun Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/6913/info A buffer-overrun vulnerability has been reported in the Zlib compression library. Due to the use of 'vsprintf' by an internal Zlib function, an attacker can cause memory to become corrupted. This buffer overrun...

Joomla Component alphacontent <= 2.5.8 (id) SQL Injection Vulnerability

No description provided by source. Joomla Component comalphacontent SQL Injection Vulnerability found by: cO2 Algeria Security Crew Contact: c02athotmail.de Website: http://www.dzw0rm.ch Greetings: to all hackers DZ ScriptName : 'Joomla' ModuleName : 'AlphaContent' Version : '2.5.8 ' DORK 1 :...

Charon Cart 3.0 - (ContentID) Blind SQL Injection Vulnerability

No description provided by source. ? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe: reviewupdate.asp ContentID Blind SQL Injection Vulnerability Vendor: www.charon.co.uk Software: charoncartv3 author: R3d-D3v!L Date: 17.dec.2009 T!ME: 4:46 am ? Home:...

IBM Lotus iNotes dwa85W ActiveX Buffer Overflow

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

MS12-063 Microsoft Internet Explorer execCommand Use-After-Free Vulnerability

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

Novell eDirectory 8.x iMonitor HTTPSTK Buffer Overflow Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/20655/info The Novell eDirectory server iMonitor is prone to a stack-based buffer-overflow vulnerability because it fails to perform sufficient bounds checking on client-supplied data before copying it to a buffer. An...

iMesh <= 7.1.0.x (IMWeb.dll 7.0.0.x) Remote Heap Overflow Exploit

No description provided by source. !-- iMesh = 7.1.0.x IMWebControl Class IMWeb.dll 7.0.0.x remote heap exploit IE7/XP full patched by rgod, site: http://retrogod.altervista.org/ software site: http://www.imesh.com iMesh is a file sharing and online social network. It uses a proprietary,...

Light Audio Mixer 1.0.12 - (.wav) Crash PoC

No description provided by source. Exploit Title: Light Audio Mixer Version 1.0.12 .wav - Crash POC Date: 14-07-2013 Exploit Author: ariarat Software Link: http://download.cnet.com/Light-Audio-Mixer/3000-21394-10791607.html Version: 1.0.12 Tested on: Windows XP sp3...

phpcms 9.0 - Blind SQL Injection Vulnerability

No description provided by source. ================================================================= phpcms V9 BLind SQL Injection Vulnerability ================================================================= Software: phpcms V9 Vendor: www.phpcms.cn Vuln Type: BLind SQL Injection Download link...

Wordpress plugin wp-Table <= 1.43 (inc_dir) RFI Vulnerability

No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV82$2007 ----------------------------------------------------------------------------------------- ECHOADV82$2007 wordpress plugins wp-Table = 1.43 incdir Remote File...

MySQL 3.20.32/3.22.x/3.23.x Null Root Password Weak Default Configuration Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/5503/info MySQL is is an open source relational database project, and is available for a number of operating systems, including Microsoft Windows. A weak default configuration problem has been reported in the Windows bina...

MailEnable Enterprise <= 2.0 (ASP Version) Multiple Vulnerabilities

No description provided by source. Hi, I'm Soroush Dalili from GrayHatz Security Group GSG. I found multiple bugs in MailEnable Enterprise Edition ASP Version = 2.0 that I listed them below: 1 - Any user can login to web administration site. 2 - Authenticated normal user can gain ADMIN or SYSADMI...

ScreenOS 1.73/2.x Firewall Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2176/info NetScreen Firewall is a network appliance used to secure against intruders and various types of attacks to a network. NetScreen has a Web administrative Interface WebUI used to configure and set the firewall...

Outlook Express 6 Attachment Security Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3271/info Microsoft Outlook Express 6 contains a new security feature which prevents users from opening potentially harmful file attachments. A vulnerability exists which allows a file embedded within an HTML frame in an...

MySpeach <= 2.1b (up.php) Remote Inclusion Vulnerability

No description provided by source. ------------------------------------------------------------------------------------------------------------------------ Script:MySpeach Affected Version:beta2.1 and maybe older Downlaoad:http://www.graphiks.net/scripts/chat/myspeach-2.1beta.zip...

VideoLAN Client (VLC) Win32 smb:// URI Buffer Overflow

No description provided by source. $Id: vlcsmburi.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Wrapper.PHP for OsCommerce Local File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/24565/info Wrapper.php for OsCommerce is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execut...

3editor CMS <= 0.42 (index.php) Local File Include Vulnerability

No description provided by source. script Name: 3editor CMS index.php Local File Include Exploit Download:http://www.matteolucarelli.net/3editor/index.htm Author : Dr Max Virus Contact :[email protected] Bug & Problem In file index.php Let's Take a look; if !isset$GET'page'...

Powered by iNetScripts: Shell Upload Vulnerability

No description provided by source. ==================================================== Powered by iNetScripts: Shell Upload Vulnerability ==================================================== Contact :Sec-q8 [email protected] Published: 2010-04-25 Home : http://Sec-Senter.com/vb ========= Exploi...

Cobalt RaQ 2.0/3.0,qpopper 2.52/2.53 'EUIDL' Format String Input Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1242/info A vulnerability exists in version 2.53 and prior of qpopper, a popular POP server, from Qualcomm. By placing machine executable code in the X-UIDL header field, supplying formatting strings in the From: field in...

PHPTB Topic Board 2.0 dev_o.php absolutepath Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/14592/info PHPTB is prone to multiple remote file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to...

FreeWebshop 2.2.1 - Remote Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ FreeWebshop version 2.2.1 - Multiple Remote SQL Injection Vulnerabilities Waktu : Dec 16 2007 01:50AM Software : FreeWebshop version 2.2.1 Vendor : http://www.freewebshop.or...

AuraCMS <= 2.2.1 (online.php) Remote Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w Indonesian Newhack Security Advisory ------------------------------------ AuraCMS 2.x online.php - Remote Blind SQL Injection Exploit Waktu : Feb 15 2008 01:00PM Software : AuraCMS Versi : 2.0 2.1 2.2.1 Vendor : http://www.auracms.org/...

Joomla Commedia Plugin (index.php, task parameter) SQL Injection

No description provided by source. Exploit Title: Joomla commedia Remote Exploit dork: inurl:index.php?option=comcommedia Date: 18-10-2012 Author: Daniel Barragan D4NB4R Twitter: @D4NB4R Vendor: http://www.ecolora.org/ Version: 3.1 last update on Oct 7, 2012 and lowers License: Commercial and...

FiberHome Modem Router HG-110 - Authentication Bypass To Remote Change DNS Servers

No description provided by source. Exploit Title: Directory Path Traversal FiberHome Modem Router HG-110 / Remote Change DNS Servers Date: 22/09/2013 Exploit Author: Javier Perez - [email protected] - @thes41nt Vendor Homepage: http://hk.fiberhomegroup.com/ Version: HG110BHV1.6 PoC: Remote...

Group Office Remote Command Execution Vulnerability

No description provided by source. Title Group Office Remote Command Execution Vulnerability Author ADEO Security Published 16/07/2010 Version 3.5.9 Possible all versions Vendor http://www.group-office.com Download...

wicd Local Privilege Esclation Exploit

No description provided by source. !/usr/bin/python wicd = 1.7.1 0day exploit discovered on 4.9.12 by InfoSec Institute student For full write up and description go to http://www.infosecinstitute.com/courses/ethicalhackingtraining.html import sys import os import time import getopt try: from wicd...