56796 matches found
WikyBlog 1.2.x Index.PHP Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/20350/info WikyBlog is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlyin...
Microsoft SQL Server 7.0 - Remote Denial of Service Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/11265/info Reportedly Microsoft SQL Server is affected by a remote denial of service vulnerability. This issue is due to a failure of the application to handle irregular network communications. An attacker may leverage th...
Joomla Component com_jsupport Critical XSS Vulnerability
No description provided by source. Exploit Title: Joomla Component comjsupport Critical XSS Vulnerability Date: 12.11.2010 Author: Valentin Category: webapps/0day Version: 1.5.6 Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General...
Minerva <= 2.0.21 build 238a (phpbb_root_path) File Include Vulnerability
No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register class TestPOCPOCBase: vulID = '64022' ssvid version = '1.0' author = '皮皮' vulDate = '2006-09-28' createDate = '2015-12-24...
BaconMap 1.0 - Local File Disclosure Vulnerability
No description provided by source. ------------------------------------------------------------------------ Software................BaconMap 1.0 Vulnerability...........Local File Inclusion Download................http://baconmap.nmsu.edu/ Release Date............10/10/2010 Tested...
Destiny Media Player 1.61 - (.pls) Universal Buffer Overflow Exploit (SEH)
No description provided by source. !/usr/bin/perl + Bug : Destiny Media Player 1.61 .pls Universal Buffer overflow SEH + Author : ThE g0bL!N + Greetz : ma 3labaliche :D + Use : open the pls file directly : + Note: His0k4 Merci jamais Raditni win32exec - EXITFUNC=seh CMD=calc Size=160...
Mercora IMRadio <= 4.0.0.0 - Local Password Disclosure Exploit
No description provided by source. /================================================================ Mercora IMRadio 4.0.0.0 password disclosure local exploit by Kozan Discovered & Coded by: Kozan Credits to ATmaCA Web: www.spyinstructors.com Mail: [email protected] ===== Application...
Mcafee FreeScan CoMcFreeScan Browser Object Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10071/info It has been reported that Mcafee FreeScan CoMcFreeScan browser object may be prone to a remote buffer overflow vulnerability. The issue is reportedly due to a lack of sufficient boundary checks performed on dat...
Linux 2.4 Kernel execve() System Call Race Condition Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8042/info A race condition vulnerability has been discovered in the Linux execve system call, affecting the 2.4 kernel tree. The problem lies in the atomicity of placing a target executables file descriptor within the...
Indexu 5.0/5.3 send_pwd.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/22084/info Indexu is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the...
Mozilla Firefox 29.0 - Null Pointer Dereference Vulnerability
No description provided by source. html titleMozilla Firefox Null Pointer Dereference Vulnerability/title pre Fun side of life! br Details: Title: Mozilla Firefox Null Pointer Dereference Vulnerability Version: Prior to 29.0 Date: 4/30/2014 Discovered By: Mr.XHat E-Mail: Mr.XHat AT GMail.com Test...
mrcgiguy freeticket (ch/sql) Multiple Vulnerabilities
No description provided by source. MRCGIGUY FreeTicket Multiple Remote Vulnerabilities Founder: ThE g0bL!N ------ Home: http:/www.4ckx.com/dz/ ---- Download: http://www.mrcgiguy.com/cgi-bin/freedown.cgi?id=1 Vendor:http://www.mrcgiguy.com Special Thx: Snakespc His0k4 Note: Algerie 3-1 Egypt...
Dual DHCP DNS Server 1.0 DHCP Options Remote Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16298/info Dual DHCP DNS Server is prone to a remote buffer overflow vulnerability. The vulnerability presents itself when the server handles excessive data through the DHCP options field. Successful exploitation can allo...
MyBB Profile Blogs Plugin 1.2 - Multiple Vulnerabilities
No description provided by source. Exploit Title: MyBB Profile Blog plugin multiple vulnerabilities. Google Dork: inurl:member.php intext:Profile Blogs for MyBB Date: 12.9.2012 Exploit Author: Zixem Vendor Homepage: http://fklar.pl/ Software Link: http://mods.mybb.com/view/profile-blogs Version:...
DornCMS Application 1.4 - Multiple Web Vulnerabilities
No description provided by source...
IBM AIX 5.x Invscout Local Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13909/info invscout is prone to a local buffer overflow vulnerability. This issue presents itself because the application fails to carry out boundary checks on user-supplied data from the command line. /usr/sbin/invscout...
Magic Photo Storage Website admin/approve_member.php _config[site_path] Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/21965/info Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the...
52 byte Linux MIPS execve
No description provided by source. include stdio.h / entropy at phiral.net 52 byte linux mips shellcode oh werd [email protected] /encode/1/2 cat s.s .section .text .globl start .set noreorder start: li $a2, 0x666 p: bltzal $a2, p slti $a2, $zero, -1 addu $sp, $sp, -32 addu $a0, $ra, 4097 addu...
UltraEdit 14.00b - FTP/SFTP 'LIST' Command Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/29784/info UltraEdit is prone to a directory-traversal vulnerability because the application fails to sufficiently sanitize user-supplied input. This issue occurs in the FTP/SFTP client. Exploiting this issue will allow a...
Mediacoder 0.7.3.4672 - SEH Exploit
No description provided by source. !/usr/bin/python from sys import argv Title: Mediacoder v0.7.3.4672 SEH Exploit Author: Stoke from devilc0de crew http://hack2web.altervista.org http://devilc0de.altervista.org Tested on: Windows XP SP2 ita shell =...
FREEze Greetings 1.0 - Remote Password Retrieve Exploit
No description provided by source. ?php / FREEze Greetings 1.0 Remote Password Retrieve Exploit Exploit by cOndemned Greetz : suN8Hclf, 0in, m4r1usz, str0ke, rtgn, doctor, sid.psycho ... Special thx to ZaBeaTy for developing such a sexy regexp ; Thx m8 / echo Header FREEze Greetings 1.0 Remote...
ZTE Change admin password
No description provided by source. Exploit Title: ZTE Change admin password Author: Nuevo Asesino Version: ZTE Inc., Software Release ZXDSL 831IIV7.5.0aZ29OV html body onload=javascript:document.forms0.submit H2Exploit By Nuevo Asesino /H2 form method=POST name=form0...
Guesbara 1.2 Administrator Password Change Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/23029/info Guesbara is prone to a vulnerability that may permit attackers to change the administrative password. Exploiting this issue may allow an attacker to gain administrative access to the affected application...
WMMon 1.0 b2 Memory Character File Open File Descriptor Read Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5718/info It has been reported that wmmon is vulnerable to a leakage of open file descriptors that may result in unauthorized disclosure of kernel memory. It is allegedly possible for attackers to inherit the open file...
SiteCubed MailWorks Professional Authentication Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11095/info MailWorks Professional is reported prone to an authentication bypass vulnerability. The application uses cookies to store variables that determine the status of the authentication process. An attacker browsing...
ProFTPD 1.2 pre6 snprintf Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/650/info Lack of user input validation in ProFTPD can lead to a remote root vulnerability. On systems that support it ProFTPD will attempt to modify the name of the program being executed argv0 to display the command bein...
Grandstream GXV-3000 Phone Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/25399/info Grandstream GXV-3000 phones are prone to a remote denial-of-service vulnerability. Exploiting this issue allows remote attackers to cause the device to accept a phone while being unable to hang up. This...
taifajobs <= 1.0 (jobid) Remote SQL Injection Vulnerability
No description provided by source...
Mitel Audio and Web Conferencing - Command Injection
No description provided by source. $Id: mitelawcexec.rb 11516 2011-01-08 01:13:26Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of us...
CakePHP <= 1.3.5 / 1.2.8 Cache Corruption Exploit
No description provided by source. $Id: cakephpcachecorruption.rb 11579 2011-01-14 16:25:37Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...
FreeBSD <= 5.0,NetBSD <= 1.4.2,OpenBSD <= 2.7 setsockopt() Dos
No description provided by source. source: http://www.securityfocus.com/bid/622/info A denial of service attack exists that affects FreeBSD, NetBSD and OpenBSD, and potentially other operating systems based in some part on BSD. It is believed that all versions of these operating systems are...
Joomla Component iDoBlog <= b24 Remote SQL Injection Vulnerability
No description provided by source. Joomla Component idoblog Remote SQL Injection Founded by : His0k4 Algerian HaCkeR; Contact: His0k4.hlmatgmail.com Greetz : All friends & muslims HaCkeRs : Greetz2 : http://www.palcastle.org/cc/ ScriptName: Joomla ComponentName: comidoblog DORK: inurl:comidoblog...
WMNews 0 wmcomments.php ArtID Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/17076/info WMNews is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have...
SiteEnable 3.3 Login.ASP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16009/info SiteEnable is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary...
LiveZilla 5.0.1.4 - Remote Code Execution
No description provided by source...
68kb Knowledge Base 1.0.0rc3 - Edit Main Settings CSRF
No description provided by source. Exploit Title: 68kb Knowledge Base v1.0.0rc3 edit main settings CSRF Date: 2010-04-02 Author: Jelmer de Hen Software Link: http://68kb.googlecode.com/files/68kb-v1.0.0rc3.zip Version: v1.0.0rc3 html body onload=document.forms'editsettings'.submit form...
TORCS 1.3.1 acc Buffer Overflow
No description provided by source. / Exploit Title: TORCS acc Buffer Overflow Date: 20/12/2011 Author: Andres Gomez Software Link: http://torcs.sourceforge.net/ Version: torcs 1.3.1 Tested on: Windows CVE : / / This exploit generates a corrupted acc file which has to be saved in the directories...
Xomol CMS 1.2 'index.php' HTML Injection and Cross-Site Scripting Vulnerabilities
No description provided by source...
Jetbox CMS 2.1 'liste' Parameter Cross Site Scripting Vulnerability
No description provided by source...
redaxo cms 4.2.1 - Remote File Inclusion Vulnerability
No description provided by source...
MyBulletinBoard 1.2 Generic_Error.PHP Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/20079/info MyBulletinBoard is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to steal cookie-based...
Asterisk 'ast_parse_digest()' Stack Buffer Overflow Vulnerability
No description provided by source. =========================== Description =========================== There is a remotely exploitable stack buffer overflow in HTTP digest authentication handling in Asterisk. This vulnerability includes the possibility of code execution with plenty of stack space...
Xoops 1.3.x/2.0.x Multiple Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/9166/info Multiple vulnerabilities were reported in Xoops. These issues include SQL injection and input validation issues that will allow remote attackers to manipulate banners and local variables. Exploitation could...
OpenVMS 5.3/6.2/7.x UCX POP Server Arbitrary File Modification Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5790/info An issue with the UCX POP Post Office Protocol server used by OpenVMS has been reported. It is possible for a malicous local user to overwrite arbitrary files on the filesystem by exploiting a vulnerability in t...
MS Word 95/97/98/2000/2002 Excel 2002 INCLUDETEXT Document Sharing File Disclosure
No description provided by source. source: http://www.securityfocus.com/bid/5586/info The Microsoft Word and Excel INCLUDETEXT Field Code may be used to insert an arbitrary local file into a document. The INCLUDETEXT Field Code is reported to, under some circumstances, present a security threat. ...
Microsoft Internet Explorer 5.0.1 DHTML Object Race Condition Memory Corruption Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13120/info A vulnerability in Microsoft Internet Explorer may allow remote attackers to execute arbitrary code in the context of users visiting malicious Web sites. This issue presents itself the affected application...
Now SMS/MMS Gateway Buffer Overflow
No description provided by source. $Id: nowsms.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
BirdBlog 1.x comment.php entryid Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/20202/info BirdBlog is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage these issues to have arbitrary script code execute...
Yoxel <= 1.23beta (itpm_estimate.php a) Remote Code Execution Vuln
No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP YmmMMMM MMM YM Discovered by dun \ dunatstrcpy.pl Yoxel = 1.23beta PHP code Injection Vulnerability Script: Yoxel is a hidden gem. This Open Source...
BSD/OS <= 2.1,Caldera UnixWare 7/7.1 .0,FreeBSD FreeBSD 1.1.5 .1/2.0 ,HP HP-UX <= 10.34,IBM AIX <= 4.2,SGI IRIX <= 6.3,SunOS <= 4.1.4 libXt library Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/237/info The libXt library is part of the X Windows system. There are several buffer overflow conditions that may allow an unauthorized user to gain root privileges through setuid and setgid programs that are linked to...