56796 matches found
Borland InterBase PWD_db_aliased() Buffer Overflow
No description provided by source. $Id: ibpwddbaliased.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
Campsite 2.6.1 ArticleData.php g_documentRoot Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/23874/info Campsite is prone to multiple remote file-include vulnerabilities. Exploiting this issue allows remote attackers to execute code in the context of the webserver. This issue affects Campsite 2.6.1. Earlier...
Proxomitron Naoko-4 Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3087/info Proxomitron is a free web proxy server. Proxomitron is vulnerable to a cross site scripting attack. The condition is present because of the way URLS are displayed in error messages. It is possible for script cod...
Tube Ace(Adult PHP Tube Script) SQL Injection
No description provided by source...
MWChat 6.7 Start_Lobby.PHP Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13849/info MWChat is affected by a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...
Fastream NETFile Web Server <= 7.1.2 (HEAD) DoS Exploit
No description provided by source. Fastream NETFile FTP/Web Server 7.1.2 Professional DoS Exploit Bug found by bratax ck Coded bY karak0rsan d0gma.org // unuver.com Greetz:hurby,phalaposher,l4m3r,Atak,spymaster,razor... $host=$ARGV0; $port=$ARGV1; if!$ARGV1 print Fastream FTP/Web Server DoS\n;...
IBM AIX <= 4.2.1, Sun Solaris <= 7.0 LC_MESSAGES libc Buffer Overflow Vulnerability (5)
No description provided by source. source: http://www.securityfocus.com/bid/268/info A buffer overflow in libc's handling of the LCMESSAGES environment variable allows a malicious user to exploit any suid root program linked agains libc to obtain root privileges. This problem is found in both IBM...
Tumbleweed FileTransfer vcst_eu.dll ActiveX Control Buffer Overflow
No description provided by source. $Id: tumbleweedfiletransfer.rb 9525 2010-06-15 07:18:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...
FireStorm Professional Real Estate Wordpress Plugin 2.06.01 SQL Injection Vulnerability
No description provided by source...
Istgah For Centerhost 'view_ad.php' Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/39330/info Istgah for Centerhost is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...
Axigen <= 2.0.0b1 Remote Denial of Service Exploit (2)
No description provided by source. / doaxigen-v2.c axigen 1.2.6 - 2.0.0b1 DoS x86-lnx by mu-b - Sun Oct 29 2006 - Tested on: AXIGEN 1.2.6 lnx AXIGEN 2.0.0b1 lnx parsing error results in login without username & password! which in turn causes a NULL pointer dereference.. / /...
CuteNews (index.php?page) Local File Inclusion Vulnerability
No description provided by source. ========================================================== CuteNews page local File Inclusion Vulnerability ========================================================== vendor: http://cutephp.com/ Author: eidelweiss Contact: eidelweiss at windowslive dot com...
Istgah for Centerhost Mullti Vulnerability
No description provided by source...
Citadel/UX <= 6.27 Remote Root Format String Exploit
No description provided by source. / citadelfsexp.c Citadel/UX v6.27 remote format string exploit Use: ./citadelfsexp -h host options options: -h arg host or IP -t arg type of target system -l targets list -g arg syslog GOT address -r arg RET address coki@nosystem:/audit$ ./citadelfsexp -h...
Zilab Chat and Instant Messaging (ZIM) 2.0/2.1 - Server Multiple Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/27940/info Zilab Chat and Instant Messaging ZIM Server is prone to multiple vulnerabilities, including denial-of-service issues and memory-corruption issues. A successful exploit may allow remote attackers to execute...
ATFTP 0.7 Timeout Command Line Argument Local Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7902/info atftp is prone to a locally exploitable buffer overflow condition. This issue is due to insufficient bounds checking performed on input supplied to the command line parameter -t for timeout. Local attackers may...
FileSeek CGI Script File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6784/info FileSeek is an example cgi-script from The CGI/Perl Cookbook from John Wiley & Sons. The script is written and maintained by Craig Patchett. It is mainly used to find and download files on a web server...
Postfix 1.1.x Denial of Service Vulnerabilities (1)
No description provided by source. source: http://www.securityfocus.com/bid/8333/info Debian has reported two vulnerabilities in the Postfix mail transfer agent. The first vulnerability, CAN-2003-0468, can allow for an adversary to bounce-scan a private network. It has also been reported that thi...
Mambo Open Source 4.5/4.6 mod_mainmenu.php Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9445/info It has been reported that Mambo Open Source may be prone to a remote file include vulnerability that may allow an attacker to include malicious external files containing arbitrary PHP code to be executed on a...
Zixforum ZixForum.mdb Database Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10982/info Zixforum is reported prone to a database disclosure vulnerability. It is reported that remote users may download the database file ''ZixForum.mdb' and gain access to sensitive information including unencrypted...
Torrent Hoster Remont Upload Exploit
No description provided by source. ======================================================================================== | Title : Torrent Hoster Remont Upload Exploit | Author : El-Kahina | Home : www.h4kz.com | | Script : Powered by Torrent Hoster. | Tested on: windows SP2 Franais V.Pnx2 2.0...
ClipShare < 3.0.1 (tid) Remote SQL Injection Vulnerability
No description provided by source. // / / / Clipshare / / / / Remote SQL Injection Vulnerability / / / / / // AUTHOR : SuNHouSe2 ALGERIAN HaCkEr DORK : powered by clipshare VERSION : less than v3.0.1 EXPLOIT :...
JamMail 1.8 Jammail.pl Remote Arbitrary Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13937/info JamMail is prone to a remote arbitrary command execution vulnerability. This vulnerability may allow an attacker to supply arbitrary commands through the 'jammail.pl' script. This can lead to various attacks...
ClipShare 4.1.1 (gmembers.php, gid param) - Blind SQL Injection Vulnerability
No description provided by source...
PHPizabi 0.848b C1 HFP3 - Database Information Disclosure Vuln
No description provided by source. -------------------------------------------------------- PHPizabi v0.848b C1 HFP3 database information exposure -------------------------------------------------------- I would like to state that I am in no way responsible for how this information is used. It is...
OpenLD <= 1.2.2 (index.php id) Remote SQL Injection Vulnerability
No description provided by source. --==+================================================================================+==-- --==+ OpenLD = 1.2.2 SQL Injection Exploit +==-- --==+================================================================================+==-- DISCOVERED BY: Cody CypherXero...
IndexScript <= 2.8 (show_cat.php cat_id) SQL Injection Vulnerability
No description provided by source. Site: http://indexscript.com Found By: xssvgamer Google Dork: allintext: This site is powered by IndexScript exploit: http://www.example.com/showcat.php?catid=-1 UNION ALL SELECT login,password FROM dirlogin / Blind SQL injection in indexscript.. Vul Code: $sql ...
Socketwiz Bookmarks <= 2.0 (root_dir) Remote File Include Exploit
No description provided by source. !/usr/bin/perl use LWP::UserAgent; / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - Socketwiz Bookmarks = 2.0 rootdir Remote File Include Exploit + + + - Script name: Socketwiz Bookmarks v. 2.0 - Script site: http://www.hotscripts.pl/pobierz-2232.html + +...
SecureCRT <= 4.0 Beta 2 SSH1 Buffer Overflow
No description provided by source. $Id: securecrtssh1.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of us...
sunway forcecontrol <= 6.1 sp3 - Multiple Vulnerabilities
No description provided by source. Luigi Auriemma Application: Sunway ForceControl http://www.sunwayland.com.cn/pro.asp Versions: = 6.1 sp3 with AngelServer and WebServer updated Platforms: Windows Bugs: various stack overflows directory traversals third party ActiveX code execution various Denia...
Broadcast Machine 0.1 - Multiple Remote File Inclusion Vulnerabilities
No description provided by source. ================================================================================================================= o Broadcast Machine 0.1 Multiple Remote File Inclusion Vulnerability Software : Broadcast Machine version 0.1 Vendor :...
InShop and InMail Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/11758/info InMail and InShop are both reported susceptible to cross-site scripting vulnerabilities. These issues are due to a failure of the applications to properly sanitize user-supplied input prior to including it in...
KingView 6.5.3 SCADA HMI Heap Overflow PoC
No description provided by source. Exploit Title: KingView 6.53 SCADA HMI Heap Overflow PoC Date: 9/28/2010 Author: Dillon Beresford Software Link: http://download.kingview.com/software/kingview%20English%20Version/kingview6.53EN.rar Version: 6.53 English Tested on: Windows XP SP1 works on SP2 an...
X7 Chat <= 2.0.4 (old_prefix) Remote Blind SQL Injection Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo X7 Chat =2.0.4 'oldprefix' blind SQL injection / privilege escalation exploit\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n; echo dork: \Powered By X7 Chat\r\n\r\n; if $argc3...
mmPlayer 2.2 (.ppl) Local Buffer Overflow Exploit (SEH)
No description provided by source. !/usr/bin/perl Title: mmPlayer 2.2 .ppl Local Buffer Overflow Exploit SEH Date: 23.03.2012 Author: RjRjh Hack3r Software Link: http://www.brnameg.com/download.php?id=3859 Tested on: Windows XP SP2 EN my $file= RjRjh.ppl; my $junk= \x41 x 4090; my $nextseh=...
Ricoh Aficio 450/455 PCL Printer Remote ICMP Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11932/info It is reported that Ricoh 450/455 printers are susceptible to a remote denial of service vulnerability. This issue is due to a failure of the device to properly handle exceptional ICMP packets. Remote attackers...
OSTicket 1.x Open_form.PHP Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18190/info osTicket is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary...
Woltlab Burning Board 2.3.4 Class_DB_MySQL.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17147/info Woltlab Burning Board is prone to a cross-site scripting vulnerability. This issue is due to a lack of proper sanitization of user-supplied input. An attacker may leverage this issue to have arbitrary script co...
Loom Software SurfNow 1.x/2.x Remote HTTP GET Request Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9519/info A problem has been identified in the handling of specific types of requests by SurfNOW. Upon receiving specially crafted HTTP GET requests, it is possible for a remote attacker to crash a vulnerable...
Poison Ivy 2.3.2 C&C Server Buffer Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
WarpSpeed 4nAlbum Module 0.92 modules.php gid Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/9881/info It has been reported that 4nAlbum is prone to multiple vulnerabilities. These issues are primarily due to a failure of the module to validate user input. There is an information disclosure issue with the...
LEADTOOLS 11.5.0.9 - (ltisi11n.ocx) DriverName() Access Violation DoS
No description provided by source. html Test Exploit Page object classid='clsid:00110050-B1BA-11CE-ABC6-F5B2E79D9E3F' id='target' //object script language='vbscript' targetFile = C:\Program Files\Rational\common\ltisi11n.ocx prototype = Property Let DriverName As String memberName = DriverName...
Okul Web Otomasyon Sistemi 4.0.1 - Remote SQL Injection Vulnerability
No description provided by source. ------------------------------------------------------------------------------------------------------------------- AYYILDIZ.ORG PreSents... Script: Okul Web Otomasyon Sistemi Script Download: http://www.aspindir.com/Goster/3822 Contact: ilker Kandemir...
Ariadne <= 2.4 store_config[code] Remote File Include Vulnerabilities
No description provided by source. =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Ariadne v2.4 storeconfigcode Remote File Include Vuln =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Found: Cyber-Security.Org...
Solaris 2.x/7.0/8 Xsun HOME Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2561/info The X11 server that ships with Sun Microsystems' Solaris, Xsun, contains a locally exploitable buffer overflow vulnerability. The condition is present when the value of the HOME environment variable is of...
NCTAudioEditor2 ActiveX DLL (NCTWMAFile2.dll 2.6.2.157) - Exploit
No description provided by source. pre codespan style=font: 10pt Courier New;span class=general1-symbol------------------------------------------------------------------------------------------ bNCTAudioEditor2 ActiveX DLL NCTWMAFile2.dll v. 2.6.2.157 CreateFileInsecure Method/b url:...
Blue Coat Authentication and Authorization Agent (BCAAA) 5 Buffer Overflow
No description provided by source. $Id: bcaaabof.rb 13137 2011-07-09 04:10:52Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Blue Hat Sensitive Database Disclosure Vulnerability SQLi
No description provided by source. +Exploit Title: Powered by Blue Hat Sensitive Database Disclosure Vulnerability +Author : ^Xecuti0n3r + Date : 12.04.2011 + Hour : 13:37 PM + E-mail : xecuti0n3ryahoo.com + dork : intext:Powered by Blue Hat + Category : Web Apps SQli Choose any site that comes u...
com_extcalendar Mambo Component <= 2.0 Include Vulnerability
No description provided by source. -------------------------------------------------------------------------------- Title : ExtCalendar Mambo Module = v2 Remote File Include Vulnerabilities Discovered By OLiBekaS ----------------------------------------------------------------------------- dork :...
CDTrustee .BAK Local Crash PoC
No description provided by source. Exploit Title: CDTrustee .BAK Local Crash POC Date: March 30, 2010 Software Link: http://www.base40.com/cdtDownload.html Version: 2.06 Tested on: WinXP SP3 and Windows 7 Cost: 39.95 USD Author: anonymous Site: http://www.setfreesecurity.com Usage: Install...