56796 matches found
SN News <= 1.2 (/admin/loger.php) Admin Bypass SQL Injection
No description provided by source. SN News = 1.2 /admin/loger.php Admin Bypass Remote SQL Injection Vulnerability Google Dork: snews/visualiza.php?id= Bug discovered by Pr0T3cT10n, [email protected] Date: 06/06/2012 Version: 1.2 Software Link: http://phpbrasil.com/script/JHnpFRmSBqlf/sn-news...
Chaussette <= 080706 (_BASE) Remote File Include Vulnerabilities
No description provided by source. Chaussette Remote File Inclusion CreW: ToXiC Bug Found By Drago84 Source Code: http://freshmeat.net/redir/chaussette/64502/urlzip/chaussette.zip Page Affect /Classes/Evenement.php /Classes/Event.php /Classes/Eventformonth.php /Classes/Eventformonthperday.php...
D-Link DNS-323 - Multiple Vulnerabilities
No description provided by source. Exploit Title: D-Link DNS-323 Multiple Vulnerabilities Author: sghctoma E-mail: [email protected] Category: Hardware Vendor: http://www.dlink.com/ Firmware Version: 1.09 Product:...
Media Jukebox 8.0.400 Buffer Overflow Exploit (SEH)
No description provided by source. $Id: mediajukebox.rb 11516 2011-01-08 01:13:26Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of us...
CutePHP CuteNews 1.3.6 X-Forwarded-For Script Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12691/info A remote script injection vulnerability affects CutePHP CuteNews. This issue is due to a failure of the application to properly sanitize user-supplied input prior to using it to carry out critical functionality...
more.groupware <= 0.74 (new_calendarid) Remote SQL Injection Exploit
No description provided by source. ? errorreportingEERROR; function exploitinit if !extensionloaded'phpcurl' && !extensionloaded'curl' if !dl'curl.so' && !dl'phpcurl.dll' die oo error - cannot load curl extension!; function exploitheader echo...
FileBox - File Hosting & Sharing Script 1.5 - SQL Injection Vulnerability
No description provided by source. Exploit Title: FileBox - File Hosting & Sharing Script 1.5 SQL Injection Google Dork: inurl:FileBox Date: 30/08/2011 Author: Scripts Apart Software Link: http://www.scriptsapart.com Version: 1.5 Tested on: Windows 7 , Ubuntu 11 CVE : Exploit Discovered :...
PeerCast <= 0.1216 (nextCGIarg) Remote Buffer Overflow Exploit (2)
No description provided by source. / \ PeerCast =0.1216 remote exploit / by Darkeagle \ / 09.03.06 \ / \ gr33tz: bl4ck guys, unl0ck guys, rst/ghc guys, 0x557 guys, ph4nt0m guys, sh0k and many otherz. / \ / http://unl0ck.net root@localhost darkeagle telnet localhost 36864 Trying 127.0.0.1...
Easy CD-DA Recorder - (PLS File) Buffer Overflow
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = NormalRanking include Msf::Exploit::FILEFORMAT def initializeinfo =...
FunkyASP AD Systems 1.1 Login.ASP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13761/info FunkyASP AD Systems is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitatio...
Hummingbird Deployment Wizard 10 'DeployRun.dll' ActiveX Control Multiple Security Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/31799/info Hummingbird Deployment Wizard 10 ActiveX control is prone to multiple vulnerabilities that attackers can exploit to run arbitrary code. The issues stem from insecure methods used within 'DeployRun.dll'. An...
doop cms <= 1.4.0b (csrf/upload shell) Multiple Vulnerabilities
No description provided by source. -------------------------------------------------------------------------- | Project: Doop = 1.4.0b CSRF && Upload Shell | | Author: x0r | | Email: [email protected] | || -- CSRF Change Admin Pass --...
AMX Mod 0.9.2 - Remote 'amx_say' Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6968/info A format string vulnerability has been discovered AMX Mod 0.9.2 and earlier which may be exploitable to execute arbitrary code on a target Half-Life server. The problem occurs when calling the 'amxsay' command. ...
Wordpress WP-SendSMS Plugin 1.0 - Multiple Vulnerabilities
No description provided by source. ============================================================= \ \ / / | | / \ / | | \ \ V / | | | | | | | | | / \ | ' \ | | | | | | | | | | | | '| | / / . \ | | | | | | || | | | | | | | | | // \ | ./ || / || || |/ || | | || blackpentesters.blogspot.com...
IE wshom.ocx (Run) ActiveX Remote Code Execution (add admin user)
No description provided by source. Exploit Title: IE wshom.ocx Run ActiveX Remote Code Execution add admin user Date: 22/01/2010 Author: Stack Version: ALL Tested on: winsp2 html /font/b/p p object classid='clsid:72C24DD5-D70A-438B-8A42-98424B88AFB8' id='target' /object script language='vbscript'...
BaoFeng Storm M3U File Processing Buffer Overflow Exploit
No description provided by source. !/usr/bin/env python Title: BaoFeng Storm M3U File Processing Buffer Overflow Exploit CNVD-ID: CNVD-2010-00752 Author: Lufeng Li and Qingshan Li of Neusoft Corporation Download: www.baofeng.com Test: Put m3u file in roote.g. c:/ d:/,and open this m3u file...
Peer2Mail <= 1.4 Encrypted Password Dumper Exploit
No description provided by source...
rgboard <= 3.0.12 (rfi/xss) Multiple Vulnerabilities
No description provided by source. Rgboard 3.0.x Multiple Vulnerabilities RFI/XSS // Author:: e.wiZz! // Site:: www.balcanwarez.com // Contact:: N/A :D =========================================================== // Script :: Rgboard // Vulnerable version :: 3.0.0/3.0.12 // Not vulnerable :: 4.0 /...
Oracle 8.x cmctl Buffer Overflow Vulnerability
No description provided by source. / source: http://www.securityfocus.com/bid/1968/info cmctl is the Connection Control Manager, part of the Oracle 8i installation. A vulnerability exists that can allow elevation of privileges. The problem occurs in the way cmctl handles the user-supplied command...
Samba 2.2.0 - 2.2.8 - trans2open Overflow (OS X)
No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...
Oracle 8i dbsnmp Command Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3903/info Oracle 8i is an enterprise level database solution. It is available on a wide variety of platforms, including many Unix operating systems. It is possible to cause a denial of service condition in Oracle 8i. If...
GoodTech Telnet Server < 5.0.7 - Remote BoF Exploit (updated)
No description provided by source. / cybertronicatgmxdotnet offset fixed! cybertronic @ GoodTech $ gcc -o goodtechexpl goodtechexpl.c cybertronic @ GoodTech $ ./goodtechexpl Usage ----- Bindshell ./goodtechexpl host Reverseshell ./goodtechexpl host connectback ip connectback port cybertronic @...
TBmnetCMS 1.0 'content' Parameter Cross Site Scripting Vulnerability
No description provided by source...
Wordpress Plugin E-commerce <= 3.8.4 - SQL Injection Exploit
No description provided by source...
CDRDAO 1.1.x Home Directory Configuration File Symbolic Link Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/3865/info CDRDAO is a freely available, open source CD recording software package available for the Unix and Linux Operating Systems. It is maintained by Andreas Mueller. When CDRDAO saves it's configuration to the .cdrda...
websitebaker add-on concert calendar 2.1.4 - Multiple Vulnerabilities
No description provided by source. Advisory: Websitebaker Add-on 'Concert Calendar 2.1.4' XSS & SQLi vulnerability Advisory ID: SSCHADV2013-001 Author: Stefan Schurtz Affected Software: Successfully tested on Concert Calendar 2.1.4 Vendor URL:...
ISC innd 2.x Remote Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1316/info innd 2.2.2 contains a remotely exploitable buffer overflow in code reached when a cancel request is sent to the control newsgroup, under the following condition: the cancel request contains a valid Message-ID bu...
CCProxy <= 6.2 - Telnet Proxy Ping Overflow
No description provided by source. $Id: ccproxytelnetping.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms o...
INND/NNRP < 1.6.x - Remote Root Overflow Exploit
No description provided by source. / INND/NNRP remote root overflow / include stdio.h include stdlib.h include unistd.h include sys/types.h define DEFAULTOFFSET 792 define BUFFERSIZE 796 define ADDRS 80 define RET 0xefbf95e4 define NOP \x08\x21\x02\x80 int mainargc, argv int argc; char argv; char...
System V Derived /bin/login Extraneous Arguments Buffer Overflow
No description provided by source. $Id: manyargs.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Nagios Plugin check_ups Local Buffer Overflow PoC
No description provided by source. Advisory: Nagios Plugin 'checkups' local buffer overflow Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on nagios-plugins-1.4.15 Vendor URL: http://nagiosplugins.org/ ./checkups -u perl -e 'print Ax16407' buffer...
freeForum 1.7 'acuparam' Parameter Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30509/info freeForum is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary script code in the browser...
SIPfoundry sipXphone 2.6.0.27 CSeq Buffer Overflow
No description provided by source. $Id: sipxphonecseq.rb 9525 2010-06-15 07:18:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of us...
Geeklog <= 1.6.0sr2 - Remote File Upload
No description provided by source. ============================================================================== Geeklog = v1.6.0sr2 - Remote File Upload Discovered: JaL0h Software Site: http://www.geeklog.net Dork: By Geeklog Created this page in +seconds +powered...
H-Sphere 2.5.1 - Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/18677/info H-Sphere is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have...
slogan design Script SQL Injection Vulnerability
No description provided by source. Title: slogan design Script SQL Injection Vulnerability Version: 3.1 Author: Mr.P3rfekT Software Site: http://www.slogandesign.co.il Tested on Lunix CVE : N/A Founded By Mr.P3rfekT --- We Will Not Go Down Dork : inurl:index.php?mid= Helllo Allz. Exploit :...
Enzip 3.00 Buffer Overflow Exploit
No description provided by source. +Exploit Title: Exploit Buffer Overflow Enzip 3.00 +Date: 01\06\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.bcuc.ac.uk/files/enzip300.exe +Version: 3.00 +Tested on: WIN-XP SP3 PORTUGUESE BRAZILIAN +CVE: N/A Create BY C4SS!0 G0M3S [email protected]...
Nortel UNIStim IP Phone - Remote Ping Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28004/info Nortel UNIStim IP Phone products are prone to a remote denial-of-service vulnerability because the software fails to properly handle unexpected network datagrams. Successfully exploiting this issue allows remot...
H-Sphere 2.x HTML Template Inclusion Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/7855/info H-Sphere is prone to multiple cross-site scripting vulnerabilities via the HTML template feature in the Hosting Control Panel. HTML and script code will not be filtered from pages which are generated when a...
MikeyZip 1.1 - .ZIP File Buffer Overflow
No description provided by source. !/usr/bin/perl +Exploit Title: MikeyZip 1.1 .ZIP File Buffer Overflow +Date: 10\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.softpedia.com/get/Compression-tools/MikeyZip.shtml +Version: 1.1 +Tested On: WIN-XP SP3 Brazil Portuguese +CVE: N/A use stric...
Trlinux Postaci Webmail 1.1.3 Password Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2029/info Postaci Webmail is a database-driven web e-mail system. PostACI contains a vulnerability in its default configuration that may allow a remote attacker to gain access to the underlying database. Webmail stores...
MyBB Follower User Plugin - SQL Injection
No description provided by source. Exploit Title: Follower User MyBB plugin SQL Injection 0day Google Dork: intext:Users subscribed to inurl:member.php -site:fwcombie.us Date: 13.10.2012 Exploit Author: Zixem Software Link: http://mods.mybb.com/view/suscriber-user Version: 1.5+ Tested on: Linux...
Lynx 2.8 - Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/100/info There exists a buffer overflow in Lynx's built-in mailer that can be exploited when when the victim tries to follow a hyperlink. Lynx makes blind assumption on e-mail address length, and sprintfs it into 512-byte...
Microsoft Office Word 2010 Crash PoC
No description provided by source. Title : Microsoft Office Word 2010 Stack Overflow Version : Microsoft Office professional Plus 2010 Date : 2012-10-23 Vendor : http://office.microsoft.com Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : XP SP3 ENG Bug : ----...
Immo Makler Script SQL Injection Vulnerability
No description provided by source. ----------------------------Information------------------------------------------------ +Name : Immo Makler = SQL injection Vulnerability Proof of Concept +Autor : Easy Laster +Date : 17.12.2010 +Script : Immo Makler +Vendor http://www.mhproducts.de/ +Price :...
Alcatel-Lucent OmniPCX Enterprise Communication Server <= 7.1 - masterCGI Command Injection
No description provided by source...
Joomla Component is 1.0.1 - Multiple Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w Joomla Component is v 1.0.1 Multiple Remote SQL Injection variables vuln : marka & motor Found by : Houssamix From H-T Team H-T Team HouSSaMix + ToXiC350 Greetz : Mr.Al3FrItE & Islamic Security Team & Mounita20 & CoNaN and all musulmans hackers...
Inframail Advantage Server Edition 6.0 <= 6.37 - (FTP) BoF Exploit
No description provided by source. ===== Start InframailFTPOverflow.pl ===== Usage: InframailFTPOverflow.pl ip InframailFTPOverflow.pl 127.0.0.1 Infradig Systems Inframail Advantage Server Edition 6.0 Version: 6.37 Download: http://www.infradig.com/ use IO::Socket; use strict; my$socket = ; if...
Libopt.a 3.1x Error Logging Buffer Overflow Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/7433/info Libopt library has been reported prone to a buffer overflow vulnerability. It has been reported that several Libopt.a error logging functions, may be prone to buffer overflow vulnerabilities when handling...
Microsoft Windows 2000 - Subnet Bandwidth Manager RSVP Server Authority Hijacking Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8397/info A problem has been identified in the RSVP Server for Microsoft Windows 2000 that may allow an attacker to hijack management of the network. This could allow an attacker control of network Quality of Service...