56796 matches found
Keynect Ecommerce SQL Injection Vulnerability
No description provided by source. ======================================================================================== | Title : SQL Injection Keynect Ecommerce | | Author : Arturo Zamora | | email : [email protected] | | DAte : 10/03/2011 | | Verified : yes | | Risk : High | |...
seagull 0.6.7 - Remote File Inclusion Vulnerability
No description provided by source. ================================= seagull-0.6.7 ===remote file inclode ================================= Exploit Title : seagull-0.6.7 ===remote file inclode Date: 2010-08-29 Author : FoX HaCkEr Contact : [email protected] SiTe : www.sec4ever.com Download:...
file sharing for net 1.5 - Directory Traversal file disclosure vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8513/info File Sharing for Net is said to be prone to a directory traversal vulnerability, potentially allowing users to disclose the contents of system files. The problem occurs due to the application failing to parse...
QwikiWiki 1.4/1.5 login.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/17064/info QwikiWiki is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have...
aoblogger 2.3 url BBcode XSS
No description provided by source. source: http://www.securityfocus.com/bid/16286/info AOblogger is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities...
WSN Forum <= 1.3.4 (prestart.php) Remote Code Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+:...
VLC Media Player <= 1.0.3 RTSP Buffer Overflow PoC (OSX/Linux)
No description provided by source. !/usr/bin/env python VLC Media Player = 1.0.3 RTSP Buffer Overflow PoC OSX/Linux Found By: DrIDE Tested On: OSX 10.6.2 v1.0.3 Tested On: Ubuntu 9 2.6.28-15-generic v0.9.9a Tested On: No Go on Windows header1 = ?xml version=\1.0\ encoding=\UTF-8?\n header1 +=...
OpenEMR <= 2.8.1 (fileroot) Remote File Include Vulnerability
No description provided by source. $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ OpenEMR = 2.8.1 Remote File Include Vulnerability $$ Script site: http://sourceforge.net/projects/openemr/ $$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$ $$ Find by:...
Webmin /file/show.cgi Remote Command Execution
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
IBM WebSphere 6.0 Faultactor Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/21018/info IBM WebSphere is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser...
easycms <= 0.4.2 - Multiple Vulnerabilities
No description provided by source. --==+================================================================================+==-- --==+ easyCMS = 0.4.2 Multiple Remote Vulnerabilitys +==-- --==+================================================================================+==-- Discovered By: t0pP8u...
ALLMediaServer 0.8 SEH Overflow Exploit
No description provided by source. Exploit Title: seh exploit, BOF Date: 04/07/2012 Exploit Author: motaz reda my E-mail: [email protected] Software Link: http://allmediaserver.org/ Version: ALLMediaServer 0.8 Tested On: Windows 7 ultimate !/usr/bin/python import sys, socket s =...
New-CMS 1.08 Multiple Local File Include and HTML-Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/38307/info New-CMS is prone to multiple local file-include vulnerabilities and an HTML-Injection vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the local file-include...
Joomla Module Camp26 Visitor Data 1.1 - Remote code Execution
No description provided by source. Joomla Module Camp26 Visitor Data 1.1 Remote code Execution ============================================================ - Discovered by : Chip D3 Bi0s - Email : [email protected] - Date : 2010-04-28 - Severity : 9/10 CVSS scored -----------------------------...
HTTPDX h_handlepeer() Function Buffer Overflow
No description provided by source. $Id: httpdxhandlepeer.rb 9934 2010-07-26 23:22:42Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
Wireshark <= 1.0.6 PN-DCP Format String Exploit PoC
No description provided by source. / THCX Wireshark = 1.0.6 PN-DCP format string bug POC ! autore: THCX Labs ! PN-DCP eithor standalone or tunneld thru DCE/RPC ! local open of pcapfile also working / include stdio.h include stdlib.h include errno.h char sploit=...
ATutor 1.4.3 tile.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/13972/info ATutor is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to...
freebsd/x86 chown 0:0 , chmod 6755 & execve /tmp/sh 44 bytes
No description provided by source. / FreeBSD shellcode chown/tmp/sh, 0, 0; chmod/tmp/sh, 06755; 44 bytes Claes M. Nyberg 20020209 [email protected], [email protected] / / void mainvoid asm xor %eax, %eax eax = 0 pushl %eax string ends with NULL pushl $0x68732f2f push 'hs//' //sh pushl...
Joomla Component com_bfsurvey_basic SQL Injection Vulnerability
Joomla Component combfsurveybasic SQL Injection Vulnerability + Author: FL0RiX + Greez : Wretch-x And All Friends + HomePage : http://oltan.org + Exploit; + null//and//1=0//union//select//concatusername,0x3a,passwordfl0rix,user,user//from//josusers-- F....N; Sen çok üstün zekaya sahip birisin,...
PHP-Nuke Advertising Module 0.9 Modules.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26406/info The PHP-Nuke Advertising Module is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allo...
Solaris sadmind Command Execution
No description provided by source. $Id: sadmindexec.rb 9583 2010-06-22 19:11:05Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
MyHelpDesk 20020509 SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4971/info It is reported that MyHelpDesk version 20020509 and earlier are vulnerable to SQL injection attacks. Data supplied by the remote user, via CGI parameters, is used directly as part of SQL statements. As input...
W-Agora 4.0 - add_user.php bn_dir_default Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/28366/info w-Agora is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the...
osCommerce 2.2/3.0 'oscid' Session Fixation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/34348/info osCommerce is prone to a session-fixation vulnerability. Attackers can exploit this issue to hijack a user's session and gain unauthorized access to the affected application. The following are vulnerable:...
Cooolsoft PowerFTP Server 2.0 3/2.10 Multiple Denial of Service Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/3595/info PowerFTP is a commercial FTP server for Microsoft Windows 9x/ME/NT/2000/XP operating systems. It is maintained by Cooolsoft. Multiple instances of denial of service vulnerabilities exist in PowerFTP's FTP daemon...
Power Daemon <= 2.0.2 (WHATIDO) Remote Format String Exploit
No description provided by source. / gexp-powerd.c Power Daemon v2.0.2 Remote Format String Exploit Copyright C 2005 Gotfault Security Bug found and developed by: barros and xgc Original Reference: http://gotfault.net/research/exploit/gexp-powerd.c / include getopt.h include sys/types.h include...
Live For Speed S2 - Duplicate Join Packet Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/36114/info Live For Speed S2 is prone to a remote denial-of-service vulnerability because the application fails to handle exceptional conditions. An attacker could exploit this issue to restart races on vulnerable servers...
iLister Listing Software LFI Vulnerability
No description provided by source. 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : iLister listing script LFi Vulnerability Date : july 4,2010 Critical Level : HIGH vendor URL :http://www.worksforweb.com/ Autho...
Jax Guestbook 3.31/3.50 - 'jax_guestbook.php' Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28523/info Jax Guestbook is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of a...
Michael Schatz Books 0.54/0.6 PostNuke Module Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5882/info Books is a module written for PostNuke. Reportedly, Books is prone to cross site scripting attacks. An attacker may exploit this vulnerability by enticing a victim user to follow a malicious link containing HTML...
PhpFood CMS 2.00 - SQL Injection Vulnerability
No description provided by source. PhpFood CMS restaurant.php?id= SQL Injection Vulnerability Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com / http://exploit-id.com / http://magelangcyber.web.id Date : 3 July, 2011 Software Information + Vendor :...
activePDF WebGrabber ActiveX Control Buffer Overflow
No description provided by source. $Id: activepdfwebgrabber.rb 10998 2010-11-11 22:43:22Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and term...
Dokeos <= 1.8.4 main/inc/lib/events.lib.inc.php Referer HTTP Header SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/27792/info Dokeos is prone to multiple input-validation vulnerabilities including five SQL-injection issues, one HTML-injection issue, three cross-site scripting issues, and one arbitrary-file-upload issue. Attackers can...
SPIP 1.8.3 Spip_login.PHP Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17423/info SPIP is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remot...
phpBB <= 2.0.19 XSS Remote Cookie Disclosure Exploit
No description provided by source. to be used with cookie stealer located here: http://www.milw0rm.com/id.php?id=1103 Make sure you change www.milw0rm.com to your domain. thnx. /str0ke Author: threesixthousan / As long as html is ON in the latest version of phpBB forums, several XSS attack vector...
MJGUEST 6.8 'guestbook.js.php' Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30438/info MJGUEST is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...
uTorrent DLL Hijacking Vulnerabilities
No description provided by source. Title: uTorrent =2.0.3 Dll Hijacking Local Exploits By: DrIDE Tested: Windows 7RC Note: These are additional DLL's with unsafe Load Paths Reference: http://www.exploit-db.com/exploits/14726/ If the payload .DLL file is renamed to any of these files and placed in...
DIMIN Viewer 5.4.0 GIF Decode Crash PoC
No description provided by source. PoC: http://www.exploit-db.com/sploits/23496.tar.gz CommandLine: C:\Program Files\DIMIN\Viewer5\imgview5.exe Symbol search path is: Invalid Symbol loading may be unreliable without a symbol search path. Use .symfix to have the debugger choose a symbol path. Afte...
SAFARI APPLE 4.0.5 (object tag) (JavaScriptCore.dll) DoS (Crash)
No description provided by source. ?php / TITLE: SAFARI APPLE 4.0.5 object tag JavaScriptCore.dll DoS Crash OS: WINDOWS XP SP3 DOWNLOAD: http://www.apple.com/es/safari/download/ AUTHOR: 3lkt3F0k4 CONTACT: 3lkt3F0k4ilovespamgmaililovespamcom -------------------------CRASH DUMP...
OpenBB 1.0.x myhome.php to Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/10214/info It has been reported that OpenBB is affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied user input. The SQL issues may...
Print n Share v5.5 iOS - Multiple Web Vulnerabilities
No description provided by source. Document Title: =============== Print n Share v5.5 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1154 Release Date: ============= 2013-12-06 Vulnerability Laboratory ID VL-ID:...
S.u.S.E. Linux <= 6.2,Slackware Linux 3.2/3.6 identd Denial of Service
No description provided by source. source: http://www.securityfocus.com/bid/587/info In the inetd.conf under certain distributions of SuSE Linux the in.identd daemon is started with the -w -t120 option. This means that one identd process waits 120 seconds after answering the first request to answ...
WinDVD7 IASystemInfo.DLL ActiveX Control Buffer Overflow
No description provided by source. $Id: windvd7applicationtype.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...
Zomplog CMS 3.9 - Multiple XSS/CSRF Vulnerabilities
No description provided by source. !--- Title: Zomplog CMS 3.9 Multiple XSS/CSRF Vulnerabilities Author: 10n1z3d 10n1z3datwdotcn Date: Sun 15 Aug 2010 04:33:33 PM EEST Vendor: http://www.zomp.nl/zomplog/ Download: http://www.zomp.nl/zomplog/downloads/zomplog/zomplog3.9.zip --- -= CSRF PoC 1 -...
Easy Chat Server 3.1 - Stack Buffer Overflow
No description provided by source. Exploit-DB Note: Must install to 'C:\Program Files\EFS Software\Easy Chat Server' Exploit Title: Easy Chat Server 3.1 stack buffer overflow Date: 9 May 2014 Exploit Author: superkojiman - http://www.techorganic.com Vendor Homepage: http://www.echatserver.com/...
FreeRadius < 1.1.8 - Zero-length Tunnel-Password DoS Exploit
No description provided by source. !/usr/bin/env python FreeRadius Packet Of Death Matthew Gillespie 2009-09-11 Requires RadiusAttr http://trac.secdev.org/scapy/attachment/ticket/92/radiuslib.py http://www.braindeadprojects.com/blog/what/freeradius-packet-of-death/ import sys from scapy.all impor...
Invision Power Board <= 2.1.5 (lastdate) Remote Code Execution Exploit
No description provided by source. !/usr/bin/perl Invision Power Board 2. commands execution exploit by RST/GHC vulnerable versions = 2.1.5 tested on 2.1.4, 2.0.2 coded by 1dt.w0lf RST/GHC http://rst.void.ru http://ghc.ru use IO::Socket; use Getopt::Std; getoptsl:h:p:d:f:v:; $host = $opth; $dir =...
XnView 1.98.8 GIF Image Processing Heap Overflow
No description provided by source. Application: XnView GIF Image Processing Heap Overflow Platforms: Windows Secunia: SA48666 PRL: 2012-18 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1 Introduction 2 Report Timeline 3...
GWExtranet Multiple Directory Traversal Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/26525/info GWExtranet is prone to multiple directory-traversal vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the...
ASP-Rider 1.6 Default.ASP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15617/info ASP-Rider is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could...