56796 matches found
photokorn 1.53/1.54 print.php cat Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/17683/info Photokorn is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker ...
Solaris dtspcd Heap Overflow
No description provided by source. $Id: heapnoir.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Mobipocket Reader 6.2 Build 608 Buffer Overflow
No description provided by source...
Aigaion <= 1.2.1 (DIR) Remote File Include Vulnerabilities
No description provided by source. Software:Web based bibliography management system Download link: http://sourceforge.net/projects/aigaion/ script:basicfunctions.php author: navairum...
BrudaNews <= 1.1 (admin/index.php) Remote File Include Vulnerability
No description provided by source. ============================================================================================== BrudaNews = v1.1 o Remote File Inclusion Exploit =============================================================================================== Critical Level :...
KDE Konqueror 3.x Embedded Image URI Obfuscation Weakness
No description provided by source. source: http://www.securityfocus.com/bid/10383/info It is reported that KDE Konqueror is prone to a URI obfuscation weakness that may hide the true contents of a URI link. The issue occurs when an image is contained within a properly formatted HREF tag. This...
Celestial Software AbsoluteTelnet 2.0/2.11 Title Bar Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6785/info A buffer overflow vulnerability was reported for AbsoluteTelnet. The vulnerability exists due to insufficient bounds checking performed when setting the title bar of the client. An attacker can exploit this...
Linux Kernel 2.6.x INVALIDATE_INODE_PAGES2 Local Integer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15846/info Linux kernel is prone to a local integer-overflow vulnerability. A successful attack can result in a kernel crash. Arbitrary code execution may be possible as well, but this has not been confirmed. All 2.6.x...
IBM AIX <= 4.2.1, Sun Solaris <= 7.0 LC_MESSAGES libc Buffer Overflow Vulnerability (5)
No description provided by source. source: http://www.securityfocus.com/bid/268/info A buffer overflow in libc's handling of the LCMESSAGES environment variable allows a malicious user to exploit any suid root program linked agains libc to obtain root privileges. This problem is found in both IBM...
CaupoShop Pro (2.x/ <= 3.70) Classic 3.01 Local File Include Vulnerability
No description provided by source. CaupoShop Pro 2.x/ = 3.70 Local File Include Vulnerability ----------------------------------------------------------------------------------------- Vuln Softwares : CaupoShop Pro 2.x CaupoShop Classic 3.01 CaupoShop Pro 3.70 Discovered By : Rami Salama Contact ...
Stormy Studios KNet 1.x Remote Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12671/info A remote buffer overflow vulnerability affects Stormy Studios KNet. This issue is due to a failure of the application to securely copy user-supplied input into finite process buffers. An attacker may leverage...
Top Auktion (news.php) SQL Injection Vulnerability
No description provided by source...
PHP-Update <= 2.7 (admin/uploads.php) Remote Code Execution Exploit
No description provided by source. !/usr/bin/perl rgod u fucking little piece of shit faggot. way to ruin a private exploit, scumbag use strict; use IO::Socket; use MIME::Base64; use Getopt::Std; my $app = PHP-Update 2.7; my $type = Remote Code Execution; my $author = undefined1; my $date =...
Hosting Controller <= 6.1 HotFix 2.2 Add Domain without Quota Exploit
No description provided by source. !-- Change url /str0ke -- form method=post name=addform action=http://url/admin/iis/IISActions.asp?ActionType=AddSite&hostcustid=1&hostingplans=1 table tr class=looplistingDark td width=19% class=ContentsWebsite Name : /td td width=73% class=contents input...
Clam Anti-Virus ClamAV 0.88.x UPX Compressed PE File Heap Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19381/info ClamAV is prone to a heap buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it to an insufficiently sized memory buffer. This issue occurs when the...
Car Site Manager csm/asp/listings.asp Multiple Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/21066/info Car Site Manager is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to stea...
PHP Address Book 7.0.0 - Multiple Vulnerabilities
No description provided by source. Advisory: PHP Address Book 7.0.0 Multiple security vulnerabilities Advisory ID: SSCHADV2012-013 Author: Stefan Schurtz Affected Software: Successfully tested on PHP Address Book 7.0.0 Vendor URL: http://sourceforge.net/projects/php-addressbook/ Vendor Status:...
Multi Vendor Mall (pages.php) SQL Injection Vulnerability
No description provided by source. ============================================================ Multi Vendor Mall pages.php SQL Injection Vulnerability ============================================================ + Multi Vendor Mall pages.php SQL Injection Vulnerability + By NewbieCampuz +...
HP Data Protector Backup Client Service - Directory Traversal
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = GreatRanking include Msf::Exploit::Remote::Tcp include Msf::Exploit::EX...
joomla component mp3 allopass 1.0 - Remote File Inclusion Vulnerability
No description provided by source. commp3allopass joomla component Remote File Include Vulnerability Component : commp3allopass Download file : http://www.joomlaratings.com Dicovered by : NoGe Contact : [email protected]...
com_loudmouth Mambo Component <= 4.0j - Include Vulnerability
No description provided by source. Bug Found by h4ntu http://h4ntu.com batamhacker crew Another Mambo component remote inclusion vulneribility download : http://mamboxchange.com/frs/download.php/7911/comloudmouth-4.0j.zip bug found in file abbc.class.php : include...
CuteNews 1.4.1 - Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/17700/info CuteNews is prone to multiple cross-site scripting vulnerabilities. These issues are due to the application's failure to properly sanitize user-supplied input. An attacker may leverage these issues to have...
Tiny Portal 1.0 - 'shouts' Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28630/info Tiny Portal is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...
Apache Tomcat 6.0.10 Documentation Sample Application Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/24058/info Apache Tomcat's documentation web application includes a sample application that is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker...
Android 'content://' URI - Multiple Information Disclosure Vulnerabilities
No description provided by source. ?php / Description: Android 'content://' URI Multiple Information Disclosure Vulnerabilities Bugtraq ID: 48256 CVE: CVE-2010-4804 Affected: Android 2.3.4 Author: Thomas Cannon Discovered: 18-Nov-2010 Advisory:...
websvn <= 2.0 (xss/fh/ce) Multiple Vulnerabilities
No description provided by source. WebSVN = 2.0 Multiple Vulnerabilities October 20, 2008 Vendor : Tim Armes URL : http://websvn.tigris.org Version : WebSVN = 2.0 Risk : Multiple Vulnerabilities Description: WebSVN is an online SVN repository viewer. The description taken from the project website...
ActiveWeb Contentserver 5.6.2929 CMS Client Side Filtering Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/24898/info activeWeb contentserver is prone to a client-side input-validation vulnerability because the application fails to sufficiently sanitize user-supplied data. An attacker can exploit these input-validation...
polypager <= 1.0rc2 (sql/xss) Multiple Vulnerabilities
No description provided by source. ================================================================= PolyPager = 1.0rc2 SQL/XSS Multiple Remote Vulnerabilities ================================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O...
G5 Scripts Guestbook PHP 1.2.8 - XSS Vulnerability
No description provided by source. :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title = Guestbook PHP XSS Vulnerability Author = Valentin Hoebel Contact = [email protected] :::::::::::::::::::::::::::::::::::::: 0x2...
MojoClassifieds 2.0 - Remote Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print \n; print Viva IslaMe Viva IslaMe \n; print MojoClassifieds Blind SQL Injection Exploit \n; print mojoClassified.cgi mojo \n; print Author: Mr.SQL \n; print EMAIL : [email protected] \n; print \n;...
AIX 4.3.3/5.x Getlvcb Command Line Argument Buffer Overflow Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/9905/info getlvcb has been reported to be prone to a buffer overflow vulnerability. When an argument is passed to the getlvcb utility, the string is copied into a reserved buffer in memory. Data that exceeds the size of t...
Facebook for iPhone persistent XSS DoS
No description provided by source. Facebook for iPhone persistent XSS Facebook application for iPhone is not encoding special characters in Notes detail Adding this code in a note will freeze application: scriptvar x = 'x'; while 1 document.write'iframe src=tel:'+x+'/iframe'; x = x + 'x'; /script...
BulletScript MailList bsml.pl Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9311/info It has been reported that BulletScript MailList may be prone to an information disclosure vulnerability that may allow remote attackers to gain access to sensitive information. The issue is reported to be presen...
Microsoft IIS ASP - Stack Overflow Exploit (MS06-034)
No description provided by source. include stdio.h include windows.h / Microsoft IIS ASP Stack Overflow ExploitMS06-034 by cocoruderfrankruderathotmail.com,2006/7/13 page:http://ruder.cdut.net/default.asp successfully test on Windows 2000 Server SP4+IIS5.0, On Windows 2003 Server+IIS6.0,because t...
PHP Football 1.0 - Cross Site Scripting Vulnerability
No description provided by source. ======================================================================================== | Title : PHP Football Version : 1.0 Cross Site Scripting Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El...
Viscom Software Movie Player Pro SDK ActiveX 6.8
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
Digital Ultrix 4.0/4.1 /usr/bin/chroot Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17/info By default, /usr/bin/chroot is improperly installed in Ultrix versions 4.0 and 4.1. Anyone can execute /usr/bin/chroot this can lead to system users to gain unauthorized privileges. $ mkdir /tmp/etc $ echo...
McGallery 1.0/1.1/2.2 index.php language Parameter Traversal Local File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/15845/info mcGallery PRO is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabiliti...
Alkacon OpenCms 7.0.3 - 'tree_files.jsp' Cross-Site Scripting Vulnerability
No description provided by source...
phpBB Links MOD 1.2.2 - Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl print q phpBB = 2.0.22 - Links MOD = v1.2.2 Remote SQL Injection Exploit Bug discovered by Don Dork: allinurl:links.php?t=search or: Links MOD v1.2.2 by phpBB2.de SQL INJECTION: Exploit:...
awzMB <= 4.2 beta 1 Multiple Remote File Inclusion Vulnerabilities
No description provided by source. \|/// \ - - // Xmors Underground Group @ @ ----oOOo---oOOo-------------------------------------------------- Portal : awzMB system Version 4.2 beta 1 Guestbook/Weblog/Contact Download : http://downloads.sourceforge.net/awzmb/awzmb4.2beta1.zip Author : S.W.A.T...
Microsoft IIS 5.1 WebDAV HTTP Request Source Code Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14764/info Microsoft IIS is reportedly affected by a remote script source disclosure vulnerability. A successful attack causes the Web server to present the requested file as a plain text file and subsequently disclosing...
Joomla! iF Portfolio Nexus 'controller' Parameter Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/37473/info The iF Portfolio Nexus 'comifnexus' component for Joomla! is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attack...
DB Top Sites 1.0 - Remote Command Execution Exploit
No description provided by source. ?php / ------------------------------------------------------------ + About DB Top Sites v1.0 Remote Command Execution Exploit Script homepage : http://www.jnmsolutions.co.uk/topsites/ Author : SirGod Thanks to : Nytro Website : www.mortal-team.org...
Microsoft IIS 5.0 WebDAV Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2453/info Microsoft IIS is subject to a denial of service condition. WebDAV contains a flaw in the handling of certain malformed requests, submitting multiple malformed WebDAV requests could cause the server to stop...
Novus 1.0 Buscar.ASP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/25828/info Novus is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser...
CcMail <= 1.0.1 Insecure Cookie Handling Vulnerability
No description provided by source. --==+================================================================================+==-- --==+ CcMail = 1.0.1 Insecure Cookie Handling +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz...
Microsoft Internet Explorer 8 File Download Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/34478/info Microsoft Internet Explorer is prone to a remote denial-of-service vulnerability. Successful exploits can allow attackers to hang the affected browser, resulting in denial-of-service conditions. /usr/bin/env...
Joomla Component com_races Blind SQL Injection Vulnerability
No description provided by source. !/usr/bin/php ?php inisetmaxexecutiontime,0; printr' xDork:inurl:index.php?option=comraces raceId xJoomla comraces raceId Blind SQL Injection Exploit x Usage: Cristal.php http://url/index.php?option=comraces&task=result&raceId=272 '; if $argc 1 $url = $argv1; $r...
SchoolCMS Persistent XSS
No description provided by source. Title: SchoolCMS Persistant XSS. Date: 03/12/12 Author: VipVince Vendor: www.poweritschools.com Google Dork: /oldcore/cal/eventform.php Tested on: Windows. This is a Persistant XSS used in the software by many schools. About 225 results 0.21 seconds The...