56796 matches found
Joomla Component S5 Clan Roster com_s5clanroster Local File Inclusion Vulnerability
No description provided by source. ================================================================================================================== o Joomla Component S5 Clan Roster Local File Inclusion Vulnerability Software : coms5clanroster Vendor : http://www.shape5.com Author : AntiSecurit...
2WIRE DSL Router (xslt) - Denial of Service Vulnerability
No description provided by source. 2WIRE ROUTER DSL DENIAL OF SERVICE VULNERABLE Model: 1701HG, 1800HW, 2071HG, 2700HG Gateway Firmware: v3.17.5, 3.7.1, 4.25.19, 5.29.51 The DSL connection of some 2wire routers is droped when a request to /xslt with the value %X where X is any non alfa numeric...
Zblast 1.2 - Local Username Buffer Overrun Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7836/info A vulnerability has been reported for zblast, an svgalib-based game. The problem occurs when copying data from a user-supplied environment variable into a static memory buffer. By storing excessive data within t...
FileCOPA FTP Server 5.01 'NOOP' Command Denial Of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/36397/info FileCOPA FTP Server is prone to a denial-of-service vulnerability. A successful exploit may allow attackers to halt the server process, resulting in a denial-of-service condition. FileCOPA FTP Server 5.01 is...
Watson Management Console 4.11.2.G Directory Traversal Vulnerability
No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register class TestPOCPOCBase: vulID = '77733' ssvid version = '1.0' author = 'GX001' vulDate = '' createDate = '2016-03-25'...
Arab Portal System 2.0 download.php title Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/17285/info ArabPortal System is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...
Max's Image Uploader Shell Upload Vulnerability
PHP F1 Max's Image Uploader 1.0版本的maxImageUpload/index.php中存在无限制文件上传漏洞。 当Apache未被设置来处理具有pjpeg或jpeg扩展名的拟态文件时，远程攻击者可以通过上传具有一个pjpeg或jpeg扩展名的文件，执行任意代码，并借助对original/的一个直接请求来访问该文件。 问题在maxImageUpload.class.php中的 function uploadImage $result = true; if !isset$POST'submitBtn' $this-showUploadForm; else $m...
Orca Knowledgebase 2.1 Knowledgebase.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15637/info Orca Knowledgebase is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation...
E-Xoopport 3.1 - eCal display.php (katid) SQL Injection Exploit
No description provided by source. ? / Vis Intelligendi http.//vis-intelligendi.co.cc E-Xooport 3.1 SQL Injection Exploit 01 Mq on/off doesn't matter bug details and explanation on http://vis-intelligendi.co.cc search e-xooport E-Xoops is a xoops-based cms. Many modules are bugged, in this case...
Cometchat Application - Multiple Vulnerabilities
No description provided by source. Exploit-DB Note 20-02-2013: A security patch appears to have been released to address the issue: http://www.cometchat.com/blog/cometchat-critical-security-update/ Info: All Cometchat Application Multiple Vulnerabilities Cometchat is a application which can be us...
KC Wiki 1.0 - simplest/wiki.php page Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/28074/info KC Wiki is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote files containing...
Invision Power Board 3.3.0 - Local File Inclusion
No description provided by source...
siemens automation license manager <= 500.0.122.1 - Multiple Vulnerabilities
No description provided by source. Luigi Auriemma Application: Siemens Automation License Manager http://support.automation.siemens.com/WW/llisapi.dll?func=cslib.csinfo&lang=en&siteid=cseus&aktprim=0&extranet=standard&viewreg=WW&objid=10805384&treeLang=en Versions: = 500.0.122.1 Platforms: Window...
nodez <= 4.6.1.1 mercury Multiple Vulnerabilities
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo Nodez 4.6.1.1 Mercury possibly prior versions multiple vulnerabilities\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n\r\n; / software: site: nodez.greentinted.com/ description:...
Winamp 5.5.8.2985 - Multiple Buffer Overflows
No description provided by source. Source: http://aluigi.org/adv/winamp1-adv.txt Luigi Auriemma Application: Winamp http://www.winamp.com Versions: = 5.5.8.2985 aka v5.581 Platforms: Windows Bugs: A integer overflow in inmkv B integer overflow in innsv C integer overflow in inmidi D buffer-overfl...
ISDN4Linux 3.1 IPPPD Device String SysLog Format String Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/5437/info isdn4linux is a freely available, open source package of isdn compatibility tools. It is available for Linux operating systems. isdn4linux contains a format string vulnerability in the ipppd utility. In some...
WANGKONGBAO CNS-1000 UTM IPS-FW Directory Traversal
No description provided by source. Exploit Title: WANGKONGBAO CNS-1000 and 1100 Network Security Platform UTM Directory Traversal Date: 7/2/2012 Exploit Author: Dillon Beresford Vendor Homepage: http://www.wangkongbao.com/products.html Version: CNS-1000 and 1100 The issue is in the...
nginx 0.6.38 - Heap Corruption Exploit
No description provided by source. !/usr/bin/env python Exploit Title: nginx heap corruption Date: 08/26/2010 Author: aaron conole [email protected] Software Link: http://nginx.org/download/nginx-0.6.38.tar.gz Version: = 0.6.38, = 0.7.61 Tested on: BT4R1 running nginx 0.6.38 locally CVE: 2009-26...
Chimera Web Portal 0.2 modules.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/16113/info Chimera Web Portal is prone to multiple input validation vulnerabilities. The issues include cross-site scripting and SQL injection vulnerabilities. These issues are due to a failure in the application to...
Same Team E-shop manager - SQL Injection Exploit
No description provided by source...
Media Gallery for Geeklog <= 1.4.8a Remote File Inclusion Vulnerability
No description provided by source. Media Gallery =v1.4 Remote file inclusion Download script : http://switch.dl.sourceforge.net/sourceforge/mediagallery/mediagallery-1.4.6-1.3.11.tar.gz Thanks Str0ke Exploit : http://victime.com/mediagallery/publichtml/maint/ftpmedia.php?MGCONFpathhtml= shell.txt...
Gemitel 3.50 Affich.PHP Remote File Include Command Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10156/info A vulnerability has been identified in the handling of input by Gemitel. Because of this, it may be possible for a remote user to gain unauthorized access to a system using the vulnerable software. It is possib...
GoodTech Telnet Server NT 2.2.1 DoS Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/862/info GoodTech Telnet Server NT 2.2.1 is vulnerable to a remote denial of service attack due to an unchecked buffer. If 23870 or more characters are entered at the username prompt, the software will crash. GoodTech's...
PHP Realty 'dpage.php' SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30678/info PHP Realty is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise th...
OpenNMS 1.5.x HTTP Response Splitting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/31577/info OpenNMS is prone to an HTTP response-splitting vulnerability because it fails to sufficiently sanitize user-supplied data. Attackers can leverage this issue to influence or misrepresent how web content is serve...
CrisoftRicette 1.0 Cookbook.PHP Remote File Include Vulnerability
No description provided by source...
4Images <= 1.7.1 (Local Inclusion) Remote Code Execution Exploit
No description provided by source. ?php ----4images171inclxpl.php 6.45 26/02/2006 4Images = 1.7.1 remote commands execution through arbitrary local inclusion coded by rgod site: http://retrogod.altervista.org - this works regardless of magicquotesgpc settings Sun-Tzu: Having doomed spies, doing...
Valid tiny-erp <= 1.6 - SQL Injection Vulnerability
No description provided by source. ------------------------------------------------------------------------ Valid tiny-erp = 1.6 SQL Injection Vulnerability ------------------------------------------------------------------------ author............: muuratsalo Revshell.com contact...........:...
phpMyBackupPro - Arbitrary File Download
No description provided by source. Arbitrary File Download in phpMyBackupPro Name Arbitrary File Download in phpMyBackupPro Systems Affected phpMyBackupPro v 2.1 and possibly earlier versions site http://www.phpmybackuppro.net Author Amol Naik amolnaik4atgmail.com Date 16/11/2009 1. OVERVIEW...
UPC Ireland Cisco EPC 2425 Router / Horizon Box
No description provided by source. Exploit Title: UPC Ireland Cisco EPC 2425 Router / Horizon Box Google Dork: Date: 11/12/2013 Author: Matt O'Connor / Planit Computing Advisory Link: http://www.planitcomputing.ie/upc-wifi-attack.pdf Version: Category: Remote Tested on: Cisco EPC 2425 / Horizon B...
Wireshark ZigBee ZCL Dissector Infinite Loop Denial of Service
No description provided by source. Source: http://www.securityfocus.com/bid/44986/info Wireshark is prone to a remote denial-of-service vulnerability because it fails to properly handle certain types of packets. Attackers can exploit this issue to cause the application to enter an infinite loop...
GENU CMS 2012.3 - Multiple SQL Injection Vulnerabilities
No description provided by source. Title: ====== GENU CMS 2012.3 - Multiple SQL Injection Vulnerabilities Date: ===== 2012-04-30 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=538 VL-ID: ===== 538 Introduction: ============= GENU is a Content Management System written...
Digital Unix 4.0 MSGCHK MH_PROFILE Symbolic Link Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3320/info The msgchk utility under certain versions of Digital Unix contains an information disclosure vulnerability which could yield root privilege. Because msgchk fails to check file permissions before opening user...
Half-Life 1.1 Client Server Message Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6582/info It has been reported that the Half-Life client contains a format string vulnerability. When receiving messages from an administrator through the adminmod add-on package, the client does not properly handle input...
WorldMail imapd 3.0 SEH overflow (egg hunter)
No description provided by source. !/usr/bin/python import sys import socket Exploit Title: WorldMail imapd 3.0 SEH overflow egg hunter Tested on: XP SP3 en-us Author: TheXero Website: www.thexero.co.uk http://www.nullsecurity.net Check for parameters if lensys.argv != 3: print Usage: + sys.argv0...
Mitra Informatika Solusindo Cart - 'p' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28096/info Mitra Informatika Solusindo Cart is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...
CCProxy <= 6.2 - Telnet Proxy Ping Overflow
No description provided by source. $Id: ccproxytelnetping.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms o...
VPOPMail 0.9x vpopmail.php Remote Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7063/info A vulnerability has been reported for VPOPMail that may allow attackers to execute arbitrary commands on a vulnerable system. The vulnerability exists due to insufficient sanitization of user-supplied input. As...
joomla component gamesbox com_gamesbox 1.0.2 - (id) SQL Injection Vulnerability
No description provided by source...
KDE 1.1/1.1.1/1.2/2.0 kscd SHELL Environmental Variable Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1206/info Some linux distributions S.u.S.E. 6.4 reported ship with kscd a CD player for the KDE Desktop sgid disk. kscd uses the contents of the 'SHELL' environment variable to execute a browser. This makes it possible to...
MS IE 4.1/5.0 Registration Wizard Buffer Overflow
No description provided by source. Microsoft Internet Explorer 4.1/5.0 for Windows 95/Windows NT 4,Windows 98 Registration Wizard Buffer Overflow Vulnerability source: http://www.securityfocus.com/bid/671/info There is a buffer overflow in the Internet Explorer Registration Wizard control...
Games Script (Galore) Backup Dump Vulnerability
No description provided by source...
BRS WebWeaver 1.0.7 ISAPISkeleton.dll Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9516/info BRS WebWeaver has been reported prone to a cross-site scripting vulnerability. An attacker may create a malicious link to the vulnerable server that includes embedded HTML and script code. If this link is follow...
w-Agora Forum 4.2.1 - Arbitrary File Upload Exploit
No description provided by source. ?php / Title .......................: w-Agora Forum 4.2.1 Remote File Upload Exploit Site ........................: http://www.w-agora.com/en/download.php Version .....................: 4.2.1 Author ......................: Treasure Priyamal Site...
MIPS Little Endian Shellcode
No description provided by source. Disassembled MIPS Little Endian Shellcode Shellcode was designed for ACSD exploit on the ASUS RT-AC66U SOHO router. CVE: CVE-2013-4659 Written by Jacob Holcomb, Security Analyst @ Independent Security Evaluators Blog: http://infosec42.blogspot.com Company Websit...
Procentia IntelliPen 1.1.12.1520 (Data.aspx, value param) - Blind SQL Injection
CVE: CVE-2014-2043 Vendor: Procentia Product: IntelliPen Affected version: 1.1.12.1520 Fixed version: 1.1.18.1658 Reported by: Jerzy Kramarz Details: SQL injection has been found and confirmed within the software as an authenticated user. A successful attack could allow an authenticated attacker ...
XMB Forum 1.8 BBcode align Tag XSS
No description provided by source. source: http://www.securityfocus.com/bid/9726/info XMB Forum has been reported prone to multiple cross-site scripting, HTML injection and SQL injection vulnerabilities. The issues present themselves due to insufficient sanitization of remote user supplied data. ...
Joomla! 'com_mygallery' Component - 'cid' Parameter SQL Injection Vulnerability
No description provided by source. Bugtraq ID: 37121 Class: Input Validation Error Published: Feb 21 2008 12:00AM Updated: Nov 24 2009 10:15PM Credit: S@BUN Vulnerable: Joomla commygallery 0 The 'commygallery' component for Joomla! is prone to an SQL-injection vulnerability because it fails to...
MF Piadas 1.0 Admin.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18676/info MF Piadas is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of ...
PHPKit 1.6 Include.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8960/info PHPKIT is reported to be prone to a cross-site scripting vulnerability. This is due to insufficient sanitization of HTML from URI parameters, which will be displayed in web pages that are dynamically generated b...