56796 matches found
dreamMail e-mail client 4.6.9.2 - Stored XSS
No description provided by source. !/usr/bin/python ''' Author: loneferret of Offensive Security Product: dreamMail e-mail client Version: 4.6.9.2 Vendor Site: http://www.dreammail.eu Software Download: http://www.dreammail.eu/intl/en/download.html Tested on: Windows XP SP3 Eng. Tested on: Window...
SimpleNotes - Multiple Cross Site Scripting Vulnerabilities
No description provided by source...
QuicO 'photo.php' SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/31154/info QuicO is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...
Novell Netware XNFS.NLM STAT Notify Remote Code Execution
No description provided by source. Application: Novell Netware XNFS.NLM STAT Notify Remote Code Execution Vulnerability Platforms: Novell Netware 6.5 SP8 Exploitation: Remote code execution CVE Number: Novell TID: 5117430 ZDI: ZDI-12-07 PRL: 2012-01 Author: Francis Provencher Protek Research Lab'...
DmxReady News Manager 1.2 - SQL Injection Vulnerability
No description provided by source. Exploit Title: DmxReady News Manager v1.2 SQL Injection Vulnerability Google Dork: inurl:incnewsmanager.asp Date: 03.07.2011 Author: Bellatrix Software Link: http://www.dmxready.com/?product=news-manager Version: v1.2 Language: ASP Price : $99.97 Tested on:...
e107 website system 0.7.5 search.php Query String (PATH_INFO) Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/19997/info e107 CMS is prone to multiple cross-site scripting vulnerabilities because the application fails to sanitize user-supplied input. An attacker may levearge this issue to have arbitrary script code execute in the...
MS Windows GDI+ ICO File - Remote Denial of Service Exploit
No description provided by source. Author : kad Mail : kadathighsecudotcom Site : http://www.highsecu.com highsecu.ico - Microsoft GDI+ Integer division by zero flaw handling .ICO files http://www.exploit-db.com/sploits/06072007-CVE-2007-2237.zip milw0rm.com 2007-06-07...
Travelon Express CMS 6.2.2 - Multiple Vulnerabilities
No description provided by source...
WebCalendar 0.9.45 SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12581/info WebCalendar is affected by an SQL injection vulnerability. This issue exists because the application fails to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could...
Xoops 1.0/1.3.x BBCode HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8414/info Xoops BBCode has been reported prone to an HTML injection vulnerability. It has been reported that an attacker may inject malicious script into areas of Xoops where BBCode is rendered. This issue is due to a lac...
WebCalendar 1.0.1 - Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/15662/info WebCalendar is prone to multiple SQL injection vulnerabilities. This vulnerability could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other...
glibc-2.2 and openssh-2.3.0p1 exploits glibc => 2.1.9x
No description provided by source. Charles Stevenson [email protected] glibc-2.2 and openssh-2.3.0p1 Debian 2.3 , Redhat 7.0 This exploits is for glibc = 2.1.9x. [email protected] Edit this if you have a problem with path ssh=/usr/bin/ssh traceroute=/usr/sbin/traceroute...
NetArtMedia Real Estate Portal 1.2 - SQL Injection Vulnerability
No description provided by source. !R4Q!4N H4CK3R NetArtMedia Real Estate Portal v2.0 Sql Injection Vulnerability Website : http://www.netartmedia.net Founded By : Encrypt3d.M!nd Home Page : http://encrypt3d.blogspot.com Remote Sql Injections : Affected File : index.php PoC:...
Microsoft Internet Explorer 6 %USERPROFILE% File Execution Weakness
No description provided by source. source: http://www.securityfocus.com/bid/7826/info Microsoft Internet Explorer is prone to an issue which could permit an attacker to load a known, existing file in a user's temporary directory or possibly other directories in a user's profile. It is possible to...
Sun Java Calendar Deserialization Exploit
No description provided by source. $Id: javacalendardeserialize.rb 10389 2010-09-20 04:38:13Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...
BZFlag 1.7 g0 Reconnect Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7649/info BZFlag is prone to a denial of service vulnerability. Users that have established a session with BZFlag may cause a denial of service by reconnecting and flooding BZFlag ports with excessive amounts of data. Thi...
Wordpress plugin wordTube <= 1.43 (wpPATH) RFI Vulnerability
No description provided by source...
WordPress MU 1.2.2 - 1.3.1 'wp-includes/wpmu-functions.php' Cross-Site Scripting
No description provided by source. An attacker can exploit this issue by enticing an unsuspecting user to follow a malicious URI. The following proof of concept is available: curl -H Cookie: my cookies here -H Host: body onload=alertString.fromCharCode88,83,83...
TomatoCart - Backup Vulnerability
No description provided by source. ======================================================================================== | Title : TomatoCart Backup Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860...
RapidWareX 2.0.1 - (WebUI) CSRF Exploit
No description provided by source. RapidWareX v2.0.1 WebUI CSRF Exploit Author: l3D Sites: http://xraysecurity.blogspot.com, http://nullbyte.org.il IRC: irc://irc.nix.co.il Email: [email protected] RapidWareX v2.0.1 WebUI is prone to a post-authentication CSRF vulnerability, which allows the...
NextPage LivePublish 2.02 LPEXT.DLL Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/23270/info LivePublish is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...
Ziggurat Farsi CMS 'id' Parameter Unspecified Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/39311/info Ziggurat Farsi CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...
MicroTik RouterOS <= 3.2 SNMPd snmp-set Denial of Service Exploit
No description provided by source. / -------------------------------------------------------------------------- c ShadOS 2008 | || || | | |/ / | || | | / - | | ' | ' | / | ' \ - |||||||\|||, |||// hellknights.void.ru |/ .0x48k...
Max's File Uploader Shell Upload Vulnerability
No description provided by source. in the name of allah Exploit Title: Max's File Uploader Date: 15/1/2010 Author:S2K9 Site: www.soqor.net , www.xp10.me Software Link: http://www.phpf1.com/product/file-upload-script.html Tested on: windows xp sp2 Dork : use your head exploit : add u r shell uploa...
Opera 7.0 Error Message History Disclosure Weakness
No description provided by source. source: http://www.securityfocus.com/bid/6759/info It has been reported that Opera fails to ensure that a remote site has proper authorization before executing some methods used to access error messages stored in the Opera console. This issue is further...
MyBloggie 2.1.x Mybloggie_Root_Path Parameter Multiple Remote File Include Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/19449/info MyBloggie is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote files containing...
kolibri+ webserver 2 - Directory Traversal vulnerability
No description provided by source. Name : Kolibri+ Webserver 2 , Directory Traversal Vulnerability Author : Usman Saeed Company : Xc0re Security Reasearch Group Date : 06/09/09 Homepage : http://www.xc0re.net Download Page :...
Supernews <= 2.6.1 - SQL Injection Exploit
No description provided by source. ?php Exploit Title: Supernews = 2.6.1 SQL Injection Exploit Google Dork: intext:2003 - 2004 : SuperNews : Todos os direitos reservados Date: 2012/ Author: WhiteCollarGroup Software Link: http://phpbrasil.com/script/vT0FaOCySSH/supernews Version: 2.6.1 Tested on:...
ASP Classifieds SQL Injection
No description provided by source. Exploit Title: ASP Classifieds Sql Injection Date: 17/03/2012 Author: r45c4l Email: [email protected] Script url: http://preproject.com/pclasp/home/default.asp Version: N/A CVE : ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::...
SoftBiz Banner Exchange Script 1.0 insertmember.php city Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/18735/info Softbiz Banner Exchange is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before displaying it to users of the application. An attacker may...
phpMyAdmin 3.5.8 and 4.0.0-RC2 - Multiple Vulnerabilities
No description provided by source. waraxe-2013-SA103 - Multiple Vulnerabilities in phpMyAdmin =============================================================================== Author: Janek Vind waraxe Date: 25. April 2013 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-103.html...
EasyImageCatalogue 1.31 - addcomment.php d Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/28164/info onlinetools.org EasyImageCatalogue is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary...
Realmarketing CMS Multiple SQL Injection Vulnerabilities
No description provided by source. +Exploit Title: Realmarketing CMS System Sensitive Database Disclosure Vulnerability +Author : ^Xecuti0n3r + Date : 22.04.2011 + Hour : 13:37 PM + E-mail : xecuti0n3ryahoo.com + dork : intext:realweb.de inurl:default.php + Category : Web Apps SQli Choose any sit...
VLC 1.1.11 (libav) libavcodec_plugin.dll DoS
No description provided by source. print '\n\n' print ' VLC libav libavcodecplugin.dll DOS ' print ' Tested on Windows, VLC 1.1.11 ' print ' Author : nomnom ' print ' - shout outs to disable, jtm, welder and the csg ' print '\n\n' ''' read violation on 0x00000010 libavcodecplugin.dll:69c1c6d0 mov...
osCommerce 2.2 admin/products_attributes.php page Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the...
Webvizyon SayfalaAltList.ASP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18899/info Webvizyon is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...
LinksPro 'OrderDirection' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/33305/info LinksPro is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...
InoutMailingListManager <= 3.1 - Remote Command Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo InoutMailingListManager = 3.1 Command Execution Exploit + Login Retrieve + Advisory by BlackHawk [email protected] http://itablackhawk.altervista.org Thanks to rgod for the php code and Marty for the Love ; if $argc4...
Microsoft Outlook 2003Mail Client E-mail Address Verification Weakness
No description provided by source. source: http://www.securityfocus.com/bid/10323/info It has been reported that Microsoft Outlook mail client may be prone to a weakness that could allow a remote attacker to verify the validity of a recipient's e-mail address. This issue may result in a victim...
OpenServer 5.0.5/5.0.6,HP-UX 10/11,Solaris 2.6/7.0/8 rpc.yppasswdd Buffer Overrun
No description provided by source. source: http://www.securityfocus.com/bid/2763/info The rpc.yppasswdd server is used to handle password change requests from yppasswd and modify the NIS password file. A buffer overrun vulnerability has been discovered in the rpc.yppasswdd utility distributed by...
Seyon 2.1 rev. 4b i586-Linux Exploit
No description provided by source. !/usr/bin/perl c Copyright [email protected] / anno domani 2000 Seyon Exploit / Tested Version 2.1 rev. 4b i586-Linux Tested on: RedHat 4.0/5.1 Greets: scrippie, @HWA, grazer, mixter, pr0ix, s\ http://www.digit-labs.org/ || http://teleh0r.cjb.net/ $shellcode ...
CyberCMS Remote SQL Injection Vuln.
No description provided by source. Exploit Title: CyberCMS Remote SQL Injection Vuln. Date: 26/11/2009 Author: hc0de | hc0de.blogspot.comhttp://hc0de.blogspot.com Software Link: http://cyberfusion.ramx.org/cyber-cms Version: app version Tested on: Ubuntu Linux 9.04 CVE : PoC: +Target:...
Social Sites MyBB Plugin 0.2.2 - Cross Site Scripting
No description provided by source. Exploit Title: Social Sites MyBB Plugin 0.2.2 Cross Site Scripting Google Dork: inurl:usercp.php?action=socialsites Date: 13.12.2012 Exploit Author: s3m00t Vendor Homepage: http://mattrogowski.co.uk/mybb/ Software Link: http://mods.mybb.com/view/social-sites...
SGI IRIX <= 6.2 fsdump Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/355/info A number of vulnerabilities exist in the fsdump program included with Silicon Graphics Inc's IRIX operating system. Each of these holes can be used to obtain root privlilege. Variant 1: irix% /var/rfindd/fsdump...
Compaq Java Applet for Presario SpawnApp Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/557/info Some Compaq computers come with a Java applet called SpawnApp. This applet is used to run Compaq diagnostic utilities from the local hard drive when certain Compaq websites are viewed. The problem is that the...
RSS-aggregator 1.0 admin/fonctions/supprimer_tag.php IdTag Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/30016/info RSS-aggregator is prone to multiple SQL-injection and authentication-bypass vulnerabilities. A successful exploit could allow an attacker to compromise the application, access or modify data, exploit...
Clam AntiVirus <= 0.88.4 CHM Chunk Name Length DoS PoC
No description provided by source. !/usr/bin/perl Clam AntiVirus ClamAV CHM Chunk Name Length DoS Vulnerability Took Damian Put's poc and shortened it just a little. All credits to Damian Put pucikatgazeta.pl [email protected] www.overflow.pl /str0ke my $clam =...
DJ Studio Pro 5.1.6.5.2 SEH Exploit MSF
No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...
Portail Web Php 2.5.1 config/conf-activation.php site_path Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/27616/info Portail Web Php is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application...
Herberlin BremsServer 1.2.4 Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9491/info BremsServer has been reported to contain cross-site scripting vulnerabilities. This issue is due to the server failing to check or filter user strings that are sent to the server. An attacker may exploit these...