56796 matches found
fsboard 2.0 - Directory Traversal vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14111/info FSboard is prone to a directory traversal vulnerability. This could allow a remote attacker to read files outside the Web root. This could only be used to access files to which the Web server has permission. Al...
Alan Ward A-Cart 2.0 category.asp catcode Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/9997/info Reportedly A-Cart is prone to multiple input validation vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied input prior to its use in SQL queries and generati...
MicroP 0.1.1.1600 - 'mppl' Buffer Overflow Vulnerability
No description provided by source. Exploit Title: MicroP malicious MPPL Buffer Overflow Date: 08/23/10 Author: james AT learnsecurityonline DOT com Software Link: http://sourceforge.net/projects/microp/ Version: 0.1.1.1600 Tested on: Windows XP SP3 EN ! /usr/bin/evn ruby windows/exec - 144 bytes...
cPanel 11.x - scripts2/knowlegebase issue Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/29125/info cPanel is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in...
lcdproc lcdd 0.x/4.x Multiple Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/10085/info LCDproc Server LCDd has been reported to be prone to multiple remote vulnerabilities. The first issue is reported to exist in the parseallclientmessages function of parse.c, and is due to a lack of sufficient...
interphoto gallery - Multiple Vulnerabilities
No description provided by source. ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | Day 6 0day | | | | || / \ || | | | || ||// \/|/ ''' - Title : InterPhoto Gallery Multiple Remote Vulnerabilities - Affected Version : = 2.4.0 - Vendor Site :...
sandbox 2.0.3 - Multiple Vulnerabilities
No description provided by source. Sandbox 2.0.3 Multiple Remote Vulnerabilities Name Sandbox Vendor http://www.iguanadons.net Versions Affected 2.0.3 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-07-07 X. INDEX I...
S-CMS <= 2.0b3 (username) Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...
PhotoPost PHP 4.6.5 (ecard.php) SQL Injection Vulnerability
No description provided by source. PhotoPost PHP 4.6.5 ecard.php?ecard SQL Injection Vulnerability Author : CoBRa21 Author Web Page : http://www.ipbul.org Dork: Powered by: PhotoPost PHP 4.6.5 Sql Injection: http://localhost/path/ecard.php?ecard=418337 Sql...
Winamp <= 5.06 IN_CDDA.dll Remote Buffer Overflow Exploit
No description provided by source. / Credits go to the author How to fix and study the bug: - The cdda library only reserves 20 bytes for names when files are .cda - run Winamp with ollye - when loaded locate and break at: 10009BBB 8D4C24 20 LEA ECX,DWORD PTR SS:ESP+20 10009BBF 84C0 TEST AL,AL...
Barracuda Control Center 620 - Multiple Web Vulnerabilities
No description provided by source. Title: ====== Barracuda Control Center 620 - Multiple Web Vulnerabilities Date: ===== 2011-12-21 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=32 VL-ID: ===== 32 Introduction: ============= Barracuda Networks - Worldwide leader in...
Mozilla Firefox <= 1.5.0.3 (Loop) Denial of Service Exploit
No description provided by source. html titleBug/Title body script language=JavaScript1.2 type=text/javascript function MainPageBookmark title=Gianni Amato; url=http://www.gianniamato.it/; if window.sidebar window.sidebar.addPaneltitle, url,; else if window.external window.external.AddFavorite ur...
CA Internet Security Suite - 'UmxEventCli.dll' ActiveX Control Arbitrary File Overwrite Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/29406/info A Computer Associates Internet Security Suite ActiveX control is prone to a vulnerability that lets attackers overwrite files with arbitrary, attacker-controlled content. The issue occurs because the control...
Electronic Engineering Tool (EE TOOL) <= 0.4.1 File Include Vulnerability
No description provided by source. Script Download: http://kent.dl.sourceforge.net/sourceforge/eetool/eetool-0.4-1.tar.gz Code: if$type == 1 $url = $cgipath . ipcalc.cgi; else $url = $cgipath . ipcalc.cgi?host=$host&mask1=$mask1&mask2=$mask2; nclude$url;...
IBM Access Support ActiveX Control Buffer Overflow
No description provided by source. $Id: ibmegathgetxmlvalue.rb 10998 2010-11-11 22:43:22Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and term...
Mediacoder 0.7.3.4682 - Universal Buffer Overflow (SEH)
No description provided by source. Exploit Title : Mediacoder v0.7.3.4682 universal buffer overflow SEH tested on windows xp SP 3 FR download : http://www.dodownload.com/video+multimedia/play+video/mediacoder.html Author: MadjiX Dz8 HotmaiL cOm Greets:Bibi-info , His0k4 where are you : Hard luck...
Oracle 10g Multiple Remote Privilege Escalation Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/38115/info Oracle Database is prone to multiple remote privilege-escalation issues because it fails to properly restrict access to certain packages. The attacker can exploit these issues to escalate their privileges to DB...
W-Agora 4.1.6 a redir_url.php key Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/11283/info Multiple vulnerabilities are reported to affect the application. These issues arise due to insufficient sanitization of user-supplied data. A remote attacker may leverage these vulnerabilities to carry out SQL...
DigiAffiliate <= 1.4 (Auth Bypass) SQL Injection Vulnerability
No description provided by source. - DigiAffiliate = V1.4 Auth bypass SQL Injection Vulnerability - Discovered By : d3b4gd - Greetz : All my freind Use these information to bypass adminlogin admin : ' or ' 1=1 password: ' or ' 1=1 Live demo : http://www.digiappz.com/digiaffiliate2/login.asp...
Python 1.5/1.6/2.0/2.1.x Pickle Class Constructor Arbitrary Code Execution
No description provided by source. source: http://www.securityfocus.com/bid/5257/info Python is an open source, object oriented programming language. The Python Pickle module is provided to convert object variables into a serialized form pickling, and later recover the data back into an object...
Microsoft Windows 2003/XP ReadDirectoryChangesW Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/22664/info Microsoft Windows is prone to a local information-disclosure vulnerability. A local attacker may leverage this issue to gain access to potentially sensitive information about user permissions and accessed files...
Discuz! 1.0 'referer' Parameter Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/37562/info Discuz! is prone to an cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...
MASA2EL Music City 1.0 - Remote SQL Injection Vulnerability
No description provided by source. :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: Exploit Title : MASA2EL Music City Remote Sql Injection Vulnerability Author: alnjm33 Software Link: http://www.masa2el.com/index.php?go=dl&type=d&id=4 Tested on: Version 1.0 My...
OroHYIP SQL Injection Vulnerability
No description provided by source. 1 1 0 I'm L0rd CrusAd3r member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:OroHYIP SQL Vulnerable Vendor...
PsyBNC 2.3 Oversized Passwords Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4570/info PsyBNC is a freely available, open source IRC bouncing server. It is available for the UNIX and Linux operating systems. Under some circumstances, it is possible for a remote user to crash a vulnerable server...
Conxint FTP 2.2.603 Multiple Directory Traversal Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/21081/info Conxint is prone to multiple directory-traversal vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow a remote attacker to access any file...
Comersus Cart 4.0/5.0 Comersus_Search_Item.ASP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13125/info Comersus Cart is affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly validate user-supplied input. An attacker may leverage this issue to have arbitra...
cFTP <= 0.1 (r80) Arbitrary File Upload
No description provided by source. ?php Exploit Title: cFTP = 0.1 r80 Arbitrary File Upload Date: 2011-07-29 Author: leviathan vulnerability discovered by Simon Leblanc : https://code.google.com/p/clients-oriented-ftp/issues/detail?id=78 Software Link:...
QNX RTOS 4.25 dumper Arbitrary File Modification Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4904/info When creating memory dump files, the QNX RTOS debugging utility 'dumper' follows symbolic links. It also sets ownership of the file to the userid of the terminated process. It is possible for malicious local...
AdaptCMS 2.0.0 Beta (init.php) Remote File Inclusion Vulnerability
No description provided by source. / / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID...
WFChat 1.0 Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7147/info An information disclosure vulnerability has been reported for WFChat. The vulnerability will result in the disclosure of authentication information to a remote attacker. Information obtained in this manner may...
BPHolidayLettings 1.0 - Blind SQL Injection
No description provided by source. x========================================================================================================================================x | AntiSecuritydotorg |...
mutiple timesheets <= 5.0 - Multiple Vulnerabilities
No description provided by source. --==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ Mutiple Timesheets = 5.0 - Multiple Remote Vulnerabilities +==-- --==+====================================================================================+==-- +...
S40 CMS 0.4.1 Change Admin Passwd CSRF Exploit
No description provided by source...
NetGear WG311v1 Wireless Driver 2.3.1 - 10 SSID Heap Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/21251/info NetGear WG311v1 Wireless devices are prone to a heap-based buffer-overflow vulnerability because the driver fails to properly bounds-check user-supplied data before copying it into an insufficiently sized memor...
DecisionTools SharpGrid ActiveX Control RCE
No description provided by source...
PBBoard 2.1.4 - CMS Multiple Vulnerabilities
No description provided by source. Title: ====== PBBoard v2.1.4 CMS - Multiple Web Vulnerabilities Date: ===== 2012-06-26 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=623 VL-ID: ===== 625 Common Vulnerability Scoring System: ==================================== 4.5...
Ractive Popper 1.41 Childwindow.Inc.PHP Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19972/info Ractive Popper is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to compromise the application and the...
Fusion SBX <= 1.2 - Remote Command Execution Exploit
No description provided by source. / Fusion SBX = 1.2 exploit sileFSBXxpl This exploit use vulnerability found into Fusion SBX and create new variable and call it with a malicious function stored in config.php. This exploit utilize injection of three diverse procedures for execution of arbitrary...
Joomla Component Card View JX XSS Vulnerabilities
No description provided by source. :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title = Joomla Component Card View JX XSS Vulnerabilities Author = Valentin Hoebel Contact = [email protected]...
Microsoft Windows NT 4.0/SP1/SP2/SP3/SP4/SP5/SP6 Services.exe Denial of Service (2)
No description provided by source. source: http://www.securityfocus.com/bid/754/info A specially crafted packet can cause a denial of service on an NT 4.0 host, rendering local administration and network communication nearly unusable. This attack will crash the services executable, which in turn,...
Web Slider 0.6 - 'slide' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/29296/info Web Slider is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise th...
Squirrelcart <= 1.x.x (cart.php) Remote File Inclusion Vulnerability
No description provided by source. Title : Squirrelcart = 1.x.x Remote File Inclusion URL : http://squirrelcart.com/ Google Dork : inurl:/squirrelcart/ -squirrelcart.com Author : ShaiMagal Vulnerable file : popupwindow.php - config.php, line 13 - $siteisproot = blablabla; Exploit :...
KMPlayer Denial of Service All Versions
No description provided by source. Title : KMPlayer PlayList M3U Denial Of Service PoC All Versions Author : Jigsaw Abdelmorite Eljoaydi Date : 26-01-2013 E-mail : [email protected] Home : Morroco Facebook page : facebook.com/abdelmorit.alma platform : software Impact : Denial Of Service Teste...
Grandstream GXV-3000 Phone Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/25399/info Grandstream GXV-3000 phones are prone to a remote denial-of-service vulnerability. Exploiting this issue allows remote attackers to cause the device to accept a phone while being unable to hang up. This...
mcGuestbook 1.3 admin.php lang Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/18476/info mcGuestbook is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote file...
WebAlbum <= 2.02pl COOKIE[skin2] Remote Code Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo WebAlbum = 2.02pl $COOKIEskin2 remote cmmnds xctn \r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n\r\n; echo - this works with magicquotesgpc=Off\r\n; echo dork: WEBalbum 2004-200...
Web Wiz Forum Injection Vulnerability
No description provided by source. Title : Web Wiz Forum Injection Vulnerability Author: eXeSoul Home : www.indishell.in or www.andhrahackers.com Email : [email protected] date : 23/3/2011 D0rk : i Powered by Web Wiz Forums category : Web Apps SQli Go To Site :- SQL injection Vulnerability...
mcGuestbook 1.3 ecrire.php lang Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/18476/info mcGuestbook is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote file...
Audiotran 1.4.1 (PLS File) Stack Overflow (meta)
No description provided by source. require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = GoodRanking include Msf::Exploit::FILEFORMAT include Msf::Exploit::Remote::Seh def initializeinfo = superupdateinfoinfo, 'Name' = 'Audiotran 1.4.1 PLS File Stack Overflow.', 'Description' = %q This...