56796 matches found
phpMyTourney 2 - tourney/index.php Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28057/info phpMyTourney is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing maliciou...
xoops incontent module 3.0 - Directory Traversal vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12406/info Xoops Incontent module is reported prone to a directory traversal vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied input. A malicious user could issue a reques...
phpCOIN 1.2.2 includes/db.php $_CCFG[_PKG_PATH_DBSE] Parameter Traversal Arbitrary File Access
No description provided by source. source: http://www.securityfocus.com/bid/15831/info PhpCOIN is prone to a file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote PHP...
Joomla Component com_avosbillets Blind SQL Injection Vulnerability
No description provided by source. ------------------- header data start ------------------- Joomla Component comavosbillets Blind SQL Injection Vulnerability Author : Pyske Home : www.cyber-warrior.orghttp://www.cyber-warrior.org Greetz : Fl0riX , M-K-A, F0RTYS3V3N ,BlackApple , KaBaDaY and All...
DmxReady Bilboard 1.2 - SQL Injection Vulnerability
No description provided by source. Exploit Title: DmxReady Bilboard v1.2 SQL Injection Vulnerability Google Dork: inurl:incbillboardmanagersummarypopup.asp Date: 03.07.2011 Author: Bellatrix Software Link: http://www.dmxready.com/?product=billboard-manager Version: v1.2 Language: ASP Price : $99....
Typo3 File Disclosure
No description provided by source. | | | ||\ || || || | \ // | | | || \ || || || | |\ //| | | \ | | |/ / | | || \ || || || | | \ // | | | \ | | / / | | || \ || || || | | \ // | | | | | | | /'\ / / | | || \ || || || | | \ // | | | | | \ \ / / / | | || \ || |||| | | \// | | | | | | | ...
RoundCube 0.3.1 XRF/SQL injection
No description provided by source. Exploit Title: RoundCube 0.3.1 SQL injection Date: 10/10/2011 Author: Smith Falcon Software Link: http://roundcube.net/download Version: 0.3.1 Tested on: Linux timezone= is vulnerable to SQL Union Injection. POST data in http://site.com/roundcube/index.php...
Mozilla (Firefox <= 1.0.7) (Mozilla <= 1.7.12) Denial of Service Exploit
No description provided by source...
Passlog Daemon 0.1 SL_Parse Remote Buffer Overflow Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/7261/info It has been reported that passlogd does not properly handle some types of input. Because of this, an attacker may be able to gain unauthorized access to hosts running the vulnerable software. / Title: Remote...
GNUJSP 1.0 File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4125/info GNUJSP is a freely available, open-source implementation of Sun's Java Server Pages. It will run on most Unix and Linux variants, as well as Microsoft Windows NT/2000 operating systems. It has been reported that...
SerWeb <= 2.1.0-dev1 2009-07-02 - Multiple RFI Vulnerabilities
No description provided by source. SerWeb = 2.1.0-dev1 2009-07-02 Multiple Remote File Inclusion Vulnerabilities D.Script : http://ftp.iptel.org/pub/serweb/daily-snapshots/ POC: /loadlang.php?SERWEBconfigdir=Shell /mainprepend.php?SERWEBfunctionsdir=Shell /loadphplib.php?PHPLIBlibdir=Shell Us =...
Joomla Component com_acteammember SQL Injection Vulnerability
No description provided by source. Joomla Component comacteammember Sql Injection Vulnerability ============================================================== .:. Author : altbta [email protected]:[email protected] .:. Home : www.v4-team.com/cchttp://www.v4-team.com/cc .:. Dork :...
eFiction < 2.0.7 - Remote Admin Authentication Bypass Vulnerability
No description provided by source. eFiction vulnerability I am releasing this to the public. Vendor was notified. Someone is also illegally defacing these websites under MY name, which is a shame because they ripped it from a private discussion on g00ns.net. This proof of concept is not to be use...
YPOPS! 0.9.7.3 - Buffer Overflow (SEH)
No description provided by source. Version:0.9.7.3 Tested on: Windows XP SP3 !/usr/bin/python All modules are SafeSEH protected in service pack 3. import socket, sys print \n ======================================== print YPOPS! v 0.9.7.3 Buffer Overflow SEH print Proof of Concept by Blake print...
GeeCarts - view.php id Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/28470/info GeeCarts is prone to multiple input-validation vulnerabilities, including remote file-include and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these issu...
Deerfield VisNetic WebSite 3.5.13 .1 Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6369/info A vulnerability has been discovered in VisNetic Website when generating a 404 page for a non-existent resources. The issue is due to insufficient sanitization of the HTTP 'referer' header. It is possible to caus...
Rational Software Hidden Administrator 1.7 - Auth Bypass Exploit
No description provided by source. Hidden Administrator Authenticaiton Bypass Exploit ahmedatrewterz.com http://www.securityfocus.com/bid/24049 C:\python rewt-ha-exp.py Usage: rewt-ha-exp.py -h host ip -p port -t tftpd server ip make sure nc.exe exists on tftpd server C:\telnet 192.168.1.4 4444...
WS-FTP Server 5.03 MKD Overflow
No description provided by source. $Id: wsftpserver503mkd.rb 10559 2010-10-05 23:41:17Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms ...
Phoenix View CMS <= Pre Alpha2 (SQL/LFI/XSS) Multiple Vulnerabilities
No description provided by source. Phoenix View CMS = Pre Alpha2 Multiple Vulnerabilities LFISQLIXSS Found by : tw8 Date : 8.05.2008 Website && Forum : http://rstzone.org && http://rstzone.org/forum/ Bug type : LFI, SQLI & XSS Affected software description: Application : Phoenix View CMS Version ...
Best Top List 2.11 - Upload Shell Vulnerability
No description provided by source...
ASPSitem <= 2.0 - Remote (SQL Injection / DB Disclosure) Vulnerabilities
No description provided by source. ASPSitem = 2.0 Multiple Vulnerabilities. Contacts ICQ: 10072 MSN/Mail: [email protected] web: www.nukedx.com This exploits works on ASPSitem = 2.0. Original advisory can be found at: http://www.nukedx.com/?viewdoc=39 SQL injection - GET -...
SerWeb <= 2.0.0 dev1 2007-02-20 - Multiple RFI / LFI Vulnerabilities
No description provided by source. SerWeb = 2.0.0 dev1 2007-02-20 Multiple RFI / LFI Vulnerabilities D.Script : http://ftp.iptel.org/pub/serweb/daily-snapshots/serweb-2.0.0-dev12007-02-20.tar.gz POC: /loadlang.php?SERWEBconfigdir=Shell /mainprepend.php?SERWEBfunctionsdir=Shell...
QNX RTOS 6.1/6.3 InputTrap Local Arbitrary File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14656/info QNX RTOS is susceptible to a local arbitrary file disclosure vulnerability. This issue is due to a failure of the 'inputtrap' utility to properly implement access control restrictions. This vulnerability allows...
West Street Software LocalWEB HTTP Server 1.2 - Buffer Overflow
No description provided by source. source: http://www.securityfocus.com/bid/1423/info LocalWEB is a freeware HTTP server for the Windows suite of operating systems. Certain versions of this software are vulnerable to a remotely exploitable buffer overflow attack. This attack can instrumented by...
Ruby <= 1.9 REXML Remote Denial Of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30802/info Ruby is prone to a remote denial-of-service vulnerability in its REXML module. Successful exploits may allow remote attackers to cause denial-of-service conditions in applications that use the vulnerable module...
Sourcefire 3D Sensor & Defense Center 4.8.x Privilege Escalation Vuln
No description provided by source. Affected product ---------------- Sourcefire 3D Sensor and Defense Center 4.8.x Tested on 4.8.0.3 and 4.8.0.4, 3D Sensor 2500 & DC 1000 All 4.8.x releases, up to and including 4.8.1, confirmed vulnerable by sourcefire. Vulnerability details ---------------------...
2DayBiz photo sharing script SQL injection Vulnerability
No description provided by source. Exploit Title: photo sharing script SQL injection Vulnerability Date: 24/06/2010 Author: JaMbA Script url: http://www.2daybiz.com/photosharingscript.html Version: N/A Tested on: Windows CVE : ::::::::::::::::::::::::: :::::::::::::::::::::::::...
Drupal <= 6.16 and 5.21 - DoS (0day)
No description provided by source. !/bin/bash Copyright C 2009 Emanuele Gentili [email protected] This program is released under the terms of the GNU General Public License GPL, which is distributed with this software in the file COPYING. The GPL specifies the terms under which users may copy a...
Wordpress <= 2.9 - DoS (0day)
No description provided by source. !/bin/bash Copyright C 2009 Emanuele Gentili [email protected] This program is released under the terms of the GNU General Public License GPL, which is distributed with this software in the file COPYING. The GPL specifies the terms under which users may copy a...
Aladdin Knowledge Systems eToken 3.3.3 eToken PIN Extraction Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1170/info Alladin Knowledge Systems eToken is a USB smartcard-like device used for authentication, file integrity, and encryption. Access to the eToken device itself and entering the PIN number encoded in the eToken will...
iCAM Workstation Control 4.8.0.0 - Authentication Bypass
No description provided by source. Exploit Title: iCAM Workstation Control Software Local Authentication Bypass Google Dork: Vendor: Insight Media Internet Limited is based in the North West of England, and has 10 years experience in developing both internet and software solutions. Our staff are...
ME Download System <= 1.3 (header.php) Remote Inclusion Vulnerability
No description provided by source. +-------------------------------------------------------------------- + + ME Download System 1.3 Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: ME Download System 1.3 + Venedor ...........:...
Bandmin 1.4 Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7729/info It has been reported that a cross-site scripting vulnerability exists in Bandmin. Because of this, an attacker may be able to execute script code or HTML in the context of the site hosting Bandmin by enticing a...
PHP-Address 0.2 e Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5039/info PHP-Address is prone to an issue which may allow remote attackers to include arbitrary files located on remote servers. If the remote file is a PHP script, this may allow for execution of attacker-supplied PHP...
FTPshell Server <= 3.38 Remote Denial of Service Exploit
No description provided by source. !/usr/bin/perl Usage: FTPShellFTPDOS.pl ip user pass FTPShellFTPDOS.pl 127.0.0.1 hello moto FTPshell Server Version 3.38 Download: http://www.ftpshell.com/ use IO::Socket; use Win32; use strict; my$i = ; my$socket = ; for $i = 1; $i = 40; $i++ if $socket =...
aWebNews <= 1.5 (visview.php) Remote File Include Vulnerability
No description provided by source. Credit : SpC-x mail : [email protected] SaVSaK.CoM | SpC-x - The-BeKiR | aWebNews 1.0 version - Remote File Include Vulnerabilities Risk : High Class: Remote Script : aWebNews Credits : SpC-x Thanks : The-BeKiR - Ejder - FasTBoY - ERNE - RMx Code : include...
phpArcadeScript 2.0 browse.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/16957/info phpArcadeScript is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input. An attacker may leverage these issues to have arbitrary...
DESlock+ <= 3.2.7 - Local Kernel Race Condition Denial of Service PoC
No description provided by source. / deslock-probe-race.c Copyright c 2008 by [email protected] DESlock+ = 3.2.7 local kernel race condition DoS POC by mu-b - Fri 22 Feb 2008 - Tested on: DLMFENC.sys 1.0.0.28 race conditions between calls to ProbeForRead/ProbeForWrite and pointer use. Note that...
Sophos Products - Multiple Vulnerabilities
No description provided by source. List, I've completed the second paper in my series analyzing Sophos Antivirus internals, titled Practical Attacks against Sophos Antivirus. As the name suggests, this paper describes realistic attacks against networks using Sophos products. The paper includes a...
ClamAV Milter <= 0.92.2 - Blackhole-Mode (sendmail) Code Execution
No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...
Fusion News 1.0 (fil_config) - Remote File Inclusion (RFI)
No description provided by source...
WBR-3406 Wireless Broadband NAT Router Web-Console - Password Change Bypass & CSRF Vulnerability
No description provided by source. ----------------------------------------------------------- WBR-3406 Wireless Broadband NAT Router Web-Console Password Change Bypass & CSRF Vulnerability This PoC code should do two main things: 1. Cross Site Request Forgery For more information, just google it...
Voxel Dot Net CBMS 0.x Multiple Code Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/4957/info It has been reported that multiple vulnerabilities exist in CBMS. Reportedly, it is possible to inject both JavaScript and SQL code into the system. It may be possible to execute script code within the context o...
TWiki TWikiUsers INCLUDE Function Remote Arbitrary Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14960/info A remote command execution vulnerability affects the application. The revision control function of the TWikiUsers script uses the backtick shell metacharacter to construct a command line. An attacker may use a...
CyberBuild 0 result.asp Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/17829/info CyberBuild is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly...
CORE FORCE Firewall 0.95.167 and Registry Modules Multiple Local Kernel Buffer Overflow Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/27341/info CORE FORCE Firewall and Registry modules are prone to multiple local kernel buffer-overflow vulnerabilities because the software fails to adequately verify user-supplied input. Local attackers can exploit these...
Ophcrack 3.5.0 - Local Code Execution BOF
No description provided by source. Exploit Title: ophcrack v3.5.0 - Local Code Execution BOF Date: 21.05.2013 Exploit Author: xisone@STM Solutions Vendor Homepage: http://ophcrack.sourceforge.net/ Software Link: http://downloads.sourceforge.net/ophcrack/ophcrack-win32-installer-3.5.0.exe Version:...
Linksys WRH54G 1.1.3 - Wireless-G Router Malformed HTTP Request Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/29570/info Linksys WRH54G Wireless-G Router is prone to a denial-of-service vulnerability because it fails to adequately handle malformed HTTP requests. As a result, memory becomes corrupted and the device's HTTP service...
Muster Render Farm Management System Arbitrary File Download
No description provided by source...
Novell iPrint Client ActiveX Control 'debug' Buffer Overflow Exploit
No description provided by source. novelliprintexecuterequestdbg.rb Novell iPrint Client ActiveX Control 'debug' Buffer Overflow exploit for the Metasploit Framework Exploit successfully tested on the following platforms: - Novell iPrint Client 5.32 on Internet Explorer 7, Windows XP SP3 - Novell...