56796 matches found
siemens automation license manager <= 500.0.122.1 - Multiple Vulnerabilities
No description provided by source. Luigi Auriemma Application: Siemens Automation License Manager http://support.automation.siemens.com/WW/llisapi.dll?func=cslib.csinfo&lang=en&siteid=cseus&aktprim=0&extranet=standard&viewreg=WW&objid=10805384&treeLang=en Versions: = 500.0.122.1 Platforms: Window...
nodez <= 4.6.1.1 mercury Multiple Vulnerabilities
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo Nodez 4.6.1.1 Mercury possibly prior versions multiple vulnerabilities\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n\r\n; / software: site: nodez.greentinted.com/ description:...
Winamp 5.5.8.2985 - Multiple Buffer Overflows
No description provided by source. Source: http://aluigi.org/adv/winamp1-adv.txt Luigi Auriemma Application: Winamp http://www.winamp.com Versions: = 5.5.8.2985 aka v5.581 Platforms: Windows Bugs: A integer overflow in inmkv B integer overflow in innsv C integer overflow in inmidi D buffer-overfl...
ISDN4Linux 3.1 IPPPD Device String SysLog Format String Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/5437/info isdn4linux is a freely available, open source package of isdn compatibility tools. It is available for Linux operating systems. isdn4linux contains a format string vulnerability in the ipppd utility. In some...
WANGKONGBAO CNS-1000 UTM IPS-FW Directory Traversal
No description provided by source. Exploit Title: WANGKONGBAO CNS-1000 and 1100 Network Security Platform UTM Directory Traversal Date: 7/2/2012 Exploit Author: Dillon Beresford Vendor Homepage: http://www.wangkongbao.com/products.html Version: CNS-1000 and 1100 The issue is in the...
nginx 0.6.38 - Heap Corruption Exploit
No description provided by source. !/usr/bin/env python Exploit Title: nginx heap corruption Date: 08/26/2010 Author: aaron conole [email protected] Software Link: http://nginx.org/download/nginx-0.6.38.tar.gz Version: = 0.6.38, = 0.7.61 Tested on: BT4R1 running nginx 0.6.38 locally CVE: 2009-26...
Chimera Web Portal 0.2 modules.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/16113/info Chimera Web Portal is prone to multiple input validation vulnerabilities. The issues include cross-site scripting and SQL injection vulnerabilities. These issues are due to a failure in the application to...
Same Team E-shop manager - SQL Injection Exploit
No description provided by source...
Joomla! and Mambo 'com_joomlavvz' Component - 'id' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27921/info The Joomla! and Mambo 'comjoomlavvz' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue coul...
Media Gallery for Geeklog <= 1.4.8a Remote File Inclusion Vulnerability
No description provided by source. Media Gallery =v1.4 Remote file inclusion Download script : http://switch.dl.sourceforge.net/sourceforge/mediagallery/mediagallery-1.4.6-1.3.11.tar.gz Thanks Str0ke Exploit : http://victime.com/mediagallery/publichtml/maint/ftpmedia.php?MGCONFpathhtml= shell.txt...
Gemitel 3.50 Affich.PHP Remote File Include Command Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10156/info A vulnerability has been identified in the handling of input by Gemitel. Because of this, it may be possible for a remote user to gain unauthorized access to a system using the vulnerable software. It is possib...
GoodTech Telnet Server NT 2.2.1 DoS Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/862/info GoodTech Telnet Server NT 2.2.1 is vulnerable to a remote denial of service attack due to an unchecked buffer. If 23870 or more characters are entered at the username prompt, the software will crash. GoodTech's...
UBBCentral UBB.threads 5.5.1/6.x grabnext.php posted Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/14052/info UBB.Threads is prone to multiple SQL injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker...
PHP Realty 'dpage.php' SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30678/info PHP Realty is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise th...
OpenNMS 1.5.x HTTP Response Splitting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/31577/info OpenNMS is prone to an HTTP response-splitting vulnerability because it fails to sufficiently sanitize user-supplied data. Attackers can leverage this issue to influence or misrepresent how web content is serve...
CrisoftRicette 1.0 Cookbook.PHP Remote File Include Vulnerability
No description provided by source...
4Images <= 1.7.1 (Local Inclusion) Remote Code Execution Exploit
No description provided by source. ?php ----4images171inclxpl.php 6.45 26/02/2006 4Images = 1.7.1 remote commands execution through arbitrary local inclusion coded by rgod site: http://retrogod.altervista.org - this works regardless of magicquotesgpc settings Sun-Tzu: Having doomed spies, doing...
Valid tiny-erp <= 1.6 - SQL Injection Vulnerability
No description provided by source. ------------------------------------------------------------------------ Valid tiny-erp = 1.6 SQL Injection Vulnerability ------------------------------------------------------------------------ author............: muuratsalo Revshell.com contact...........:...
ClipShare 4.1.1 - Multiples Vulnerabilites
No description provided by source...
phpMyBackupPro - Arbitrary File Download
No description provided by source. Arbitrary File Download in phpMyBackupPro Name Arbitrary File Download in phpMyBackupPro Systems Affected phpMyBackupPro v 2.1 and possibly earlier versions site http://www.phpmybackuppro.net Author Amol Naik amolnaik4atgmail.com Date 16/11/2009 1. OVERVIEW...
UPC Ireland Cisco EPC 2425 Router / Horizon Box
No description provided by source. Exploit Title: UPC Ireland Cisco EPC 2425 Router / Horizon Box Google Dork: Date: 11/12/2013 Author: Matt O'Connor / Planit Computing Advisory Link: http://www.planitcomputing.ie/upc-wifi-attack.pdf Version: Category: Remote Tested on: Cisco EPC 2425 / Horizon B...
Tickets CAD 2.20G Multiple Vulnerabilities
No description provided by source. Exploit Title: Tickets CAD 2.20G Multiple Vulnerabilities Date: Aug 4 2012 Exploit Author: chap0 @chap0 Vendor Homepage: http://www.ticketscad.org Software Link: http://www.ticketscad.org/downloads/Tickets06222012V220G.zip Version: 2.20G Tested on: Ubuntu Ticket...
Wireshark ZigBee ZCL Dissector Infinite Loop Denial of Service
No description provided by source. Source: http://www.securityfocus.com/bid/44986/info Wireshark is prone to a remote denial-of-service vulnerability because it fails to properly handle certain types of packets. Attackers can exploit this issue to cause the application to enter an infinite loop...
GENU CMS 2012.3 - Multiple SQL Injection Vulnerabilities
No description provided by source. Title: ====== GENU CMS 2012.3 - Multiple SQL Injection Vulnerabilities Date: ===== 2012-04-30 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=538 VL-ID: ===== 538 Introduction: ============= GENU is a Content Management System written...
Digital Unix 4.0 MSGCHK MH_PROFILE Symbolic Link Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3320/info The msgchk utility under certain versions of Digital Unix contains an information disclosure vulnerability which could yield root privilege. Because msgchk fails to check file permissions before opening user...
Half-Life 1.1 Client Server Message Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6582/info It has been reported that the Half-Life client contains a format string vulnerability. When receiving messages from an administrator through the adminmod add-on package, the client does not properly handle input...
WorldMail imapd 3.0 SEH overflow (egg hunter)
No description provided by source. !/usr/bin/python import sys import socket Exploit Title: WorldMail imapd 3.0 SEH overflow egg hunter Tested on: XP SP3 en-us Author: TheXero Website: www.thexero.co.uk http://www.nullsecurity.net Check for parameters if lensys.argv != 3: print Usage: + sys.argv0...
PHPCodeCabinet <= 0.5 (Core.php) Remote File Include Vulnerability
No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register class TestPOCPOCBase: vulID = '63800' ssvid version = '1.0' author = '周神' vulDate = '2006-08-09' createDate = '2015-12-24...
Axis Communications StorPoint CD Authentication Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1025/info Axis StorPoint CD and Axis StorPoint CD/T are CD ROM servers actual hardware unitssold by Axis Communications. Both of these appliances support remote management via SNMP MIB-II and private enterprise MIB as wel...
Mitra Informatika Solusindo Cart - 'p' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28096/info Mitra Informatika Solusindo Cart is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...
CCProxy <= 6.2 - Telnet Proxy Ping Overflow
No description provided by source. $Id: ccproxytelnetping.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms o...
VPOPMail 0.9x vpopmail.php Remote Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7063/info A vulnerability has been reported for VPOPMail that may allow attackers to execute arbitrary commands on a vulnerable system. The vulnerability exists due to insufficient sanitization of user-supplied input. As...
joomla component gamesbox com_gamesbox 1.0.2 - (id) SQL Injection Vulnerability
No description provided by source...
KDE 1.1/1.1.1/1.2/2.0 kscd SHELL Environmental Variable Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1206/info Some linux distributions S.u.S.E. 6.4 reported ship with kscd a CD player for the KDE Desktop sgid disk. kscd uses the contents of the 'SHELL' environment variable to execute a browser. This makes it possible to...
Netscape iCal 2.1 Patch2 iPlanet iCal 'csstart' Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1769/info Netscape's iPlanet iCal application is a network based calendar service built for deployment in organizations which require a centralized calendar system. Certain versions of iCal ship with a vulnerability in...
MiniBB 2.5 - SQL Injection Vulnerability
No description provided by source. Vulnerability ID: HTB22671 Reference: http://www.htbridge.ch/advisory/sqlinjectioninminibb.html Product: MiniBB Vendor: MiniBB.com http://www.minibb.com/ Vulnerable Version: 2.5 Vendor Notification: 21 October 2010 Vulnerability Type: SQL Injection Status: Not...
MDaemon SMTP Server 5.0.5 Null Password Authentication Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8382/info A vulnerability has been reported to affect the MDaemon SMTP authentication handler. It has been reported that any valid username or account can be used in conjunction with a null password, to access the MDaemon...
MS IE 4.1/5.0 Registration Wizard Buffer Overflow
No description provided by source. Microsoft Internet Explorer 4.1/5.0 for Windows 95/Windows NT 4,Windows 98 Registration Wizard Buffer Overflow Vulnerability source: http://www.securityfocus.com/bid/671/info There is a buffer overflow in the Internet Explorer Registration Wizard control...
MS IIS 4/5/6 Internal IP Address/Internal Network Name Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3159/info A vulnerability has been discovered in Microsoft IIS that may disclose the internal IP address or internal network name to remote attackers. This vulnerability can be exploited if an attacker connects to a host...
Games Script (Galore) Backup Dump Vulnerability
No description provided by source...
BRS WebWeaver 1.0.7 ISAPISkeleton.dll Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9516/info BRS WebWeaver has been reported prone to a cross-site scripting vulnerability. An attacker may create a malicious link to the vulnerable server that includes embedded HTML and script code. If this link is follow...
w-Agora Forum 4.2.1 - Arbitrary File Upload Exploit
No description provided by source. ?php / Title .......................: w-Agora Forum 4.2.1 Remote File Upload Exploit Site ........................: http://www.w-agora.com/en/download.php Version .....................: 4.2.1 Author ......................: Treasure Priyamal Site...
MIPS Little Endian Shellcode
No description provided by source. Disassembled MIPS Little Endian Shellcode Shellcode was designed for ACSD exploit on the ASUS RT-AC66U SOHO router. CVE: CVE-2013-4659 Written by Jacob Holcomb, Security Analyst @ Independent Security Evaluators Blog: http://infosec42.blogspot.com Company Websit...
TCPDump 3.x Malformed ISAKMP Packet Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6974/info It has been reported that tcpdump is vulnerable to a denial of service when some packet types are received. By sending a maliciously formatted packet to a system using a vulnerable version of tcpdump, it is...
Turnkey eBook Store 1.1 'keywords' Parameter Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/34324/info Turnkey eBook Store is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected...
Procentia IntelliPen 1.1.12.1520 (Data.aspx, value param) - Blind SQL Injection
CVE: CVE-2014-2043 Vendor: Procentia Product: IntelliPen Affected version: 1.1.12.1520 Fixed version: 1.1.18.1658 Reported by: Jerzy Kramarz Details: SQL injection has been found and confirmed within the software as an authenticated user. A successful attack could allow an authenticated attacker ...
Sonium Enterprise Adressbook <= 0.2 (folder) Include Vulnerability
No description provided by source. +-------------------------------------------------------------------- + + Sonium Enterprise Adressbook Version 0.2 folder RFI + + Original advisory: + http://www.bb-pcsecurity.de/Websecurity/342/org/SoniumEnterpriseAdressbookVersion0.2folderRFI.htm +...
Tours Manager 1.0 - (cityview.php cityid) SQL Injection Vulnerability
No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= IN THE NAME OF ALLAH -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Tour...
Noah's Classifieds 1.3 Index.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14835/info Noah's Classifieds is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...
XMB Forum 1.8 BBcode align Tag XSS
No description provided by source. source: http://www.securityfocus.com/bid/9726/info XMB Forum has been reported prone to multiple cross-site scripting, HTML injection and SQL injection vulnerabilities. The issues present themselves due to insufficient sanitization of remote user supplied data. ...