56796 matches found
MS Windows 2000/NT 4/XP Network Share Provider SMB Request Buffer Overflow (1)
No description provided by source. source: http://www.securityfocus.com/bid/5556/info Microsoft Windows operating systems use the Server Message Block SMB protocol to support services such as file and printer sharing. A buffer overflow vulnerability has been reporting in the handling of some...
Microsoft Windows 2000/2003/XP Graphical Device Interface Library Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12834/info Reportedly, a denial of service vulnerability affects Microsoft Windows GDI library 'gdi32.dll'. This issue is due to a failure of the application to securely copy data from malformed EMF image files. An attack...
Envolution <= 1.1.0 (topic) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; if@ARGV 3 usage; exit; $site = $ARGV0; Site Target $path = $ARGV1; Path direktori envolution1-0-1 $usid = $ARGV2; member id $www = new LWP::UserAgent; $sql =...
AtomPhotoBlog 1.15 'atomPhotoBlog.php' SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30360/info AtomPhotoBlog is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...
Novell Groupwise Internet Agent LDAP BIND Request Overflow Vulnerability
No description provided by source. Application: Novell Groupwise Platforms: Windows Version: 8.0.2 HP3 and 2012 Secunia: SA50622 PRL: 2012-33 ZDI: ?? Novell TID: 5150711 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1...
Qualiteam X-Cart 3.x upgrade.php perl_binary Parameter Arbitrary Command Execution
No description provided by source. source: http://www.securityfocus.com/bid/9560/info X-Cart has been reported to be prone to an issue that may allow remote attackers to execute arbitrary commands on the affected system. The issue is caused by a failure of the application to sanitize values...
osCommerce 2.2 admin/tax_rates.php page Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the...
Gaim 1.1.3 File Download Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12667/info Gaim is affected by a denial of service vulnerability during the download of a file. This issue can allow remote attackers to cause an affected client to fail. A vulnerablity in the client arises when it tries ...
BASE <= 1.2.4 melissa (Snort Frontend) Remote Inclusion Vulnerabilities
No description provided by source. Basic Analysis and Security Engine BASE = 1.2.4 melissa Inclusion Vulnerabilities Just glanced over BASE for a pentesting job. /str0ke ! milw0rm.com code baseqrycommon.php includeonce$BASEpath/includes/basesignature.inc.php; /code...
Solaris <= 10 sysinfo() Local Kernel Memory Disclosure Exploit
No description provided by source. / Sun Microsystems Solaris sysinfo Kernel Memory Disclosure exploit =================================================================== Local exploitation of an integer overflow vulnerability in Sun Microsystems Inc. Solaris allows attackers to read kernel memor...
Solaris 2.5/2.5.1/2.6/7.0 sadmind Buffer Overflow Vulnerability (3)
No description provided by source. source: http://www.securityfocus.com/bid/866/info Certain versions of Solaris ship with a version of sadmind which is vulnerable to a remotely exploitable buffer overflow attack. sadmind is the daemon used by Solstice AdminSuite applications to perform distribut...
phpBB <= 2.0.15 Register Multiple Users Denial of Service (c code)
No description provided by source...
Microsoft Internet Explorer 8 Beta 1 - XDR Prototype Hijacking Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28580/info Microsoft Internet Explorer is prone to a denial-of-service vulnerability. An attacker may exploit this issue by enticing victims into opening a maliciously crafted webpage. Successfully exploiting this issue...
PhpBridges Blog System members.php SQL Injection
No description provided by source. Exploit Title: PhpBridges Blog System SQL Injection Vulnerability Date: 18/01/2012 - 04.19 Author: 3spi0n Software Website: https://launchpad.net/phpbridges Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: members.php $ Demo Sites:...
Samba 2.0.x Insecure TMP file Symbolic Link Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2617/info Samba is a flexible file sharing packaged maintained by the Samba development group. It provides interoperatability between UNIX and Microsoft Windows systems, permitting the sharing of files and printing...
Sambar Server 5.x/6.0/6.1 logout RCredirect XSS
No description provided by source. source: http://www.securityfocus.com/bid/13722/info Sambar Server administrative interface does not adequately filter some HTML code thus making it prone to cross-site scripting attacks. It is possible for a remote attacker to create a malicious link containing...
Instant Photo Gallery 1.0 portfolio.php cat_id Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/15659/info Instant Photo Gallery is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successfu...
SPIP <= 1.8.2g Remote Commands Execution Exploit
No description provided by source. ?php ---spip182gshellinjxpl.php 17.33 08/02/2006 SPIP = 1.8.2g remote commands execution coded by rgod site: http://retrogod.altervista.org - this works regardless of magicquotesgpc settings usage: launch from Apache, fill in requested fields, then go! Sun-Tzu:...
W-Agora 4.1.6 EditForm.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6464/info W-Agora is a freely available, open source PHP forum software package. It is available for Unix and Linux systems. A problem with W-Agora may make cross-site scripting attacks possible. It has been reported that...
Microsoft ISA Server 2000 Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/8207/info ISA server will output certain error pages when requests that are invalid, for whatever reason, are transmitted through it. These error pages will appear in the context of the domain that the request was made fo...
Embedthis Appweb 3.1.2 - Remote DoS
No description provided by source. !/usr/bin/perl +------------------------------------------------------------------------+ | ....... | | ..''xxxxxxxxxxxxxxx'... | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxx.. | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'. | | .'xxxxxxxxxxxxxxxxxxxxxxxxxxxx'''.......'. | |...
Free Simple Software SQL Injection Vulnerability
No description provided by source. 'Free Simple Software' SQL Injection Vulnerability CVE-2010-4298 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in the 'Free Simple Software' download module which allows for a 'UNION SELEC...
FOSCAM IP-Cameras Improper Access Restrictions
Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ MayGion IP Cameras multiple vulnerabilities 1. Advisory Information Title: MayGion IP Cameras multiple vulnerabilities Advisory ID: CORE-2013-0322 Advisory URL:...
SmartVmd ActiveX 1.1 - Remote File Deletion Exploit
No description provided by source. HTML BODY b Author : Houssamix br/ br/ br/ SmartVmd ActiveX V 1.1 remote file deletion exploit br/ download : http://www.smartvmd.com/setup/SetupActiveXVmd.msi br/ Note : StartVideoSaving insecure method allowed us to delete files in pc vitime br/ b/ object...
BeroFTPD 1.3.4(1) - Remote Root Exploit (Linux x86)
No description provided by source. / BeroFTPD 1.3.41 Linux x86 remote root exploit by qitest1 - 5/05/2001 BeroFTPD is an ftpd derived from wuftpd sources. This code exploits the format bug of the site exec cmd, well known to be present in wuftpd-2.6.0 and derived daemons. BeroFTPD 1.3.41 is the...
SHOUTcast <= 1.9.4 File Request Format String Exploit (Leaked)
No description provided by source. / Shoutcast = 1.9.4 exploit by crash-x Trys to upload the shellcode to a fixed address and execute it. This exploit was not written bei Simon 'Zodiac' Moser segfault.ch. / include stdio.h include stdlib.h include stdarg.h include string.h include sys/types.h...
Photofiltre Studio 8.1.1 - (.TIF File) Local Buffer Overflow Exploit
No description provided by source. / Photofiltre Studio v8.1.1 .TIF File Buffer Overflow Photofiltre is vulnerable to an unspecified buffer overflow when processing a crafted .TIF file. This exploit just beeps useless but incredibly noisy!!. Tested against Win XP SP2 FR. Have Fun! Coded and...
BK Forum <= 4.0 (member.asp) Remote SQL Injection Vulnerability
No description provided by source. BK Forum = 4.0 Remote SQL Injection by n0m3rcy Copyright c 2006 n0m3rcy [email protected] Exploit: First you must be logged in Then type this in your browser...
simple webserver 2.3-rc1 - Directory Traversal
No description provided by source. Exploit Title: Simple Webserver 2.3-rc1 Directory Traversal Date: 01/02/2013 Exploit Author: CwG GeNiuS Vendor Homepage: http://www.pmx.it Software Link: http://www.pmx.it/download/sws-2.3-rc1-i686.exe Version: 2.3-rc1 and earlier Tested on: Windows 7 Enterprise...
Veritas NetBackup 3.5/4.5/5.0 - Multiple Unspecified Local Memory Corruption Vulnerabilities (2)
No description provided by source. source: http://www.securityfocus.com/bid/10226/info Multiple unspecified local buffer overrun and format string vulnerabilities have been reported to exist in various setuid Veritas NetBackup binaries. These issues may be exploited to execute arbitrary code with...
Grestul 1.2 - Remote Add Administrator Account Exploit
No description provided by source. Grestul 1.2 Remote add admin exploit Founder: ThE g0bL!N ------ Home: http:/www.4ckx.com/dz/ ---- Vendor:http://grestul.com/ Note: Algerie 3-1 Egypt code ----- form method=post name=addadmin id=addadmin...
PHPMailer 1.7 Data() Function Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13805/info PHPMailer is affected by a remote denial-of-service vulnerability. An attacker can send an email message with a malformed header field to initiate an infinite loop in the application. This eventually leads to a...
win7 keylayout Blue Screen Vulnerability
No description provided by source...
csUpload Script Site - Authentication Bypass
No description provided by source. Exploit Title: csUpload Script Site Authentication Bypass Google Dork: CSUpload.cgi?command= Date: 4/9/2014 Exploit Author: Satanic2000 Vendor Homepage: http://www.cgiscript.net Software Link:...
VMWare Fusion <= 2.0.5 vmx86 kext local PoC
No description provided by source. / vmware-pop.c Copyright c 2009 by [email protected] VMware Fusion = 2.0.5 vmx86 kext local denial of service POC by mu-b - Mon 22 June 2009 - Tested on: VMware Fusion 2.0.4 10.5.x VMware Fusion 2.0.5 10.5.x http://seclists.org/fulldisclosure/2009/Oct/29...
eXtremail <= 2.1.1 - Remote Heap Overflow PoC
No description provided by source. !/usr/bin/perl extremail-v8.pl Copyright c 2007 by [email protected] eXtremail =2.1.1 remote PoC by mu-b - Wed Jan 31 2007 Tested on: eXtremail 2.1.1 lnx eXtremail 2.1.0 lnx - Private Source Code -DO NOT DISTRIBUTE - http://www.digit-labs.org/ -- Digit-Labs...
Mac OS X xnu <= 1228.x (hfs-fcntl) Local Kernel Root Exploit
No description provided by source. !/bin/bash xnu-hfs-fcntl-v2.sh Copyright c 2008 by [email protected] Apple MACOS X 792.0 = xnu = 1228.x local kernel root exploit by mu-b - Sat 14 June 2008 - Tested on: Apple MACOS X 10.4.8 xnu-792.14.14.obj1/RELEASEI386 Apple MACOS X 10.4.9...
DESlock+ <= 4.1.10 vdlptokn.sys Local Kernel ring0 SYSTEM Exploit
No description provided by source. / deslock-vdlptokn.c Copyright c 2009 by [email protected] DESlock+ = 4.1.10 local kernel ring0 SYSTEM exploit by mu-b - Wed 17 Jun 2009 - Tested on: vdlptokn.sys 1.0.3.54 Compile: MinGW + -lntdll - this exploit is provided for educational purposes only. You a...
Gallarific - Multiple Script Direct Request Authentication Bypass
No description provided by source. source: http://www.securityfocus.com/bid/28163/info Gallarific is prone to a cross-site scripting vulnerability and multiple authentication-bypass vulnerabilities. An attacker may leverage these issues to execute arbitrary script code in the browser of an...
MailEnable 1.1/1.7 IMAP Rename Request Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15556/info MailEnable is prone to a remote denial of service vulnerability. The vulnerability presents itself when a user issues a malicious rename request following authentication. Remote attackers can exploit this issue...
WinWebMail 3.7.3 - IMAP Login Data Handling Denial Of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28721/info WinWebMail is prone to a denial-of-service vulnerability because it fails to perform adequate boundary checks on user-supplied input. Remote attackers can exploit this issue to crash the server and deny service...
SchoolMation 2.3 - SQLi and XSS Vulnerability
No description provided by source. ==================================================== SchoolMation Version 2.3 SQLi and XSS Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...
Joomla Component PU Arcade <= 2.1.3 - SQL Injection Vulnerability
No description provided by source. Joomla Component PU Arcade Remote SQL Injection Exploit AUTHOR : HouSSamix of H-T TeaM We are HouSSamix ToXiC350 CoNaN HOME : http://no-hack.net Script : PU Arcade Joomla Component Tested in version 2.0.3 & 2.1.3 Beta Download : http://www.pragmaticutopia.com/...
Hewlett-Packard 2620 Switch Series. Edit Admin Account - CSRF Vulnerability
No description provided by source. Exploit Title: Hewlett-Packard 2620 Switch Series. Edit Admin Account - CSRF Vulnerability Date: 26.09.2013r. Exploit Author: Hubert Grądek PL Software Link: download link if available Tested on: HP-E2620 24-PoEP // RA.15.05.0006,ROMRA.15.10 HTTP Headers:...
Millenium MP3 Studio 1.x - (.m3u File) Local Stack Overflow
No description provided by source...
Tiny Web Gallery 1.5 Image Parameter Multiple Remote File Include Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/19462/info Tiny Web Gallery is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary...
DEV Web Management System 1.5 Multiple Input Validation Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/30447/info DEV Web Management System is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data. The issues include local file-include, SQL-injection, and cross-site...
XlentCMS 1.0.4 - (downloads.php?cat) SQL Injection Vulnerability
No description provided by source. Script : XlentCMS V1.0.4 downloads.php?cat SQL Injection Vulnerability Script site : http://sphere.xlentprojects.se/portal.php AUTHOR : Gamoscu HOME : http://www.1923turk.biz Blog : http://gamoscu.wordpress.com/ Greetz : Manas58 Baybora Delibey Tiamo Psiko Turco...
Populum 2.3 - SQL Injection vulnerability
No description provided by source. Exploit Title: Populum SQL injection vulnerability Author: -SiLeNtp0is0n- Version: 2.3 ::::::::::::::ProUd to Be InDiaN:::::::::::::: AuthoR : -SiLeNtp0is0n- Vuln. App : Populum version 2.3 App Detail : Content management software for hybrid blog/media/commerce...
Tagit! Tagit2b 2.1.B Build 2 tagmin/ban_watch.php configpath Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/22518/info TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application...