56796 matches found
i-pos Storefront 1.3 - 'index.asp' SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/29471/info i-pos Storefront is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...
FileFuzz Denial of Service vulnerability
No description provided by source. Exploit Title :Filefuzzer Denial of service vulnerability Software : Filefuzzer Software link :http://labs.idefense.com/software/fuzzing.php Autor : Sweet Email : [email protected] Date : 5/11/2010 Tested on : WinXp sp3 eng | Vmware Software detail: FileFuzz i...
gMotor2 Game Engine - Multiple Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/25358/info The gMotor2 game engine is prone to multiple code-execution and denial-of-service vulnerabilities. Four vulnerabilities were reported. These vulnerabilities may be triggered by malicious client requests to game...
Evandor Easy notesManager 0.0.1 Search Page SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/20803/info Easy notesManager is prone to multiple SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to...
Novell GroupWise Client 7.0.3.1294 'gxmim1.dll' ActiveX Control Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/36398/info Novell GroupWise Client is prone to an unspecified buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Successful exploits allow remote attacke...
ACollab Multiple Vulnerabilities
No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: ACollab Multiple Vulnerabilities Vendor: http://www.atutor.ca/acollab Vulnerable Version: 1.2 Latest version till now Exploitation: Remote with browser Fix: N/A - Description: ACollab as described by its...
Joomla Component com_svmap 1.1.1 - LFI Vulnerability
No description provided by source...
Rockwell RSLogix <= 19 Denial of Service
No description provided by source. Luigi Auriemma Application: Rockwell RSLogix http://www.rockwellautomation.com/rockwellsoftware/design/rslogix5000/ Versions: = 19 RsvcHost.exe 2.30.0.23 Platforms: Windows Bug: Denial of Service Exploitation: remote Date: 13 Sep 2011 Author: Luigi Auriemma...
Hotel Booking Portal 0.1 - Multiple Vulnerabilities
No description provided by source. ----------------------------------------------------------- / | | | | | | | | | | | | | | | | | / |/ |/ \ | | || | || | | | | / | ||\,|,||| ----------------------------------------------------------- Hotel Booking Portal v0.1 Multiple Vulnerabilities Google...
SAP SOAP RFC SXPG_CALL_SYSTEM Remote Command Execution
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ This module is based...
Joomla Component com_television SQL Injection Vulnerability
No description provided by source. Title : Joomla Component comtelevision SQL Injection Vulnerability Author: DevilZ TM Data : 2010-03-29 InformatioN Title : Joomla Component comtelevision SQL Injection Vulnerability Author : DevilZ TM By D3v1l Homepage : http://www.DEVILZTM.com Email :...
AWStats 5.7 - 6.2 - Multiple Remote Exploit
No description provided by source. / AWStats v5.7 - v6.2 sileAWSxpl This exploit utilize three methods for exploiter the vulnerability found on AWStats software. an user can execute remote code on vulnerable machine, with httpd privileges. References: www.securityfocus.org/bid/12543 coded by:...
Apple Mac OS X 10.x - LZWDecodeVector (.tiff) Overflow
No description provided by source. source: http://www.securityfocus.com/bid/17634/info Apple Mac OS X is reported prone to multiple security vulnerabilities. These issue affect Mac OS X and various applications including Safari, Preview, Finder, QuickTime, and BOMArchiveHelper. A remote attacker...
Xbtit 2.0.0 - SQL Injection Vulnerability
No description provided by source. Title : Xbtit SQL Injection Vulnerability Author : Ctacok Homepage : http://ctacok.ru/ Vulnerable File : /index.php?page=users&order=SQL&by=ASC ExploiT :...
Seo Panel 2.2.0 - SQL Injection Vulnerabilities
No description provided by source. Vulnerability ID: HTB22824 Reference: http://www.htbridge.ch/advisory/sqlinjectioninseopanel1.html Product: Seo Panel Vendor: http://www.seopanel.in/ http://www.seopanel.in/ Vulnerable Version: 2.2.0 Vendor Notification: 01 February 2011 Vulnerability Type: SQL...
Campsite 2.6.1 ArticleAttachment.php g_documentRoot Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/23874/info Campsite is prone to multiple remote file-include vulnerabilities. Exploiting this issue allows remote attackers to execute code in the context of the webserver. This issue affects Campsite 2.6.1. Earlier...
McAfee Remediation Client ActiveX Control Buffer Overflow
No description provided by source. $Id: mcafeeherculesdeletesnapshot.rb 10998 2010-11-11 22:43:22Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing...
LibTIFF 'td_stripbytecount' NULL Pointer Dereference Remote Denial of Service Vulnerability
No description provided by source. From: http://www.securityfocus.com/bid/41480/ LibTIFF is prone to a denial-of-service vulnerability because it fails to properly validate user-supplied input. An attacker can exploit this issue to crash an application that uses the vulnerable library, denying...
Tkai's Shoutbox Query Parameter URI Redirection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12914/info Tkai's Shoutbox is reported prone to a remote URI redirection vulnerability. It is reported that an attacker can exploit this issue by supplying the URI of a malicious site through the 'query' parameter of a...
Solaris/x86 - Sync() & reboot() & exit(0) - 48 bytes
No description provided by source. / Title: Solaris/x86 - Sync & reboot & exit0 - 48 bytes Author: Jonathan Salwan submit AT shell-storm.org Web: http://www.shell-storm.org Twitter: http://twitter.com/jonathansalwan ! Database of shellcodes: http://www.shell-storm.org/shellcode/ Date: 2010-06-07...
Linux/ARM - Disable ASLR Security - 102 bytes
No description provided by source. / Title: Linux/ARM - Disable ASLR Security - 102 bytes Date: 2010-06-20 Tested: Linux ARM9 2.6.28-6-versatile Author: Jonathan Salwan Web: http://shell-storm.org | http://twitter.com/jonathansalwan ! Database of shellcodes http://www.shell-storm.org/shellcode/...
alt-n worldclient standard 2.1 - Directory Traversal vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1462/info The HTTP interface for WorldClient 2.1 is vulnerable to a directory traversal. By requesting a URL composed of the filename and ..\ it is possible for a remote user to retrieve and dowload any file of known...
Netscape Directory Server 4.12 - Directory Server Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1839/info Acquiring access to known files outside of the web root is possible through directory traversal techniques in Netscape Directory Server. This is made possible through the use of ../ in a HTTP request. The...
e107 CMS <= 0.7.19 CSRF Vulnerability
No description provided by source. Vulnerability ID: HTB22344 Reference: http://www.htbridge.ch/advisory/xsrfcsrfine107.html Product: e107 Website System Vendor: e107 Vulnerable Version: 0.7.19 and Probably Prior Versions Vendor Notification: 05 April 2010 Vulnerability Type: CSRF Cross-Site...
e107 website system 0.7.5 user.php Query String (PATH_INFO) Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/19997/info e107 CMS is prone to multiple cross-site scripting vulnerabilities because the application fails to sanitize user-supplied input. An attacker may levearge this issue to have arbitrary script code execute in the...
Online Notebook Manager SQLi Vulnerability
No description provided by source...
ShockBoard 3.0/4.0 Offset Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15592/info ShockBoard is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could...
forum livre 1.0 (SQL Injection / xss) Multiple Vulnerabilities
No description provided by source...
Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 Buffer Overflow (ASLR and DEP Bypass)
No description provided by source. Exploit Title: Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 local buffer overflow \w ASLR and DEP bypass Date: 26 July 2012 Exploit Author: Gianni Gnesa Vendor Homepage: http://mini-stream.net/ Software Link: http://mini-stream.net/rm-to-mp3-converter/downloa...
e107 website system 0.7.5 admin.php Query String (PATH_INFO) Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/19997/info e107 CMS is prone to multiple cross-site scripting vulnerabilities because the application fails to sanitize user-supplied input. An attacker may levearge this issue to have arbitrary script code execute in the...
Ripe Website Manager 0.8.4 contact/index.php ripeformpost Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/23597/info html headtitleRipe Website Manager = 0.8.4 - Cross-Site Scripting and SQL Injection Exploit/titlebody centerbrbrfont size=4Ripe Website Manager = 0.8.4 - Cross-Site Scripting and SQL Injection Exploit/fontbrfon...
Microsoft Windows Media 6.4/10.0 - MID Malformed Header Chunk DoS
No description provided by source. source: http://www.securityfocus.com/bid/21612/info Multiple applications are prone to a denial-of-service vulnerability. A remote attacker may exploit this vulnerability by presenting malicious 'WMV', 'MID', and 'AVI' files to a victim user. When an affected...
Splunk <= 4.3.3 Arbitrary File Read
No description provided by source. Exploit Title: Splunk = 4.3.3 Reading Arbitrary Files Contents Date: 09/03/2012 Exploit Author: Marcio Almeida [email protected] Vendor Homepage: http://www.splunk.com/ Software Link: http://www.splunk.com/download?r=header Version: 4.3.3 and priors...
Real Networks Arcade Games StubbyUtil.ProcessMgr ActiveX Arbitrary Code Execution
No description provided by source. $Id: realarcadeinstallerdlg.rb 12286 2011-04-09 18:24:43Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...
Arab Portal System 2.0 download.php title Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/17285/info ArabPortal System is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...
Joomla! 1.5.x Cross Site Scripting and Information Disclosure Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/35544/info Joomla! is prone to multiple cross-site scripting and information-disclosure vulnerabilities. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...
no$gba 2.5c (.nds) local crash
No description provided by source. !/usr/bin/env python no$gba 2.5c .nds local crash Software Link: http://nocash.emubase.de/no$gba-w.zip Author: l3D Site: http://xraysecurity.blogspot.com IRC: irc://irc.nix.co.il Email: [email protected] bad=file'crash.nds', 'w' bad.write'A'0x100000 bad.close...
Symantec Security Check Virus Detection COM Object Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10069/info Symantec Virus Detection is a web based service that detects viruses and trojan horses. It is a freely available service that can be run via Microsoft Internet Explorer, Netscape Communicator or Apple Safari we...
PHP DocWriter <= 0.3 (script) Remote File Include Exploit
No description provided by source. !/usr/bin/perl use LWP::UserAgent; / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - phpdocwriter = 0.3 script Remote File Include Exploit + + + - Script name: phpdocwriter v. 0.3 - Script site: http://phpdocwriter.sourceforge.net/ + + + - DEVIL TEAM IRC:...
Netscape Messaging Server 3.55,University of Washington imapd 10.234 Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/130/info A vulnerability exists in certain imapd implementations that allow an attacker to execute arbitrary code remotely. In certain instances, the code to be executed will be run with root privilege. Imap supports a...
Google Earth 5.1.3535.3218 - DLL Hijacking Exploit (quserex.dll)
No description provided by source. / Google Earth v5.1.3535.3218 quserex.dll DLL Hijacking Exploit Vendor: Google Inc. Product Web Page: http://www.google.com Affected Version: 5.1.3535.3218 Summary: Google Earth lets you fly anywhere on Earth to view satellite imagery, maps, terrain, 3D building...
Linux Kernel NFS and EXT3 Combination Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19396/info The Linux kernel is susceptible to a remote denial-of-service vulnerability because the EXT3 filesystem code fails to properly handle unexpected conditions. Remote attackers may trigger this issue by sending...
StorePortal 2.63 Default.ASP Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/13358/info StorePortal is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful...
Zen Time Tracking 2.2 Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/38153/info Zen Time Tracking is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker...
ClamAV Milter <= 0.92.2 - Blackhole-Mode (sendmail) Code Execution
No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...
Zix Forum <= 1.12 (RepId) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl ZIXForum = v1.12 Exploit Vulnerability found by Chironex Fleckeri Created By: SlimTim10 [email protected] Google dork: intext:ZIXForum 1.12 by: ZixCom 2002 use IO::Socket::INET; usage unless @ARGV == 2; $host = shift@ARGV; $dir = shift@ARGV; $di...
Ascend R 4.5 Ci12 Denial of Service Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/1855/info A vulnerability exists in the operating system of some Ascend routers. If an invalid TCP packet of zero length is sent to the administration port of Ascend Routers 4.5Ci12 or earlier, the result will be a crash...
Ifenslave 0.0.7 Argument Local Buffer Overflow Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/7682/info ifenslave for Linux has been reported prone to a buffer overflow vulnerability. The issue is reportedly due to a lack of sufficient bounds checking performed on user-supplied data before it is copied into an...
Applied Watch Command Center 1.0 Authentication Bypass Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/9124/info A vulnerability has been identified in the system that may allow an attacker to bypass authentication to add attacker supplied IDS alerts and new user accounts in the console. Successful exploitation of these...
Drupal CKEditor 3.0 - 3.6.2 - Persistent EventHandler XSS
No description provided by source. Exploit Title: Drupal CKEditor 3.0 - 3.6.2 - Persistent EventHandler XSS Google Dork: inurl:sites/all/modules/ckeditor -drupalcode.org Google Results: Approximately 379.000 results Date: 18th January 2012 Author: MaXe @InterN0T Found in a private Hatforce.com...