56796 matches found
Betsy CMS versions <= 3.5 - Local File Inclusion Vulnerability
No description provided by source. / Author : MizoZ from MA Group : EvilWay Email : mizozxatgmaildotcom Greetz : Zuka !! Good luck DZ : / The vulnerability is in the file admin/popup.php on the get $GET'popup' Exploit : HOST/PATH/admin/popup.php?popup=IT INCLUDE FROM admin/...
Calendarix 0.8.20071118 - SQL Injection
No description provided by source. Informatique inside Calendarix : SQL injection Version : 0.8.20071118 et infrieur Author : Thibow Contact : Thibow4tlinformatique-insidedotcom Location : France Website : http://www.informatique-inside.com Dork : inurl:calday.php?op=day&catview= Solution : Updat...
GENU CMS SQL Injection Vulnerability
0x01 漏洞版本软件下载 下载地址： http://www.gnew.fr/pages/download.php?file=GENU-2012.3.tar.gz 0x02 漏洞代码 read.php include'./../includes/common.php'; pageheader'ARTICLESREADTITLE'; if isset'articleid' -query'SELECT ' . TABLEARTICLES . '.articledate, ' . TABLEARTICLES . '.articlesubject, ' . TABLEARTICLES...
Vypress Tonecast 1.3 - Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11462/info Vypress Tonecast is reported prone to a remote denial of service vulnerability. It is reported that, when handled, a sufficiently malformed audio stream will cause the affected software to crash. An attacker ma...
Good for Enterprise 2.2.2.1611 - XSS Vulnerability
No description provided by source. The vulnerable versions are v2.2.2.1611 and earlier Proof of Concept: HTML Email including the following payload will execute Javascript statements when the victim open the email using the vulnerable version. Payload: body div scriptalert'XSS Here'/script /div...
RTTucson Quotations Database Script (Auth Bypass) SQL Injection Vulnerability
No description provided by source. RTTucson Quotations Database Script Auth Bypass SQL Injection Vulnerability By cr4wl3r http://bastardlabs.info Script: http://www.rttucson.com/files.html Bugs found /quotations/admin/include/login.php --------------------------- 36 if $POST'submit' 37 38 $Userna...
Easy Ftp Server 1.7.0.2 - Post-Authentication BoF
No description provided by source. !/usr/bin/python Title: EasyFtp Server v1.7.0.2 Post-Authentication BoF Original Author: dookie2000ca || Windows XP SP3 Professional Author: b33f - Ruben Boonen Windows XP Home SP1 Software link:...
TwonkyMedia Server <= 4.4.17 & <= 5.0.65 - XSS
No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 =========================================================================== Title: TwonkyMedia Server Multiple Cross-Site Scripting Vulnerabilities Product: TwonkyMedia Server Vendor: TwonkyMedia PacketVideo...
Joomla component com_universal Remote File Inclusion Vulnerability exploit
No description provided by source. Joomla component comuniversal = Remote File Inclusion Vulnerability exploit +Software: Joomla component comuniversal UWCMS Universal Web CMS +Version: 1.0.0 +License: http://www.gnu.org/copyleft/gpl.html GNU/GPL +Source: http://uwcms.sourceforge.net +CWE ID : 98...
CFAGCMS 1 - (right.php title) SQL Injection Vulnerability
No description provided by source. cfagcms Beta 1 sql inj. download: http://mesh.dl.sourceforge.net/sourceforge/cfagcms/cfagcms.zip Discovered By: ZoRLu z0rlu.blogspot.com [email protected] date: 23.10.2008 N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA :...
Mini-Stream Ripper 2.9.7 DEP Bypass
No description provided by source. written to bypass OptIn/OptOut DEP policy tested on windows xp sp3 running in virtualbox import sys print \n============================ print Mini-Stream 2.9.7 DEP Bypass print Written by Blake print Tested on Windows XP SP3 print ============================\n...
Solaris 7.0 kcms_configure
No description provided by source. source: http://www.securityfocus.com/bid/831/info The binary kcmsconfigure, part of the Kodak Color Management System package shipped with OpenWindows and ultimately, Solaris is vulnerable to a local buffer overflow. The buffer which the contents of the...
free QBoard 1.1 faq.php qb_path Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/18780/info Plume CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows the attacker to execute arbitrary...
Yahoo! Messenger (YVerInfo.dll <= 2007.8.27.1) ActiveX BoF Exploit
No description provided by source. !-- Yahoo! Messenger YVerInfo.dll = 2007.8.27.1 ActiveX Control Buffer Overflows update YM : http://messenger.yahoo.com/securityupdate.php?id=082907 Functions : fvcom or info; RegKey Safe for Script: True RegKey Safe for Init: True - that functions are safely...
Macromedia ColdFusion MX 6.0 Error Message Path Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7443/info A vulnerability has been reported for Macromedia ColdFusion MX that may reveal the physical path information to attackers. When certain malformed URL requests are received by the server, an error message is...
Scrapland <= 1.0 Server Termination Denial of Service Exploit
No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h include time.h ifdef WIN32 include winsock.h / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include string.h...
PHPMySpace Gold 8.10 Article.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/23602/info phpMySpace Gold is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromi...
ASP Simple Blog 3.0 - Upload shell Vulnerability
No description provided by source...
TopList <= 1.3.8 (phpBB Hack) Remote Inclusion Exploit
No description provided by source. TopList Hack for PHPBB = 1.3.8 Remote File Inclusion Based on http://milw0rm.com/exploits/1722 Bug found by : Oo No more uploading php shells !!! This is my way of php include exploitation !!! Learn to play with sockets !!! FOXMULDER [email protected]...
BigTree CMS 4.0 RC2 - Multiple Vulnerabilities
No description provided by source...
OpenDocMan 1.2.5 index.php last_message Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/36777/info OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an...
FuseWare FuseMail 2.7 POP Mail Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/634/info There is a buffer overflow in the FuseMail POP service long USER,PASS that may allow an intruder to execute arbitrary code on the target server. FuseMail 2.7...
Bandwebsite <= 1.5 (Login) Remote Add Admin Exploit
No description provided by source...
Edimax AR-6004 ADSL Router Management Interface Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9374/info Edimax AR-6004 ADSL Routers are prone to cross-site scripting attacks via the web management interface of affected devices. An attacker could exploit this issue by enticing a victim user to follow a malicious li...
RedHat Linux 2.1 abuse.console Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/354/info Abuse is a game that is included with RedHat Linux 2.1 in the games package. The console version, abuse.console, is suid-root and will load the program sndrv as root without checking for an absolute pathname. Thi...
Science Fair In A Box - SQLi & XSS Vulnerability
No description provided by source...
ttCMS 2.2/2.3 Header.PHP Remote File Include Vulnerability
No description provided by source...
AlstraSoft Web Host Directory 1.2 - Multiple Vulnerabilities
No description provided by source. ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ==============================================================================...
autonomous lan party <= 0.98.1.0 - Remote File Inclusion Vulnerability
No description provided by source. Autonomous LAN party File iNclusion -------------------------------------------- Site:http://www.nerdclub.net/alp/ Demo:http://www.redfiles.net/cup/credits.php -------------------------------------------- Example:...
nbSMTP <= 0.99 (util.c) Client-Side Command Execution Exploit
No description provided by source. / nbSMTPfsexp.c nbSMTP v0.99 remote format string exploit by CoKi [email protected] root@nosystem:/home/coki/audi ./nbSMTPfsexp nbSMTP v0.99 remote format string exploit by CoKi [email protected] Use: ./nbSMTPfsexp options options: -t arg type of target...
CompleteFTP 3.3.0 - Remote Memory Consumption DoS
No description provided by source. !/usr/bin/perl Title: CompleteFTP v3.3.0 - Remote Memory Consumption DoS Author: Jonathan Salwan submit!shell-storm.org Web: http://www.shell-storm.org 60 sec for satured 2Go RAM use IO::Socket; print \nxCompleteFTP v3.3.0 - Remote Memory Consumption DoS\n; if...
Libxml2 Multiple Remote Stack Buffer Overflow Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/11526/info The 'libxml2' library is reported prone to multiple remote stack-based buffer-overflow vulnerabilities caused by insufficient boundary checks. Remote attackers may exploit these issues to execute arbitrary code...
Mac OS X <= 10.4.7 fetchmail Privilege Escalation Exploit (ppc)
No description provided by source. !/usr/bin/perl getpwnedmail.pl http://www.digitalmunition.com written by kf kflistsatdigitalmunitiondotcom This is a canibalized version of Kansas City POP Daemon Version 0.0 - Copyright c 1999 David Nicol [email protected] kevin-finisterres-mac-mini:...
Axis Communications 207W Network Camera Web Interface admin/restartMessage.shtml server Parameter CSRF
No description provided by source...
RARLAB WinRar 2.90/3.x UUE/XXE Invalid Filename Error Message Format String
No description provided by source. source: http://www.securityfocus.com/bid/15062/info WinRAR is prone to multiple remote vulnerabilities. These issues include a format string and a buffer overflow vulnerability. Successful exploitation may allow an attacker to execute arbitrary code on a...
Land Down Under 700/701/800/801 list.php Multiple Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/14685/info Land Down Under is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful...
Netmechanica NetDecision Dashboard Server Information Disclosure Vulnerability
No description provided by source. Title : Netmechanica NetDecision Dashboard Server Information Disclosure Vulnerability Author : Prabhu S Angadi SecPod Technologies www.secpod.com Vendor : http://www.netmechanica.com Advisory : http://secpod.org/blog/?p=478...
PHP-Nuke NukeC30 3.0 Module - 'id_catg' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28197/info The NukeC30 module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...
Windows Service Trusted Path Privilege Escalation
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require...
F5 BIG-IP SSH Private Key Exposure
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'net/ssh' cla...
Geeklog 1.3.8 Forgot Password SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8849/info An SQL injection vulnerability has been reported in the Geeklog forgot password feature introduced in Geeklog 1.3.8. Due to insufficient sanitization of user-supplied input, it is possible for remote attacks to...
Cisco User-Changeable Password (UCP) 3.3.4.12.5 - 'CSuserCGI.exe' Multiple Remote Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/28222/info Cisco User-Changeable Password UCP is prone to multiple remote vulnerabilities, including cross-site scripting and buffer-overflow vulnerabilities. Exploiting the cross-site scripting issues may help the attack...
PortailPHP 2 mod_news/goodies.php chemin Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/22381/info PortailPHP is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows an attacker to execute arbitrary...
Synactis All_IN_THE_BOX ActiveX 3.0 - Null byte File Overwrite Vuln
No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-09-006 http://www.dsecrg.com/pages/vul/show.php?id=62 Application: Synactis AllINTHEBOX ActiveX Versions Affected: 3 Vendor URL: http://synactis.com Bugs: Null byte File overwriting Exploits: YES Reported:...
Virtual PC Hypervisor Memory Protection Vulnerability
No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Virtual PC Hypervisor Memory Protection Vulnerability 1. Advisory Information Title: Virtual PC Hypervisor Memory Protection...
Windows 95/98/Enterprise Server 4/NT Server 4/Terminal Server 4/Workstation 4 Riched Buffer Overflow
No description provided by source. Windows 95/98,Windows NT Enterprise Server 4.0 SP1/SP2/SP3/SP4/SP5/SP6,Windows NT Server 4.0 SP1/SP2/SP3/SP4/SP5/SP6/SP6a,Windows NT Terminal Server 4.0 SP1/SP2/SP3/SP4/SP5/SP6,Windows NT Workstation 4.0 SP1/SP2/SP3/SP4/SP5/SP6/SP6a Riched Buffer Overflow...
wh-em.com upload 7.0 Insecure Cookie Authentication Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/38610/info wh-em.com upload is prone to an authentication-bypass vulnerability because it fails to adequately verify user-supplied input used for cookie-based authentication. Attackers can exploit this vulnerability to ga...
BisonFTP Server <= 3.5 - Remote Buffer Overflow Exploit (MSF)
No description provided by source. Title : BisonFTP Server Remote Buffer Overflow Exploit Author : Veerendra G.G SecPod Technologies www.secpod.com Advisory : http://secpod.org/blog/?p=384 http://secpod.org/msf/bisonserverbof.rb Version : BisonFTP Server = v3.5 Date : 09/07/2011 $Id:...
CityPost PHP LNKX 52.0 Message.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13255/info CityPost PHP LNKX is affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'message.php' script. An attacker may...
SimpleBlog <= 2.0 (comments.asp) Remote SQL Injection Vulnerability
No description provided by source. SimpleBlog 2.0 = comments.asp SQL Injection Exploit - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Credit by | Chironex Fleckeri Mail | [email protected] Googledork | Powered By SimpleBlog 2.0 - - - - - - - - - - - - - - - - - - -...