56796 matches found
SCO UnixWare < 7.1.4 p534589 (pkgadd) Local Root Exploit
No description provided by source. !/bin/ksh 04/2008: public release SCO UnixWare 7.1.4 p534589 if id -un = 'root' ; then grep -v $1-root$ /var/adm/sulog su.log cp su.def /etc/default/su cp su.log /var/adm/sulog rm -f su.def su.log woot.log else echo ------------------------------------ echo...
Alqatari group 1.0 <= 5.0 - (id) Remote SQL Injection Vulnerability
No description provided by source...
Battle Carry <= .005 Socket Termination Denial of Service Exploit
No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h include time.h ifdef WIN32 include winsock.h / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include string.h...
Advanced GuestBook 2.x Addentry.PHP Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17745/info Advanced GuestBook for phpBB is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to...
nginx [engine x] http server <= 0.6.36 - Path Draversal
No description provided by source...
Hosting Controller <= 0.6.1 Unauthenticated User Registeration (3rd)
No description provided by source. !-- Hi, I'm Soroush Dalili from GSG GrayHatz Security Group. Title: Hosting controller program have a security bug in UserProfile.asp that an authenticated user can change other's profiles. Why is it dangerous: a user can change other's email address and then us...
Microsoft IIS 2.0/3.0/4.0 ISAPI GetExtensionVersion() Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/501/info IIS and potentially other NT web servers have a vulnerability that could allow arbitrary code to be run as SYSTEM. This works because of the way the server calls the GetExtensionVersion function the first time an...
VWar <= 1.5.0 R15 - (mvcw.php) Remote File Inclusion Vulnerability
No description provided by source. '/ -.- --------------------oOO------OOo-------------------- | VWar = v1.5.0 R15 mvcw.php Remote File Inclusion | | coded by DNX | ------------------------------------------------------- ! Discovered: DNX ! Vendor: http://www.vwar.de ! Detected: 26.02.2007 !...
Mambo Open Source 4.5.1 (1.0.9) - Function.php Arbitrary Command Execution
No description provided by source. source: http://www.securityfocus.com/bid/11220/info Mambo open source is reportedly affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly validate user-supplied URI parameters. An attacker may...
AlstraSoft EPay Pro 2.0 - Remote File Include Vulnerability
No description provided by source. !/usr/bin/env python coding: utf-8 import re from pocsuite.net import req from pocsuite.poc import Output, POCBase from pocsuite.utils import register class AlstraSoftEPayProRemoteFileIncludePOCBase: vulID = '78990' version = '1' vulDate = '2005-04-01' author = ...
PHPTB Topic Board 2.0 board_o.php absolutepath Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/14592/info PHPTB is prone to multiple remote file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to...
osCSS 1.2.1 - Database Backups Disclosure
No description provided by source...
Bitweaver 1.1.1 my.php sort_mode Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/15962/info bitweaver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities...
Network Associates WebShield SMTP 4.5 Invalid Outgoing Recipient Field DoS Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1999/info Network Associates WebShield SMTP is an email virus scanner designed for internet gateways. In the event that WebShield SMTP receives an outgoing email containing six %20 followed by any character within the...
Seo Panel 2.2.0 Cookie-Rendered Persistent XSS Vulnerability
No description provided by source. 'Seo Panel' Cookie-Rendered Persistent XSS Vulnerability CVE-2010-4331 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in 'Seo Panel' page rendering which allows for unfiltered, unencrypted...
SpagoBI 4.0 - Arbitrary XSS File Upload
No description provided by source. 01. Advisory Information Title: XSS File Upload Date published: 2014-03-01 Date of last update: 2014-03-01 Vendors contacted: Engineering Group Discovered by: Christian Catalano Severity: Medium 02. Vulnerability Information CVE reference: CVE-2013-6234 CVSS v2...
DieselScripts DieselPay Index.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19623/info DieselPay is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of ...
Shadowed Portal <= 5.599 (root) Remote File Include Vulnerability
No description provided by source. ====================== C Y B E R - W A R R I O R T I M ====================== +Shadowed Portal 5.599 root Remote File Include Vulnerability ============================================================================== +Author: madhacker turkish hacker...
TYPSoft FTP Server (v 1.10) RETR CMD Denial of Service
No description provided by source. !/usr/bin/python TYPSoft FTP Server v 1.10 RETR CMD Denial Of Service CVE-2005-3294 OSVDB 19992 12/23/2010 C Emanuele Gentili [email protected] Notes: I have wrote this exploit because the code published here 1 do not work correctly. 1...
Joomla eventcal Component 1.6.4 com_eventcal Blind SQL Injection Vulnerability
No description provided by source. Founded by RoAdKiLlEr Team: Albanian Hacking Crew Contact: RoAdKiLlEratKhg-CrewdotWs Home: http://a-h-crew.net Download App:http://joomlacode.org/gf/project/eventcal/frs/ ==========ExPl0iT3d by RoAdKiLlEr========== +Description: eventCal is a calendar component...
gweb http server 0.5/0.6 - Directory Traversal vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9742/info It has been reported that GWeb is prone to a directory traversal vulnerability. The issue is due to the server's failure to properly validate user supplied http requests. This issue may allow an attacker to esca...
Magneto ICMP ActiveX 4.0.0.20 - ICMPSendEchoRequest Remote Code Execute
No description provided by source. Magneto ICMP ActiveX v4.0.0.20 ICMPSendEchoRequest Remote Code Execute Date: 2011-5-27 Discovered by: boahat vendor: http://www.magnetosoft.com/ Download: http://www.magnetosoft.com/downloads/skicmpsetup.exe SKIcmp.ocx Function ICMPSendEchoRequest ByVal...
SmarterTools SmarterMail 4.3 Subject Field HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27878/info SmarterMail is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input. Attacker-supplied HTML and script code would execute in the context of the affecte...
phpBB <= 2.0.12 Session Handling Authentication Bypass (tutorial 2)
No description provided by source. phpBB 2.0.12 Session Handling Authentication Bypass .. easy to use exploit .. YOU DON'T HAVE TO REGISTER AT THE VICTIM'S FORUM.. 1- Simply VISIT the forum using Mozilla Firefox.. and be sure that the cookie is made : 3- Close the Browser .. 2- Open the cookies.t...
phpBB Security <= 1.0.1 (php_security.php) Remote File Include Exploit
No description provided by source. !/usr/bin/perl phpBB Security 1.0.1 Class: Remote File Include Vulnerability Date: 2006/10/12 Remote: Yes Type: high Site: http://www.phpbb-amod.com/downloads/phpBBSecurity.zip...
ActiveBuyandSell 6.2 - (buyersend.asp catid) Blind SQL Injection Vulnerability
No description provided by source. ? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe: buyersend.asp catid Blind SQL Injection Vulnerability Vendor: :www.activewebsoftwares.com Software: ActiveBuyandSell v 6.2 author: R3d-D3v!L Date: 18.dec.2009 T!ME: 12:00...
DUware DUpaypal 3.0/3.1 sub.asp iSub Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/14034/info DUpaypal Pro is prone to multiple SQL-injection vulnerabilities because the fails application to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacke...
YP Portal MS-Pro Surumu 1.0 DB Download Vulnerability
No description provided by source...
McAfee ePolicy Orchestrator 4.6.0-4.6.5 (ePowner) - Multiple Vulnerabilities
No description provided by source. Exploit Title: McAfee ePolicy Orchestrator 4.6.0-4.6.5 ePowner - Multiple vulnerabilities Date: 20 November 2012 Exploit Author: [email protected] a.k.a. [email protected] Vendor Homepage: http://www.mcafee.com/uk/products/epolicy-orchestrator.aspx Version...
Comdev eCommerce 3.0 INDEX.PHP Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/12382/info Comdev eCommerce is reported prone to multiple cross-site scripting vulnerabilities. These may facilitate theft of cookie-based authentication credentials as well as other attacks. Comdev eCommerce 3.0 is...
XAMPP Phonebook.PHP Multiple Remote HTML Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/13127/info XAMPP is prone to multiple remote HTML-injection vulnerabilities because the software fails to properly sanitize user-supplied input before including it in dynamically generated web content. An attacker may...
Safari 1.x/3.0.x,Firefox 1.5.0.x/2.0.x JavaScript Multiple Fields Key Filtering Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26669/info Multiple web browsers are prone to a JavaScript key-filtering vulnerability because the browsers fail to securely handle keystroke input from users. Exploiting this issue requires that users manually type...
Litespeed Web Server 4.0.12 - (Add Admin) CSRF and XSS Vulnerabilities
No description provided by source. Author: d1dn0t didnotatmedotcom Software Link: http://www.litespeedtech.com/litespeed-web-server-downloads.html Version: 4.0.12 Greetz: Muts/Ryujin/KernelSaunders 0x00 Product Description LiteSpeed Web Server is the leading high-performance, high-scalability web...
WISE-FTP 4.1/5.5.8 FTP Client 'LIST' Command Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/29844/info WISE-FTP is prone to a directory-traversal vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting this issue allows an attacker to write arbitrary files to location...
.NET Framework EncoderParameter Integer Overflow Vulnerability
No description provided by source. ------------------------------------------------------------------------ .NET Framework EncoderParameter integer overflow vulnerability ------------------------------------------------------------------------ Yorick Koster, September 2011...
PowerZip <= 7.06.3895 Long Filename Handling Buffer Overflow Exploit
/ PowerZip 7.06 Exploit by bratax http://www.bratax.be/ Just a quick one as I was able to reuse most of my zipcentral eploit code.. Greetz to everyone I like...special greetz to mobbie and DT as they were sad I didn't mention them the previous time :p Some technical info: - Original advisory +...
Gattaca Server 2003 web.tmpl Language Variable CPU Consumption DoS
No description provided by source. source: http://www.securityfocus.com/bid/10728/info It is reported that Gattaca Server 2003 contains multiple denial of service vulnerabilities. These vulnerabilities allow a remote attacker to crash the application, denying service to legitimate users. Version...
QQPlayer cue File Buffer Overflow Exploit
No description provided by source. !/usr/bin/env python Title: QQPlayer cue File Buffer Overflow Exploit Author: Lufeng Li of Neusoft Corporation Vendor: www.qq.com Platform: Windows XPSP3 Chinese Simplified Tested: QQPlayer 2.3.696.400 Vulnerable: QQPlayer=2.3.696.400p1 Code : head = '''FILE '''...
Solaris 2.x/7.0/8 catman Race Condition Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/2149/info catman is a utility for creating preformatted man pages, distributed as part of the Solaris Operating Environment. A problem exists which could allow local users to overwrite or corrupt files owned by other user...
NVR SP2 2.0 (nvUtility.dll 1.0.14.0) - DeleteXMLFile() Inscure Method
No description provided by source. ---------------------------------------------------------------------------------------------- NVR SP2 2.0 nvUtility.Utility.1 nvUtility.dll v. 1.0.14.0 DeleteXMLFile Inscure Method url: http://www.acti.com/index.asp author: shinnai mail: shinnaiatautisticidotor...
OpenDocMan 1.2.5 xss, SQL injection
No description provided by source. Security Advisory : Multiple vulnerabilities in OpenDocMan Discovered by == Amol Naik amolnaik4atgmail.com Overview -------------- OpenDocMan is a free document management system DMS designed to comply with ISO 17025 and OIE standard for document management. It...
Ifenslave 0.0.7 Argument Local Buffer Overflow Vulnerability (3)
No description provided by source. source: http://www.securityfocus.com/bid/7682/info ifenslave for Linux has been reported prone to a buffer overflow vulnerability. The issue is reportedly due to a lack of sufficient bounds checking performed on user-supplied data before it is copied into an...
PhxContacts 0.93 contact_view.php id_contact Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/17306/info PhxContacts is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploi...
RSS-aggregator 1.0 admin/fonctions/supprimer_flux.php IdFlux Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/30016/info RSS-aggregator is prone to multiple SQL-injection and authentication-bypass vulnerabilities. A successful exploit could allow an attacker to compromise the application, access or modify data, exploit...
OpenCart 1.5.5.1 (filemanager.php) - Directory Traversal Arbitrary File Access
No description provided by source. waraxe-2013-SA098 - Directory Traversal Vulnerabilities in OpenCart 1.5.5.1 =============================================================================== Author: Janek Vind waraxe Date: 19. March 2013 Location: Estonia, Tartu Web:...
eTicket 1.5.5.2 search.php Multiple Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/27173/info eTicket is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. These vulnerabilities include multiple SQL-injection issues, a cross-site...
White Album 2.5 Pictures.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16247/info White Album is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could...
Solaris 2.5/2.6/7.0/8 ufsrestore Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1348/info Solaris is a version of the UNIX Operating System distributed by Sun Microsystems. Solaris ships with a filesystem utility called ufsrestore that is used for archive/backup retrieval. A problem with the utility...
Ultimate Auction 3.67 Item.PL Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16239/info Ultimate Auction is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitra...
Ad Board Script 1.01 - Local File Inclusion
No description provided by source. hi ------- local file include Author: ItSecTeam download from:http://www.phpkobo.com/scripts/AF201101/AF201101.zip script:Ad Board Script Version:1.01 Updated:2010-01-10 dork::D vul:/path/web/codelib/cfg/common.inc.php line 21: require res.$LANGCODE.sys.inc.php ...