Tugux CMS 1.2 Multiple Remote Vulnerabilities

Summary Tugux CMS is a free, open-source content Management system CMS and application that powers the entire web. Description The application suffers from multiple issues including: reflected and stored xss, sql Injection, local file inclusion, url redirection. Vulnerable parameters include:...

Xplico 0.5.7 (add.ctp) Remote XSS Vulnerability

Summary The goal of Xplico is extract from an internet traffic capture the applications data contained. For example, from a pcap file Xplico extracts each email POP, IMAP, and SMTP protocols, all HTTP contents, each VoIP call SIP, FTP, TFTP, and so on. Xplico isn’t a network protocol analyzer...

QtWeb Internet Browser 2.0 (build 043) Remote Denial of Service Exploit (smile)

Summary QtWeb is compact, portable and secure web browser having some unique UI and privacy features. QtWeb is an open source project based on Nokia's Qt framework former Trolltech and Apple's WebKit rendering engine the same as being used in Apple Safari and Google Chrome. Description QtWeb...

MantisBT <=1.2.3 (db_type) Cross-Site Scripting & Path Disclosure Vulnerability

Summary MantisBT is a free popular web-based bugtracking system. It is written in the PHP scripting language and works with MySQL, MS SQL, and PostgreSQL databases and a webserver. MantisBT has been installed on Windows, Linux, Mac OS, OS/2, and others. Almost any web browser should be able to...

Unsniff Network Analyzer 1.0 (usnf) Local Heap Overflow PoC

Summary Dont just look at hex dumps and protocol trees. With Unsniff Network Analyzer, you can view network traffic at various levels of detail. View high level objects like images, video, HTML pages, VOIP calls, drill down to individual TCP sessions, then onto reassembled PDUs, then finally to...

Got All Media 7.0.0.3 (t00t) Remote Denial of Service Exploit

Summary Got All Media is a Home theater PC application for Microsoft Windows platforms. Description Got All Media is exposed to a remote denial of service issue when processing URI requests. This issue occurs when the application handles an HTTP GET request over TCP port 5550. !/usr/local/bin/per...

J. River Media Jukebox 12 MP3 File Handling Remote Heap Overflow PoC

Summary Media Jukebox 12 is a media player application for playing various media files on a Windows machine. Description Media Jukebox 12 suffers from a heap overflow vulnerability when processing .mp3 files and its metadata ID3 tags. When a malicious .mp3 file is played the application pops out ...

iManager Plugin v1.2.8 (d) Remote Arbitrary File Deletion Vulnerability

Summary With iManager you can manage your files/images on your webserver, and it provides user interface to most of the phpThumb functions. It works either stand-alone or as a plugin to WYSIWYG editors like tinyMCE, SPAW, htmlAREA, Xinha and FCKeditor. Description Input passed to the 'd' paramete...

phpBugTracker 1.0.5 Multiple Reflected XSS Vulnerabilities

Summary phpBugTracker is a web-based bug tracker with functionality similar to other issue tracking systems, such as Bugzilla. Design focuses on separating the presentation, application, and database layers. phpBugTracker is lightweight and easy to install, operate and administer. Most text can b...

Deimos Kasa <= 2.58 (table) Local Integer Overflow Vulnerability

Summary Deimos Kasa is a Windows restaurant management software. Description Deimos Kasa is prone to an integer overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input in the table field. Successfully exploiting these issues may allow local attackers to...