what you don't know can hurt you
Home Files News &[SERVICES_TAB]About Contact Add New
Showing 76 - 100 of 335 RSS Feed

Files

JetAudio 8.0.7.1000 DLL Hijack
Posted Apr 24, 2011
Authored by 4n0nym0us

JetAudio version 8.0.7.1000 DLL hijacking exploit.

tags | exploit
systems | windows
SHA-256 | 2a3d19869416fd097b53607b9ec520982f68e2d0a08f6a71f6b80809a71b85fe
Pluck CMS Cross Site Request Forgery
Posted Apr 22, 2011
Authored by Xecuti0N3r

Pluck CMS suffers from a cross site request forgery vulnerability.

tags | exploit, csrf
SHA-256 | 4a3ee5da57221771189b1cec5c87f20586d241f89625ba9e29bfc7240aaa5653
Chartac Remote File Inclusion
Posted Apr 22, 2011
Authored by Xecuti0N3r

Chartac suffers from a remote file inclusion vulnerability.

tags | exploit, remote, code execution, file inclusion
SHA-256 | 69d9f0f4040bdc14c260807b17a99ba9840f523bbc20aa142d5225425e361e7a
i2studios Remote File Inclusion
Posted Apr 22, 2011
Authored by Xecuti0N3r

i2studios suffers from a remote file inclusion vulnerability.

tags | exploit, remote, code execution, file inclusion
SHA-256 | 53c2fa7ee722ff27bbc38d5e0637da0b42d409fcd8efefc8b1b975734e91f6b1
PHP Phar Extension Heap Overflow
Posted Apr 22, 2011
Authored by Alexander Gavrun

The PHP phar extension suffers from a heap overflow vulnerability. PHP version 5.3.6 is affected with phar extension version 1.1.1.

tags | exploit, overflow, php
SHA-256 | 544ec89352741005022c0058d23aff331f3a321cf66b89dcd94987ec75abef4e
Portafolioweb Portal SQL Injection
Posted Apr 22, 2011
Authored by eXeSoul

Portafolioweb Portal suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection
SHA-256 | 2a9bde824b4b263d0ed56fd1dd046c064a5099f35d44d20ead60704e49ad2369
360 Web Manager 3.0 File Access
Posted Apr 22, 2011
Authored by Ignacio Garrido

360 Web Manager version 3.0 suffers from arbitrary file upload, list, and deletion vulnerabilities.

tags | exploit, web, arbitrary, vulnerability, file upload
SHA-256 | 2cd56ded4a37b04d680a256ab89e46cc6e33afbbed6ec393970ef22e9861a96e
Ariadne 2.7.4 Cross Site Request Forgery
Posted Apr 22, 2011
Authored by KedAns-Dz

Ariadne version 2.7.4 suffers from a cross site request forgery vulnerability.

tags | exploit, csrf
SHA-256 | 1420b95673165a22ba10d3b283a72ff5057024bbff9b17f2a7adaaebf83d8490
Realmarketing CMS SQL Injection
Posted Apr 22, 2011
Authored by Xecuti0N3r

Realmarketing CMS suffers from remote SQL injection vulnerabilities.

tags | exploit, remote, vulnerability, sql injection
SHA-256 | 2ca8cf080a1caaa266c124a54209c16833fea2be72f13cf6f5a5144c188beb1c
Nuke Evolution Xtreme 2.0 SQL Injection / Local File Inclusion
Posted Apr 22, 2011
Authored by KedAns-Dz

Nuke Evolution Xtreme versions 2.0 and below suffer from local file inclusion and remote SQL injection vulnerabilities.

tags | exploit, remote, local, vulnerability, sql injection, file inclusion
SHA-256 | 81f21d7a53f808e2dba3fb76f8a80ec0a73da1cbceabfd681e7cbca88e600c1e
DynMedia Pro Web CMS 4.0 File Disclosure
Posted Apr 22, 2011
Authored by Mbah Semar

DynMedia Pro Web CMS version 4.0 suffers from a local file disclosure vulnerability.

tags | exploit, web, local, info disclosure
SHA-256 | 58145848e7bd575a53ea43ec1edf29107454a388b3168002cd119715680aff22
First Escort Marketing CMS SQL Injection
Posted Apr 22, 2011
Authored by NoNameMT

First Escort Marketing CMS suffers from multiple remote SQL injection vulnerabilities.

tags | exploit, remote, vulnerability, sql injection
SHA-256 | 9ee81bf0b9dc1018c8053640d7852d0f40b73a6148d1a090c28621be954ee5b2
ZenPhoto 1.4.0.3 Cross Site Scripting
Posted Apr 22, 2011
Authored by Saif El-Sherei

ZenPhoto version 1.4.0.3 suffers from a x-forwarded-for HTTP header persistent cross site scripting vulnerability.

tags | exploit, web, xss
SHA-256 | 31943b0ed4c18db66f55e83de7afe3e61f31ce216337eebd49027363f3ec405c
Buenosaires.gov.ar SQL Injection
Posted Apr 22, 2011
Authored by injec7or hell

The www.dim.buenosaires.gov.ar site suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection
SHA-256 | 6257d9410481fb45da9e7a15f48b6eff891c8850e81c3858bd35a2cdae6664af
Spreecommerce Arbitrary Command Execution
Posted Apr 22, 2011
Authored by joernchen | Site metasploit.com

This Metasploit module exploits an arbitrary command execution vulnerability in the Spreecommerce API searchlogic. Unvalidated input is called via the Ruby send method allowing command execution.

tags | exploit, arbitrary, ruby
advisories | OSVDB-71900
SHA-256 | 5f324564c756ec1163ada3b1c576328ce33a96570f58fa83e43acb3bf9d56e4e
Dolibarr 3.0.0 Local File Inclusion
Posted Apr 22, 2011
Authored by AutoSec Tools | Site autosectools.com

A local file inclusion vulnerability in Dolibarr version 3.0.0 can be exploited to include arbitrary files.

tags | exploit, arbitrary, local, file inclusion
SHA-256 | efefe3ea8c6810ee1b670ebdcaa5526092580261c7cc1260a703f0ba6ed0f2ef
Dolibarr 3.0.0 Cross Site Scripting
Posted Apr 22, 2011
Authored by AutoSec Tools | Site autosectools.com

A reflected cross site scripting vulnerability in Dolibarr version 3.0.0 can be exploited to execute arbitrary JavaScript.

tags | exploit, arbitrary, javascript, xss
SHA-256 | d40933a490a20ec99376edb8fcfdf191c2b6d3f52c7403f52d814f84aaa0429f
LightNEasy 3.2.3 SQL Injection
Posted Apr 22, 2011
Authored by AutoSec Tools | Site autosectools.com

A SQL injection vulnerability in LightNEasy version 3.2.3 can be exploited to extract arbitrary data. In some environments it may be possible to create a PHP shell.

tags | exploit, arbitrary, shell, php, sql injection
SHA-256 | 93a1ba2d22f9b3d9d4a6a2fd2808c2d63040253943fdf3ad6963492f3074085f
Todayu 2.0.8 Cross Site Scripting
Posted Apr 22, 2011
Authored by AutoSec Tools | Site autosectools.com

A reflected cross site scripting vulnerability in Todoyu version 2.0.8 can be exploited to execute arbitrary JavaScript.

tags | exploit, arbitrary, javascript, xss
SHA-256 | 8905a94f9ae11f23729ab5705029975f0e8f3fa55cf34596e953c48ab0ef4325
Web2Project 2.3 SQL Injection
Posted Apr 22, 2011
Authored by AutoSec Tools | Site autosectools.com

Web2Project version 2.3 suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection
SHA-256 | 627a34cbf590c6a115d8710e1446b9296d812a1043dbd985cf440ede9c495a61
4images 1.7.9 SQL Injection / Path Disclosure
Posted Apr 22, 2011
Authored by High-Tech Bridge SA | Site htbridge.com

4images version 1.7.9 suffers from path disclosure and remote SQL injection vulnerabilities.

tags | exploit, remote, vulnerability, sql injection, info disclosure
SHA-256 | ec8a032011134c00f1579ce76dd4a3c98b1ce8bad1a156a8c072bd2e686b630c
ZENphoto 1.4.0.3 Cross Site Scripting / Path Disclosure
Posted Apr 22, 2011
Authored by High-Tech Bridge SA | Site htbridge.com

ZENphoto version 1.4.0.3 suffers from cross site scripting and path disclosure vulnerabilities.

tags | exploit, vulnerability, xss, info disclosure
SHA-256 | 1144a0505d5a54673c9cb3ad14c501b10a5311d7e4ae93639565b1b28542d45c
KMPlayer 2.9.x (.kpl) Stack Buffer Overflow
Posted Apr 22, 2011
Authored by KedAns-Dz | Site metasploit.com

This Metasploit module exploits a stack buffer overflow in version 2.9.3. It creates a specially crafted .kpl file that may allow an attacker to execute arbitrary code.

tags | exploit, overflow, arbitrary
SHA-256 | 1e66c9f9d568d9774089d5bf49a9baec3e8c1e4757d704311cf98cbed13317ba
Ajax Category Dropdown WordPress Plugin 0.1.5 XSS / SQL Injection
Posted Apr 22, 2011
Authored by High-Tech Bridge SA | Site htbridge.com

Ajax Category Dropdown WordPress plugin version 0.1.5 suffers from cross site scripting and remote SQL injection vulnerabilities.

tags | exploit, remote, vulnerability, xss, sql injection
SHA-256 | 3bfead3b1900645198cc5f249cbd8dcdbb67200bbe0729d3264ded5e247002c3
QtWeb Browser 3.7.2 Denial Of Service
Posted Apr 21, 2011
Authored by t3rm!n4t0r

QtWeb Browser version 3.7.2 denial of service exploit.

tags | exploit, denial of service
SHA-256 | 581ae9825f747c9d90efbdbf86d6b4f59c7c4189dcdaf7f197aea76418369baf
Page 4 of 14
Back23456Next

Top Authors In Last 30 Days

Recent News

News RSS Feed
Apple Suddenly Drops NSO Group Spyware Lawsuit
Posted Sep 18, 2024

tags | headline, privacy, phone, flaw, israel, spyware, apple
11 Dead, Thousands Injured In Explosive Supply Chain Attack On Hezbollah Pagers
Posted Sep 18, 2024

tags | headline, wireless, cyberwar, israel, terror, backdoor
Cops Across The World Arrest 51 In Orchestrated Takedown Of Ghost Crime Platform
Posted Sep 18, 2024

tags | headline, hacker, government, australia, cybercrime, fraud
Wait... Did Pagers Get Hacked To Blow People Up?
Posted Sep 17, 2024

tags | headline, cyberwar, israel, terror
Predator Spyware Kingpins Added To US Sanctions List
Posted Sep 17, 2024

tags | headline, hacker, government, privacy, spyware
D-Link Patches Critical Router Vulnerabilities
Posted Sep 17, 2024

tags | headline, flaw, patch
France Uses Tough, Untested Cybercrime Law To Target Durov
Posted Sep 17, 2024

tags | headline, government, cybercrime, france, social
Malware Attack Targets US-Taiwan Defense Conference
Posted Sep 17, 2024

tags | headline, government, malware, usa, china, cyberwar, taiwan, military
TikTok Is Getting Its Day In Court
Posted Sep 16, 2024

tags | headline, government, privacy, usa, phone, china, cyberwar, spyware
Ransomware Group Leaks Data Stolen From Kawasaki Motors
Posted Sep 16, 2024

tags | headline, hacker, privacy, cybercrime, data loss, cryptography
View More News →
packet storm

© 2024 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close