This is a buffer overflow exploit for Durian Web Application Server version 3.02. It allows an attacker to execute arbitrary commands on the target system. The exploit overflows the buffer with a specially crafted payload, including a shellcode that executes the 'notepad' command.
The AlstraSoft Affiliate Network Pro is affected by multiple input-validation vulnerabilities, including cross-site scripting (XSS) and SQL injection issues. These vulnerabilities can be exploited by an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database. Successful exploitation could result in the theft of cookie-based authentication credentials, execution of arbitrary script code, and unauthorized access or modification of data.
SMS Text Messaging Enterprise is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
The application fails to properly sanitize user-supplied input, leading to multiple cross-site scripting vulnerabilities. An attacker can execute arbitrary script code in the browser of an unsuspecting user, potentially stealing authentication credentials and launching further attacks.
AlstraSoft Video Share Enterprise is affected by multiple input-validation vulnerabilities. These issues include multiple cross-site scripting vulnerabilities and multiple SQL-injection vulnerabilities. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, execute arbitrary script code in the context of the webserver process, access or modify data, or exploit latent vulnerabilities in the underlying database.
The vulnerability exists in the 'show' parameter of the 'index.php' file. An attacker can exploit this by injecting SQL queries in the 'id' parameter, potentially allowing unauthorized access to the database.
Attacker can easily change Wireless password, Reboot Router, Reset Router, Change Router's Admin Password by simply making the user visit a CSRF link.
This exploit allows an attacker to inject malicious JavaScript code into the title field of a wallpaper on the Wallpaper Script platform. When a regular member views the wallpaper, the injected code will be executed, leading to a Cross-Site Scripting (XSS) attack.
This vulnerability allows an attacker to bypass the remote login of ASPTicker 1.0 by injecting SQL queries. By exploiting this vulnerability, an attacker can gain unauthorized access to the system.
The VUPlayer 2.49 (.M3U) exploit allows for a universal buffer overflow/DEP bypass. It is triggered by opening a specially crafted .M3U file. The vulnerability allows an attacker to execute arbitrary code on the targeted system.
Services By CQR