5131 matches found
openSite 0.2.2 Beta - Local File Inclusion
openSite 0.2.2 Beta - Local File Inclusion opensite-v0.2.2-beta === Local File Include vuln By n0n0x Homepage: http://priasantai.uni.cc/ Download script :http://sourceforge.net/projects/contentone/files/openSite/opensite-v0.2.2-beta/opensite-v0.2.2-beta.zip/download...
Music Animation Machine MIDI Player - Local Buffer Overflow (SEH)
Music Animation Machine MIDI Player - Local Buffer Overflow SEH Exploit Title: Music Animation Machine MIDI Player MAMX SEH BOF Date 1/4/2011 Author: Acidgen mailto:spama t hgrayhat.se Software Link: http://www.musanim.com/player/MAMPlayer2006aug19035.zip Version: 2006aug19 Release 035 Tested on:...
EUVD-2010-4318
admin/upgradeunattended.php in MantisBT before 1.2.4 allows remote attackers to obtain sensitive information via an invalid dbtype parameter, which reveals the installation path in an error message, related to an unsafe call by MantisBT to a function in the ADOdb Library for PHP...
EUVD-2010-4319
Directory traversal vulnerability in admin/upgradeunattended.php in MantisBT before 1.2.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the dbtype parameter, related to an unsafe call by MantisBT to a function in the ADOdb Library for PHP...
CoolPlayer 2.18 DEP Bypass
Exploit for windows platform in category local exploits Exploit Title: CoolPlayer 2.18 DEP Bypass Date: January 2, 2011 Author: Blake Version: 2.18 Tested on: Windows XP SP3 running in Virtualbox Uses SetProcessDEPPolicy to disable DEP for the process Thanks to mrme for the encouragement Exploit-...
SiteEngine 'module' SQL Injection Vulnerability
SiteEngine is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Многочисленные уязвимости в W-Agora
Здравствуйте 3APA3A! Сообщаю вам о найденных мною многочисленных Cross-Site Scripting, SQL DB Structure Extraction, SQL Injection и Denial of Service уязвимостях в W-Agora. XSS WASC-08:...
Wow ! Backtrack Official Website's Server Hacked By Team Injector (1337db) !
Wow ! Backtrack Official Website's Server Hacked By Team Injector ! Attack on backtrack-linux.org From 1337 Team Injector . .--. .--. .---. . .'| / | | --: --: / .-.| .-. . . | / | | | '---' --' --' ' -'--'---| ; -' Since we already tapped into exploit-db and their server lies in the same subnet...
Team Injector (1337db) Hack Into Exploit-db Website !
Team Injector Hack Into Exploit-db Website ! ================================ Data Extracted From Exploit-db's Server ! ================================ $ uname -a Linux www 2.6.32-25-server 45-Ubuntu SMP Sat Oct 16 20:06:58 UTC 2010 x8664 GNU/Linux $ id uid=33www-data gid=33www-data...
Microsoft WMITools - ActiveX Remote Command Execution
Exploit-DB Notes: Original credit goes to "牛奶坦克" via WooYun: http://www.wooyun.org/bugs/wooyun-2010-01006 //run calc.exe var shellcode =...
Microsoft WMITools - ActiveX Remote Command Execution
Microsoft WMITools - ActiveX Remote Command Execution Exploit-DB Notes: Original credit goes to "牛奶坦克" via WooYun: http://www.wooyun.org/bugs/wooyun-2010-01006 //run calc.exe var shellcode =...
Internet Explorer 8 CSS parsing vulnerability-vulnerability warning-the black bar safety net
Internet Explorer 8 is Microsoft launched a web browser, Internet Explorer 8 in parsing css when the presence of vulnerabilities may lead to remote code execution. This vulnerability was originally tick: the http://www.wooyun.org/bugs/wooyun-2010-0885 以 拒绝 服务 漏洞 报 给 exploit-db to:...
Foxit PDF Reader 4.1.1 - Title Stack Buffer Overflow (Metasploit)
$Id: foxittitlebof.rb 11353 2010-12-16 20:11:01Z egypt $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...
Новые уязвимости в Cetera eCommerce
Здравствуйте 3APA3A! Сообщаю вам о найденных мною новых Cross-Site Scripting и SQL DB Structure Extraction уязвимостях в Cetera eCommerce. XSS WASC-08: http://site/cms/templates/banner.php?bannerId=3Cscript3Ealertdocument.cookie3C/script3E SQL DB Structure Extraction WASC-13:...
IBM DB2, IBM Informix, ЛИНТЕР [Редковстречающиеся СУБД]
Intro- Буду краток: рассмотрим здесь особенности СУБД, которые попадаются на глаза довольно редко. Я расскажу о 3х из них: IBM DB2, IBM Informix и ЛИНТЕР. Также в приложении можно обнаружить эксплоиты к ним и подобранную информацию о таких субд как Apache CouchDB, Berkeley DB, CUBRID, H2,...
Trixbox langChoice PHP Local File Inclusion
$Id: $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ -- coding: utf-8 -- require 'msf/core' class...
Microsoft Internet Explorer 8 - CSS Parser Denial of Service
Microsoft Internet Explorer 8 - CSS Parser Denial of Service color:red; @import url"css.css"; @import url"css.css"; @import url"css.css"; @import url"css.css"; Exploit-DB Notes: Original credit goes to an unidentified researcher using WooYun anonymous account "路人甲". WooYun is a connection platfor...
Microsoft Internet Explorer 8 - CSS Parser Denial of Service
color:red; @import url"css.css"; @import url"css.css"; @import url"css.css"; @import url"css.css"; Exploit-DB Notes: Original credit goes to an unidentified researcher using WooYun anonymous account "路人甲". WooYun is a connection platform for vendors and security researchers:...
TFTPUtil GUI 1.4.5 - Denial of Service (Metasploit)
TFTPUtil GUI 1.4.5 - Denial of Service Metasploit Title: TFTPUtil GUI v1.4.5 Invalid Request DoS CVE-ID: OSVDB-ID: Author: Vuk Ivanovic Published: 2010-12-04 Verified: yes This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see th...
