3043 matches found
Advanced File Vault(eSellerateControl350.dll) Activex Heap Spray
Exploit for windows platform in category remote exploits ================================================================ Advanced File VaulteSellerateControl350.dll Activex Heap Spray ================================================================ // Exploit Title: Advanced File...
PunBB 1.3.x / Pun_PM 1.2.6 Blind SQL Injection
!/usr/bin/perl 0-Day PunBB 526 function punpmeditmessage global $forumdb, $forumuser, $langpunpm; $errors = array; // Verify input data $query = array 'SELECT' = 'm.id as id, m.senderid as senderid, m.status as status, u.username as username, m.subject as subject, m.body as body', 'FROM' =...
Invision power board 2.x 3.x 0-day DDOS
Exploit for windows platform in category dos / poc ======================================= Invision power board 2.x 3.x 0-day DDOS ======================================= The largest Exploit Database in the world ! 2.x 3.x are effected Thanks to Inj3ct0r Cr3w Greetz to R0073r Sid3^effects L0rd...
PHP-Nuke 8.1.0.3.5b Command Execution
PHP-Nuke REMEMBER TO ADD THE FINAL / TO THE HOSTNAME "; Change Here to Set your custom shell for example use system ; my $cookies = HTTP::Cookies-new; my $request = LWP::UserAgent-new; $request-agent"Mozilla 5/0"; $request-cookiejar$cookies; END VARS sub...
Microsoft MSHTML.DLL CTIMEOUTEVENTLIST::INSERTINTOTIMEOUTLIST Memory Leak [0-Day]
No description provided by source. html !--http://reversemode.com/index.php?option=comcontent&task=view&id=68&Itemid=1 -- !-- mshtml.dll CTimeoutEventList::InsertIntoTimeoutList Timer ID Pointer leak - Rubén Santamarta www.reversemode.com -- head titlemshtml.dll...
Fedora 12 : moin-1.8.8-1.fc12 (2010-9857)
This update fixes XSS issues found in moin 1.8.7: http://moinmo.in/SecurityFixes For a list of bug fixes and new features refer to http://hg.moinmo.in/moin/1.8 /raw-file/1.8.8/docs/CHANGES Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...
Oxygen2PHP 1.1.3 - 'forumdisplay.php' Blind SQL Injection
!/usr/bin/perl 0-Day Oxygen2PHP newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$hex = @; return "./forumdisplay.php?fid=-1'+OR+1!=SELECT...
Oxygen2PHP <= 1.1.3 (forumdisplay.php) Blind SQL Injection Exploit
Exploit for php platform in category web applications ================================================================== Oxygen2PHP newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$h...
ShopCartDx 4.30 - 'products.php' Blind SQL Injection
!/usr/bin/perl 0-Day ShopCartDx /trafficdemos/shopcartdx1/ my $MemberID = shift or my $Method = HTTP::Request-newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://www.warwolfz.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$hex = @; return...
linux/ARM - setuid(0) & kill(-1, SIGKILL) - 28 bytes
Exploit for linux/x86 platform in category shellcode ==================================================== linux/ARM - setuid0 & kill-1, SIGKILL - 28 bytes ==================================================== / Title: Linux/ARM - setuid0 & kill-1, SIGKILL - 28 bytes Kill all processes Date:...
Unfixed XSS vulnerability at police112.com
Security researcher Xylitol, has submitted on 22/06/2010 a cross-site-scripting XSS vulnerability affecting police112.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/11/2011. It is currently...
Linux/x86-64 - setuid0 & chmod "/etc/passwd", 0777 & exit0 63 bytes
Linux/x86-64 - setuid0 & chmod "/etc/passwd", 0777 & exit0 - 63 bytes. Shellcode exploit for linx86-64 platform / Title: Linux/x86-64 - setuid0 & chmod "/etc/passwd", 0777 & exit0 - 63 bytes Date: 2010-06-17 Tested: Archlinux x8664 k2.6.33 Author: Jonathan Salwan Web: http://shell-storm.org |...
linux/x86 execute /bin/sh with setreuid 0,0 45 Bytes
Exploit for linux/x86 platform in category shellcode ==================================================== linux/x86 execute /bin/sh with setreuid 0,0 45 Bytes ==================================================== / 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' ...
linux/x86 bindport to 31337 with setreuid (0,0) polymorphic 131 bytes
Exploit for linux/x86 platform in category shellcode ===================================================================== linux/x86 bindport to 31337 with setreuid 0,0 polymorphic 131 bytes ===================================================================== /...
Solaris/x86 - Sync() & reboot() & exit(0) - 48 bytes
No description provided by source. / Title: Solaris/x86 - Sync & reboot & exit0 - 48 bytes Author: Jonathan Salwan submit AT shell-storm.org Web: http://www.shell-storm.org Twitter: http://twitter.com/shellstorm ! Database of shellcodes: http://www.shell-storm.org/shellcode/ Date: 2010-06-07...
Infinity 0-day Denial of Service
Exploit for windows platform in category dos / poc ================================ Infinity 0-day Denial of Service ================================ The largest Exploit Database in the world ! 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /,...
solaris/x86 - Sync() & reboot() & exit(0) - 48 bytes
Exploit for solaris/x86 platform in category shellcode ==================================================== Solaris/x86 - Sync & reboot & exit0 - 48 bytes ==================================================== / Title: Solaris/x86 - Sync & reboot & exit0 - 48 bytes Author: Jonathan Salwan Web:...
Linux/x86 - exit(0) Shellcode (8 bytes)
Linux/x86 - exit0 Shellcode 8 bytes. Shellcode exploit for Linuxx86 platform / Name : 8 bytes sysexit0 x86 linux shellcode Date : may, 31 2010 Author : gunslinger Web : devilzc0de.com blog : gunslinger.devilzc0de.com tested on : linux debian / char bye= "\x31\xc0" / xor %eax,%eax / "\xb0\x01" / m...
solaris/x86 - Reboot() - 37 bytes
Exploit for solaris/x86 platform in category shellcode ================================= solaris/x86 - Reboot - 37 bytes ================================= / Title: Solaris/x86 - Reboot - 37 bytes Author: Jonathan Salwan Web: http://www.shell-storm.org Twitter: http://twitter.com/shellstorm Date:...
openSUSE Security Update : libpng-devel (openSUSE-SU-2010:0257-1)
Denial of service while decompressing a highly compressed huge ancillary chunk has been fixed in libpng. CVE-2010-0205 has been assigned. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...