Mediacoder 0.7.5.4710 Buffer Overflow Exploit

Exploit for windows platform in category local exploits ============================================= Mediacoder 0.7.5.4710 Buffer Overflow Exploit ============================================= media coder 0.7.5.4710 0 day buffer overflow exploit vulnerble application link...

Advanced File Vault(eSellerateControl350.dll) Activex Heap Spray 0-day

No description provided by source. // Exploit Title: Advanced File VaulteSellerateControl350.dll Activex Heap Spray 0-day // Date: 08-08-2010 // Author: ThE g0bL!N // Version: 0-day // Tested on: xp sp2 html script language="JavaScript" defer var sCode =...

Advanced File Vault(eSellerateControl350.dll) Activex Heap Spray

Exploit for windows platform in category remote exploits ================================================================ Advanced File VaulteSellerateControl350.dll Activex Heap Spray ================================================================ // Exploit Title: Advanced File...

Advanced File Vault - eSellerateControl350.dll ActiveX HeapSpray

Advanced File Vault - eSellerateControl350.dll ActiveX HeapSpray // Exploit Title: Advanced File VaulteSellerateControl350.dll Activex Heap Spray 0-day // Date: 08-08-2010 // Author: ThE g0bL!N // Version: 0-day // Tested on: xp sp2 var sCode =...

Advanced File Vault - 'eSellerateControl350.dll' ActiveX HeapSpray

// Exploit Title: Advanced File VaulteSellerateControl350.dll Activex Heap Spray 0-day // Date: 08-08-2010 // Author: ThE g0bL!N // Version: 0-day // Tested on: xp sp2 var sCode = unescape"%uE860%u0000%u0000%u815D%u06ED%u0000%u8A00%u1285%u0001%u0800" +...

PunBB 1.3.x / Pun_PM 1.2.6 Blind SQL Injection

!/usr/bin/perl 0-Day PunBB 526 function punpmeditmessage global $forumdb, $forumuser, $langpunpm; $errors = array; // Verify input data $query = array 'SELECT' = 'm.id as id, m.senderid as senderid, m.status as status, u.username as username, m.subject as subject, m.body as body', 'FROM' =...

Invision power board 2.x 3.x 0-day DDOS

Exploit for windows platform in category dos / poc ======================================= Invision power board 2.x 3.x 0-day DDOS ======================================= The largest Exploit Database in the world ! 2.x 3.x are effected Thanks to Inj3ct0r Cr3w Greetz to R0073r Sid3^effects L0rd...

PHP-Nuke 8.1.0.3.5b Command Execution

PHP-Nuke REMEMBER TO ADD THE FINAL / TO THE HOSTNAME "; Change Here to Set your custom shell for example use system ; my $cookies = HTTP::Cookies-new; my $request = LWP::UserAgent-new; $request-agent"Mozilla 5/0"; $request-cookiejar$cookies; END VARS sub...

Microsoft MSHTML.DLL CTIMEOUTEVENTLIST::INSERTINTOTIMEOUTLIST Memory Leak [0-Day]

No description provided by source. html !--http://reversemode.com/index.php?option=comcontent&task=view&id=68&Itemid=1 -- !-- mshtml.dll CTimeoutEventList::InsertIntoTimeoutList Timer ID Pointer leak - Rubén Santamarta www.reversemode.com -- head titlemshtml.dll...

Fedora 12 : moin-1.8.8-1.fc12 (2010-9857)

This update fixes XSS issues found in moin 1.8.7: http://moinmo.in/SecurityFixes For a list of bug fixes and new features refer to http://hg.moinmo.in/moin/1.8 /raw-file/1.8.8/docs/CHANGES Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Oxygen2PHP 1.1.3 - 'forumdisplay.php' Blind SQL Injection

!/usr/bin/perl 0-Day Oxygen2PHP newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$hex = @; return "./forumdisplay.php?fid=-1'+OR+1!=SELECT...

Oxygen2PHP <= 1.1.3 (forumdisplay.php) Blind SQL Injection Exploit

Exploit for php platform in category web applications ================================================================== Oxygen2PHP newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$h...

ShopCartDx 4.30 - 'products.php' Blind SQL Injection

!/usr/bin/perl 0-Day ShopCartDx /trafficdemos/shopcartdx1/ my $MemberID = shift or my $Method = HTTP::Request-newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://www.warwolfz.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$hex = @; return...

linux/ARM - setuid(0) & kill(-1, SIGKILL) - 28 bytes

Exploit for linux/x86 platform in category shellcode ==================================================== linux/ARM - setuid0 & kill-1, SIGKILL - 28 bytes ==================================================== / Title: Linux/ARM - setuid0 & kill-1, SIGKILL - 28 bytes Kill all processes Date:...

Unfixed XSS vulnerability at police112.com

Security researcher Xylitol, has submitted on 22/06/2010 a cross-site-scripting XSS vulnerability affecting police112.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/11/2011. It is currently...

linux/x86 bindport to 31337 with setreuid (0,0) polymorphic 131 bytes

Exploit for linux/x86 platform in category shellcode ===================================================================== linux/x86 bindport to 31337 with setreuid 0,0 polymorphic 131 bytes ===================================================================== /...

Solaris/x86 - Sync() &amp; reboot() &amp; exit(0) - 48 bytes

No description provided by source. / Title: Solaris/x86 - Sync & reboot & exit0 - 48 bytes Author: Jonathan Salwan submit AT shell-storm.org Web: http://www.shell-storm.org Twitter: http://twitter.com/shellstorm ! Database of shellcodes: http://www.shell-storm.org/shellcode/ Date: 2010-06-07...

Linux/x86-64 - setuid0 & chmod "/etc/passwd", 0777 & exit0 63 bytes

Linux/x86-64 - setuid0 & chmod "/etc/passwd", 0777 & exit0 - 63 bytes. Shellcode exploit for linx86-64 platform / Title: Linux/x86-64 - setuid0 & chmod "/etc/passwd", 0777 & exit0 - 63 bytes Date: 2010-06-17 Tested: Archlinux x8664 k2.6.33 Author: Jonathan Salwan Web: http://shell-storm.org |...

linux/x86 execute /bin/sh with setreuid 0,0 45 Bytes

Exploit for linux/x86 platform in category shellcode ==================================================== linux/x86 execute /bin/sh with setreuid 0,0 45 Bytes ==================================================== / 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' ...

Infinity 0-day Denial of Service

Exploit for windows platform in category dos / poc ================================ Infinity 0-day Denial of Service ================================ The largest Exploit Database in the world ! 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /,...