Hackproofing Oracle Financials 11i & R12

Hi all, Yesterday a friend of mine told me that I "forget" to share with the general public one small detail about a presentation 1 I given at the conference RootedCon 2010 2. In the presentation there is a currently working 0day against Oracle Financials R12. The 0day is too obvious and pretty...

Joomla Component com_manager 1.5.3 (id) SQL Injection Vulnerability

Exploit for php platform in category web applications =================================================================== Joomla Component commanager 1.5.3 id SQL Injection Vulnerability =================================================================== Site : http://MiXaTy.com Date : April,...

Oracle Financials R12 SQL Injection

Hi all, Yesterday a friend of mine told me that I "forget" to share with the general public one small detail about a presentation 1 I given at the conference RootedCon 2010 2. In the presentation there is a currently working 0day against Oracle Financials R12. The 0day is too obvious and pretty...

Wordpress xinha4wp xinha_core plugins File Upload Vulnerability

Exploit for php platform in category web applications =============================================================== Wordpress xinha4wp xinhacore plugins File Upload Vulnerability =============================================================== Author : Hackeri-AL Contact : h-al at hotmail dot it...

Softbiz B2B trading Marketplace Script buyers_subcategories SQL Inj

Exploit for php platform in category web applications ======================================================================================= Softbiz B2B trading Marketplace Script buyerssubcategories SQL Injection Vulnerability...

Magneto Net Resource ActiveX v4.0.0.5 NetShareEnum Exploit (Universal)

Exploit for windows platform in category remote exploits ====================================================================== Magneto Net Resource ActiveX v4.0.0.5 NetShareEnum Exploit Universal ====================================================================== 'Magneto Net Resource ActiveX...

RJ-iTop Network Vulnerability Scanner System Multiple SQL Injection Vuln

Exploit for jsp platform in category web applications =================================================================================== RJ-iTop Network Vulnerability Scanner System Multiple SQL Injection Vulnerabilities...

linux/x86 - chmod("/etc/shadow", 0666) shellcode 36 bytes

Exploit for linux/x86 platform in category shellcode ========================================================= linux/x86 - chmod"/etc/shadow", 0666 shellcode 36 bytes ========================================================= include include / by Magnefikko 14.04.2010 email protected promhyl.oz.pl...

Joomla Component com_mtfireeagle Local File Inclusion Vulnerability

Exploit for php platform in category web applications =================================================================== Joomla Component commtfireeagle Local File Inclusion Vulnerability ===================================================================...

Joomla Component com_wgpicasa Local File Inclusion Vulnerability

Exploit for php platform in category web applications ================================================================ Joomla Component comwgpicasa Local File Inclusion Vulnerability ================================================================...

linux/x86 - SLoc-DoS shellcode 55 bytes

Exploit for linux/x86 platform in category shellcode ======================================= linux/x86 - SLoc-DoS shellcode 55 bytes ======================================= include include / by Magnefikko 14.04.2010 email protected Promhyl Studies :: http://promhyl.oz.pl Subgroup: PRekambr Name: ...

Joomla Component QPersonel SQL Injection Vulnerability

No description provided by source. Exploit Title: Joomla Component QPersonel SQL Injection Vulnerability Date: 13.04.2010 Author: Valentin Category: webapps/0day Version: XSS security fix from 31.12.2009, 1.02 and before Tested on: Debian Lenny, MySQL 5 CVE : Code :...

MagnetoSoft SNTP ActiveX SntpGetReply BOF

Exploit for windows platform in category remote exploits ========================================= MagnetoSoft SNTP ActiveX SntpGetReply BOF ========================================= 'Magneto Software SNTP ActiveX SntpGetReply BOF 'Discovered by: s4squatch 'Site: www.securestate.com 'File Name =...

Foxit reader 0day-vulnerability warning-the black bar safety net

Foxit 3.2.0.303 and Before Command Execution PoC, the use of the seemingly very simple, see below As seen on Slashdot and other sites. %PDF-1.3 1 0 objendobj 2 0 objendobj 3 0 objendobj 4 0 objendobj 5 0 objendobj xref 0 6 0 0 0 0 0 0 0 0 0 0 6 5 5 3 5 f 0 0 0 0 0 0 0 0 0 9 0 0 0 0 0 n 0 0 0 0 0 ...

Vieassociative Openmairie 1.01 beta (RFI/LFI) Multiple File Include Vuln

Exploit for php platform in category web applications ================================================================================= Vieassociative Openmairie 1.01 beta RFI/LFI Multiple File Include Vulnerability =================================================================================...

My School Script Data Base Download Vulnerability

Exploit for asp platform in category web applications ================================================= My School Script Data Base Download Vulnerability ================================================= ======================================================================================== |...

Openmairie Resultat 1.11 Local File Include Vulnerability

Exploit for php platform in category web applications ========================================================= Openmairie Resultat 1.11 Local File Include Vulnerability ========================================================= The largest Exploit Database in the world !...

OnePC mySite Management Software SQL Injection

Exploit Title: OnePC mySite Management Software SQL Injection Vulnerability Date: 10.04.2010 Author: Valentin Category: webapps/0day Version: Tested on: CVE : Code : :: General information :: OnePC mySite Management Software SQL Injection Vulnerability :: by Valentin Hoebel :: [email protected]...

Blog System <= 1.5 Multiple Vulnerabilities

Exploit for php platform in category web applications =========================================== Blog System | www.DigitalWhisper.co.il Software Link: http://www.netartmedia.net/blogsystem/ | http://www.netartmedia.net/blogsystem/demo.html Version: = 1.5 Tested on: PHP Cross Site Scripting...

MagnetoSoft NetworkResources ActiveX NetSessionDel POC

Exploit for windows platform in category dos / poc ====================================================== MagnetoSoft NetworkResources ActiveX NetSessionDel POC ====================================================== 'Magneto Software Net Resource ActiveX NetSessionDel BOF 'Discovered by: s4squatc...