Vote-Pro 4.0 - poll_frame.php?poll_id Remote Code Execution

Vote-Pro 4.0 - pollframe.php?pollid Remote Code Execution r0ut3r Presents... Another r0ut3r discovery! writ3r at gmail.com Vote-Pro Code Injection 0day Exploit Software: Vote-Pro 4.0 Vendor: http://www.vote-pro.com/ Released: 2007/01/23 Discovered & Exploit By: r0ut3r writ3r at gmail.com...

OmniWeb 5.5.1 Javascript alert() Remote Format String PoC

Exploit for macOS platform in category dos / poc ========================================================= OmniWeb 5.5.1 Javascript alert Remote Format String PoC ========================================================= MOAB-07-01-2007 / LMH / function boom var str = 'A'; while str.length...

QUOTE&ORDERING SYSTEM 1.0 (ordernum) Multiple Vulnerabilities

Exploit for unknown platform in category web applications ============================================================= QUOTE&ORDERING SYSTEM 1.0 ordernum Multiple Vulnerabilities ============================================================= Title : QUOTE&ORDERING SYSTEM 1.0 ordernum Multiple...

WinZIP 10.0 FileView ActiveX Controls Remote Overflow Exploit

Exploit for unknown platform in category remote exploits ============================================================= WinZIP 10.0 FileView ActiveX Controls Remote Overflow Exploit ============================================================= / ---=== winzip-exploit.html XiaoHui : 76693223at163co...

Macromedia Shockwave 10 (SwDir.dll) Internet Explorer Denial of Service

Exploit for unknown platform in category dos / poc ======================================================================= Macromedia Shockwave 10 SwDir.dll Internet Explorer Denial of Service ======================================================================= argCount = 1 arg1=String1000000,...

Microsoft Windows - NAT Helper Components 'ipnathlp.dll' Remote Denial of Service

!/usr/bin/python Microsoft Windows NAT Helper Components ipnathlp.dll 0day Remote DoS Exploit Bug discovered by h07 Tested on XP SP2 Polish Details: Exploit192.168.0.2 -- Microsoft NAT192.168.0.1 -- ..Internet.. Process svchost.exe, module ipnathlp -- MOV DL, EAX Exception C0000005 ACCESSVIOLATIO...

IncCMS Core <= 1.0.0 (settings.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ===================================================================== IncCMS Core = 1.0.0 settings.php Remote File Include Vulnerability ===================================================================== ::::::::: :::::::::: ::: :::...

cPanel <= 10.8.x (cpwrap via mysqladmin) Local Root Exploit (php)

Exploit for unknown platform in category web applications ================================================================= cPanel cPanel Sorry Safe-mode Is On Script Not Work On This Server "; echo "Powered By Ashiyane Security Corporation www.Ashiyane.ir"; exit; $disablef =...

Quake 3 Engine Client CS_ITEMS Remote Overflow Exploit (Win32)

Exploit for unknown platform in category dos / poc ============================================================== Quake 3 Engine Client CSITEMS Remote Overflow Exploit Win32 ============================================================== / Quake 3 Engine Client CSITEMS Remote Stack Overflow Exploi...

CesarFTP099g-py.txt

!/usr/bin/python CesarFtp 0.99g 0day Exploit Proof of Concept: execute calc.exe Tested on XP sp2 polish Bug found by h07 [email protected] Date: 10.06.2006 from socket import shellcode = execute calc.exe "\x31\xc9\x83\xe9\xdb\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\xd8"...

linux/x86 execve("/bin/sh", ["/bin/sh", NULL]) 25 bytes

Exploit for linux/x86 platform in category shellcode ======================================================= linux/x86 execve"/bin/sh", "/bin/sh", NULL 25 bytes ======================================================= / Linux/x86 execve"/bin/sh", "/bin/sh", NULL - 25 bytes - email protected / char...

Apple Mac OS X (/usr/bin/passwd) Custom Passwd Local Root Exploit

Exploit for macOS platform in category local exploits ================================================================= Apple Mac OS X /usr/bin/passwd Custom Passwd Local Root Exploit ================================================================= !/usr/bin/perl /usr/bin/passwdOSX: local root...

Invision Power Board Army System Mod 2.1 SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================== Invision Power Board Army System Mod 2.1 SQL Injection Exploit ============================================================== ?php / --------------------------- EXPLOIT...

Snort <= 2.4.2 Back Orifice Pre-Preprocessor Remote Exploit (4)

Exploit for linux platform in category remote exploits =============================================================== Snort hey xwings 03:07 why don't you come up and see me sometime? Tested on : Linux debian24 2.4.27-2-386 1 Mon May 16 16:47:51 JST 2005 i686 GNU/Linux gcc version 3.3.5 Debian...

windows 9x/NT/2k/XP PEB method 29 bytes

Exploit for win32 platform in category shellcode ======================================= Windows 9x/NT/2k/XP PEB method 29 bytes ======================================= // // PEB way of getting kernel32 imagebase by loco. // Compatible with all Win9x/NT based operating systems. // // Gives kernel...

Sudo 1.3.1 - 1.6.8p Pathname Validation Local Root Exploit (openbsd)

Exploit for bsd platform in category local exploits ==================================================================== Sudo 1.3.1 - 1.6.8p Pathname Validation Local Root Exploit openbsd ==================================================================== include include include include include...

firefox0day.php.txt

------------------------------------- exploit.htm ------------------------------------- // FrSIRT Comment - This is a 0day exploit/vulnerability unpatched // If a user clicks anywhere on a specially crafted page, this code will // automatically create and execute a malicious batch/exe file. // //...

PhotoPost Arbitrary Data Remote Exploit

No description provided by source. !/usr/bin/perl PhotoPost Arbitrary Data Exploit -------------------------------- INFPG - Hacking&Security Research Use first the exploit code,then You'll get admin MD5 hash and user name on your mail. Greats: Infam0us Gr0up...

Aztek Forum 4.0 - myadmin.php Database Dumper

Aztek Forum 4.0 - myadmin.php Database Dumper / Changed line 81 - Tested and working /str0ke / / LOTFREE Team presents : Forum-Aztek v4.0 4nd pr0b4bly inf3ri0r Database Dump Xpl0it 0day dUd3 X- ./aztek-sploit 127.0.0.1 admin forum HTTP/1.1 200 OK Date: Sat, 05 Mar 2005 22:18:13 GMT Server:...

freebsd/x86 kldload /tmp/o.o 74 bytes

Exploit for freebsd/x86 platform in category shellcode ===================================== freebsd/x86 kldload /tmp/o.o 74 bytes ===================================== / The kldload shellcode setuid0 loads /tmp/o.o kernel module Size 74 bytes OS FreeBSD /rootteam/dev0id www.sysworld.net...