Friendly-Tech FriendlyTR69 CPE Remote Management v2.8.9 SQL Injection

Exploit for unknown platform in category web applications =================================================================================== Friendly-Tech FriendlyTR69 CPE Remote Management v2.8.9 SQL Injection Vulnerability...

win32/xp sp3 (Ru) IsDebuggerPresent() 9 bytes

Exploit for win32 platform in category shellcode ============================================= win32/xp sp3 Ru IsDebuggerPresent 9 bytes ============================================= Tested on Windows XP Pro Rus sp3. Should work anywhere, starting with WinNT. 33 C0 xor eax,eax 64 8B 50 30 mov...

River CMS version 1.0 SQL Injection / Authentication Bypass Vulnerability

Exploit for unknown platform in category web applications ========================================================================= River CMS version 1.0 SQL Injection / Authentication Bypass Vulnerability ========================================================================= Application Info:...

JAD java decompiler 1.5.8g (argument) Local Crash Vulnerability

Exploit for unknown platform in category local exploits =============================================================== JAD java decompiler 1.5.8g argument Local Crash Vulnerability =============================================================== !/usr/bin/env python JAD java decompiler 1.5.8g...

Lenovo Hotkey Driver <= v5.33 Privilege Escalation Exploit

Exploit for unknown platform in category local exploits ========================================================== Lenovo Hotkey Driver in Lenovo Hotkey Driver and Access Connections version =v5.33 Impact: A privilege escalation attack can be used as a backdoor to bypass login and run arbitrary...

Todoo Forum 2.0 Cross Site Scripting Vulnerability

Exploit for unknown platform in category web applications ================================================== Todoo Forum 2.0 Cross Site Scripting Vulnerability ================================================== + Note : Tribute to the martyrs of Gaza . ========== + Todoo Forum 2.0 xss Cross Site...

FreeBSD and OpenBSD 'ftpd' NULL Pointer Dereference DoS Vulnerability

Exploit for multiple platform in category dos / poc =================================================================================== FreeBSD and OpenBSD 'ftpd' NULL Pointer Dereference Denial Of Service Vulnerability...

QuickZip 4.x (.zip) 0day Local Universal Buffer Overflow PoC Exploit

Exploit for unknown platform in category local exploits ==================================================================== QuickZip 4.x .zip 0day Local Universal Buffer Overflow PoC Exploit ==================================================================== !/usr/bin/python Exploit Title :...

TopDownloads MP3 Player 1.0 m3u Local Crash Vulnerability

Exploit for unknown platform in category local exploits ========================================================= TopDownloads MP3 Player 1.0 m3u Local Crash Vulnerability ========================================================= !/usr/bin/env python MP3 player 1.0 Local Crash Author: l3D Softwar...

AKoff MIDI Player v1.00 Buffer Overflow Exploit

Exploit for unknown platform in category dos / poc =============================================== AKoff MIDI Player v1.00 Buffer Overflow Exploit =============================================== !/usr/bin/perl AKoff MIDI Player 1.00 Buffer Overflow Exploit By cr4wl3r gr33tz: str0ke, opt!x hacker,...

Cmsez(with easy)total Station system vulnerabilities, 0day analysis-vulnerability warning-the black bar safety net

Affected versions: Cmsez Web Content Manage System v2. 0. 0 Vulnerability description: File: comments.php viewimg.php Code: --------------- ? //comments include "mainfile.php"; $art=new article; //set $confirm='yes';//yes:need administrator authentication to the display,n is displayed directly in...

linux/x86 - disabled modsecurity - 64 bytes

Exploit for linux/x86 platform in category shellcode =========================================== linux/x86 - disabled modsecurity - 64 bytes =========================================== / email protected - Goodfellas Security Research Team - 2010 /usr/sbin/a2dismod mod-security2 - disable...

Opera 10.50 - integer Overflow

Opera 10.50 - integer Overflow ?php / @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ ------------------------------------------------------------------------------- Opera 10.10 - 10.50 Title: Integer overflow leading to out of bounds array access R/W 0day poc Auto...

Oracle Siebel 7.x CRM (7.7, 7.8 tested) XSS Vulnerability

Exploit for unknown platform in category web applications ========================================================= Oracle Siebel 7.x CRM 7.7, 7.8 tested XSS Vulnerability ========================================================= ===================== I. BACKGROUND ===================== Siebel...

Tod Miller Sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4 Exploit

Exploit for unknown platform in category local exploits ====================================================================== Tod Miller Sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4 exploit ====================================================================== !/bin/sh Tod Miller Sudo 1.6...

Mozilla Firefox v3.6 and Opera Long String Crash (0day) Exploit

Exploit for unknown platform in category dos / poc =============================================================== Mozilla Firefox v3.6 and Opera Long String Crash 0day Exploit =============================================================== Vulnerability This bug is a typical result when attacker...

DeDeCMS 5.5 - _SESSION[dede_admin_id] Authentication Bypass

DeDeCMS 5.5 - SESSIONdedeadminid Authentication Bypass source: https://www.securityfocus.com/bid/38469/info DeDeCMS is prone to an authentication-bypass vulnerability because it fails to adequately verify user-supplied input. Attackers can exploit this issue to gain unauthorized access to the...

DEDECMS v5. 5 GBK Final of a chicken-vulnerability-vulnerability warning-the black bar safety net

In the session. autostart turned on in the case can be arbitrarily to cover the$SESSION variable, we can forge the admin login and upload the file /DedeCmsV55-GBK-Final/uploads/include/dialog/selectsoftpost.php When uploading renamed to . php. You can bypass the check upload shell exp: | 1 2 3 4 ...

Uiga Fan Club index.php SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================== Uiga Fan Club index.php SQL Injection Vulnerability ===================================================...

ddl cms 2.1 Cross Site Scripting Vulnerability

Exploit for unknown platform in category web applications ============================================== ddl cms 2.1 Cross Site Scripting Vulnerability ============================================== DDL CMS Dork : Powered by DDL CMS Script Exploit 1- http://Site.com/ddl/blacklist.php?sitename=Xss...