Advanced File Vault(eSellerateControl350.dll) Activex Heap Spray 0day

No description provided by source. // Exploit Title: Advanced File VaulteSellerateControl350.dll Activex Heap Spray 0-day // Date: 08-08-2010 // Author: ThE g0bL!N // Version: 0-day // Tested on: xp sp2 html script language=JavaScript defer var sCode =...

Huawei Technologies Internet Mobile - Unicode SEH Exploit

No description provided by source. !/usr/bin/perl Souhail Hammou - Independant Security Researcher & Penetration Tester . Facebook : www.facebook.com/dark.puzzle.sec E-mail : [email protected] Greetings to all moroccan researchers and white hats . Vulnerable : Etisalat , Vodafone , Meditel ,...

MySQL Windows Remote System Level Exploit (Stuxnet technique) 0day

No description provided by source. MySQL Scanner & MySQL Server for Windows Remote SYSTEM Level Exploit Version 1.0 By Kingcope In the Year of 2012 http://www.exploit-db.com/sploits/23083.zip use this on a fast scan server! How to use. pnscan: the file accounts holds the user/password combination...

Winamp <= 5.04 Skin File (.wsz) Remote Code Execution Exploit

No description provided by source. This 0day exploit is known to be circulating in the wild There is no patch for this vulnerability - Do not use Winamp ! http://www.milw0rm.com/sploits/skinhead.rar 171 Ko index.html ----------- html head /head frameset rows=,1 framespacing=0 border=0...

PHP 6.0 Dev str_transliterate() 0Day Buffer Overflow Exploit

No description provided by source. ?php errorreporting0; PHP 6.0 Dev strtransliterate 0Day Buffer Overflow Exploit Tested on WIN XP HEB SP3, Apache, PHP 6.0 Dev Buffer Overflow Bug discovered by Pr0T3cT10n, [email protected] Exploited by TheLeader, Debug SP. Thanks: HDM...

Adobe Flash and Reader - 0day Exploit PoC (from the wild)

No description provided by source. Exploit-DB Note - Live POC originally found at http://qoop.org/security/poc/cve-2010-1297/ File is malicious! Taken from the wild! Beware! To decrypt the file: openssl aes-256-cbc -d -a -in adobe-0day-2010-1297.tar.enc -out adobe-0day-2010-1297.tar Password is e...

Novell eDirectory 8.8 SP5 (Post Auth) Remote BOF Exploit

No description provided by source. Exploit Title: Novell eDirectory 8.8 SP5 Post Auth Remote BOF Exploit 0day Date: 06/01/2010 Author: His0k4 & Simo36 Version: 8.8 SP5 Tested on: Windows xp sp3 Code : !usr\bin\perl use WWW::Mechanize; use HTTP::Cookies; use HTTP::Headers; $target=$ARGV0; if!$ARGV...

Ananda Image Gallery SQL Vulnerability

No description provided by source. Exploit Title:Ananda Image Gallery SQL Vulnerable Vendor url:http://www.softwebsnepal.com/ Version:n/a Price:159$ Author: L0rd CrusAd3r aka VSN [email protected] Published: 2010-06-17 Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue, S1ayer,d3c0d3r,KD and to...

VirtualDJ Trial 6.0.6 "New Year Edition" - .m3u Exploit (0day)

No description provided by source. /VirtualDJ Trial v6.0.6 New Year Edition PC 0day This is a poc for the latest VJ by fl0 fl0w Author: fl0 fl0w Tested on: Windows xp sp2 Code : exploit code/ includestdio.h includewindows.h includestring.h includegetopt.h includeunistd.h /----prototypes---/ int...

gAlan 0.2.1 - Buffer Overflow 0day Exploit

No description provided by source. !/usr/bin/perl kpasa.pl AKA gAlan Buffer Overflow 0day Exploit Jeremy Brown [email protected]//jbrownsec.blogspot.com//krakowlabs.com 12.07.2009 From Static Analysis to 0day Exploit Originally a SecurityTubeCon Presentation, which I'm guessing was canceled...

CommonSense CMS SQL Injection Vulnerability

No description provided by source. Exploit Title: CommonSense CMS Sql Injection Vulnerability Author: Pokeng Software Link: http://www.sensesites.com/ Platform / Tested on: Win/Linux category: webapps/0day Code : http://site/article.php?articleid=SQL Dork : Powered by CommonSense CMS Greetz Explo...

Kleophatra 0.1.4 0day Arbitrary Upload File Vulnerability

No description provided by source. !===========================================================================! Kleophatra 0.1.4 0day Arbitrary Upload File Vulnerability Author : Xr0b0t [email protected] Homepage : www.indonesiancoder.com | xrobot.mobi | mc-crew.net | exploit-id.com Date : 18...

Sillaj time tracking tool Authentication Bypass

No description provided by source. Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Sillaj Authentication Bypass Vendor url:http://sillaj.sourceforge.net/ Version:1 Published: 2010-07-11 Greetz to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic Bluehat, Sai, KD, M4n0j...

SigPlus Pro 3.74 - ActiveX LCDWriteString() Remote BoF JIT Spray - aslr/dep bypass

No description provided by source. html !-- =================================================================================================== SigPlus Pro v3.74 ActiveX Signature Capture LCDWriteString Remote BoF JIT Spray - aslr/dep bypass Author: mrme - @StevenSeeley Download:...

Microsoft Excel - HFPicture Record Parsing Memory Corruption (0day)

No description provided by source. ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | day 23 0day binary anlysis | | | | || / \ || | | | || ||// \/|/ ''' Title : Microsoft Excel HFPicture Record Parsing Memory Corruption 0day Version : Excel 2002 SP3 Analysis :...

Quick TFTP Pro 2.1 - Remote SEH Overflow Exploit (0day)

No description provided by source. !/usr/bin/python Quick TFTP Pro 2.1 SEH Overflow 0day Tested on Windows XP SP2. Coded by Mati Aharoni muts..at..offensive-security.com http://www.offensive-security.com/0day/quick-tftp-poc.py.txt bt quickftp.py Quick TFTP Pro 2.1 SEH Overflow 0day...

Baby Web Server 2.7.2 Vulnerbility found Denial of Service (0day)

No description provided by source. !/usr/bin/env python Author:Asheesh Kumar Mani Tripathi Created:Asheesh Kumar Mani Tripathi import socket print print Baby Web Server 2.7.2 Vulnerbility found Denial of Service print Change IP to Victim Server s.connect127.0.0.1,80 print Author: Asheesh Kumar Ma...

HomeSeer HS2 and HomeSeer PRO Multiple Vulnerabilities

No description provided by source. HomeSeer Home Automation Software Multiple Web Vulnerabilities 0day Date: 3/6/12 Author: SilentDream Software Link: http://www.homeseer.com/pub/setuphs25049.exe Version: 2.5.0.49 Tested on: Win XP CERT VU796883: http://www.kb.cert.org/vuls/id/796883 Note: This...

Microsoft MSHTML.DLL CTIMEOUTEVENTLIST::INSERTINTOTIMEOUTLIST Memory Leak (0day)

No description provided by source...

WordPress image-symlinks Plugin Arbitrary File Upload Vulnerability

Author = X-Bruno E-mail = email protected Facebook = http://fb.me/Inj3ct.Bruno Google Dork = inurl:/wp-content/plugins/image-symlinks/ Usage Info = Exploit Info : The attacker can uplaod file/shell.php "php" // Allowed file extensions "/uploadify/"; // The path were we will save the file getcwd m...