Trouble Ticket Software - 'ttx.cgi' Arbitrary File Download

Exploit Title: Trouble Ticket Software 0Day Date: 3/12/2010 Author: n01d Software Link: http://www.troubleticketexpress.com Version: TTX v3.0.640 Tested on: =3.0.640 / \ / | | | | ' \ | | | || | / | | | | || || || || | | || || / || ,| Bob @ http://n01d.com Type: Trouble Ticket Software 0Day...

ZippHo 3.0.6 (.zip) 0day stack buffer overflow PoC exploit

Exploit for windows platform in category local exploits...

PHP xmlrpc Extension Multiple Remote Denial of Service Vulnerabilities

Exploit for multiple platform in category dos / poc ====================================================================== PHP xmlrpc Extension Multiple Remote Denial of Service Vulnerabilities ====================================================================== Vulnerable: PHP PHP 5.3.1 PHP PH...

QuickZip 0day detailed write-up

In case some of you missed it - I published 2 articles on the Offensive Security Blog last one was published a few hours ago, explaining the process of building a not so typical SEH based exploit for a QuickZip 0day vulnerability. Part 1 :...

PHP-Nuke ratedownload SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================= PHP-Nuke ratedownload SQL Injection Vulnerability ================================================= =========================================================================== Topic :...

WFTPD 3.3 Remote REST DoS Exploit

Exploit for linux platform in category dos / poc ================================= WFTPD 3.3 Remote REST DoS Exploit ================================= WFTPD 3.3 unhandled exception xdmnt 2010 -- coding: windows-1252 -- import socket import sys, time def helpinfo: print "Usage: wftpdkill \n" def...

Sun Java System Communications Express Multiple HTML Injection Vuln

Exploit for unknown platform in category web applications ============================================================================== Sun Java System Communications Express Multiple HTML Injection Vulnerabilities ============================================================================== As...

INTERSPIRE SHOPPING CART 5.5.4 Ultimate Edition backup dump Vuln

Exploit for unknown platform in category web applications ========================================================================= INTERSPIRE SHOPPING CART 5.5.4 Ultimate Edition backup dump Vulnerability =========================================================================...

Phenix v3.5b SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================== Phenix v3.5b SQL Injection Vulnerability ======================================== The ItSecTeam has discovered a new Multiple bug in phenix Lastest Version 35b and will be glad to report and public ...

Liquid XML Studio 2010 <= v8.061970 - OpenFile() Remote Heap Overflow

Exploit for unknown platform in category remote exploits ====================================================================================================== Liquid XML Studio 2010 !-- |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / /...

Joomla Component com_seek SQL Injection Vulnerability

Exploit for unknown platform in category web applications ===================================================== Joomla Component comseek SQL Injection Vulnerability ===================================================== InformatioN Title : Joomla Component comseek SQL Injection Author : DevilZ TM ...

Yahoo Player v1.0 (.m3u) Buffer Overflow Exploit (direct EIP overwrite)

Exploit for windows platform in category local exploits ======================================================================= Yahoo Player v1.0 .m3u Buffer Overflow Exploit direct EIP overwrite ======================================================================= Title: Yahoo Player v1.0 .m3u...

Apple Safari history search <= Code Execution Exploit PoC

Exploit for unknown platform in category remote exploits ========================================================= Apple Safari history search function Dick window.open'safari:historysearch?q=%2A"&p=1&s=1'; window.setTimeout"location.href='mailto:'",6666; Suck Please... br...

Xbtit v2.0.0 SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================== Xbtit v2.0.0 SQL Injection Vulnerability ======================================== Title : Xbtit SQL Injection Vulnerability Author : Ctacok Homepage : http://ctacok.ru/ Vulnerable File :...

Zoomla! By the waves of CMS3. 2 0day-vulnerability warning-the black bar safety net

Zoomla! By wave CMS is a powerful website, the kernel and management system,integrated content management\OA\SNS\project\capture\mail subscriptions, and other powerful functions,based on the clanguage. net architecture development,is currently the only sync support MSSQL and Oracle, two large...

EZodiak Remote XSS Vulnerabilities

Exploit for unknown platform in category web applications ================================== EZodiak Remote XSS Vulnerabilities ================================== » ! Coder - Developer HTML / CSS / PHP / Vb6 . ! =========================================================================== === »...

Media Player classic StatsReader (.stats file) stack buffer Overflow poc

Exploit for windows platform in category dos / poc ======================================================================== Media Player classic StatsReader .stats file stack buffer Overflow poc ======================================================================== ! /usr/bin/python Media Playe...

SupeSite 6.0 direct access to webshell of 0day-vulnerability warning-the black bar safety net

For me some tasteless feeling,because the vulnerability where the file is a configuration file, if the target site has been configured through this file, then we cannot exploit the vulnerability, and timely is not configured, it is also possible unsuccessful, of course, there's still a part of th...

Anantasoft Gazelle CMS CSRF Vulnerability

Exploit for unknown platform in category web applications ========================================= Anantasoft Gazelle CMS CSRF Vulnerability ========================================= Software AnantasoftGazelleCMS Category CMS / Portals Plateform php Proof of concept Targeted URL:...

Eleanor CMS Rc5.1 Cross Site Scripting Vulnerability

Exploit for unknown platform in category web applications ==================================================== Eleanor CMS Rc5.1 Cross Site Scripting Vulnerability ==================================================== Topic : Eleanor Rc5.1 Bug tType : Cross Site Scripting Credit : ItSecTeam Remote...