River CMS version 1.0 SQL Injection / Authentication Bypass Vulnerability

Exploit for unknown platform in category web applications ========================================================================= River CMS version 1.0 SQL Injection / Authentication Bypass Vulnerability ========================================================================= Application Info:...

Friendly-Tech FriendlyTR69 CPE Remote Management v2.8.9 SQL Injection

Exploit for unknown platform in category web applications =================================================================================== Friendly-Tech FriendlyTR69 CPE Remote Management v2.8.9 SQL Injection Vulnerability...

win32/xp sp3 (Ru) IsDebuggerPresent() 9 bytes

Exploit for win32 platform in category shellcode ============================================= win32/xp sp3 Ru IsDebuggerPresent 9 bytes ============================================= Tested on Windows XP Pro Rus sp3. Should work anywhere, starting with WinNT. 33 C0 xor eax,eax 64 8B 50 30 mov...

JAD java decompiler 1.5.8g (argument) Local Crash Vulnerability

Exploit for unknown platform in category local exploits =============================================================== JAD java decompiler 1.5.8g argument Local Crash Vulnerability =============================================================== !/usr/bin/env python JAD java decompiler 1.5.8g...

Lenovo Hotkey Driver <= v5.33 Privilege Escalation Exploit

Exploit for unknown platform in category local exploits ========================================================== Lenovo Hotkey Driver in Lenovo Hotkey Driver and Access Connections version =v5.33 Impact: A privilege escalation attack can be used as a backdoor to bypass login and run arbitrary...

Todoo Forum 2.0 Cross Site Scripting Vulnerability

Exploit for unknown platform in category web applications ================================================== Todoo Forum 2.0 Cross Site Scripting Vulnerability ================================================== + Note : Tribute to the martyrs of Gaza . ========== + Todoo Forum 2.0 xss Cross Site...

FreeBSD and OpenBSD 'ftpd' NULL Pointer Dereference DoS Vulnerability

Exploit for multiple platform in category dos / poc =================================================================================== FreeBSD and OpenBSD 'ftpd' NULL Pointer Dereference Denial Of Service Vulnerability...

QuickZip 4.x (.zip) 0day Local Universal Buffer Overflow PoC Exploit

Exploit for unknown platform in category local exploits ==================================================================== QuickZip 4.x .zip 0day Local Universal Buffer Overflow PoC Exploit ==================================================================== !/usr/bin/python Exploit Title :...

TopDownloads MP3 Player 1.0 m3u Local Crash Vulnerability

Exploit for unknown platform in category local exploits ========================================================= TopDownloads MP3 Player 1.0 m3u Local Crash Vulnerability ========================================================= !/usr/bin/env python MP3 player 1.0 Local Crash Author: l3D Softwar...

AKoff MIDI Player v1.00 Buffer Overflow Exploit

Exploit for unknown platform in category dos / poc =============================================== AKoff MIDI Player v1.00 Buffer Overflow Exploit =============================================== !/usr/bin/perl AKoff MIDI Player 1.00 Buffer Overflow Exploit By cr4wl3r gr33tz: str0ke, opt!x hacker,...

Cmsez(with easy)total Station system vulnerabilities, 0day analysis-vulnerability warning-the black bar safety net

Affected versions: Cmsez Web Content Manage System v2. 0. 0 Vulnerability description: File: comments.php viewimg.php Code: --------------- ? //comments include "mainfile.php"; $art=new article; //set $confirm='yes';//yes:need administrator authentication to the display,n is displayed directly in...

linux/x86 - disabled modsecurity - 64 bytes

Exploit for linux/x86 platform in category shellcode =========================================== linux/x86 - disabled modsecurity - 64 bytes =========================================== / email protected - Goodfellas Security Research Team - 2010 /usr/sbin/a2dismod mod-security2 - disable...

Opera 10.50 - integer Overflow

Opera 10.50 - integer Overflow ?php / @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ ------------------------------------------------------------------------------- Opera 10.10 - 10.50 Title: Integer overflow leading to out of bounds array access R/W 0day poc Auto...

Oracle Siebel 7.x CRM (7.7, 7.8 tested) XSS Vulnerability

Exploit for unknown platform in category web applications ========================================================= Oracle Siebel 7.x CRM 7.7, 7.8 tested XSS Vulnerability ========================================================= ===================== I. BACKGROUND ===================== Siebel...

Tod Miller Sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4 Exploit

Exploit for unknown platform in category local exploits ====================================================================== Tod Miller Sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4 exploit ====================================================================== !/bin/sh Tod Miller Sudo 1.6...

Mozilla Firefox v3.6 and Opera Long String Crash (0day) Exploit

Exploit for unknown platform in category dos / poc =============================================================== Mozilla Firefox v3.6 and Opera Long String Crash 0day Exploit =============================================================== Vulnerability This bug is a typical result when attacker...

DeDeCMS 5.5 - _SESSION[dede_admin_id] Authentication Bypass

DeDeCMS 5.5 - SESSIONdedeadminid Authentication Bypass source: https://www.securityfocus.com/bid/38469/info DeDeCMS is prone to an authentication-bypass vulnerability because it fails to adequately verify user-supplied input. Attackers can exploit this issue to gain unauthorized access to the...

DEDECMS v5. 5 GBK Final of a chicken-vulnerability-vulnerability warning-the black bar safety net

In the session. autostart turned on in the case can be arbitrarily to cover the$SESSION variable, we can forge the admin login and upload the file /DedeCmsV55-GBK-Final/uploads/include/dialog/selectsoftpost.php When uploading renamed to . php. You can bypass the check upload shell exp: | 1 2 3 4 ...

Uiga Fan Club index.php SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================== Uiga Fan Club index.php SQL Injection Vulnerability ===================================================...

ddl cms 2.1 Cross Site Scripting Vulnerability

Exploit for unknown platform in category web applications ============================================== ddl cms 2.1 Cross Site Scripting Vulnerability ============================================== DDL CMS Dork : Powered by DDL CMS Script Exploit 1- http://Site.com/ddl/blacklist.php?sitename=Xss...