UUSee ReliPlayer - ActiveX Remote Execution (PoC)

Exploit Title: UUSee ReliPlayer ActiveX Remote Exec 0day POC Author: superli Version: 2008 Tested on: xpsp3 ie6 Code : https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/11064.zip uusee.zip...

Flashget 3.x IEHelper remote exec 0day poc

No description provided by source. Exploit Title:flashget 3.x IEHelper remote exec 0day poc Date: 2010.01.05 Author: superli Version: 3.x Tested on: xp sp3 Code : object id=TestObj classid="CLSID:C6262DCE-6E64-45D2-B080-801F1E298AC2" style="width:100;height:350"/object...

AutoIndex PHP Script (index.php) Directory Traversal Vulnerability

Exploit for unknown platform in category web applications ================================================================== AutoIndex PHP Script index.php Directory Traversal Vulnerability ================================================================== ? Script: AutoIndex PHP Script ? Languag...

JcomBand toolbar on IE ActiveX Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ====================================================== JcomBand toolbar on IE ActiveX Buffer Overflow Exploit ====================================================== JcomBand Exploit heap spray // Author: germayax & D3V!L FUCKER // Software...

flashget 3.x IEHelper remote exec 0day poc

Exploit for unknown platform in category remote exploits ========================================== flashget 3.x IEHelper remote exec 0day poc ========================================== Exploit Title:flashget 3.x IEHelper remote exec 0day poc Date: 2010.01.05 Author: superli Version: 3.x Tested o...

FlashGet 3.x - IEHelper Remote Execution (PoC)

Exploit Title:flashget 3.x IEHelper remote exec 0day poc Date: 2010.01.05 Author: superli Version: 3.x Tested on: xp sp3 Code :...

Flashget 3.x IEHelper Remote Execution

Exploit Title:flashget 3.x IEHelper remote exec 0day poc Date: 2010.01.05 Author: superli Software Link: http://down5.flashget.com/flashget3.3.0.1092en.exe Version: 3.x Tested on: xp sp3 Code :...

VirtualDJ Trial v6.0.6 "New Year Edition" m3u Exploit (0day)

No description provided by source. /VirtualDJ Trial v6.0.6 "New Year Edition" PC 0day This is a poc for the latest VJ by fl0 fl0w Author: fl0 fl0w Tested on: Windows xp sp2 Code : exploit code/ includestdio.h includewindows.h includestring.h includegetopt.h includeunistd.h /----prototypes---/ int...

Ninja Blog v4.8 Multiple Vulnerabilities

Exploit for unknown platform in category web applications ======================================== Ninja Blog v4.8 Multiple Vulnerabilities ======================================== ======================================================================================== | Title : Ninja Blog v4.8...

W-Agora v.4.2.1 Multiple Vulnerabilities

Exploit for unknown platform in category web applications ======================================== W-Agora v.4.2.1 Multiple Vulnerabilities ======================================== ======================================================================================== | Title : W-Agora v.4.2.1...

WorldPay Script Shop (productdetail) SQL Injection Exploit

Exploit for unknown platform in category web applications ========================================================== WorldPay Script Shop productdetail SQL Injection Exploit ========================================================== ============================================ | WorldPay Script...

VirtualDJ Trial 6.0.6 NYE Exploit

/VirtualDJ Trial v6.0.6 "New Year Edition" PC 0day This is a poc for the latest VJ by fl0 fl0w Author: fl0 fl0w Tested on: Windows xp sp2 Code : exploit code/ include include include include include /----prototypes---/ int fileCreatechar; int bufferWrite; int cpychar,char; char path;...

迅雷5 XPPlayer Activex控件远程代码执行0day漏洞

Xunlei 是一款在线加速下载程序。更多详细信息请参考： http://www.xunlei.com F3E70CEA-956E-49CC-B444-73AFE593AD7F Xunlei 提供的XPPlayer ActiveX控件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 问题存在于DapFileSize，VodUrl等方法处理中，由于对参数缺少充分过滤，构建恶意WEB页，诱使用户访问，可导致以应用程序权限执行任意指令。 Xunlei5.9.14.1246以下所有版本 使用网际快车或QQ旋风代替迅雷下载 www.xunlei.com...

Joomla Bamboo Simpla Admin Template SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== Joomla Bamboo Simpla Admin Template SQL Injection Vulnerability =============================================================== ? ?????????????????????????In The Name Of Allah...

Joomla Component com_aprice Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================= Joomla Component comaprice Blind SQL Injection Exploit ======================================================= 1 $url = $argv1; $r = strlenfilegetcontents$url."+and+1=1--"; echo...

Elite Gaming Ladders v3.0 SQL Injection Exploit

Exploit for unknown platform in category web applications =============================================== Elite Gaming Ladders v3.0 SQL Injection Exploit =============================================== Exploit Title: Elite Gaming Ladders v3.0 SQL Injection Exploit Date: January 3rd, 2010 Author:...

Joomla Component com_countries SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================== Joomla Component comcountries SQL Injection Vulnerability ========================================================== Joomla Component comcountries SQL Injection Vulnerability Autho...

MP4 Player 4.0 Local Crash Poc

Exploit for unknown platform in category dos / poc ============================== MP4 Player 4.0 Local Crash Poc ============================== Title: MP4 Player 4.0 Local Crash Poc CVE-ID: OSVDB-ID: Author: SarBoT511 Published: 2010-01-02 Verified: no view source print? !usr/bin/perl Exploits...

VirtualDJ Trial v6.0.6 "New Year Edition" m3u Exploit (0day)

Exploit for unknown platform in category dos / poc ============================================================ VirtualDJ Trial v6.0.6 "New Year Edition" m3u Exploit 0day ============================================================ Title: VirtualDJ Trial v6.0.6 "New Year Edition" m3u Exploit 0day...

SuperLink Script <= 1.0 (id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================== SuperLink Script = 1.0 id SQL Injection Vulnerability ======================================================== ? Script: SuperLink Script 1.0 ? Language: PHP ? Vendor...