ASPilot Pilot Cart 7.3 (article) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== ASPilot Pilot Cart 7.3 article Remote SQL Injection Vulnerability ===================================================================...

PHPInv 0.8.0 (LFI/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ====================================================== PHPInv 0.8.0 LFI/XSS Multiple Remote Vulnerabilities ====================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...

Joomla Component GameQ <= 4.0 Remote SQL injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ Joomla Component GameQ = 4.0 Remote SQL injection Vulnerability ================================================================...

NetFTPd 4.2.2 User Authentication Remote Buffer Overflow Exploit

No description provided by source. Net-ftpd 4.2.2 user autentication b0f exploit 0day coded by Sergio 'shadown' Alvarez import struct import socket import sys import time class warftpd: def initself, host, port: self.host = host self.port = port self.bsize = 512 self.ebpaddr = 0xcacacaca...

联众世界GLIEDown2.dll Active控件多个缓冲区溢出漏洞

BUGTRAQ ID: 29118,29446 联众世界是在中国非常流行的在线游戏网站。 联众世界的游戏大厅主程序GLWorld所安装的GLIEDown2.dll ActiveX控件（CLSID：F917534D-535B-416B-8E8F-0C04756C31A8）没有正确地处理对IEStart、IEStartNative方式以及ServerList、GameInfo和GruopName属性的输入参数。如果用户受骗访问了恶意网页并向这些方式传送了特制参数的话，就可能触发堆溢出或栈溢出，导致在用户系统上执行任意指令。 利用此漏洞进行挂马的0day攻击已经出现。 GlobalLink...

MDaemon <= 9.6.5 Multiple Remote Buffer Overflow Exploit PoC

Exploit for unknown platform in category dos / poc ============================================================ MDaemon = 9.6.5 Multiple Remote Buffer Overflow Exploit PoC ============================================================ MDaemon == v9.6.5 Multiple Remote Buffer Overflow Vendor Site:...

Social Site Generator (path) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================ Social Site Generator path Remote File Inclusion Vulnerability ================================================================ Application Name : Social Site Generator...

FLASH 0DAY detailed analysis and summary!- Vulnerability warning-the black bar safety net

By: the racle Notes: ------------------------------------------ First must thank X. G. C. Team OPEN in a few key places to give my analysis,solution help. And we Forum several brothers to help. In the end, I only put this stuff to analyze it.. ------------------------------------------ The recent...

Adobe Acrobat Reader <= 8.1.2 Malformed PDF Remote DOS PoC

Exploit for unknown platform in category dos / poc ========================================================== Adobe Acrobat Reader = 8.1.2 Malformed PDF Remote DOS PoC ========================================================== Adobe Acrobat Reader = 8.1.2 Reader Remote Denial Of Service the reade...

Joomla Component Artist (idgalery) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== Joomla Component Artist idgalery SQL Injection Vulnerability ============================================================== Joomla Component Artist Remote Sql Injection Down :...

CA Internet Security Suite 2008 SaveToFile() File Corruption PoC

Exploit for unknown platform in category dos / poc ================================================================ CA Internet Security Suite 2008 SaveToFile File Corruption PoC ================================================================ filePath="..............\boot.ini"...

plusPHP URL Shortening Software 1.6 Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================================= plusPHP URL Shortening Software 1.6 Remote File Inclusion Vulnerability ======================================================================= Title: plusPHP Multi-Us...

PHP AGTC-Membership System <= 1.1a Arbitrary Add-Admin Exploit

Exploit for unknown platform in category web applications ============================================================== PHP AGTC-Membership System ; print "\nAdmin Usernamecreate's your admin username: "; chompmy $usr=; print "\nAdmin Passwordcreate's your admin password: "; chompmy $pwd=; my...

Symantec Altiris Client Service 6.8.378 Local Privilege Escalation Exploit

No description provided by source. // 0day PRIVATE NOT DISTRIBUTE!!! // // Symantec Altiris Client Service Local Exploit 0day // // Affected Versions : Altiris Client 6.5.248 // Altiris Client 6.5.299 // Altiris client 6.8.378 // // Alex Hernandez aka alt3kx // ahernandez at sybsecurity.com...

Symantec Altiris Client Service 6.8.378 Local Privilege Escalation Exploit

Exploit for unknown platform in category local exploits ========================================================================== Symantec Altiris Client Service 6.8.378 Local Privilege Escalation Exploit ========================================================================== // 0day PRIVATE...

Symantec Altiris Client Service 6.8.378 - Local Privilege Escalation

// 0day PRIVATE NOT DISTRIBUTE!!! // // Symantec Altiris Client Service Local Exploit 0day // // Affected Versions : Altiris Client 6.5.248 // Altiris Client 6.5.299 // Altiris client 6.8.378 // // Alex Hernandez aka alt3kx // ahernandez at sybsecurity.com // // Eduardo Vela aka sirdarckcat //...

symantec-escalate.txt

// 0day PRIVATE NOT DISTRIBUTE!!! // // Symantec Altiris Client Service Local Exploit 0day // // Affected Versions : Altiris Client 6.5.248 // Altiris Client 6.5.299 // Altiris client 6.8.378 // // Alex Hernandez aka alt3kx // ahernandez at sybsecurity.com // // Eduardo Vela aka sirdarckcat //...

Web Group Communication Center (WGCC) <= 1.0.3 SQL Injection Vuln

Exploit for unknown platform in category web applications ================================================================= Web Group Communication Center WGCC = 1.0.3 SQL Injection Vuln ================================================================= Title : Web Group Communication Center XSS/S...

ZeusCart <= 2.0 (category_list.php) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== ZeusCart = 2.0 categorylist.php SQL Injection Vulnerability ===============================================================...

联众世界GLIEDown2.dll Active控件任意代码执行漏洞

联众世界是在中国非常流行的在线游戏网站。 联众世界的游戏大厅主程序GLWorld所安装的GLIEDown2.dll ActiveX控件（CLSID：F917534D-535B-416B-8E8F-0C04756C31A8）没有正确地处理某些用户输入参数，如果用户受骗访问了恶意网页并向这些方式传送了特制参数的话，可能导致在用户系统上执行任意指令。 利用此漏洞进行挂马的0day攻击已经出现。 GlobalLink 2.8.1.2 beta 临时解决方法： 为有漏洞的控件设置Kill-Bit： Windows Registry Editor Version 5.00...