AiO (All into One) Flash Mixer 3 - '.afp' Crash (PoC)

!/usr/bin/perl + Bug : AiO All into One Flash Mixer 3 .afp File Crash Vulnerability Exploit + program Download : http://www.goztun.com/download/AiOFlashMixerSetup.exe + Author : theEdit0r Contact me : the3dit0ratYahoodotcoM + Greetz to all my friends + Tested on: Windows XP Pro SP3 + web site:...

ProjectButler 1.5.0 Remote File Inclusion

projectbutler - 1.5.0 offset RFI Vulnerability Author: cr4wl3r Contact: cr4wl3r4tlinuxmaildotorg Download: http://sourceforge.net/projects/projectbutler/files/projectbutler/1.5.0/ProjectButler.tar.gz Vuln : requireonce$offset."class.project.inc"; PoC :...

iWiccle 1.01 Local File Inclusion / SQL Injection

iWiccle 1.01 LFI/SQL Multiple Remote Vulnerabilities + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Download : http://www.wiccle.com/index.php?module=wiccle&show=download + Local File Inclusion - PoC's...

Mp3-Nator 2.0 - 'ListData.dat' Universal Buffer Overflow (SEH)

!/usr/bin/perl + Bug : Mp3-Nator 2.0 ListData.dat Universal Buffer Overflow Exploit SEH + Author : ThE g0bL!N Greetz to all my friends Download:http://files.brothersoft.com/mp3audio/players/mp3nator.zip Tested on: Windows XP Pro SP2 Fr Ismail: Hadi Wallah Ghir 3la Rabbi : usage: After Clicking On...

Zen Cart 1.3.8 Remote Code Execution Exploit

No description provided by source. !/usr/bin/php ?php ------- Zen Cart 1.3.8 Remote Code Execution http://www.zen-cart.com/ Zen Cart Ecommerce - putting the dream of server rooting within reach of anyone! A new version 1.3.8a is avaible on http://www.zen-cart.com/ BlackH : errorreportingEALL ^...

CVE-2009-2120

Multiple SQL injection vulnerabilities in TekBase All-in-One 3.1 allow remote authenticated users to execute arbitrary SQL commands via the 1 ids parameter to admin.php, the 2 y parameter to members.php, and other unspecified vectors. NOTE: vector 1 requires administrative access...

CVE-2009-2120

CVE-2009-2120 affects TekBase All-in-One 3.1, with multiple SQL injection vulnerabilities that let remote authenticated users execute arbitrary SQL commands. Affected vectors include the (1) ids parameter to admin.php and the (2) y parameter to members.php, among others. At least one vector is no...

CVE-2009-2120: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in TekBase All-in-One 3.1 allow remote authenticated users to execute arbitrary SQL commands via the 1 ids parameter to admin.php, the 2 y parameter to members.php, and other unspecified vectors. NOTE: vector 1 requires administrative access...

TekBase All-in-One 3.1 Multiple SQL Injection Vulnerabilities

No description provided by source. Author: n3wb0ss Date: 15/06/09 Contact: [email protected] Software: TekBase All-in-One 3.1 Vendor: tekbase.de Example: http://demo.tekbase.de/ Vendor contacted: No Risk: High I found this website on a german board, looking for another script. Looks to me, li...

PHPortal 1.0 - Insecure Cookie Handling

PHPortal 1.0 - Insecure Cookie Handling PhpPortal v1 Insecure Cookie Handling Vulnerability Author : KnocKout Special Thankz : CW All users Script : http://phportal.mertindualari.com Exploit; javascript:document.cookie="kulladi=Username;path=/"; Enter.. Go To;...

TekBase All-in-One 3.1 - Multiple SQL Injections

Author: n3wb0ss Date: 15/06/09 Contact: [email protected] Software: TekBase All-in-One 3.1 Vendor: tekbase.de Example: http://demo.tekbase.de/ Vendor contacted: No Risk: High I found this website on a german board, looking for another script. Looks to me, like a...

Realty Web-Base 1.0 SQL Injection

--------------------------------------------------------------- ------------------------------------------------------------ Realty Web-Base v1.0 listlist.php id SQL Injection Vulnerability --------------------------------------------------------------- Founder : ThE g0bL!N Home:WwW.h4ckF0u.CoM...

MDKA-2007:062 : rpmdrake

The rpmdrake package, which provides the graphical software installation and update tools rpmdrake, drakrpm-edit-media and MandrivaUpdate, included with Mandriva Linux 2007 Spring contains several bugs. These include: When installing software with rpmdrake, if packages are selected for installati...

moin-all-in-one-accessibility (1.0.0), moin-skyneta11y-pdf-remediation (1.0.0) +1 more potentially affected by CVE-2008-6548 via moin (2.0.0b5)

moin PYPI version 2.0.0b5 is affected by a known vulnerability. The following packages have a transitive dependency on moin and may be impacted: - moin-all-in-one-accessibility 1.0.0 - moin-skyneta11y-pdf-remediation 1.0.0 - moin-skynetaccessibility-scanner 1.0.0 Source cves: CVE-2008-6548 Source...

RadASM 2.2.1.5 (.RAP File) Local Stack Overflow Exploit

Exploit for unknown platform in category local exploits ======================================================= RadASM 2.2.1.5 .RAP File Local Stack Overflow Exploit ======================================================= !/usr/bin/python RadASM 2.2.1.5 .RAP File Local Stack Overflow Exploit...

Got All Media 7.0.0.3 (t00t) Remote Denial of Service Exploit

No description provided by source. !/usr/local/bin/perl Title: Got All Media 7.0.0.3 Remote Denial Of Service Exploit Product web page: http://www.gallm.com/default.aspx Vulnerability discovered by Gjoko 'LiquidWorm' Krstic liquidworm t00t gmail w00t com http://www.zeroscience.org 19.02.2009 prin...

Got All Media 7.0.0.3 (t00t) Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ============================================================= Got All Media 7.0.0.3 t00t Remote Denial of Service Exploit ============================================================= !/usr/local/bin/perl Title: Got All Media 7.0.0.3 Remote Denia...

Osmodia Bulletin Board 1.x (admin.txt) File Disclosure Vulnerability

Exploit for unknown platform in category web applications ==================================================================== Osmodia Bulletin Board 1.x admin.txt File Disclosure Vulnerability ====================================================================...

Got All Media 7.0.0.3 - Remote Denial of Service

Got All Media 7.0.0.3 - Remote Denial of Service !/usr/local/bin/perl Title: Got All Media 7.0.0.3 Remote Denial Of Service Exploit Product web page: http://www.gallm.com/default.aspx Vulnerability discovered by Gjoko 'LiquidWorm' Krstic liquidworm t00t gmail w00t com http://www.zeroscience.org...

Got All Media 7.0.0.3 (t00t) Remote Denial of Service Exploit

Summary Got All Media is a Home theater PC application for Microsoft Windows platforms. Description Got All Media is exposed to a remote denial of service issue when processing URI requests. This issue occurs when the application handles an HTTP GET request over TCP port 5550. !/usr/local/bin/per...