MovieLibrary 1.4.401 - '.dmv' Local Denial of Service

Exploit Title: MovieLibrary Local Dos .dmv file Date: April 14, 2010 Software Link: http://wensoftware.com/ Version: v1.4.401 Tested on: Windows XP SP3 Author: anonymous Site: www.setfreesecurity.com At the top: Click - New - Open Open the newly created dmv file Click File - Import Database Progr...

post Card ( catid ) Remote SQL Injection Vulnerability

Exploit for php platform in category web applications ====================================================== post Card catid Remote SQL Injection Vulnerability ====================================================== post Card catid Remote SQL Injection Vulnerability Author: Hussin X Home :...

Crimson Editor 3.70 SEH Overwrite

!/usr/bin/python Exploit Title : Crimson Editor r3.70 SEH Overwrite Vulnerability PoC exploit Date : 21/03/2010 Author : mrme Bug found by : sharpe Version : 3.70 Release Tested on : XP SP3 En Reference : http://www.exploit-db.com/exploits/11803 Greetz to : Corelan Security Team & sharpe...

Arab Cart 1.0.2.0 Insecure Cooking Handling

======================================================================================== | Title : Arab Cart Version 1.0.2.0 Insecure Cookie Handling Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | Web Sit...

The recent discovery of a windows overflow 0day demo-vulnerability warning-the black bar safety net

by Langouster Windows overflow vulnerability 1. This vulnerability for Windows somewhere on the design defect cause, should be early Windows legacy issues, the details will not say 2. Affected by this vulnerability the code quite a bit, have Microsoft The there are also third party; The...

phpunity.newsmanager LFI Vulnerability

Exploit for unknown platform in category web applications ====================================== phpunity.newsmanager LFI Vulnerability ====================================== Software Information + Vendor : http://www.perlunity.de/ + Download :...

YPOPS! v0.9.7.3 Buffer Overflow (SEH)

No description provided by source. Version:0.9.7.3 Tested on: Windows XP SP3 !/usr/bin/python All modules are SafeSEH protected in service pack 3. import socket, sys print "\n ========================================" print " YPOPS! v 0.9.7.3 Buffer Overflow SEH" print " Proof of Concept by Blake...

phpPowerCards 2.0 Cross Site Scripting

======================================================================================== | Title : phpPowerCards 2.0 Cross Site Scripting Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | EDB-ID : ...

Squito Gallery 1.0 Cross Site Scripting

======================================================================================== | Title : Squito Gallery v.1.0 Cross Site Scripting Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | EDB-ID...

PHP Uploader Downloader 2.0 - Arbitrary File Upload

PHP Uploader Downloader 2.0 - Arbitrary File Upload ======================================================================================== | Title : PHP Uploader Downloader Upload Shell Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum ...

PHPShop 0.6 - Bypass

PHPShop 0.6 - Bypass ======================================================================================== | Title : PHPShop Version 0.6 by pass Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | |...

httpd: mod_proxy_ftp FTP command injection via Authorization HTTP header

The modproxyftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server via vectors related to the embedding of these commands in the Authorization HTTP header, as demonstrated by a certain module in VulnDisco Pa...

Whois Server v2 XSS

Exploit for unknown platform in category web applications =================== Whois Server v2 XSS =================== Vuln in : "?query=" cuz when you Search about an domain in the script form you gonna find the typed text Clear ! no encryptiation! so we can use it as xss vuln :p here we got A li...

Xion Audio Player 1.0 121 m3u file buffer overflow

Exploit for unknown platform in category local exploits ================================================== Xion Audio Player 1.0 121 m3u file buffer overflow ================================================== Title: Xion Audio Player 1.0 121 m3u file buffer overflow CVE-ID: OSVDB-ID: Author: Drag...

uTorrent 1.8.3 Buffer Overflow

!/usr/bin/env python uTorrent Create New Torrent - Paste string into "Source" field - Click "Add File" buff = "\x41" 9000 try: f1 = open"uTorrent.txt","w"; f1.writebuff; f1.close; print "\nuTorrent = 1.8.3 Build 15772 Create New Torrent Buffer Overflow PoC" print "By: DrIDE" print "\nFile Created...

humanCMS (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================== humanCMS Auth Bypass SQL Injection Vulnerability ================================================== f KHatr Zfaft Zenta9 f Zfaft Galo ya khir CHirbakhzer + humanCMS Auth Bypass SQL Injecti...

Hijacking Safari 4 Top Sites

This short video demonstration shows a new technique for exploiting a flaw in Apple Safari 4 that enables an attacker to hijack the Top Sites feature in Safari and replace the victim’s Top Sites with phishing sites. The vulnerability and attack were discovered by Inferno...

Whitepaper - Using XFS To Create XSS From SQL Injection

XFS - XSS From SQL Author : 599eme Man Contact : [email protected] ------------------------------------------------------------------------ + Summary 1 Presentation 2 Explanation 3 Demonstration 4 Bibliography ------------------------------------------------------------------------ 1 --Presentation--...

Allomani Movies & Clips 2.7.0 - Blind SQL Injection

?php iniset"maxexecutiontime",0; printr' || || | || o,7 || . o7 || q||| o///, : / / . /QQQQQQQQQQQQQQQQQQQ\ q Allomani movies & Clips v2.7.0 /QQQ/\QQQ\ Blind SQL inj. exploit /QQQQQ/ \QQQQQQ\ q GET 3 /QQQQ/ QQQQ\ /QQQQ/ \QQQQ\ q http://allomani.com |QQQQ/ By Qabandi \QQQQ| |QQQQ| |QQQQ| |QQQQ| Fr...

EasyVillaRentalSite - 'id' SQL Injection

======================================================== == EasyVillaRentalSite id Remote SQL Injection Vulnerability ======================================================== == AuThOr : BazOka-HaCkEr == EmaiL : [email protected] == HomE : www.TrYaG.cc/cc...