Soritong v1.0 Universal BOF (Python)

Exploit for unknown platform in category local exploits ==================================== Soritong v1.0 Universal BOF Python ==================================== Title: Soritong v1.0 Universal BOF Python CVE-ID: OSVDB-ID: Author: Jacky Published: 2009-12-29 Verified: yes view source print?...

Mini-stream Ripper 3.0.1.1 - '.pls' Universal Local Buffer Overflow

/ riptheministreamripper.c Mini-stream ripper = 3.0.1.1 .pls Local Universal Buffer Overflow Exploit exploited by: mrme Greetz to the Corelan Security Team: corelanc0d3r, rick, edi, dellnull, marko T, phifli, corelanc0d3r Visit: corelanc0d3r's blog http://www.corelan.be:8800/ reference:...

RM Downloader 3.0.2.1(.M3U File) Stack Overflow exploit

Exploit for unknown platform in category local exploits ======================================================= RM Downloader 3.0.2.1.M3U File Stack Overflow exploit ======================================================= Title: RM Downloader 3.0.2.1.M3U File Stack Overflow exploit CVE-ID:...

Billwerx RC 3.1 XSS / SQL Injection

Billwerx RC v3.1 Multiple Vulnerabilities Found By: mrme Download: http://www.billwerx.com/download.php Tested On: Windows Vista Note: For educational purposes only XSS POC: A regular employee can embed javascript code that could be executed within the context of the admin's browser. If the user...

RM Downloader 3.0.2.1(.M3U File) Stack Overflow exploit

No description provided by source. !/usr/bin/perl RM Downloader 3.0.2.1.M3U File Stack Overflow exploit Author: Vinod Sharma Download : http://www.rm-to-mp3.net/downloads/RMDownloader.exe Tested : Windows XP SP2 En Thanks to exploit-db,packetstormsecurity and all security folks Originally publish...

WBBlog Remote File Inclusion

view source print? WBBlog Remote File Inclusion Vulnerability Found By: mrme Download: http://liqua.com/post/WBBlog.html Tested On: Linux Note: For educational purposes only Remote file include in index.php on lines 25 and 26...

Billwerx RC 3.1 - Multiple Vulnerabilities

Billwerx RC v3.1 Multiple Vulnerabilities Found By: mrme Download: http://www.billwerx.com/download.php Tested On: Windows Vista Note: For educational purposes only XSS POC: A regular employee can embed javascript code that could be executed within the context of the admin's browser. If the user...

Billwerx RC v3.1 Multiple Vulnerabilities

No description provided by source. Billwerx RC v3.1 Multiple Vulnerabilities Found By: mrme Download: http://www.billwerx.com/download.php Tested On: Windows Vista Note: For educational purposes only XSS POC: A regular employee can embed javascript code that could be executed within the context o...

PHP Inventory 1.2 - Authentication Bypass

PHP Inventory 1.2 - Authentication Bypass PHP Inventory v1.2 Remote Auth Bypass SQL Injection Vulnerabiity Found By: mrme Download: http://www.phpwares.com/content/php-inventory Tested On: Windows Vista Note: For educational purposes only First of all lets login to admin with:...

Audio Workstation 6.4.2.4.0 Buffer Overflow

!/usr/bin/python Audio Workstation v6.4.2.4.0 .pls Universal Local BoF Exploit Credits: germayax Coded by: mrme Tested on Windows XP SP3 Note: For educational purposes only mrme@home:$ nc -v 192.168.0.6 4444 192.168.0.6: inverse host lookup failed: Unknown server error : Connection timed out...

PHP Inventory v1.2 Remote (Auth Bypass) SQL Injection Vulnerabiity

Exploit for unknown platform in category web applications ================================================================== PHP Inventory v1.2 Remote Auth Bypass SQL Injection Vulnerabiity ================================================================== PHP Inventory v1.2 Remote Auth Bypass SQ...

PHP Inventory 1.2 SQL Injection

PHP Inventory v1.2 Remote Auth Bypass SQL Injection Vulnerabiity Found By: mrme Download: http://www.phpwares.com/content/php-inventory Tested On: Windows Vista Note: For educational purposes only First of all lets login to admin with: http://server/php-inventory/index.php username: ' or 1=1--...

Audio Workstation 6.4.2.4.0 - .pls Universal Local Buffer Overflow

Audio Workstation 6.4.2.4.0 - .pls Universal Local Buffer Overflow !/usr/bin/python Audio Workstation v6.4.2.4.0 .pls Universal Local BoF Exploit Credits: germayax Coded by: mrme Tested on Windows XP SP3 Note: For educational purposes only mrme@home:$ nc -v 192.168.0.6 4444 192.168.0.6: inverse...

Audio Workstation 6.4.2.4.0 - '.pls' Universal Local Buffer Overflow

!/usr/bin/python Audio Workstation v6.4.2.4.0 .pls Universal Local BoF Exploit Credits: germayax Coded by: mrme Tested on Windows XP SP3 Note: For educational purposes only mrme@home:$ nc -v 192.168.0.6 4444 192.168.0.6: inverse host lookup failed: Unknown server error : Connection timed out...

Vivid Ads Shopping Cart SQL Injection

$site = 'www.example.com'; Site address $path = '/path'; Folder path $contents = ''; $sock = fsockopen$site, 80, $errno, $errstr, 30; if!$sock echo' ' .$errstr.$errno. ' '."\n"; else $pack = "GET " .$path...

Vivid Ads Shopping Cart - 'prodid' SQL Injection

/', $contents, $matches echo'User: ' .$matches1. ';'."\n".'Pass: ' .$matches2. ';'."\n".'Admin login: http://' .$site.$path. '/admin/'."\n"; else echo'Can't pull out admin details.'."\n"; else echo'Can't write socket.'."\n"; ?...

FtpXQ authenticated remote Dos

No description provided by source. !/usr/bin/python banner= "\r\n" " Exploit Title: FtpXQ authenticated remote Dos " " trial on http://www.datawizard.net/Products/FtpXQ/Setup.EXE Version 3.0.1 \r\n" " Tested on XP sp2 english" " Needs write access -- vuln on MKD command\r\n" " Vulnerability found...

FtpXQ 3.0 - (Authenticated) Remote Denial of Service

!/usr/bin/python banner= "\r\n" " Exploit Title: FtpXQ authenticated remote Dos " " trial on http://www.datawizard.net/Products/FtpXQ/Setup.EXE Version 3.0.1 \r\n" " Tested on XP sp2 english" " Needs write access -- vuln on MKD command\r\n" " Vulnerability found by Marc Doudiet\r\n" " For...

AIMP2 Audio Converter Playlist Buffer Overflow

Vulnerability : AIMP2 Audio Converter Playlist pls BOF Discovered by : mrme http://milw0rm.com/exploits/9561 Sploit written by : corelanc0d3r corelanc0d3ratgmaildotcom Sploit written : nov 7th, 2009 Sploit released : nov 11th, 2009 Type : local and remote code execution OS : Windows Product : AIM...

Serv-U Web Client 9.0.0.5 - Remote Buffer Overflow (2)

Serv-U Web Client 9.0.0.5 - Remote Buffer Overflow 2 / !!!FOR EDUCATIONAL USE ONLY!!! M.Yanagishita Nov 2, 2009 !!!FOR EDUCATIONAL USE ONLY!!! / include include pragma commentlib, "ws232" define Diea ifareturn; char request = "POST / HTTP/1.1\r\nHost: %s\r\nCookie: killmenothing; SULang=de%%2CDE;...