204 matches found
Business Classified Listing SQL Injection Vulnerability
No description provided by source. Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Business Classified Listing SQl Vulnerable Vendor url:http://www.webvolume.co.uk Version:8 Price:n/a Published: 2010-06-15 Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue, S1ayer,d3c0d3r,KD and to...
XBMC 9.04.1r20672 soap_action_name post upnp sscanf Buffer Overflow
No description provided by source. !/usr/bin/env python ''' - XBMC upnp Remote Buffer Overflow - ========================================================================= ! Exploit Title: Xbmc soapactionname post upnp sscanf buffer overflow !...
Mercury Mail 4.01 - (Pegasus) IMAP Buffer Overflow (2) (c code)
No description provided by source. / Remote Mercury32 Imap exploit 14 types of attacks WOW! By: [email protected] Notes: Second public release and both of them are murcury32 ; Again someone posted some dos code : why bother? If you spent the time to look, it uses the same buffer for all 14 type...
mtftpd <= 0.0.3 - Remote Root Exploit
No description provided by source. / \ mtftpd = 0.0.3 remote root exploit / by darkeagle \ / discovered by darkeagle - xx.10.04 \ / c unl0ck research team http://unl0ck.org \ / greetz: unl0ckerZ, rosielloZ, nosystemZ, etc.. \ / darkeagle@localhost darkeagle$ ./0x666-ftpd -a 127.0.0.1 -p...
lftp <= 2.6.9 - Remote Stack based Overflow Exploit
No description provided by source. / lftp remote stack-based overflow exploit by Li0n7 voila fr Vulnerability discovered by Ulf Harnhammar Ulf.Harnhammar.9485 student uu se Lftp versions later than 2.6.10 are prone to a remotly exploitable stack-based overflow in trynetscapeproxy and trysquideplf...
Extreme Corporate 6.0 Extremesearch.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15675/info Extreme Search Corporate Edition is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue...
FreeBSD LiteSpeed Web Server 4.0.17 with PHP - Remote Exploit
No description provided by source. LiteSpeed Web Server 4.0.17 w/ PHP Remote Exploit for FreeBSD bug discovered & exploited by Kingcope Dec 2010 Lame Xploit Tested with success on FreeBSD 8.0-RELEASE - LiteSpeed WebServer 4.0.17 Standard & Enterprise x86 FreeBSD 6.3-RELEASE - LiteSpeed WebServer...
EZHomeTech EzServer <= 6.4.017 Stack Buffer Overflow Vulnerability
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
Kreed <= 1.05 Format String and Denial of Service Exploit
No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h include time.h / Read/Write bits to buffer 0.1.1 by Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org max 32 bits numbers supported from 0 to 4294967295. Probabl...
The White House and Zero Day Sleight of Hand
The White House wants you to know that it did not know about the OpenSSL Heartbleed vulnerability before you did. The White House also wants you to know that administration officials don’t think stockpiling zero days isn’t necessarily good for national security. That’s all well and good, except...
[Exploit Pack] The most advanced and easy to use tool for pentesters
Exploit Pack is an open source GPLv3 licensed bundle of scripts known as exploits with an easy to use GUI and a SID IDE. It’s built on JAVA and Python, which means it’s easy to customize and works very nicely on any device. Like every software that has an open source license you can patch, extend...
CALL FOR PAPERS - The Hackers Conference 2013
The call for papers for The Hackers Conference 2013 is now open. THC2013 is a hacker conference taking place in New Delhi, India on August 25th, 2013. The Hackers Conference is an unique event, where the best of minds in the hacking world, leaders in the information security industry and the cybe...
CALL FOR PAPERS - The Hackers Conference 2013
The call for papers for The Hackers Conference 2013 is now open. THC2013 is a hacker conference taking place in New Delhi, India on August 25th, 2013. The Hackers Conference is an unique event, where the best of minds in the hacking world, leaders in the information security industry and the cybe...
ALLMediaServer 0.94 SEH Overflow Exploit
Exploit for windows platform in category remote exploits !/usr/bin/python import socket, sys Exploit Title: ALLMediaServer 0.94 SEH Overflow Exploit Date: 07/03/2013 Exploit Author: metacom E-mail:email protected Software Link:http://allmediaserver.org/download Version: ALLMediaServer 0.94 Tested...
NCMedia Sound Editor Pro 7.5.1 - Local Overflow (SEH + DEP Bypass)
!/usr/bin/python --------------------------------------------------------------------------- Exploit: NCMedia Sound Editor Pro v7.5.1 SEH&DEP Author: b33f - http://www.fuzzysecurity.com/ OS: Windows 7 Pro SP1 probably universal across 32-bit POC - Julien Ahrens XP SP3:...
Kamads classifieds V2 admin Disclosure / AuthBypass exploit
Exploit for php platform in category web applications \n"; print "\nex...........: php $argv0 http://www.target.com/V2AXHTML/admin/admin.php\n"; die; else $ch = curlinit; curlsetopt$ch,CURLOPTURL,"$argv1"; $op1 = curlsetopt$ch,CURLOPTRETURNTRANSFER,true; curlsetopt$ch,CURLOPTUSERAGENT,"Mozilla/4....
Microsoft Windows XP - Keyboard Layouts Pool Corruption (PoC) (MS12-034)
=========== Description =========== Windows XP keyboard layouts pool corruption 0day PoC, post-MS12-034. Vulnerability exists in the function win32k!ReadLayoutFile, that parses keyboard layout files data. Possible attack vector -- local privileges escalation. Similar vuln CVE-2012-0183 was patche...
The Hackers Conference 2012 Call For Papers #THC2012
We are extremely delighted to announce the Call for Papers for The Hackers Conference 2012 It is a unique event, where the elite of the hacker world, leaders in the information security industry and the Internet community meet face to face to join their efforts to cooperate in addressing the most...
Разработка эксплоитов для Linux. Часть 4 – обход ASCII armor и возврат в plt
Автор: sickness Блог автора: Перевод: Gh0St 07.04.2012 Разработка эксплоитов для Linux. Часть 4 – обход ASCII armor и возврат в plt. ПРИМЕЧАНИЕ: Перед чтением данного документа, рекомендуется ознакомиться со следующими работами: Руководство по написанию эксплоитов для Linux. Часть I – переполнени...
Driving Up the Cost of Exploit Development Becomes a Key Defensive Strategy
CANCUN–The skill of attackers, combined with the difficulty and cost of finding and fixing vulnerabilities in software–especially after deployment–has reached the point that it’s now more effective and efficient for vendors to concentrate on making life more difficult for those attackers looking ...