Flatnuke <= 2.7.1 (level) Remote Privilege Escalation Exploit

No description provided by source. !/usr/bin/env perl Flatnuke = 2.7.1 level Privilege Escalation 0-day Exploit Description ----------- Flatnuke contains one flaw that may allow a user to become administrator. The issue is due to 'sections/noneLogin/section.php' script not properly sanitizing use...

Steamcast 0.9.75b Remote Denial of Service Exploit

Exploit for multiple platform in category dos / poc ================================================== Steamcast 0.9.75b Remote Denial of Service Exploit ================================================== !/usr/bin/perl Steamcast 0.9.75 beta Remote Denial of Service Download...

Steamcast 0.9.75b - Remote Denial of Service

!/usr/bin/perl Steamcast 0.9.75 beta Remote Denial of Service Download :http://www.steamcast.com Tested Under Windows XP and linux Dork for test :"Powered By Steamcast "0.9.75 beta Author: ksa04 use strict; use warnings; use IO::Socket; my $host = shift || die "usage: perl $0 host port\n"; my $po...

Flatnuke 2.7.1 - level Privilege Escalation

Flatnuke 2.7.1 - level Privilege Escalation !/usr/bin/env perl Flatnuke timeout5; $lwp-agent'Links 2.1pre26; Linux 2.6.19-gentoo-r5 x8664; x'; $lwp-defaultheader'Cookie' = "myforum=$user; path=$path; secid=$secid; path=$path;"; $ret = $lwp-post"http://$h...

Baby FTP 1.x Memory Consumption

!/usr/bin/perl Baby FTP Server v1.x Remote Memory Consumption Exploit. ------------------------------------------------------- This can be exploited to use 100% UC. Tested with Windows xp sp2 ------------------------------------------------------- Author: Jonathan Salwan Mail: submit AT...

AdaptBB 1.0 - 'topic_id' SQL Injection / Credentials Disclosure

!/usr/bin/perl -w AdaptBB 1.0 topicid SQL Injection / Credentials Disclosure Exploit Description ----------- AdaptBB contains a flaw that allows an attacker to carry out an SQL injection attack. The issue is due to the inc/bb/topic.php script not properly sanitizing user-supplied input to the...

X-Forum 0.6.2 Remote Command Execution Exploit

No description provided by source. !/usr/bin/perl Web App: X-Forum 0.6.2 Link : http://freefr.dl.sourceforge.net/sourceforge/x-forum/xforum-0.6.2.tar.gz Bug : Auth Bypass via Cookie Handling : There are also other SQL Injections Remote Command Execution Exploit Credits to Giovanni Buzzin,...

Sami HTTP Server 2.x - 'HEAD' Remote Denial of Service

!/usr/bin/perl Sami HTTP Server v2.x Remote Denial of Service with HEAD request. -------------------------------------------------------------------- The vulnerability is caused due to an error in handling the HEAD command. This can be exploited to crash the HTTP service...

PhotoStand 1.2.0 - Remote Command Execution

PhotoStand 1.2.0 - Remote Command Execution !/usr/bin/perl App : PhotoStand 1.2.0 Site : http://www.photostand.org Remote Command Execution Exploit Credits to : Giovanni Buzzin, "Osirys" osirysatautisticidotorg Greets: drosophila, emgent, Fireshot PhotoStand is a used Image Gallery CMS. PhotoStan...

Codice CMS 2 Remote SQL Command Execution Exploit

No description provided by source. --+++===========================================================+++-- --+++====== Codice CMS 2 Remote Command Execution Exploit ======+++-- --+++===========================================================+++-- !/usr/bin/perl use strict; use warnings; use...

Codice CMS 2 SQL Command Execution

--+++===========================================================+++-- --+++====== Codice CMS 2 Remote Command Execution Exploit ======+++-- --+++===========================================================+++-- !/usr/bin/perl use strict; use warnings; use IO::Socket; sub banner print...

Codice CMS 2 - Command Execution (via SQL Injection)

Codice CMS 2 - Command Execution via SQL Injection --+++===========================================================+++-- --+++====== Codice CMS 2 Remote Command Execution Exploit ======+++-- --+++===========================================================+++-- !/usr/bin/perl use strict; use...

Bloginator 1a - SQL Injection Command Injection (via Cookie Bypass )

Bloginator 1a - SQL Injection Command Injection via Cookie Bypass Author = FireShot , Jacopo Vuga. Thx to = Osirys for develop the Exploitation Code with me Mail = fireshotautisticiorg / osirysautisticiorg Vulnerability = SQL Command Injection mq = off Software = Bloginator V1A Download =...

Talkative IRC 0.4.4.16 Stack Overflow

!/usr/bin/perl Title: Talkative IRC 0.4.4.16 Remote Stack Overflow Exploit SEH Summary: The easiest and fastest way to meet people online. With Talkative IRC you can chat with thousands of people at the same time. Find people with the same interests as you. Join channels where you can meet people...

VLC 0.9.8a Web UI (input) Remote Denial of Service Exploit

No description provided by source. !/usr/bin/perl VLC 0.9.8a Web UI Remote Stack Overflow DoS by TheLeader GreetZ: forums.hacking.org.il TiP oF TEh DaY: Rock on! = use IO::Socket; my $host = shift || 'localhost'; Target host my $port = shift || 8080; Target port. Default port = 8080 Note: for som...

Serv-U 7.4.0.1 (MKD) Create Arbitrary Directories Exploit

No description provided by source. !/usr/bin/perl Soft : FTP Serv-U Version : v7.4.0.1 A vulnerability is caused due to an input validation error when handling FTP "MKD" requests. This can be exploited to escape the FTP root and create arbitrary directory on the system via directory traversal...

VLC 0.9.8a Web UI (input) Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ========================================================== VLC 0.9.8a Web UI input Remote Denial of Service Exploit ========================================================== !/usr/bin/perl VLC 0.9.8a Web UI Remote Stack Overflow DoS by TheLeader...

RhinoSoft Serv-U FTP Server 7.4.0.1 - 'SMNT' (Authenticated) Denial of Service

!/usr/bin/perl Soft : FTP Serv-U Version : v7.4.0.1 Denial of Service in Serv-u up to 7.4.0.1 no crash Just the server is saturated, it stops responding. Author: Jonathan Salwan Mail: submit AT shell-storm.org Web: http://www.shell-storm.org use IO::Socket; print "+ Author : Jonathan Salwan \n";...

JDKChat 1.5 Integer Overflow

!/usr/bin/perl Title: JDKChat v1.5 Remote Integer Overflow PoC Summary: JDKChat is a simple C++ chat server for GNU/Linux systems. Users can connect to it through a simple tcp client like telnet. WebSite : http://www.jdkoftinoff.com/ ---------------------------- Demo...

GuildFTPd FTP Server 0.999.14 Remote Delete Files Exploit

No description provided by source. !/usr/bin/perl Exploit: GuildFTPd FTP Server Version 0.x.x Remote Delete Files More detail for the vulnerability = http://secunia.com/advisories/32218/ 2 A vulnerability is caused due to an input validation error when handling FTP "DELE" requests. This can be...