EFS Easy Chat Server 2.2 - Authentication Request Buffer Overflow (Perl)

EFS Easy Chat Server 2.2 - Authentication Request Buffer Overflow Perl !/usr/bin/perl EFS Easy Chat Server Authentication Request Buffer Overflow SEH Reference: http://www.milw0rm.com/exploits/8142 Tested in Windows XP Pro SP2-3 Coded by Dr4sH Bruno F. Contact: dr4shathotmaildotcom Thankz: His0ka...

Yaws < 1.80 (multiple headers) Remote Denial of Service Exploit

Exploit for multiple platform in category dos / poc =============================================================== Yaws ; chomp$vulnhostip; $port = 80; $sockhttp = IO::Socket::INET-new...

Yaws 1.80 - Multiple Headers Remote Denial of Service Vulnerabilities

Yaws 1.80 - Multiple Headers Remote Denial of Service Vulnerabilities !usr/bin/perl -w Yaws before 1.80 allows remote attackers to cause a denial of service memory consumption and crash via a request with a large number of headers. Refer: http://yaws.hyber.org/...

Pop Peeper 3.4.0.0 UIDL Buffer Overflow Exploit

!/usr/bin/perl KL0209EXP-poppeeperuidl-bof.pl 02.27.2009 Krakow Labs Development www.krakowlabs.com POP Peeper 3.4.0.0 UIDL Remote Buffer Overflow Exploit SEH overwrite exploitation, uses Imap.dll included with POP Peeper for universal exploitation gotta love no /SafeSEH. Special thanks goes to...

CentOS Update for kernel CESA-2008:0972 centos4 x86_64

Check for the Version of kernel OpenVAS Vulnerability Test CentOS Update for kernel CESA-2008:0972 centos4 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Coppermine Photo Gallery 1.4.20 - IMG Privilege Escalation

Coppermine Photo Gallery 1.4.20 - IMG Privilege Escalation !/usr/bin/perl inphex - inphex0 at gmail dot com based on http://milw0rm.com/exploits/8114 - found by StAkeR In case this does not work check out posLine 80 and find another value for it use IO::Socket; use LWP::UserAgent; use LWP::Simple...

Free Arcade Script 1.0 LFI Command Execution Exploit

No description provided by source. !/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS |...

Pyrophobia 2.1.3.1 LFI Command Execution Exploit

No description provided by source. !/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS |...

pPIM 1.01 (notes.php id) Remote Command Execution Exploit

Exploit for unknown platform in category web applications ========================================================= pPIM 1.01 notes.php id Remote Command Execution Exploit ========================================================= !/usr/bin/perl pPIM 1.01 notes.php id Remote Command Execution...

pPIM 1.01 Command Execution Exploit

!/usr/bin/perl pPIM 1.01 notes.php id Remote Command Execution Exploit url: http://www.phlatline.org/docs/files/ppim.zip Author: Jose Luis Gongora Fernandez a.k.a JosS mail: sys-projectathotmaildotcom site: http://www.hack0wn.com/ team: Spanish Hackers Team - SHT thanks for the base code: CWH...

Pyrophobia 2.1.3.1 Command Execution

!/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS | |----------------------------------------------------------------------------------------------------------------------------------|...

MDPro Module My_eGallery - 'pid' SQL Injection

!/usr/bin/perl $host, PeerPort = 80, Proto = 'tcp' or die $!; $packet .= "GET /$inject HTTP/1.1\r\n"; $packet .= "Host: $host\r\n"; $packet .= "User-...

pPIM 1.01 - notes.php Remote Command Execution

pPIM 1.01 - notes.php Remote Command Execution !/usr/bin/perl pPIM 1.01 notes.php id Remote Command Execution Exploit url: http://www.phlatline.org/docs/files/ppim.zip Author: Jose Luis Gongora Fernandez a.k.a JosS mail: sys-projectathotmaildotcom site: http://www.hack0wn.com/ team: Spanish Hacke...

TPTEST GetStatsFromLine()函数远程栈溢出漏洞

BUGTRAQ ID: 33785 TPTEST是用于测试Internet连接速度的工具。 TPTEST的engine/tpcommon.c或src/net/tpcommon.cpp文件的GetStatsFromLine函数在处理STATS命令时存在栈溢出漏洞。如果远程攻击者向服务器发送了带有超长email或pwd标签字段的STATS行的话，就可以触发这个溢出，导致执行任意代码。 TPTEST 3.1.7 厂商补丁： TPTEST ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Graugon Forum 1 - 'id' Command Injection / SQL Injection

!/usr/bin/perl |--------------------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS |...

TPTEST 3.1.7 - Stack Buffer Overflow (PoC)

TPTEST 3.1.7 - Stack Buffer Overflow PoC !/usr/local/bin/perl TPTEST newProto="tcp",PeerAddr=$host,PeerPort=$port; if!$remdie "1\n";$rem-autoflush1; $cookie=$major=$minor="123"; $r=;print "$r";sleep 5; to attach in gdb.. if$r=/cookie=0-9/$cookie=$1; if$r=/vmajor=0-9/$major=$1;...

simplePMS CMS 0.1.3a LFI / Remote Command Execution Exploit

No description provided by source. !/usr/bin/perl Script : simplePMS CMS v0.1.3a Download: http://garr.dl.sourceforge.net/sourceforge/simplepms/simplePMS-v0-1-3prealpha.tar.bz2 Remote Command Execution Exploit Also affected to multiple LFI vulnerabilities -- Needs Register Globals ON $filename no...

MemHT Portal 4.0.1 - Delete All Private Messages

!/usr/bin/perl MemHT Portal query"DELETE FROM memhtpvtmsg WHERE id=$value"; if isset$POST'deletepm' foreach $POST'deletepm' as $value $dblink-query"DELETE FROM memhtpvtmsg WHERE id=$value"; ? ok then foreach $POST'deletenewpm' as $value deletenewpm= $value ; so if we send a evil code like this: 1...

Hedgehog-CMS 1.21 (LFI) Remote Command Execution Exploit

No description provided by source. !/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS |...

PHP Director 0.21 Command Execution

--+++===================================================================+++-- --+++====== PHP Director ". "\n+ Ex. : perl $0 localhost /PHPDirector /opt/lampp/htdocs/PHPDirector". "\n+ Notes : must be the same directory where CMS is hosted". "\n\n"; exit ; sub sendshell my $host, $path, $discpath...