Itech Real Estate Script 3.12 SQL Injection

Exploit Title: Itech Real Estate Script v3.12 - 'id' Parameter SQL Injection Google Dork: N/A Date: 30.01.2017 Vendor Homepage: http://itechscripts.com/ Software Buy: http://itechscripts.com/real-estate-script/ Demo: http://real-estate.itechscripts.com Version: 3.12 Tested on: Win7 x64, Kali Linu...

Web Based TimeSheet Script SQL Injection

Exploit Title: Web Based TimeSheet Script - Authentication Bypass Google Dork: N/A Date: 26.01.2017 Vendor Homepage: http://qualitypointtech.net/ Software Buy: http://www.qualitypointtech.com/webtimesheet/ Demo: http://qualitypointtech.net/timesheetdemo/index.php Version: N/A Tested on: Win7 x64,...

KB Messages PHP Script 1.0 - Authentication Bypass

KB Messages PHP Script 1.0 - Authentication Bypass Exploit Title: KB Messages PHP Script V1.0 - Authentication Bypass Google Dork: N/A Date: 26.01.2017 Vendor Homepage: http://kunals.com/ Software Download: http://phpscripts.kunals.com/d/item/files/kbmessages.rar Demo:...

KB Affiliate Referral Script 1.0 - Authentication Bypass

KB Affiliate Referral Script 1.0 - Authentication Bypass Exploit Title: KB Affiliate Referral PHP Script V1.0 - Authentication Bypass Google Dork: N/A Date: 26.01.2017 Vendor Homepage: http://kunals.com/ Software Download: http://phpscripts.kunals.com/d/item/files/kbaffiliate.rar Demo:...

KB Messages PHP Script 1.0 - Authentication Bypass

Exploit Title: KB Messages PHP Script V1.0 - Authentication Bypass Google Dork: N/A Date: 26.01.2017 Vendor Homepage: http://kunals.com/ Software Download: http://phpscripts.kunals.com/d/item/files/kbmessages.rar Demo: http://phpscripts.kunals.com/d/item/detail/messages/demo/ Version: 1.0 Tested...

KB Login Authentication Script 1.1 - Authentication Bypass

Exploit Title: KB Login Authentication Script V1.1 - Authentication Bypass Google Dork: N/A Date: 26.01.2017 Vendor Homepage: http://kunals.com/ Software Download: http://phpscripts.kunals.com/d/item/files/kblogin.rar Demo: http://phpscripts.kunals.com/d/item/detail/login/demo/ Version: 1.1 Teste...

PowerShellEmpire Arbitrary File Upload (Skywalker) Exploit

A vulnerability existed in the PowerShellEmpire server prior to commit f030cf62 which would allow an arbitrary file to be written to an attacker controlled location with the permissions of the Empire server. This exploit will write the payload to /tmp/ directory followed by a cron.d file to execu...

Stack overflow

An exploitable stack based buffer overflow vulnerability exists in the ipNameAdd functionality of Iceni Argus Version 6.6.04 Sep 7 2012 NK - Linux x64 and Version 6.6.04 Nov 14 2014 NK - Windows x64. A specially crafted pdf file can cause a buffer overflow resulting in arbitrary code execution. A...

CVE-2016-8335

CVE-2016-8335 is an exploitable stack-based buffer overflow in Iceni Argus IPNameAdd(), triggered by unvalidated source strings copied via strcpy before length checks. Affects Iceni Argus 6.6.04 (Linux x64) and 6.6.04 (Windows x64). The vulnerability stems from a 255-byte destination buffer (dest...

Linux x64 - Bind Shell Shellcode Generator

Linux x64 - Bind Shell Shellcode Generator. Shellcode exploit for linx86-64 platform !/bin/python import socket import sys """ Linux x64 - Bind Shell shellcode Generator --------------------------------------------------------------------------------- Disassemby of bindshell - port 5600 Disassemb...

Linux/x86-64 - TCP Reverse Shell with Password Prompt Shellcode (151 bytes)

/--------------------------------------------------------------------------------------------------------------------- / Title: tcp reverse shell with password prompt in 151 bytes Author: Sathish kumar Contact: https://www.linkedin.com/in/sathish94 Copyright: c 2016 iQube. http://iQube.io Release...

Linux x86_64 Bindshell with Password 92 bytes

Linux x8664 Bindshell with Password 92 bytes. Shellcode exploit for linx86-64 platform / ;Title: bindshell with password in 92 bytes ;Author: David Velรกzquez a.k.a d4sh&r ;Contact: https://mx.linkedin.com/in/d4v1dvc ;Description: x64 Linux bind TCP port shellcode on port 31173 with 4 bytes as...

Adobe Flash - Pointer Crash After Continuing Slow Script

Source: https://code.google.com/p/google-security-research/issues/detail?id=397&can=1&q=label%3AProduct-Flash%20modified-after%3A2015%2F8%2F17&sort=id Running the attached swf file in Google Chrome Linux x64 will eventually result in dialog offering to terminate the slow script. Not the Google...

Adobe Flash - Pointer Crash in XML Handling

Source: https://code.google.com/p/google-security-research/issues/detail?id=400&can=1&q=label%3AProduct-Flash%20modified-after%3A2015%2F8%2F17&sort=id The attached sample file, signalsigsegv7ffff637297a8900e3f87b25c25db8f9ec3c975f8c1211cc.swf, crashes, perhaps relating to XML handling. The crash...

Adobe Flash - Pointer Crash After Continuing Slow Script

Adobe Flash - Pointer Crash After Continuing Slow Script Source: https://code.google.com/p/google-security-research/issues/detail?id=397&can=1&q=label%3AProduct-Flash%20modified-after%3A2015%2F8%2F17&sort=id Running the attached swf file in Google Chrome Linux x64 will eventually result in dialog...

Adobe Flash - Pointer Crash in XML Handling

Adobe Flash - Pointer Crash in XML Handling Source: https://code.google.com/p/google-security-research/issues/detail?id=400&can=1&q=label%3AProduct-Flash%20modified-after%3A2015%2F8%2F17&sort=id The attached sample file, signalsigsegv7ffff637297a8900e3f87b25c25db8f9ec3c975f8c1211cc.swf, crashes,...

Adobe Flash - Pointer Crash in Button Handling

Adobe Flash - Pointer Crash in Button Handling Source: https://code.google.com/p/google-security-research/issues/detail?id=399&can=1&q=label%3AProduct-Flash%20modified-after%3A2015%2F8%2F17&sort=id The attached sample, signalsigsegv7ffff60a14299554f4dc661554237404dfe394d4c6c3e674.swf, crashes in...

Adobe Flash (Linux x64) - Bad Dereference at 0x23c

Adobe Flash Linux x64 - Bad Dereference at 0x23c Source: https://code.google.com/p/google-security-research/issues/detail?id=398&can=1&q=label%3AProduct-Flash%20modified-after%3A2015%2F8%2F17&sort=id The attached sample, signalsigsegv7ffff603deef1525268381c02bc3b05c84578ebaeafc02f0.swf, typically...

Adobe Flash - Pointer Crash in Button Handling

Source: https://code.google.com/p/google-security-research/issues/detail?id=399&can=1&q=label%3AProduct-Flash%20modified-after%3A2015%2F8%2F17&sort=id The attached sample, signalsigsegv7ffff60a14299554f4dc661554237404dfe394d4c6c3e674.swf, crashes in this manner on Linux x64: = 0x00007f693158481f:...

Adobe Flash (Linux x64) - Bad Dereference at 0x23c

Source: https://code.google.com/p/google-security-research/issues/detail?id=398&can=1&q=label%3AProduct-Flash%20modified-after%3A2015%2F8%2F17&sort=id The attached sample, signalsigsegv7ffff603deef1525268381c02bc3b05c84578ebaeafc02f0.swf, typically crashes in this way on my Linux x64 build Flash...