Media Player Classic V1.3.1774.0 (mpcpl) 0day local DoS (PoC)

Exploit for windows platform in category dos / poc ============================================================= Media Player Classic V1.3.1774.0 mpcpl 0day local DoS PoC ============================================================= !\C:\Perl\bin In The Name Of Allah The Mercifull Title : Media...

Media Player Classic 1.3.1774.0 - mpcpl Local Denial of Service (PoC)

!\C:\Perl\bin In The Name Of Allah The Mercifull Title : Media Player Classic V1.3.1774.0 mpcpl 0day suffer from local Denial of Service PoC Tested : Windows xp sp3 AUThoR: R3d-D3v!L Credits to : XP10HACKER XP10.ME-xp10.com print qq Media Player Classic V1.3.1774.0 0day suffer from local Denial o...

Unfixed XSS vulnerability at www.dup3.me

Security researcher internet, has submitted on 28/05/2010 a cross-site-scripting XSS vulnerability affecting www.dup3.me, which at the time of submission ranked 417759 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/06/2010. It is currently...

Webby webserver SEH control (0day) PoC

Exploit for windows platform in category dos / poc ====================================== Webby webserver SEH control 0day PoC ====================================== !/usr/bin/python POC details: SEH overwritten contact: email protected http://www.s3cur1ty.de App detail:...

Webby WebServer - Overflow (SEH) (PoC)

!/usr/bin/python POC details: SEH overwritten contact: [email protected] http://www.s3cur1ty.de App detail: http://www.shareware.de/webby-webserver/ Version 1.01 Autor Timo Gaik Lizenzart Freeware Plattformen Win XP, Win 98, Win ME Letztes Update 19.10.2004 Dateigroesse 701 KB import socket import sys...

CVE-2009-4868

Cross-site scripting XSS vulnerability in Hitron Soft Answer Me 1.0 allows remote attackers to inject arbitrary web script or HTML via the qid parameter to the answers script aka answers.php. NOTE: some of these details are obtained from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in Hitron Soft Answer Me 1.0 allows remote attackers to inject arbitrary web script or HTML via the qid parameter to the answers script aka answers.php. NOTE: some of these details are obtained from third party information...

CVE-2009-4868

Cross-site scripting XSS vulnerability in Hitron Soft Answer Me 1.0 allows remote attackers to inject arbitrary web script or HTML via the qid parameter to the answers script aka answers.php. NOTE: some of these details are obtained from third party information...

CVE-2009-4868

CVE-2009-4868 describes a cross-site scripting (XSS) vulnerability in Hitron Soft Answer Me 1.0. The issue allows remote attackers to inject arbitrary web script or HTML via the q_id parameter to the answers script (aka answers.php). The defect’s impact, as stated, is that an attacker can execute...

Winamp 5.572 - Local Crash (PoC)

!\C:\Perl\bin In The Name Of Allah The Mercifull Title : WiNamP V5.572 0day suffer from local CRASH PoC Tested : Windows xp sp3 AUThoR: R3d-D3v!L Credits to : XP10HACKER XP10.ME print qq WiNamP V5.572 0day SWF local CRASH PoC Credits : XP10.ME XP10HACKER Author : R3d-D3v!L Greetz : DRDAShER & JUP...

Winamp V5.572 0day suffer from local CRASH PoC

Exploit for windows platform in category dos / poc ============================================== Winamp V5.572 0day suffer from local CRASH PoC ============================================== !\C:\Perl\bin In The Name Of Allah The Mercifull Title : WiNamP V5.572 0day suffer from local CRASH PoC...

Interspire SHOPPING CART 5.5.4 - Ultimate Edition backup dump

Interspire SHOPPING CART 5.5.4 - Ultimate Edition backup dump ======================================================================================== | Title INTERSPIRE SHOPPING CART 5.5.4 - Ultimate Edition backup dump Vulnerability | Author indoushka | email [email protected] $ | Web Site...

Unfixed XSS vulnerability at fetch4.me

Security researcher LordTittiS, has submitted on 03/11/2010 a cross-site-scripting XSS vulnerability affecting fetch4.me, which at the time of submission ranked 478261 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/12/2011. It is currently...

Maxs File Uploader - Arbitrary File Upload

Maxs File Uploader - Arbitrary File Upload in the name of allah Exploit Title: Max's File Uploader Date: 15/1/2010 Author:S2K9 Site: www.soqor.net , www.xp10.me Software Link: http://www.phpf1.com/product/file-upload-script.html Tested on: windows xp sp2 Dork : use your head exploit : add u r she...

Unfixed XSS vulnerability at nfo.dup3.me

Security researcher internet, has submitted on 01/08/2010 a cross-site-scripting XSS vulnerability affecting nfo.dup3.me, which at the time of submission ranked 632148 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/11/2010. It is currently...

Live TV Script SQL Injection

? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe: Live TV script suffer from remote sql injection Vendor: livetvscript.com ? Software: Live TV script - ? author: R3d-D3v!L ? TEAM: ArAB!AN !NFORMAT!ON SeCuR!TY ? contact: N/A - ? Date: 3.Jan.2010 ? T!ME:...

Gbook MX 4.1.0 (Arabic Version) - Remote File Inclusion

======================================================================================== | Title : Gbook MX v4.1.0 Arabic Version File inclusion Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Total aler...

ASP Invision Gallery Show SQL Injection

? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe:galleryshow.asp GID suffer from Blind SQL Injection Vulnerability Vendor:www.aspinvision.com Software: iPortal X author: R3d-D3v!L ? Home: WwW.xP10.ME ? contact: N/A ? ???????????????????????DEV!L'5 of...

gallery_show.asp - GID Blind SQL Injection

galleryshow.asp - GID Blind SQL Injection ? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe:galleryshow.asp GID suffer from Blind SQL Injection Vulnerability Vendor:www.aspinvision.com Software: iPortal X author: R3d-D3v!L ? Home: WwW.xP10.ME ? contact: N/...

Unable to use HTTPS for login only

If you setup the urlrewrite.xml like so: noformat ^/s/.//download/images/^?. /images/$2 ^/s/.//^?. /$2 ^/login.action https https://localhost:8443/login.action ^/dologin.action https https://localhost:8443/dologin.action ^/. https /login.action. /dologin.action. /s/. http://localhost:8080/$...