Integer overflow

Integer signedness error in the elfgetdynamicinfo function in elf/dynamic-link.h in ld.so in the GNU C Library aka glibc or libc6 2.0.1 through 2.11.1, when the --verify option is used, allows user-assisted remote attackers to execute arbitrary code via a crafted ELF program with a negative value...

sys_execve"/bin/sh", "-c", "reboot" x86 linux shellcode 45 bytes

45 bytes sysexecve"/bin/sh", "-c", "reboot" x86 linux shellcode. Shellcode exploit for linux platform 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0...

Windows Seven x64 (cmd) Shellcode 61 Bytes

Exploit for win32 platform in category shellcode / | Title: Windows Seven x64 cmd Shellcode 61 Bytes | Type: Shellcode | Author: agix | Platform: win32 | Info: Tested on Windows Seven Pro Fr, Ultimate En, Premium Home En / 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0...

Cosmos Solutions cms SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================ Cosmos Solutions cms SQL Injection Vulnerability ================================================ .----..--.--.| |--..-----..----.| |.-----..-----. | || | || || -|| || || || | ||| ||||||| ||||| ...

phpcms2008 sp4 /member/login.php 跨站漏洞

Phpcms 是国内领先的网站内容管理系统，同时也是一个开源的PHP开发框架。Phpcms由内容模型、会员、问吧、专题、财务、订单、广告、邮件订阅、 短消息、自定义表单、全站搜索等20多个功能模块组成，内置新闻、图片、下载、信息、产品5大内容模型。Phpcms 采用模块化开发，支持自定义内容模型和会员模型，并且可以自定义字段。 member/login.php对forward参数没有进行有效的处理，造成跨站漏洞 phpcms2008 sp4 厂商补丁： PHPCMS ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Rad User Manager Cross Site Scripting

Exploit Title: Rad User Manager XSS Vulnerabilities Date: 01.05.2010 Author: Valentin Category: webapps/0day Version: 2.90 Tested on: Debian Linux, Apache2, PHP5, MySQL5 CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information...

Onion CMS (XSS/RFI/URL Redirecting) Multiple Vulnerability

Exploit for php platform in category web applications ========================================================== Onion CMS XSS/RFI/URL Redirecting Multiple Vulnerability ==========================================================...

Mini-CMS RibaFS 1.0 - Authentication Bypass

============================================================= Mini CMS RibaFS 1.0 Auth Bypass SQL Injection Vulnerability ============================================================= + Mini CMS RibaFS 1.0 Auth Bypass SQL Injection Vulnerability...

PHP-Fusion-6-01-18 (members.php) disclosure ways

Exploit for unknown platform in category web applications ================================================ PHP-fusion-6-01-18 members.php disclosure ways ================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /...

Vito CMS - SQL Injection

Vito CMS - SQL Injection .:. Author : [email protected] .:. Contact: [email protected], [email protected] .:. Home : www.evilzone.org .:. Script : Vito CMS .:. Info link: http://kameleon-lab.com/vito-cms.php .:. Versions: ALL .:. Bug Type : Sql Injection .:. Risk: High .:. Tested on : Windows ...

Xforum 1.4 Cross Site Scripting

============================================================================== / \ / \ \ \ / / / \ / \ / /\ / /\ \ \ \ / / / /\ / /\ \ / / \ / \ \ \ / / / / \ / \ \ // \ / // \ ============================================================================== » Note : Tribute to the martyrs of...

E-membres 1.0 - Remote Database Disclosure

============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ============================================================================== » E-membres v1.0 Remote Database...

dedecms <=5.7 member-login.php 跨站脚本攻击漏洞

No description provided by source...

CVE-2009-4467

misc.php in DeluxeBB 1.3 allows remote attackers to register accounts without a valid email address via a valemail action with the valmem set to a pre-assigned user ID, which is visible from a memberlist action...

Eureka Mail Client Remote Buffer Overflow Exploit XP SP3 English Egghunter Edition

No description provided by source. !/usr/bin/env python Eureka Mail Client Remote Buffer Overflow Exploit XP SP3 English Egghunter Edition Coded By: [email protected] Found By: k4mr4n Securitylab.ir Member Tested On: Windows XPSP3 English Note: This script sets up a fake SMTP server Note: Set th...

iSupport 1.8 XSS / Local File Inclusion

--------------------------------------------- ++ iSupport $ ////////////////////////////////////////////////////////////////////// + Vulnerability and Exploitation Dork : "Powered by iSupport 1.8 " --XSS--...

CreateLive CMS Version 4.0 0day-vulnerability warning-the black bar safety net

Source: xnice blog CreateLive CMS Version 4.0 0day.doc by:xiaok q:391232032.771044833 time: 2008-2-4 0 2:1 0 XP SP2 ie7 iis5. 1...... A tribute to D. S. T you gay, cause Hell-Phantom, the actuator on thin ice, causing the old D, The actuator Doom, causing the group to get help with the culture of...

Ez Cart 1.0 - Multiple Cross-Site Request Forgery Vulnerabilities

Ez Cart 1.0 - Multiple Cross-Site Request Forgery Vulnerabilities ----------------------------------------------------------------------------------------------- Title: Ez Cart Multiple XSRF Vulnerabilities Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 15. December 2009...

Ez Cart Cross Site Request Forgery

----------------------------------------------------------------------------------------------- Title: Ez Cart Multiple XSRF Vulnerabilities Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 15. December 2009...

citrix-enum-servers-xml NSE Script

Extracts the name of the server farm and member servers from Citrix XML service. Script Arguments slaxml.debug See the documentation for the slaxml library. http.host, http.max-body-size, http.max-cache-size, http.max-pipeline, http.pipeline, http.truncated-ok, http.useragent See the documentatio...