mailtraq 2.17.3.3150 - Stored XSS

No description provided by source. !/usr/bin/python ''' Author: loneferret of Offensive Security Product: MailTraq Version: 2.17.3.3150Mar 5th, 2012 Vendor Site: http://www.mailtraq.com/ Software Download: http://www.mailtraq.com/30day Timeline: 29 May 2012: Vulnerability reported to CERT 30 May...

RecipePal 1.0 - SQL Injection Vulnerability

No description provided by source. ? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe: howrecipe.asp ID BL!ND SQL Injection Vulnerability ? Vendor: www.datachecknh.com ? ? Software:RecipePal v1.0 ? Price : $9.95 ? author: R3d D3v!L ??.?.? ? Date: 15.12.2009...

Adobe Device Central CS5 DLL Hijacking Exploit (qtcf.dll)

No description provided by source. / Exploit Title: Adobe Device Central CS5 DLL Hijacking Exploit qtcf.dll Date: August 24, 2010 Author: Glafkos Charalambous glafkos@astalavistadotcom Version: Latest CS5 v3.0.0376 Tested on: Windows 7 x64 Ultimate Vulnerable extensions: .adcp Greetz: Astalavista...

Adobe InDesign CS4 DLL Hijacking Exploit (ibfs32.dll)

No description provided by source. / Exploit Title: Adobe InDesign CS4 DLL Hijacking Exploit ibfs32.dll Date: August 25, 2010 Author: Glafkos Charalambous glafkos@astalavistadotcom Version: CS4 v6.0 Tested on: Windows 7 x64 Ultimate Vulnerable extensions: .indl .indp .indt .inx Greetz: Astalavist...

ActiveBuyandSell 6.2 - (buyersend.asp catid) Blind SQL Injection Vulnerability

No description provided by source. ? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe: buyersend.asp catid Blind SQL Injection Vulnerability Vendor: :www.activewebsoftwares.com Software: ActiveBuyandSell v 6.2 author: R3d-D3v!L Date: 18.dec.2009 T!ME: 12:00...

Fake Webcam 6.1 - Local Crash PoC

No description provided by source. !/usr/bin/ruby Title: Fake Webcam v.6.1 Local Crash PoC Impact: Crashes the process Tested on: Windows XP SP1/SP2 EN Target: Fake Webcam v.6.1 Download Link: http://www.fakewebcam.com/Download/setup.exe Author: Anastasios Monachos secuid0 -...

win32/xp pro sp3 (EN) 32-bit - add new local administrator 113 bytes

No description provided by source. / Title: win32/xp pro sp3 EN 32-bit - add new local administrator 113 bytes Author: Anastasios Monachos secuid0 - anastasiosmatgmaildotcom Method: Hardcoded opcodes kernel32.winexec@7c8623ad, kernel32.exitprocess@7c81cafa Tested on: WinXP Pro SP3 EN 32bit - Buil...

LE.CMS <= 1.4 - Remote Arbitrary File Upload Exploit

No description provided by source. !/usr/bin/perl use strict; use warnings; use LWP::UserAgent; use HTTP::Request::Common; print INTRO; - - - - - - - - - - - - - - - - - - - - - - - - - - - - - LE.CMS = 1.4 Remote Arbitrary File Upload Exploit - - - - - - Discovered && Coded By: t0pP8uZz - -...

wordpress simplemail plugin 1.0.6 - Stored XSS

No description provided by source. !/usr/bin/python ''' Author: loneferret of Offensive Security Product: SimpleMail Version: 1.0.6 free version Vendor Site: http://codecanyon.net/item/wp-simplemail/1130008?ref=tinsley Software Download: http://wordpress.org/extend/plugins/wp-simplemail/ Timeline...

OTRS Open Technology Real Services 3.1.4 - Persistent Cross-Site Scripting

!/usr/bin/python ''' Author: loneferret of Offensive Security Product: OTRS Open Technology Real Services Version: 3.1.4 Windows Vendor Site: http://www.otrs.com/en/ Timeline: 29 May 2012: Vulnerability reported to CERT 30 May 2012: Response received from CERT with disclosure date set to 20 Jul...

FreePBX 2.10.0 / Elastix 2.2.0 - Remote Code Execution

!/usr/bin/python Exploit Title: FreePBX / Elastix pre-authenticated remote code execution exploit Google Dork: oy vey Date: March 23rd, 2012 Author: muts, SSL update by Emporeo Version: FreePBX 2.10.0/ 2.9.0, Elastix 2.2.0, possibly others. Tested on: multiple CVE : notyet Blog post :...

Fake Webcam 6.1 - Local Crash (PoC)

!/usr/bin/ruby Title: Fake Webcam v.6.1 Local Crash PoC Impact: Crashes the process Tested on: Windows XP SP1/SP2 EN Target: Fake Webcam v.6.1 Download Link: http://www.fakewebcam.com/Download/setup.exe Author: Anastasios Monachos secuid0 - anastasiosmatgmaildotcom Greetz: offsec team, inj3ct0r...

Foxit Reader 4.1.1 - Local Stack Buffer Overflow

Exploit Title : Foxit 4.1.1 Date : 13/11/2010 Author : Sud0 Bug found by : dookie Original POC : https://www.exploit-db.com/exploits/15514/ Software Link : http://www.foxitsoftware.com/downloads/index.php Version : 4.1.1 OS : Windows Tested on : XP SP3 En VirtualBox Type of vuln : EIP / SEH Thank...

generic win32 - add new local administrator 326 bytes

generic win32 - add new local administrator 326 bytes. Shellcode exploit for windows platform / Title: generic win32 - add new local administrator 326 bytes Author: Anastasios Monachos secuid0 - anastasiosmatgmaildotcom Method: Dynamic opcode, encoded shellcode Tested on: WinXP Pro SP3 EN 32bit -...

win32/xp pro sp3 EN 32-bit - add new local administrator 113 bytes

win32/xp pro sp3 EN 32-bit - add new local administrator 113 bytes. Shellcode exploit for windows platform / Title: win32/xp pro sp3 EN 32-bit - add new local administrator 113 bytes Author: Anastasios Monachos secuid0 - anastasiosmatgmaildotcom Method: Hardcoded opcodes kernel32.winexec@7c8623ad...

Adobe Device Central CS5 DLL Hijacking Exploit &#40;qtcf.dll&#41;

/ Exploit Title: Adobe Device Central CS5 DLL Hijacking Exploit qtcf.dll Date: August 24, 2010 Author: Glafkos Charalambous glafkos@astalavistadotcom Version: Latest CS5 v3.0.0376 Tested on: Windows 7 x64 Ultimate Vulnerable extensions: .adcp Greetz: Astalavista, OffSEC, Exploit-DB / include...

Firefox &lt;= 3.6.8 DLL Hijacking Exploit [dwmapi.dll]

/ Exploit Title: Firefox = 3.6.8 DLL Hijacking Exploit dwmapi.dll Date: August 24, 2010 Author: Glafkos Charalambous glafkos@astalavistadotcom Version: Latest Firefox v3.6.8 Tested on: Windows XP SP3 En Vulnerable extensions: .htm .html .jtx .mfp Greetz: Astalavista, OffSEC, Exploit-DB / include...

Adobe Dreamweaver CS4 DLL Hijacking Exploit

/ Exploit Title: Adobe Dreamweaver CS4 DLL Hijacking Exploit ibfs32.dll Date: August 25, 2010 Author: Glafkos Charalambous glafkos@astalavistadotcom Version: 10.0 Build 4117 Tested on: Windows 7 Ultimate x86 Vulnerable extensions: .asp .asa. aspx .php .php5 .cfm .tpl .asr .jsp etc Greetz:...

Adobe Illustrator CS4 DLL Hijacking Exploit &#40;aires.dll&#41;

/ Exploit Title: Adobe Illustrator CS4 DLL Hijacking Exploit aires.dll Date: August 25, 2010 Author: Glafkos Charalambous glafkos@astalavistadotcom Version: CS4 v14.0.0 Tested on: Windows 7 x64 Ultimate Vulnerable extensions: .ait .eps Greetz: Astalavista, OffSEC, Exploit-DB Note: Create folders...

Adobe Premier Pro CS4 - ibfs32.dll DLL Hijacking

Adobe Premier Pro CS4 - ibfs32.dll DLL Hijacking / Exploit Title: Adobe Premier Pro CS4 DLL Hijacking Exploit ibfs32.dll Date: August 25, 2010 Author: Glafkos Charalambous glafkos@astalavistadotcom Version: CS4 v4.0.0 314 MC: 160820 Tested on: Windows 7 x64 Ultimate Vulnerable extensions: .pproj...