pagetool-sql.txt

pagetool-1.07 Remote SQL Injection download:http://kent.dl.sourceforge.net/sourceforge/pagetool/pagetool-1.07.tar.gz Found by: Katatafish [email protected] Dork: "powered by Pagetool" Thanks: str0ke PoC...

WordPress Plugin wordTube 1.43 - wpPATH Remote File Inclusion

WordPress Plugin wordTube 1.43 - wpPATH Remote File Inclusion \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV81$2007 ----------------------------------------------------------------------------------------- ECHOADV81$2007 wordpress plugins wordTube = 1.43...

Oracle 10g (Windows x86) - 'PROCESS_DUP_HANDLE' Local Privilege Escalation

// Argeniss - Information Security // // Oracle Database local elevation of privileges PoC exploit // // Author: Cesar Cerrudo include include BOOL InjectShellcodeDWORD oldEIP,CHAR oSID HMODULE hKernel; FARPROC pCreateProc; LPSTR sCommand="cmd.exe"; DWORD dwStrLen; CHAR buff100;...

Oracle 10g (PROCESS_DUP_HANDLE) Local Privilege Elevation (win32)

No description provided by source. // Argeniss - Information Security // // Oracle Database local elevation of privileges PoC exploit // // Author: Cesar Cerrudo include windows.h include stdio.h BOOL InjectShellcodeDWORD oldEIP,CHAR oSID HMODULE hKernel; FARPROC pCreateProc; LPSTR...

PHP 4.4.6 crack_opendict() local buffer overflow poc exploit

?php //PHP 4.4.6 crackopendict local buffer overflow poc exploit //win2k sp3 version / seh overwrite method //to be launched from the cli // by rgod // site: http://retrogod.altervista.org if !extensionloaded"crack" die"you need the crack extension loaded."; $scode= "xebx1b". "x5b". "x31xc0"...

phptraffic-lfi.txt

------=Part1622826164291.1172086007407 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline phpTrafficA-1.4.1 Local File Inclusion phpTrafficA is a GPL statistical tool for web traffic analysis, written in php and mySQL. It can...

Rumpus 5.1 Local Privilege Escalation / Remote FTP LIST PoC Exploit

No description provided by source. !/usr/bin/ruby Copyright c Lance M. Havok lmh at info-pull.com Kevin Finisterre kflists at digitalmunition.com Proof of concept for issues described in MOAB-18-01-2007. require 'net/ftp' require 'socket' bugselected = ARGV0 || 0.toi targethost = ARGV1 ||...

Intel Centrino ipw2200BG - Wireless Driver Remote Overflow

/ This is a PoC exploit for Intel Centrino ipw2200 integrated wireless card. Author: Giuseppe Gottardi aka oveRet Senior Security Engineer at Communication Valley S.p.A. This version of code is only a Proof of Concept stack based exploit that demonstrates the remote code execution on ipw2200...

Kerio MailServer 6.2.2 - Remote Denial of Service (PoC)

Kerio MailServer 6.2.2 - Remote Denial of Service PoC !/usr/bin/env python kms1.py - Kerio MailServer 6.2.2 preauth remote DoS fixed in Kerio MailServer 6.3.1 Copyright c 2006 Evgeny Legerov Permission to use, copy, modify, and distribute this software for any purpose with or without fee is hereb...

[eVuln] Doika guestbook 'page' XSS Vulnerability

New eVuln Advisory: Doika guestbook 'page' XSS Vulnerability http://evuln.com/vulns/134/summary.html --------------------Summary---------------- eVuln ID: EV0134 CVE: CVE-2006-4325 Software: Doika guestbook Sowtware's Web Site: http://doika.net/ Versions: 2.5 Critical Level: Harmless Type:...

phpNULL.txt

Author: ShAnKaR Title: multiple PHP application poison NULL byte vulnerability Applications: phpBB 2.0.21, punBB 1.2.12 Threat Level: Critical Original advisory in Russian: http://www.security.nnov.ru/Odocument221.html Poison NULL byte vulnerability for perl CGI applications was described in 1...

Easy File Sharing FTP Server 2.0 - PASS Remote

Easy File Sharing FTP Server 2.0 - PASS Remote !/usr/bin/python Easy File Sharing FTP Server 2.0 PASS 0day PoC exploit Proof of Concept: execute calc.exe Bug found by h07 Tested on XP SP2 polish Date: 28.07.2006 BUFFPASS + 0x20+0x2c+NOP 2571+0x41414141+\r\n EIP = 0x41414141 host = "127.0.0.1" por...

[eVuln] MyBB 'Avatar URL' XSS Vulnerability

New eVuln Advisory: MyBB 'Avatar URL' XSS Vulnerability http://evuln.com/vulns/132/summary.html --------------------Summary---------------- eVuln ID: EV0132 Vendor: MyBB Group Vendor's Web Site: http://www.mybboard.com/ Software: MyBB Sowtware's Web Site: http://www.mybboard.com/ Versions: 1.1.6...

Cisco MARS < 4.2.1 remote compromise

Cisco MARS Monitoring, Analysis and Response System, sometimes referred to as CS-MARS prior to version 4.2.1 ships with an unprotected JBoss installation which ultimately leads to a complete compromise of the device. The caveat here is that, despite much work on Cisco's part, they were not able t...

Eskolar CMS 0.9.0.0 - Blind SQL Injection

Eskolar CMS 0.9.0.0 - Blind SQL Injection ================================================================================================== !/usr/bin/perl use IO::Socket; ==================================================================================================...

[eVuln] newsletter - sourceworkshop SQL Injection Vulnerability

New eVuln Advisory: newsletter - sourceworkshop SQL Injection Vulnerability http://evuln.com/vulns/107/summary.html --------------------Summary---------------- eVuln ID: EV0107 CVE: CVE-2006-1533 Software: newsletter Sowtware's Web Site: http://www.sourceworkshop.com/ Versions: 1.0 Critical Level...

[ECHO_ADV_27$2006] AngelineCMS 0.8.1 Installpath Remote File Inclusion

/ / | | / // / | | Y / | / / /| / / / / / / .OR.ID ECHOADV27$2006 --------------------------------------------------------------------------- ECHOADV27$2006 AngelineCMS 0.8.1 Installpath Remote File Inclusion --------------------------------------------------------------------------- Author :...

Total Commander 6.x (unacev2.dll) Buffer Overflow PoC Exploit

No description provided by source. / -- /\ / Total Commander unacev2.dll Buffer Overflow PoC Exploit /\ by Darkeagle of Unl0ck Research Team / http://unl0ck.net /\ / when file will be created, try to open archive in TotalCmd and then unpack it ; /\ / -- / include string.h include stdio.h...

[eVuln] Skull-Splitter's PHP Guestbook XSS Vulnerability

New eVuln Advisory: Skull-Splitter's PHP Guestbook XSS Vulnerability http://evuln.com/vulns/104/summary.html --------------------Summary---------------- eVuln ID: EV0104 CVE: CVE-2006-1256 Software: Skull-Splitter's PHP Guestbook Sowtware's Web Site: http://www.boysen.be/ Versions: 2.6 2.7 Critic...

Microsoft Windows XP2003 - IGMP v3 Denial of Service (MS06-007) (2)

Microsoft Windows XP2003 - IGMP v3 Denial of Service MS06-007 2 / MS06-007 Denial of Service POC exploit created by Firestorm, based on zloSend.exe win32 exploit http://www.securitylab.ru/poc/264136.php Tested on Windows XP SP2 as victim compiled/runned on Fedore Core 4 x86 FOR EDUCATIONAL PURPOS...