Zen Cart 1.3.9f (typefilter) - Local File Inclusion Vulnerability

No description provided by source. Zen Cart v1.3.9f typefilter Local File Inclusion Vulnerability Vendor: Zen Ventures, LLC Product web page: http://www.zen-cart.com Version affected: 1.3.9f Summary: Zen Cart is an online store management system. It is PHP-based, using a MySQL database and HTML...

jetAudio <= 7.0.5 (.ASX) Remote Stack Overflow Exploit PoC

No description provided by source. Application: jetAudio = 7.0.5 .ASX Remote Stack Overflow Web Site: http://www.cowonamerica.com/download/ Platform: Windows Bug:Remote Stack Overflow Extension: ASX special condition: none ------------------------------------------------------- 1 Introduction 2 B...

Express Burn Plus 4.58 - EBP Project File Handling Buffer Overflow PoC

No description provided by source. !/usr/bin/perl Express Burn Plus v4.58 EBP Project File Handling Buffer Overflow PoC Vendor: NCH Software Product web page: http://www.nchsoftware.com Affected version: 4.58 Summary: Express Burn is a program that allows you to create and copy many kinds of disc...

Windows 7 IIS7.5 FTPSVC UNAUTH'D Remote DoS PoC

No description provided by source. import socket, sys print \n print ---------------------------------------------------------------- print | Windows 7 IIS7.5 FTPSVC UNAUTH'D REMOTE DOS POC | print | Matthew Bergin, Bergin Penetration Testing | print | Win7 Ultimate v6.1 build 7600, IIS...

Joomla Component prayercenter <= 1.4.9 (id) SQL Injection Vulnerability

No description provided by source. /---------------------------------------------------------------\ \ / / Joomla Component prayercenter Remote SQL injection \ \ / ---------------------------------------------------------------/ Author : His0k4 ALGERIAN HaCkEr Dork : inurl:comprayercenter POC :...

Seo Panel 2.2.0 - SQL Injection Vulnerabilities

No description provided by source. Vulnerability ID: HTB22824 Reference: http://www.htbridge.ch/advisory/sqlinjectioninseopanel1.html Product: Seo Panel Vendor: http://www.seopanel.in/ http://www.seopanel.in/ Vulnerable Version: 2.2.0 Vendor Notification: 01 February 2011 Vulnerability Type: SQL...

Acunetix 8 build 20120704 - Remote Stack Based Overflow

No description provided by source. !/usr/bin/python Title: Acunetix Web Vulnerability Scanner Buffer Overflow Exploit Version: 8 Build: 20120704 Tested on: Windows XP SP2 en Vendor: http://www.acunetix.com/ Original Advisory: http://an7isec.blogspot.co.il/2014/04/pown-noobs-acunetix-0day.html...

rpcbind (CALLIT Procedure) UDP Crash PoC

No description provided by source. !/usr/bin/ruby rpcbindudpcrashpoc.rb 07/15/2013 Sean Verity veritysr1980 at gmail.com CVE 2013-1950 rpcbind CALLIT Procedure UDP Crash PoC Affected Software Package: rpcbind-0.2.0-19 Tested on: Fedora 17 3.9.8-100.fc17.x8664 1 SMP CentOS 6.3 Final...

Joomla Component Multiple Root com_multiroot Local File Inclusion Vulnerability

=============================================================================================================== o Joomla Component Multiple Root Local File Inclusion Vulnerability Software : commultiroot version 1.0 Vendor : http://joomlacomponent.inetlanka.com/ Author : AntiSecurity NoGe Vrs-hCk...

TVT TD-2308SS-B DVR - Directory Traversal Vulnerability

No description provided by source. Exploit Title: TVT TD-2308SS-B DVR directory traversal Shodan Dork: Cross Web Server Date: 01 Dec 2013 Disclosure date: 10 Sep 2013 Exploit Author: Cesar Neira Vendor Homepage: http://en.tvt.net.cn/ Affected Firmware Versions: 3.1.43.B 3.1.43.P 3.1.6.P-1.0.2.1-0...

Nokia Symbian OS 3rd Edition - Multiple Web Browser Vulnerabilities

No description provided by source. My name is Nishant Das Patnaik, an independent security researcher from India. I have discovered multiple vulnerabilities in the Web Browser of the high end smartphones manufactured by Nokia running Symbian OS 3rd Edition. The detailed vulnerability disclosures...

GOM player 2.1.9 - Local crash PoC

No description provided by source. !usr/bin/perl Exploits title :GOM player V 2.1.9 Local crash poc Date : 2010/01/02 Aouther : SarBoT511 downloads :http://en.kioskea.net/telecharger/download-2141-gom-player tested on :win xp sp2 GOM player V 2.1.9 $file=SarBoT511.asx; $boom=A x 2000;...

Rumpus 5.1 - Local Privilege Escalation / Remote FTP LIST PoC Exploit

No description provided by source. !/usr/bin/ruby Copyright c Lance M. Havok lmh at info-pull.com Kevin Finisterre kflists at digitalmunition.com Proof of concept for issues described in MOAB-18-01-2007. require 'net/ftp' require 'socket' bugselected = ARGV0 || 0.toi targethost = ARGV1 || localho...

FreeTrim MP3 2.2.3 - Denial of Service Vulnerability

No description provided by source. Exploit Title: FreeTrim MP3 Local Crash PoC Software Link: http://www.freetrimmp3.com/downloads/FreeTrimMP3.exe Tested on: Win XP SP3 Date: 02-12-2010 Author: h1ch4m Email: [email protected] sahra dyalna o jazayrya khotna my $file= 1.cda; my $junk = \x41 x 100;...

AOL 9.5 ActiveX Heap Overflow Vulnerability

No description provided by source. Product: AOL 9.5 Vulnerability: ActiveX - Heap Overflow Discussion: Vulnerability is in Activex Control CDDBControl.dll Sending a string to BindToFile , triggering the vulnerability. Successful exploitation allow remote attackers to execute arbitrary code...

Clam AntiVirus <= 0.88.4 CHM Chunk Name Length DoS PoC

No description provided by source. !/usr/bin/perl Clam AntiVirus ClamAV CHM Chunk Name Length DoS Vulnerability Took Damian Put's poc and shortened it just a little. All credits to Damian Put pucikatgazeta.pl [email protected] www.overflow.pl /str0ke my $clam =...

DivX Player <= 6.7.0 SRT File Buffer Overflow PoC

No description provided by source. DIVX Player = 6.7.0 Buffer Overflow PoC .SRT Bug: When parsing a subtitle file with an overly long subtitle DIVX player will deadly crash with eip overwritted: Replace MOVIEFILENAME by your movie filename .avi !/usr/local/bin/perl my $file=MOVIEFILENAME.srt; my...

427BB Fourtwosevenbb <= 2.3.2 - SQL Injection Exploit

No description provided by source. Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg Download Script : http://sourceforge.net/projects/fourtwosevenbb/files/ 3rr0r: ./fourtwosevenbb-2.3.2/showpost.php ?php line 118: $sql = SELECT ID, UserName, Post, UTime, IP, InReplyTo, ThreadID From . $tprefix...

ColdBookmarks 1.22 SQL Injection Vulnerability

No description provided by source. ColdGen - coldbookmarks v1.22 Remote 0day SQL Injection vulnerability Vendor: http://www.coldgen.com/ Found by: mrme net-ninja.net PoC http://target/path/index.cfm?fuseaction=EditBookmark&BookmarkID=SQLi&CFID=XXXXXX&CFTOKEN=XXXXXXXX...

Joomla Component simpledownload 0.9.5 - LFI Vulnerability

No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register import re class TestPOCPOCBase: vulID = '68620' ssvid version = '1.0' author = 'kikay' vulDate = '2010-06-01' createDate ...