SureThing CD Labeler (m3u/pls) - Unicode Stack Overflow PoC Exploit

No description provided by source. / surethingcdlabelerbofpoc.c SureThing cd labeler m3u/pls - unicode stack overflow PoC exploit Found by: Ruben Alejandro - chap0 Author: Steven Seeley - mrme http://net-ninja.net/ Greetz to: Corelan Security Team...

WordPress Count per Day Plugin 3.2.5 (counter.php) - XSS Vulnerability

No description provided by source. !/usr/bin/ruby Exploit Title: WordPress Count per Day 3.2.5 CSRF Google Dork: inurl:/wp-content/plugins/count-per-day Date: 18.03.2013 Exploit Author: m3tamantra http://m3tamantra.wordpress.com/blog Vendor Homepage:...

Joomla Component Fabrik com_fabrik Local File Inclusion Vulnerability

No description provided by source. ============================================================================================================ o Joomla Component Fabrik Local File Inclusion Vulnerability Software : comfabrik version 2.0 Vendor : http://fabrikar.com/ Author : AntiSecurity NoGe...

Polipo 1.0.4 - Remote Memory Corruption 0day PoC

No description provided by source. !/usr/bin/perl estranged.pl AKA Polipo 1.0.4 Remote Memory Corruption 0day PoC Jeremy Brown [email protected]//jbrownsec.blogspot.com//krakowlabs.com 12.07.2009 Hzzp loves you Polipo! No use reporting this issue to Ubuntu Security unless you feel like waiting...

GNU Sharutils <= 4.2.1 - Local Format String PoC Exploit

No description provided by source. / GNU sharutils = 4.2.1 Local Format String POC Code C0ded by n4rk0tix a.k.a nrktx [email protected] Below is a l4m3 proof of concept code for da recently reported lame bug; These binaryz have not only format bugz, but also buffer overflowz,etc.We also...

RhinoSoft Serv-U FTP Server 3/4/5 MDTM Command Time Argument Buffer Overflow Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/9751/info Serv-U FTP Server has been reported prone to a remote stack based buffer overflow vulnerability when handling time zone arguments passed to the MDTM FTP command. The problem exists due to insufficient bounds...

Hacker Evolution Game: untold Mod Editor 2.00.001 - Buffer Overflow (PoC)

No description provided by source. !/usr/bin/perl Title : Hacker Evolution: untold Mod Editor buffer overflow Date : June 19, 2010 Author : gunslinger [email protected] Web : http://devilzc0de.com Blog : http://gunslingerc0de.wordpress.com Software Link :...

Joomla Component AWDwall-Joomla LFI & SQLi [cbuser] Vulnerability

No description provided by source. ========================================================================================================= o Joomla Component AWDwall-Joomla LFI & SQLi cbuser Vulnerability Software : comawdwall version 1.5.4 Vendor : http://www.awdsolution.com/ Author :...

Chasys Media Player 1.1 - (.pls) Local Buffer Overflow PoC (SEH)

No description provided by source. !/usr/bin/python Chasys Media Player 1.1 .pls Local Buffer Overflow SEH PoC SEH And NEXTSEH are Overwritten but shellcode doesn't executed !!! I have tried a lot of Addresses . Waitting for the Exploit from someone . Download :...

compteur 2.0 - (param_editor.php) Remote File Include Vulnerability

No description provided by source. Title..: 7 php scripts File Inclusion Vuln / Source disclosure Credits: DarkFig Og.link: http://acid-root.new.fr/poc/13061007.txt Using http://www.google.com/codesearch Few examples about what we can do with a code search engine For educational purpose only. You...

phpRAINCHECK <= 1.0.1 - SQL Injection Vulnerability

No description provided by source. phpRAINCHECK = 1.0.1 SQL Injection Vulnerability Author: cr4wl3r cr4wl3r\x40linuxmail\x2Eorg Download: http://sourceforge.net/projects/phpraincheck/files/ PoC: phpRAINCHECKpath/printraincheck.php?id=SQL...

Galmeta Post CMS 0.2 - Multiple Local File Inclusion Vulnerabilities

No description provided by source. ================================================================== Galmeta Post CMS Multiple Local File Inclusion Vulnerabilities ================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' |...

Donar Player 2.2.0 - Local Crash PoC

No description provided by source. !/usr/bin/python Title: Donar Player 2.2.0 Local Crash PoC Date: 03-21-2010 Author: b0telh0 Link: http://www.donarzone.com/downloads/donar-player-setup-free.exe Tested on: Windows XP SP3 crash = \x41 1000 try: file = open'b0t.wma','w'; file.writecrash; file.clos...

CoolPlayer Portable 2.19.1 - (.m3u File) Local Stack Overflow PoC

No description provided by source. CoolPlayerp Portable 2.19.1 .M3U File Local Stack Overflow POC my $chars= A x 4104; my $file=goldm.m3u; openmy $FILE, $file or die Cannot open $file: $!; print $FILE $chars; close$FILE; print $file has been created \n; print Thanx Tryag.Com; milw0rm.com 2009-04-...

PeerBlock 1.1 BSOD

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ======================================================================================================= ======================================================================================================= PeerBloc...

Mac OS X xnu <= 1228.x - (vfssysctl) Local Kernel DoS PoC

No description provided by source. / xnu-vfssysctl-dos.c Copyright c 2008 by [email protected] Apple MACOS X xnu = 1228.x local kernel DoS POC by mu-b - Wed 19 Nov 2008 - Tested on: Apple MACOS X 10.5.5 xnu-1228.8.201/RELEASEI386 - Private Source Code -DO NOT DISTRIBUTE -...

PEiD 0.95 - Memory Corruption PoC

No description provided by source. Title: PEiD v0.95 Memory Corruption About PEiD : PEiD is an intuitive application that relies on its user-friendly interface to detect packers, cryptors and compilers found in PE executable files. Very popular among malware researchers for detection of packers /...

mySeatXT 0.2134 - SQL Injection

No description provided by source. + Exploit: mySeatXT 0.2134 + Author: vinicius777 + Contact: vinicius777 AT gmail @vinicius777 + Vendor Homepage: http://sourceforge.net/projects/myseat 1 Sql Injection PoC: http://localhost/mySeatXT/web/ajax/autocompleteres.php?term=99' 'SQL INJECT' Vulnerable...

Cisco/Protego CS-MARS < 4.2.1 (JBoss) Remote Code Execution Exploit

No description provided by source. !/usr/bin/perl Cisco/Protego CS-MARS 4.2.1 remote command execution, system compromise via insecure JBoss installation. Fully functional POC code by Jon Hart [email protected] Addressed in CSCse47646 CS-MARS is an event correlation product orginally written by...

Jzip 1.3 (.zip) - Unicode Buffer Overflow PoC (0day)

No description provided by source. ?php / Jzip v1.3 .zip Unicode buffer overflow 0day PoC Date: 6/4/2010 Author: mrme http://net-ninja.net/ Software Link: http://www.jzip.com/ Version: 1.3 Tested on: Windows XP SP3 En Advisory: http://www.corelan.be:8800/advisories.php?id=10-021 Greetz to: Corela...