Silentum Uploader 1.4.0 - Remote File Deletion Exploit

No description provided by source. Vendor: http://hypersilence.net Versions: Silentum Uploader 1.4.0 May also affect earlier versions Credit: Danny Moules Critical: Yes See PUSH 55 Advisory at http://www.push55.co.uk/advisories.php?id=2 ---- Due to insufficient validation of client-side data, we...

J-Integra 2.11 - Remote Code Execution Exploit

No description provided by source. html !-- j-integra v2.11 Remote code execution vulnerability Discovered on: Thursday, October 28, 2010, 10:10:12 PM Download: http://j-integra.intrinsyc.com/ Author: bz1p, [email protected] impact: LOW, due to the object NOT marked safe for scripting Tested on: X...

AA SMTP Server 1.1 - Crash PoC

No description provided by source. ========================= AA SMTP SERVER v.1.1 -- Crash POC ========================= Application : AA SMTP SERVER v.1.1 Vendor URL : http://www.aa2soft.com/download.htm Category : Windows/POC/Crash Author : ..:: SONiC ::.. aka theM4LW4r3 sonicdefenceatgmail.com...

Subtitle Translation Wizard 3.0.0 - SEH PoC

No description provided by source. !/usr/bin/python Exploit Title: Subtitle Translation Wizard v3.0.0 SEH POC Date: Jun 21, 2010 Author: Blake Software Link: http://www.upredsun.com/subtitle-translation/download/st-wizard-setup.exe Version: 3.0.0 Tested on: Windows Vista running in VirtualBox SEH...

compteur 2.0 - (param_editor.php) Remote File Include Vulnerability

No description provided by source. Title..: 7 php scripts File Inclusion Vuln / Source disclosure Credits: DarkFig Og.link: http://acid-root.new.fr/poc/13061007.txt Using http://www.google.com/codesearch Few examples about what we can do with a code search engine For educational purpose only. You...

PhotoFiltre Studio X .tif file local buffer overflow PoC (0day)

No description provided by source. includestdio.h define fisier FILE define ALOCtip,n tipmallocsizeoftipn define VER 10.3.0 define POCNAME PhotoFiltre Studio X .tif file local buffer overflow poc0day define AUTHOR fl0 fl0w typedef char i8; typedef short i16; typedef int i32; void genrandomi8,cons...

Tickets CAD 2.20G Multiple Vulnerabilities

No description provided by source. Exploit Title: Tickets CAD 2.20G Multiple Vulnerabilities Date: Aug 4 2012 Exploit Author: chap0 @chap0 Vendor Homepage: http://www.ticketscad.org Software Link: http://www.ticketscad.org/downloads/Tickets06222012V220G.zip Version: 2.20G Tested on: Ubuntu Ticket...

Accmeware MP3 Speed 5.0.9 - DoS PoC

No description provided by source. Exploit Title: Accmeware MP3 Speed 5.0.9 DoS PoC Date: 12/20/2010 Author: 0v3r Software Link: http://www.mp3-cutter-splitter.com/Files/MSSetup.exe Version: 5.0.9 Tested on: Windows XP SP3 EN VirtualBxox CVE: N/A The application crashes when trys to convert a...

Accmeware MP3 Joiner Pro 5.0.9 - DoS PoC

No description provided by source. Exploit Title: Accmeware MP3 Joiner Pro 5.0.9 DoS PoC Date: 12/20/2010 Author: 0v3r Software Link: http://www.mp3-joiner.net/Files/MJPSetup.exe Version: 5.0.9 Tested on: Windows XP SP3 EN VirtualBxox CVE: N/A The application crashes when trys to join two malform...

lftp <= 2.6.9 - Remote Stack based Overflow Exploit

No description provided by source. / lftp remote stack-based overflow exploit by Li0n7 voila fr Vulnerability discovered by Ulf Harnhammar Ulf.Harnhammar.9485 student uu se Lftp versions later than 2.6.10 are prone to a remotly exploitable stack-based overflow in trynetscapeproxy and trysquideplf...

superengine CMS (Custom Pack) SQL Injection Vulnerability

No description provided by source. || | / \ / / | | \ / \ / / \ \ /\ /| | |/ | \ / \ / ||/ /|| /\ / / / / .org Author: 10n1z3d 10n1z3datwdotcn Date: 15/02/2010 --------------------------------------------------------- superengine CMS Custom Pack SQL Injection Vulnerability...

Pure-FTPd 1.0.21 (CentOS 6.2 & Ubuntu 8.04) - Crash PoC (Null Pointer Dereference)

No description provided by source. Pure-FTPd Crash PoC Null Pointer Dereference, tested with pure-ftpd v1.0.21 centos 6.2, ubuntu 8.04 latest version v1.0.36 is not affected !! discovered by Kingcope root@ubuntu: grep seg /var/log/syslog Aug 13 13:55:28 ubuntu kernel: 226.791747 pure-ftpd4825:...

Free MP3 CD Ripper 2.6 - (wav) 1day stack buffer overflow PoC exploit

No description provided by source. ?php / Free MP3 CD Ripper 2.6 wav 1day stack buffer overflow PoC exploit Found by: Richard leahy Author: mrme - http://net-ninja.net/ Download: http://www.soft32.com/Download/Free/FreeMP3CDRipper/4-250188-1.html Platform: Windows XP sp3 Greetz to: Corelan Securi...

Apple Mac OS X xnu <= 1228.0 mach-o Local Kernel Denial of Service PoC

No description provided by source. / xnu-macho-dos.c Copyright c 2007 by [email protected] Apple MACOS X xnu = 1228.0 local kernel DoS POC by mu-b - Thu 15 Nov 2007 - Tested on: Apple MACOS X 10.4 xnu-792.22.51/RELEASEI386 Apple MACOS X 10.5.1 xnu-1228.0.21/RELEASEI386 Apple MACOS X 10.5.1...

zgv 5.5 - Multiple Arbitrary Code Execution PoC Exploits

No description provided by source. Download: http://www.exploit-db.com/sploits/ximagezgv.tar.gz milw0rm.com 2004-10-28...

Transmit.app <= 3.5.5 ftps:// URL Handler Heap Buffer Overflow PoC

No description provided by source. !DOCTYPE html PUBLIC -//W3C//DTD XHTML 1.1//EN http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd html head titleMOAB-19-01-2007/title script function boom var recipient = document.getElementById'testbox'; var str = ''; for var i = 0; i 408; i++ str = str + 'A' str =...

Polipo 1.0.4 - Remote Memory Corruption 0day PoC

No description provided by source. !/usr/bin/perl estranged.pl AKA Polipo 1.0.4 Remote Memory Corruption 0day PoC Jeremy Brown [email protected]//jbrownsec.blogspot.com//krakowlabs.com 12.07.2009 Hzzp loves you Polipo! No use reporting this issue to Ubuntu Security unless you feel like waiting...

Belkin G Wireless Router Firmware 5.00.12 - RCE PoC

No description provided by source...

YAP 1.1.1 - Blind SQL Injection/SQL Injection Vulnerabilities

No description provided by source. + YAP 1.1.1 Blind SQL Injection/SQL Injection + Discovered By SirGod + www.mortal-team.org + www.h4cky0u.org + Blind SQL Injection The default prefix for database tables is yap .But can be changed at installation. PoC : http://127.0.0.1/path/comments.php?imageid...

Simple Web Server 2.2-rc2 ASLR Bypass Exploit

No description provided by source. use IO::Socket; Exploit Title: SWS 2.2-rc2 - Remote code execution Egghunting + ASLR bypass Date: 28/8/2012 Special Regards to Mr.pr0n ,Corelan team , immunity u guys are first !!! based on a POC by MR. Pr0n Author: pole Tested on Windows 7 32bit NOTE : If explo...