12895 matches found
glibc and eglibc 2.5, 2.7, 2.13 - Buffer Overflow Vulnerability
No description provided by source. / Exploit-DB Note: Reportedly does not work. See output at the bottom of the entry. $FILE: bug-mangle.c Comment: Proof of concept $VERSION$ Author: Hector Marco [email protected] Ismael Ripoll [email protected] $LICENSE: This program is free software; you can...
TutorialCMS <= 1.01 Authentication Bypass Vulnerability
No description provided by source. TutorialCMS = 1.01 Authentication Bypass Discovered by: Silentz Payload: Authentication Bypass Website: http://www.w4ck1ng.com Vulnerability: Variables $loggedIn & $activated are not predefined. Vulnerable Files: login.php headerLinks.php submit1.php myFav.php...
Exploit: NCMedia Sound Editor Pro 7.5.1 - SEH & DEP
No description provided by source. !/usr/bin/python --------------------------------------------------------------------------- Exploit: NCMedia Sound Editor Pro v7.5.1 SEH&DEP Author: b33f - http://www.fuzzysecurity.com/ OS: Windows 7 Pro SP1 probably universal across 32-bit POC - Julien Ahrens ...
Kandidat CMS 1.4.2 Stored Cross Site Scripting Vulnerability
No description provided by source. Vulnerability ID: HTB22648 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinkandidatcms.html Product: Kandidat CMS Vendor: Kan-Studio http://www.kan-studio.ru/ Vulnerable Version: 1.4.2 and probably prior versions Vendor Notification: 19 October 2010...
Anyzip 1.1 - (.zip) Poc (SEH) 0day
No description provided by source. ! /usr/bin/python Anyzip .zip 0day Poc SEH Homepage : www.tbsoftinc.com Download : www.tbsoftinc.com/download/anyzip.exe Version : 1.1 Tested Os : Windows XP SP1/SP3 EN Usage : Python anyzip.py Credit : ItSecTeam mail : [email protected] Web : WwW.ITSecTeam.com...
Easyzip 2000 3.5 - (.zip) 0day stack buffer overflow PoC exploit
No description provided by source. ?php / Easyzip 2000 v3.5 .zip 0day stack buffer overflow PoC exploit Author: mrme - http://net-ninja.net/ Download: http://www.thefreesite.com/ezip35.exe Platform: Windows XP sp3 Advisory: http://www.corelan.be:8800/advisories.php?id=10-032 Greetz to: Corelan...
Crush FTP 5 'APPE' command Remote JVM BSOD PoC Exploit
No description provided by source. Exploit Title: Crush FTP 5 'APPE' command Remote BSOD Poc Exploit Date: 06/09/2011 Author: BSOD Digital Fabien DROMAS Mail: [email protected] Test: OS: Windows 7 Versions: 5.7.096 Link: https://www.crushftp.com/early5/CrushFTP5PC.zip !/usr/bin/env python...
FreeBSD UIPC socket heap overflow proof-of-concept
No description provided by source. !/bin/sh fbsd-uipcsock-heap.sh, by Shaun Colley [email protected], 29/09/11 proof-of-concept crash for the freebsd unix domain sockets heap overflow. this was tested on freebsd 8.2-RELEASE. just a PoC for now. see advisory & patches for details:...
Adobe Photoshop CS4 Extended 11.0 ABR File Handling Remote Buffer Overflow PoC
No description provided by source...
Acoustica MP3 Audio Mixer 2.471 Extended M3U directives SEH
No description provided by source. Exploit Title: Acoustica MP3 Audio Mixer 2.471 Extended M3U directives SEH Date: September 8 2010 Author: Carlos Hollmann Software Link: http://www.acoustica.com/downloading.asp?p=1 Version: 2.471 Tested on: Windows xp sp3 running on VMware Fusion 3.1 and...
aktiv-player 2.9.0 - Crash PoC
No description provided by source. !/usr/bin/python Exploit Title: aktiv-player version 2.9.0 Crash PoC Exploit Author: metacom RST Vendor Homepage: http://www.goforsharing.com/home-mainmenu-1/aktiv-player-mainmenu-131.html Tested on: Windows 7 German filename = poc.wma buffer = \x41 3000 exploit...
Velhost Uploader Script 1.2 - Local File Inclusion Vulnerability
No description provided by source. =============================================================== velhost uploader script v1.2 Local File Inclusion Vulnerability =============================================================== + velhost uploader script v1.2 Local File Inclusion Vulnerability...
GOMPlayer 2.2.53.5169 (.wav) - Crash PoC
No description provided by source. Exploit Title: GOMPlayer Version 2.2.53.5169 .wav - Crash POC Date: 03-09-2013 Exploit Author: ariarat Software Link: http://download.cnet.com/GOM-Media-Player/3000-136324-10551786.html?part=dl-GOMMediaP&subj=dl&tag=button Version: 2.2.53.5169 Probably old versi...
Corel WordPerfect Office X5 15.0.0.357 (wpd) Buffer Overflow PoC
No description provided by source...
X7 Chat <= 2.0.5 (day) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/python Exploit for xchat 2.0.5 Saca los usuarios y los hash By nonroot - 2008 it's a PoC, please use responsibly import string,urllib import sys,re print Target host: i.e: http://127.0.0.1/x7chat/ host=rawinputTarget host include http and /: print Outp...
Novell ZENworks Desktop Management 6.5 ActiveX Control 'CanUninstall()' Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/31435/info Novell ZENworks Desktop Management ActiveX control is prone to a buffer-overflow vulnerability because the application fails to adequately check boundaries on user-supplied input. An attacker can exploit this...
Joomla Component Horoscope com_horoscope Local File Inclusion Vulnerability
No description provided by source. =============================================================================================================== o Joomla Component Horoscope Local File Inclusion Vulnerability Software : comhoroscope Author : AntiSecurity Vrs-hCk NoGe OoNBoY Paman zxvf s4va...
Avlc Forum (vlc_forum.php id) - Remote SQL Injection Vulnerability
No description provided by source. ==================================================================== Avlc Forum vlcforum.php id Remote SQL Injection Vulnerability ==================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------...
Stud_PE <= 2.6.05 - Stack Overflow PoC exploit
No description provided by source. Exploit Title: StudPE = v2.6.05 Stack Overflow PoC exploit Date: 03/28/2010 Author: zha0 Software Link: http://www.cgsoftlabs.ro/studpe.html Version: StudPE = v2.6.05 Tested on: Windows XP SP3 CHT CVE : Code : Greetz to : nanika, Catherine & chr00t team...
Symantec AMS Intel Alert Handler Service Design Flaw
No description provided by source. // Remote command execution at System level without authentication // Advisory:https://www.foofus.net/?pageid=149 // Exploit Title: Symantec AMS Intel Alert Handler service Design Flaw // Date: 07/28/10 // Author: Spider // Software Link:...