Squid 3.3.5 - DoS PoC

No description provided by source. Squid Crash PoC Copyright C Kingcope 2013 tested against squid-3.3.5 this seems to be the patch for the vulnerability: http://www.squid-cache.org/Versions/v3/3.3/squid-3.3.8.patch The squid-cache service will respawn, looks like a kind of assert exception:...

WordPress post highlights plugin <= 2.2 - SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress post highlights plugin = 2.2 SQL Injection Vulnerability Date: 2011-09-06 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/post-highlights.2.2.zip Version: 2.2 tested Not...

TLS Renegotiation Vulnerability PoC

No description provided by source. !/usr/bin/env python RedTeam Pentesting GmbH [email protected] http://www.redteam-pentesting.de PoC exploit for the TLS renegotiation vulnerability CVE-2009-3555 License ------- CC-BY-SA http://creativecommons.org/licenses/by-sa/3.0/ Timeline -------...

Conky Linux 1.8.0 - Local DoS/PoC Exploit

No description provided by source. / / / Vulnerability Conky 1.8.0 on Linux / / Tested on: Linux with kernel 2.6.32.1-smp / / Found: by Arturo D'Elia / / Date found: 12 Dec 2010 / / Fix: No Fix / / Contacts: [email protected] / include stdio.h include stdlib.h include string.h char killyou=...

Joomla Component Love Factory com_lovefactory Local File Inclusion Vulnerability

No description provided by source. ================================================================================================================= o Joomla Component Love Factory Local File Inclusion Vulnerability Software : comlovefactory version 1.3.4 Vendor : http://www.thefactory.ro/ Author...

zFTPServer Suite 6.0.0.52 'rmdir' Directory Traversal

No description provided by source. !/usr/bin/perl Advisory: zFTPServer Suite 6.0.0.52 'rmdir' Directory Traversal Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on zFTPServer Suite 6.0.0.52 Vendor URL: http://www.zftpserver.com/ Vendor Status: fixed...

Joomla Component My Files com_myfiles Local File Inclusion Vulnerability

No description provided by source. ============================================================================================================= o Joomla Component My Files Local File Inclusion Vulnerability Software : commyfiles version 1.0 Author : AntiSecurity Vrs-hCk NoGe OoNBoY Paman zxvf s4...

FreeBSD and OpenBSD 'ftpd' NULL Pointer Dereference Denial of Service Vulnerability

No description provided by source. /FreeBSD and OpenBSD 'ftpd' NULL Pointer Dereference Denial Of Service Vulnerability The FreeBSD and OpenBSD 'ftpd' service is prone to a denial-of-service vulnerability because of a NULL-pointer dereference. Successful exploits may allow remote attackers to cau...

jetAudio 8.0.0.0 (.asx) - Basic Local Crash PoC

No description provided by source. !/user/bin/perl Exploit Title: Local Crash Poc Date: Fri/Dec/25/2009 Author: D3V!L FUCKER Software Link: http://www.jetaudio.com Version: jetAudio v 8.0.0.0 Basic Tested on: windows vista sp0 Code : my $file= crash.asx; my $boom=...

Joomla Component Saber Cart com_sebercart Local File Inclusion Vulnerability

No description provided by source. ========================================================================================================= o Joomla Component Saber Cart Local File Inclusion Vulnerability Software : comsebercart version 1.0.0.12 Vendor : http://www.seber.com.au/ Author :...

Joomla Component wmi (com_wmi) LFI Vulnerability

No description provided by source. ================================================================================================ Title : Joomla Component wmi comwmi LFI Vulnerability Vendor : http://www.paysyspro.com/ Download : http://www.paysyspro.com/jotloader/files.download/3 Date : Sunday...

phptraverse <= 0.8.0 - Remote File Inclusion Vulnerability

No description provided by source. Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg phptraverse = 0.8.0 Remote File Include Vulnerability Download Script : http://sourceforge.net/projects/phptraverse/files/ Dork : dieHacking attempt; :D Vuln : ./phptraverse-0.8.0/assets/plugins/mp3id/mp3id.php li...

Simple Web Server 2.2-rc2 ASLR Bypass Exploit

No description provided by source. use IO::Socket; Exploit Title: SWS 2.2-rc2 - Remote code execution Egghunting + ASLR bypass Date: 28/8/2012 Special Regards to Mr.pr0n ,Corelan team , immunity u guys are first !!! based on a POC by MR. Pr0n Author: pole Tested on Windows 7 32bit NOTE : If explo...

LoveCMS 1.6.2 - CSRF Code Injection Vulnerability

No description provided by source. Exploit Title : LoveCMS 1.6.2 - CSRF Code Injection Vulnerability Script : LoveCMS 1.6.2 Language : PHP Download : http://sourceforge.net/project/showfiles.php?groupid=168535 Date : 2010/12/27 Dork : Powered by LoveCMS Found : by hiphop contact me...

Apache OFBiz - FULLADMIN Creator PoC Payload

No description provided by source. / Apache OFBiz FULLADMIN Creator PoC Payload. CVE: CVE-2010-0432 By: Lucas Apa lucas -at- bonsai-sec.com . Bonsai Information Security http://www.bonsai-sec.com/ / var username = 'bonsaiUser'; var password = 'bonsaiPass'; var nodes =...

MP3 Studio 1.0 - (.mpf) Local BOF Exploit (SEH)

No description provided by source. !/usr/bin/perl MP3 Studio v1.0 mpf File Local BOF Exploit SEH Exploited by: Koshi Download: http://www.software112.com/products/mp3-millennium+download.html Based on PoC/findings by HACK4LOVE http://milw0rm.com/exploits/9277 Tested on WinXP SP3 I've used address...

nginx 1.3.9-1.4.0 - DoS PoC

No description provided by source. Exploit Title: nginx v1.3.9-1.4.0 DOS POC CVE-2013-2028 Google Dork: CVE-2013-2028 Date: 16.05.2013 Exploit Author: Mert SARICA - mert . sarica @ gmail . com - http://www.mertsarica.com Vendor Homepage: http://nginx.org/ Software Link:...

jsDelivr: Directory Traversal at http://staging.jsdelivr.net/

hi, Directory Traversal is a vulnerability which allows attackers to access restricted directories and execute commands outside of the web server's root directory. POC: go this link -...

HackerOne: Denial of Service

Refering to this 13748 Not yet patched fully. POC video --- https://www.dropbox.com/s/4i7qun3nuesbc70/hackeroneerror.mp4.mp4...

Mailspect Control Panel 4.0.5 - Multiple Vulnerabilities

Document Title: ============ Mailspect Control Panel version 4.0.5 Multiple Vulnerabilities Release Date: =========== June 21, 2014 Product & Service Introduction: ======================== Mailspect is the email security and archiving brand of RAE Internet Inc., Tarrytown, New York. The Mailspect...