Media Player Classic v1.2.1008 - ALPlayer 10.1029 (ALPSource.ax) Crash

Exploit for windows platform in category dos / poc ============================================================================ Media Player Classic v1.2.1008 - ALPlayer 10.1029 ALPSource.ax Crash POC ============================================================================...

WordPress Plugin IP-Logger 3.0 - SQL Injection

WordPress Plugin IP-Logger 3.0 - SQL Injection Exploit Title: WordPress IP-Logger plugin = 3.0 SQL Injection Vulnerability Date: 2011-08-16 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/ip-logger.3.0.zip Version: 3.0 tested ---...

Asterisk2Billing v1.9.4 - Multiple Web Vulnerabilities

Document Title: =============== Asterisk2Billing v1.9.4 - Multiple Web Vulnerabilities Release Date: ============= 2011-08-10 Vulnerability Laboratory ID VL-ID: ==================================== 5 Abstract Advisory Information: ============================== The Vulnerability-Lab Team discover...

Joomla! Component Search 3.0.0 - SQL Injection

Joomla! Component Search 3.0.0 - SQL Injection ========================================================================================= o TNR Enhanced Joomla Search = SQL Injection Vulnerability Software : comesearch ver 3.0.0 Vendor : http://www.tnrjoomla.com/ Author : NoGe Contact :...

Joomla! Component Search 3.0.0 - SQL Injection

========================================================================================= o TNR Enhanced Joomla Search = SQL Injection Vulnerability Software : comesearch ver 3.0.0 Vendor : http://www.tnrjoomla.com/ Author : NoGe Contact : nogedotcodeatgmaildotcom Home :...

Excel SLYK Format Parsing Buffer Overflow

Exploit Title: Excel SLYK Format Parsing Buffer Overrun Vulnerability PoC Date: date Author: webDEViL Software Link: download link if available Version: app version Tested on: ALL CVE : CVE-2011-1276 w3bd3vilatgmaildotcom twitter.com/w3bd3vil open FILE, 'CVE-2011-1276.slk'; print FILE "ID;P\n";...

Excel - SLYK Format Parsing Buffer Overrun (PoC)

Exploit Title: Excel SLYK Format Parsing Buffer Overrun Vulnerability PoC Date: date Author: webDEViL Software Link: download link if available Version: app version Tested on: ALL CVE : CVE-2011-1276 w3bd3vilatgmaildotcom twitter.com/w3bd3vil open FILE, 'CVE-2011-1276.slk'; print FILE "ID;P\n";...

Simple Machines forum (SMF) 2.0 session hijacking

Exploit for php platform in category web applications Simple Machines forum SMF 2.0 session hijacking Found by The X-C3LL and seth http://0verl0ad.blogspot.com/ || http://xd-blog.com.ar/ 2011-08-06 Website: http://www.simplemachines.org/ Greets: yoyahack, eddyw, www.portalhacker.net SMF stops csr...

AChecker 1.2 - Multiple Error-Based SQL Injection Vulnerabilities

AChecker 1.2 - Multiple Error-Based SQL Injection Vulnerabilities AChecker 1.2 Multiple Error-Based SQL Injection vulnerabilities Vendor: ATutor Inclusive Design Institute Product web page: http://www.atutor.ca Affected version: 1.2 build r530 Summary: AChecker is an open source Web accessibility...

ATutor 2.0.2 (lang) HTTP Response Splitting Vulnerability

Summary ATutor is an Open Source Web-based Learning Content Management System LCMS designed with accessibility and adaptability in mind. Educators can quickly assemble, package, and redistribute Web-based instructional content, easily retrieve and import prepackaged content, and conduct their...

Surge Media CMS SQL Injection

.. . || | | | | | | | | / | | \ | \ \ / | |/ // \ \ | | || Y Y \ | / Y / \ | | \ | / / / / / / .org Archieve an Resource About Hacking Exploit Title: Surgemedia Cms Sql Injection Vulnerability Author: Netrondoank Aka netron home Page: http://www.ilmuhacker.org Forum :...

DZYGroup Portal SQL Injection

.. . || | | | | | | | | / | | \ | \ \ / | |/ // \ \ | | || Y Y \ | / Y / \ | | \ | / / / / / / .org Archieve an Resource About Hacking Exploit Title: DZYGroup Portal Sql Injection Vulnerability Author: Netrondoank Aka netron home Page: http://www.ilmuhacker.org Forum :...

Mbliss Webdesign SQL Injection

.. . || | | | | | | | | / | | \ | \ \ / | |/ // \ \ | | || Y Y \ | / Y / \ | | \ | / / / / / / .org Archieve an Resource About Hacking Exploit Title: mbliss Webdesign Sql Injection Vulnerability Author: Netrondoank Aka netron home Page: http://www.ilmuhacker.org Forum :...

Redirection vulnerability in MBoard

Vulnerability ID: HTB23029 Reference: http://www.htbridge.ch/advisory/redirectionvulnerabilityinmboard.html Product: MBoard Vendor: PHPJunkyar http://www.phpjunkyard.com Vulnerable Version: 1.3 and probably prior Tested on: 1.3 Vendor Notification: 06 July 2011 Vulnerability Type: Redirection...

Zoneminder 1.24.3 Remote File Inclusion Vulnerability

Exploit for php platform in category web applications Exploit Title: Zoneminder 1.24.3 Remote File Inclusion Vulnerability Author: Iye iyedotcba-at-gmaildotcom Software Link: http://www.zoneminder.com/ Version: 1.24.3 Tested. 1.24.4 probably too, not tested Tested on: Ubuntu 10.04 You must be...

Hong Kong Firms Internet Services CMS SQL Injection

.. . || | | | | | | | | / | | \ | \ \ / | |/ // \ \ | | || Y Y \ | / Y / \ | | \ | / / / / / / .org Archieve an Resource About Hacking Exploit Title: Hong Kong Firms Internet Services CMS Sql Injection Vulnerability Author: Netrondoank Aka netron home Page: http://www.ilmuhacker.org...

Citrix XenApp / XenDesktop XML Service Heap Corruption

Exploit for windows platform in category dos / poc Vendor: Citrix, http://www.citrix.com Affected Products: XenApp and XenDesktop Affected Version: See the Citrix security bulletin 2 for a list Vulnerability: Heap Corruption in Citrix XML Service Risk: HIGH Vendor communication: 2011/04/26 Initia...

PHPJunkyard 1.3 Open Redirect

Vulnerability ID: HTB23029 Reference: http://www.htbridge.ch/advisory/redirectionvulnerabilityinmboard.html Product: MBoard Vendor: PHPJunkyar http://www.phpjunkyard.com Vulnerable Version: 1.3 and probably prior Tested on: 1.3 Vendor Notification: 06 July 2011 Vulnerability Type: Redirection...

Skype v5.3.x v2.2.x v5.2.x - Denial of Service Vulnerability

Document Title: =============== Skype v5.3.x v2.2.x v5.2.x - Denial of Service Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=181 Release Date: ============= 2011-07-27 Vulnerability Laboratory ID VL-ID: ===================================...

SWAT Samba Web Administration Tool Cross-Site Request Forgery PoC

Exploit for cgi platform in category web applications Thanks & Regards, Narendra. Confidentiality: This e-mail and any attachments may be confidential and may also be privileged. If you are not an intended named recipient, please notify the sender immediately and do not disclose the contents to...