Safari SVG DOM processing PoC

No description provided by source. / Exploit Title: CVE-2011-0222 Safari SVG DOM processing PoC Date: 2011-07-25 Author: Nikita Tarakanov CISS Research Team, Alex Bazhanyuk CISS Research Team Software Link: http://www.apple.com/au/safari/download/ Version: prior to 5.0.6, 5.1 Tested on: Win XP SP...

Joomla Component JE K2 Story Submit Local File Inclusion Vulnerability

No description provided by source. ! /usr/bin/perl -w Joomla Component JE Story Submit Local File Inclusion Vulnerability Author : v3n0m Date : July, 21-2011 GMT +7:00 Jakarta, Indonesia Software : JE Story Submit Vendor : http://joomlaextensions.co.in/ License : GPLv2 or later Tested On: Joomla...

Joomla Component JE K2 Story Submit Local File Inclusion Vulnerability

Exploit for php platform in category web applications ! /usr/bin/perl -w Joomla Component JE Story Submit Local File Inclusion Vulnerability Author : v3n0m Date : July, 21-2011 GMT +7:00 Jakarta, Indonesia Software : JE Story Submit Vendor : http://joomlaextensions.co.in/ License : GPLv2 or later...

Joomla! Component JE Story Submit - Local File Inclusion

Joomla! Component JE Story Submit - Local File Inclusion ! /usr/bin/perl -w Joomla Component JE Story Submit Local File Inclusion Vulnerability Author : v3n0m Date : July, 21-2011 GMT +7:00 Jakarta, Indonesia Software : JE Story Submit Vendor : http://joomlaextensions.co.in/ License : GPLv2 or...

SQL injection in Social Slider

High-Tech Bridge SA Security Research Lab has discovered vulnerability in Social Slider, which can be exploited to perform SQL injection attacks. 1 SQL Injection Vulnerability in Social Slider Input passed via the "rA" POST parameter to /wp-content/plugins/social-slider-2/ajax.php is not properly...

WordPress bSuite 4.0.7 Cross Site Scripting

Original advisory: http://www.ihteam.net/advisory/bsuite-wordpress-permanent-xss/ WordPress bSuite Add Admin Download link: http://wordpress.org/extend/plugins/bsuite/ Author contact: 29/06/2011 POC published: 11/07/2011 Plugin is out-of-date, last update on 2009, so this is just a POC that show...

PG eLMS Pro vDEC_2007_01 (contact_us.php) Multiple POST XSS Vulnerabilities

Summary eLMS Pro solution is an outstanding and yet simple Learning Management system. Our product is designed for any education formations: from small distance training companies up to big colleges and universities. The system allows to build courses, import SCORM content, deploy online learning...

LiteRadius <= 3.2 - Multiple Blind SQL Injection Vulnerabilities

Exploit for php platform in category web applications Exploit Title: LiteRadius 80 www.websiteauditing.org www.areyousecure.net Shouts to the Belegit crew 0day.today 2018-04-08...

Solar FTP 2.1.1 PASV Buffer Overflow

!/usr/bin/python Title: Solar FTP 2.1.1 PASV Command PoC Authors: Craig Freyman @cd1zz and Gerardo Iglesias @iglesiasgg Tested: Windows XP SP3 Vendor Contacted July 11, 2011 Vendor Response: July 12, 2011 - Will fix ASAP, approved release of PoC. Notes: We found different offsets depending on the...

Solar FTP 2.1.1 PASV Buffer Overflow PoC

Exploit for windows platform in category remote exploits !/usr/bin/python Title: Solar FTP 2.1.1 PASV Command PoC Authors: Craig Freyman @cd1zz and Gerardo Iglesias @iglesiasgg Tested: Windows XP SP3 Vendor Contacted July 11, 2011 Vendor Response: July 12, 2011 - Will fix ASAP, approved release o...

Solar FTP Server 2.1.1 - PASV Buffer Overflow

Solar FTP Server 2.1.1 - PASV Buffer Overflow !/usr/bin/python Title: Solar FTP 2.1.1 PASV Command PoC Authors: Craig Freyman @cd1zz and Gerardo Iglesias @iglesiasgg Tested: Windows XP SP3 Vendor Contacted July 11, 2011 Vendor Response: July 12, 2011 - Will fix ASAP, approved release of PoC. Note...

D-Link DSL-2650U - Denial of Service (PoC)

D-Link DSL-2650U - Denial of Service PoC Exploit Title: Dlink DSL-2650U DoS/PoC Date: July 6th, 2011 Author: Li'el Fridman Software Link: ftp://ftp.dlink.ru/pub/ADSL/DSL-2650UBRUD/Firmware/RU1.20/DSL-2650UBRUD1RU1.2006222011.zip Version: 1.20 Tested on: Default firmware - Linux 2.6.8.1...

Dlink DSL-2650U Dos/PoC

Exploit for hardware platform in category dos / poc Exploit Title: Dlink DSL-2650U DoS/PoC Date: July 6th, 2011 Author: Li'el Fridman Software Link: ftp://ftp.dlink.ru/pub/ADSL/DSL-2650UBRUD/Firmware/RU1.20/DSL-2650UBRUD1RU1.2006222011.zip Version: 1.20 Tested on: Default firmware - Linux 2.6.8.1...

ESTsoft ALPlayer 2.0 - ASX Playlist File Handling Buffer Overflow

ESTsoft ALPlayer 2.0 ASX Playlist File Handling Buffer Overflow Vulnerability Vendor: ESTsoft Corp. Product web page: http://www.altools.com Affected version: 2.0.0.4 Summary: ALPlayer former ALShow is an easy-to-use media player that comes equipped with plenty of codecs, and it's prepared to...

Open-Realty 3.1.5 Cross Site Scripting / SQL Injection

Vulnerability ID: HTB23023 Reference: http://www.htbridge.ch/advisory/multiplevulnerabilitiesinopenrealty.html Product: Open-Realty Vendor: Transparent Technologies, Inc. http://www.open-realty.org/ Vulnerable Version: 3.1.5 and probably prior Tested on: 3.1.5 Vendor Notification: 07 June 2011...

PHP 5.3.6 Buffer Overflow PoC (ROP) CVE-2011-1938

Exploit for multiple platform in category local exploits ?php / Jonathan Salwan - @shellstorm http://shell-storm.org 2011-06-04 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1938 Stack-based buffer overflow in the socketconnect function in ext/sockets/sockets.c in PHP 5.3.3 through 5.3.6...

smallftpd &lt;= 1.0.3-fix | Connection Saturation Remote Denial of Service Vulnerability

smallftpd = 1.0.3-fix | Connection Saturation Remote Denial of Service Vulnerability 1. OVERVIEW The smallftpd FTP server is found to be vulnerable to denial of service in handling multiple connection requests regardless of its maximum connection settings. Upon successful DoS exploit, the smallft...

SnoopServlet Cross Site Scripting

SnoopServlet simply echos back the request line and the headers that were sent by the client, plus any HTTPS information. Search Google for: j2ee/servlet/snoopservlet to find a lot of vuln sites. PoC:...

Rhythmbox - '.m3u' Local Crash (PoC)

Exploit Title: Rhythmbox .m3u Local Crash Poc Vendor: http://projects.gnome.org/rhythmbox/ Author: Caddy-Dz Facebook Page: www.facebook.com/islam.caddy E-mail: [email protected] | [email protected] Website: www.exploit-id.com Category:: webapps Tested on: Ubuntu 10.10 - French Note ! :...

Rhythmbox (.m3u) Local Crash Poc

Exploit for linux platform in category dos / poc Exploit Title: Rhythmbox .m3u Local Crash Poc Author: Caddy-Dz Facebook Page: www.facebook.com/islam.caddy E-mail: email protected / / | email protected / / Website: www.exploit-id.com Category:: webapps Tested on: Ubuntu 10.10 - French Note ! :...