Android 1.x / 2.x Local Root Exploit

/ android 1.x/2.x the real youdev feat. init local root exploit. C 2009/2010 by The Android Exploid Crew. Copy from sdcard to /sqlitestmtjournals/exploid, chmod 0755 and run. Or use /data/local/tmp if available thx to ioerror! It is important to to use /sqlitestmtjournals directory if available...

Majordomo2 20110121 Directory Traversal

Original Advisory: https://sitewat.ch/en/Advisory/View/1 Credit: Michael Brooks https://sitewat.ch Vulnerability: Directory Traversal Software: Majordomo2 Identifier:CVE-2011-0049 Vendor: http://www.mj2.org/ Affected Build: 20110121 and prior Download:...

TCExam 11.1.016 Cross Site Scripting

------------------------------------------------------------------------ Software................TCExam 11.1.016 Vulnerability...........Reflected Cross-site Scripting Download................http://www.tcexam.org/ Release Date............1/31/2011 Tested On...............Windows 7 + XAMPP...

WordPress TagNinja 1.0 Cross Site Scripting

------------------------------------------------------------------------ Software................WordPress TagNinja 1.0 Vulnerability...........Reflected Cross-site Scripting Download................http://wordpress.org/extend/plugins/tagninja/ Release Date............1/30/2011 Tested...

eSyndiCat Directory Software Cross Site Scripting

eSyndiCat Directory Software preview= version 2.2 and 2.3 - Cross-Site Scripting XSS & Redirect http://www.esyndicat.com 30 - 01 - 2011 Avram Marius d3v1l http://twitter.com/securityshell - http://security-sh3ll.blogspot.com ------------------------------------------------------------------------...

vBSEO 3.2.23.5.2 - Persistent Cross-Site Scripting via LinkBacks

vBSEO 3.2.23.5.2 - Persistent Cross-Site Scripting via LinkBacks vBSEO - Persistent XSS via LinkBacks http://www.exploit-db.com/vbseo-from-xss-to-reverse-php-shell/ Versions Affected: 3.5.2 & 3.2.2 Most likely all versions Info: A proven success record, vBSEO powers the most optimized forums on t...

ComercioPlus v.5.6 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Comerciosonline CMS SQLi Google Dork: allintext: " Servicio ofrecido por ComerciosOnLine " Date: 27/01/2011 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software...

HTB22793: XSRF (CSRF) in KaiBB

Vulnerability ID: HTB22793 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinkaibb.html Product: KaiBB Vendor: Mi-Dia http://www.kaibb.co.uk/ Vulnerable Version: 1.0.2 and probably prior versions Vendor Notification: 13 January 2011 Vulnerability Type: CSRF Cross-Site Request Forgery Status:...

Crystal Web Solutions SQL Injection

============================================================= Crystal Web Solutions category.php SQL Injection ============================================================= Vendor: Crystal Web Solutions http://www.crystal-web.co.uk Vendor Notification: 02 Jan 2011 Vulnerability Type: SQL Injectio...

Automated Solutions Modbus/TCP OPC Server - Remote Heap Corruption (PoC)

!/usr/bin/python asmb-heap.py Automated Solutions Modbus/TCP OPC Server Remote Heap Corruption PoC Jeremy Brown 0xjbrown41-gmail-com Jan 2011 A specially crafted length field in a MODBUS packet header can trigger heap corruption. 00408312 | 8B5424 3C MOV EDX,DWORD PTR SS:ESP+3C - move length into...

Automated Solutions ModbusTCP OPC Server - Remote Heap Corruption (PoC)

Automated Solutions ModbusTCP OPC Server - Remote Heap Corruption PoC !/usr/bin/python asmb-heap.py Automated Solutions Modbus/TCP OPC Server Remote Heap Corruption PoC Jeremy Brown 0xjbrown41-gmail-com Jan 2011 A specially crafted length field in a MODBUS packet header can trigger heap corruptio...

HTB22788: XSS in Pivotx

Vulnerability ID: HTB22788 Reference: http://www.htbridge.ch/advisory/xssinpivotx.html Product: Pivotx Vendor: Pivotx Team http://pivotx.net/ Vulnerable Version: 2.2.0 Vendor Notification: 11 January 2011 Vulnerability Type: XSS Cross Site Scripting Status: Awaiting Vendor Solution Risk level:...

SQL Injection in Pixie

Vulnerability ID: HTB22786 Reference: http://www.htbridge.ch/advisory/sqlinjectioninpixie1.html Product: Pixie Vendor: Lucid Crew http://www.getpixie.co.uk/ Vulnerable Version: 1.04 Vendor Notification: 06 January 2011 Vulnerability Type: SQL Injection Status: Awaiting Vendor Response Risk level:...

Pixie 1.04 SQL Injection

================================== Vulnerability ID: HTB22786 Reference: http://www.htbridge.ch/advisory/sqlinjectioninpixie1.html Product: Pixie Vendor: Lucid Crew http://www.getpixie.co.uk/ Vulnerable Version: 1.04 Vendor Notification: 06 January 2011 Vulnerability Type: SQL Injection Status:...

glFusion CMS 1.2.1 Stored XSS via img Tag

Exploit for php platform in category web applications Exploit Title: glfusion CMS 1.2.1 stored XSS via img tag Date: 14-1-2010 Author: Saif El-Sherei Software Link: www.glfusion.org/filemgmt/viewcat.php?cid=1 Version: 1.2.1 Tested on: Firefox 3.0.15 Info: glFusion gives you the ability to easily...

glfusion CMS 1.2.1 Cross Site Scripting

Exploit Title: glfusion CMS 1.2.1 stored XSS via img tag Date: 14-1-2010 Author: Saif El-Sherei Software Link: www.glfusion.org/filemgmt/viewcat.php?cid=1 Version: 1.2.1 Tested on: Firefox 3.0.15 Info: glFusion gives you the ability to easily create websites and online communities complete with...

XSRF (CSRF) in Cambio

Vulnerability ID: HTB22768 Reference: http://www.htbridge.ch/advisory/xsrfcsrfincambio.html Product: Cambio Vendor: Joram van den Boezem http://www.cambiocms.org/ Vulnerable Version: 0.5a nightly r37 and probably prior versions Vendor Notification: 28 December 2010 Vulnerability Type: CSRF...

XSRF (CSRF) in whCMS

Vulnerability ID: HTB22767 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinwhcms.html Product: whCMS Vendor: Joram van den Boezem http://whcms.burolaga.nl/ Vulnerable Version: 0.115 alpha and probably prior versions Vendor Notification: 28 December 2010 Vulnerability Type: CSRF Cross-Site...

NewvCommon.ocx ActiveX Remote Code Execution Vulnerability

NewvCommon.ocx ActiveX Remote Code Execution Vulnerability ======== Vulnerable:All Version Vendor:www.newv.com.cn Details: ======== A remote buffer overflow vulnerability has been found in NewV SmartClient. The specific flaw exists within the WriteTextFile method of the Newv ActiveX control...

XSS vulnerability in diafan.CMS

Vulnerability ID: HTB22775 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityindiafancms.html Product: diafan.CMS Vendor: Diafan http://www.diafan.ru/ Vulnerable Version: 4.3 and probably prior versions Vendor Notification: 28 December 2010 Vulnerability Type: Stored XSS Cross Site...