OrbisCMS-1.0.2 Add Admin User CSRF

Exploit for php platform in category web applications ================================== OrbisCMS-1.0.2 CSRF Add Admin User ================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1...

Acoustica Audio Converter Pro 1.1 Heap Overflow (.mp3.wav.ogg.wma)

Exploit for windows platform in category local exploits ================================================================================= Acoustica Audio Converter Pro 1.1 build 25 Heap Overflow .mp3.wav.ogg.wma PoC =================================================================================...

RarCrack 0.2 Buffer Overflow POC

Exploit for windows platform in category dos / poc ================================ RarCrack 0.2 Buffer Overflow POC ================================ !/usr/bin/env ruby overflow.rb / / / / / / / / / / / / // / / / / / / / // / \ / / / // / , / // / // / // // / // ||/// //// Title: RarCrack...

LightNEasy Cms 3.2.1 Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ====================================================== LightNEasy Cms 3.2.1 Blind SQL Injection Vulnerability ====================================================== Exploit Title: LightNEasy Cms 3.2.1 Blind SQL Injection Vulnerability Date:...

RarCrack 0.2 Buffer Overflow

!/usr/bin/env ruby overflow.rb / / / / / / / / / / / / // / / / / / / / // / \ / / / // / , / // / // / // // / // ||/// //// Title: RarCrack 0.2 Buffer Overflow POC Date: 19.09.2010 Author: TheUnKn@wn Email: theunknown at group51.org Twitter: @TheUnKn0wn Homepage: http://group51.org Software...

primitive CMS 1.0.9 - Multiple Vulnerabilities

Exploit Title: Primitive CMS 1.0.9 Multiple Vulnerabilities Date: 20.09.2010 Author: Stephan Sattler // Solidmedia.de Software Website: http://www.bouzouste.info/ Software Link: http://www.bouzouste.info/link/click.php?id=1 Version: 1.0.9 Vulnerability 1 Unauthorized Access Url:...

LightNEasy CMS 3.2.1 - Blind SQL Injection

Exploit Title: LightNEasy Cms 3.2.1 Blind SQL Injection Vulnerability Date: 20.09.2010 Author: Stephan Sattler // Solidmedia.de Software Website: http://www.lightneasy.org/ Software Link: http://www.lightneasy.org/addons/downloads/send.php?dlid=127 Version: 3.2.1 Special Thanks to: Dominik...

RarCrack 0.2 - 'Filename init() .bss' (PoC)

The software can be downloaded here: http://rarcrack.sourceforge.net/ Author: stoke Date: 2010-09-20 Download: http://rarcrack.sourceforge.net/ Tested on: Backtrack 4 Site: http://devilcode.it | http://hack2web.altervista.org Special greetz to: nex, for reassure me when i sayed "WHY EIP IT'S NOT...

RarCrack 0.2 - Buffer Overflow (PoC)

!/usr/bin/env ruby overflow.rb / / / / / / / / / / / / // / / / / / / / // / \ / / / // / , / // / // / // // / // ||/// //// Title: RarCrack 0.2 Buffer Overflow POC Date: 19.09.2010 Author: TheUnKn@wn Email: theunknown at group51.org Twitter: @TheUnKn0wn Homepage: http://group51.org Software...

Microsoft Mspaint - .bmp Crash (PoC)

Microsoft Mspaint - .bmp Crash PoC Exploit Title: Bmp crash , microsft paint Date: 187/09/2010 Author: andrew hayn Software Link: Version: winxp/sp3 Tested on: winxp/sp2/sp3 BMP File: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/15034.zip...

Microsoft Mspaint - '.bmp' Crash (PoC)

Exploit Title: Bmp crash , microsft paint Date: 187/09/2010 Author: andrew hayn Software Link: Version: winxp/sp3 Tested on: winxp/sp2/sp3 BMP File: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/15034.zip...

Maian Gallery 2 - Local File Download

Maian Gallery 2 - Local File Download !/usr/bin/python This vulnerability uses filegetcontents so we have some limitations, we cant execute PHP and we cant read files that the web server will interpret such as PHP, conf etc tested on: Ubuntu Linux 2.6.32 with php v5.3.2 registerglobals = Off...

Maian Gallery 2 - Local File Download

!/usr/bin/python This vulnerability uses filegetcontents so we have some limitations, we cant execute PHP and we cant read files that the web server will interpret such as PHP, conf etc tested on: Ubuntu Linux 2.6.32 with php v5.3.2 registerglobals = Off PRIVATE 0DAY - code by mrme Vulnerability...

XSS vulnerability in ATutor

Vulnerability ID: HTB22600 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinatutor1.html Product: ATutor Vendor: Inclusive Design Institute http://www.atutor.ca/ Vulnerable Version: 1.0 Vendor Notification: 01 September 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not...

XSS vulnerability in AContent search

Vulnerability ID: HTB22596 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinacontentsearch.html Product: AContent Vendor: Inclusive Design Institute http://www.atutor.ca/ Vulnerable Version: 1.0 Vendor Notification: 01 September 2010 Vulnerability Type: XSS Cross Site Scripting Status...

XSS vulnerability in SantaFox search module

Vulnerability ID: HTB22593 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinsantafoxsearchmodule.html Product: SantaFox Vendor: artprom http://www.santafox.ru/ Vulnerable Version: 2.02 and Probably Prior Versions Vendor Notification: 23 August 2010 Vulnerability Type: XSS Cross Site...

XSS vulnerability in AContent

Vulnerability ID: HTB22597 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinacontent.html Product: AContent Vendor: Inclusive Design Institute http://www.atutor.ca/ Vulnerable Version: 1.0 Vendor Notification: 01 September 2010 Vulnerability Type: Stored XSS Cross Site Scripting Statu...

AContent 1.0 Cross Site Scripting

=============================================== Vulnerability ID: HTB22596 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinacontentsearch.html Product: AContent Vendor: Inclusive Design Institute http://www.atutor.ca/ Vulnerable Version: 1.0 Vendor Notification: 01 September 2010...

MP3 Workstation 9.2.1.1.2 SEH Overwrite

MP3 Workstation Version 9.2.1.1.2 SEH exploit Author Sanjeev Gupta san.gupta86atgmail.com Download Vulnerable application from http://www.e-soft.co.uk/MP3%20Workstation.htm Vulnerable version MP3 Workstation Version 9.2.1.1.2 Tested on XP SP2 Greets Puneet Jain my $head =...

ATutor 1.0 Cross Site Scripting

====================================== Vulnerability ID: HTB22599 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinatutoreditcontentfolder.html Product: ATutor Vendor: Inclusive Design Institute http://www.atutor.ca/ Vulnerable Version: 1.0 Vendor Notification: 01 September 2010...