FileZilla Server 0.9.41 beta Remote DOS (CPU exhaustion)

Exploit for windows platform in category dos / poc Exploit Title:FileZilla Server version 0.9.41 beta Remote DOS CPU exhaustion Date: July 10, 2012 Author: coolkaveh email protected https://twitter.com/coolkaveh Vendor Homepage: http://filezilla-project.org/ Version: 0.9.41 Tested on: windows XP...

BoutikOne CSRF Add User Vulnerability

Exploit for php platform in category web applications !/usr/bin/perl -w Exploit Title: BoutikOne CSRF Add User Exploit Author: GarA Vendor Homepage: www.boutikone.com Tested on: Win Xp sp3 system "color a"; system "cls"; $numargs = $ARGV + 1; if $numargs != 4 print " :MM:....:HMMM .MMMMMMMMMM. \n...

Emesene 2.12.5 - Password Disclosure

Emesene 2.12.5 - Password Disclosure Exploit Title: Emesene Password Disclosure Category: Local Date: 29/06/2012 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Sofware web: http://blog.emesene.org/p/downloads.html Tested on: Linux Th...

Emesene 2.12.5 - Password Disclosure

Exploit Title: Emesene Password Disclosure Category: Local Date: 29/06/2012 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Sofware web: http://blog.emesene.org/p/downloads.html Tested on: Linux The only requirement to run the script ...

net-snmp security and bug fix update

1:5.5-41 - moved /var/lib/net-snmp fro net-snmp to net-snmp-libs package 822480 1:5.5-40 - fixed CVE-2012-2141 820100 1:5.5-39 - fixed proxying of out-of-tree GETNEXT requests 799291 1:5.5-38 - fixed snmpd crashing with many AgentX subagent 749227 - fixed SNMPv2-MIB::sysObjectID value when...

Concrete CMS 5.5 Shell Upload / Denial Of Service

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Belkin N150 Wireless Router - Password Disclosure

============================================ Belkin N150 Wireless MD5 Password Disclosure ============================================ Firmware Version : 1.00.22 Aug 31 2010 14:36:01 Boot Version : 1.20 Hardware : F7D1301 v1 01A Author : Avinash Tangirala ====================== Vulnerability...

mmPlayer 2.2 (.m3u) Local Buffer Overflow Exploit (SEH)

Exploit for windows platform in category local exploits !/usr/bin/perl Title: mmPlayer 2.2 .m3u Local Buffer Overflow Exploit SEH Date: 23.03.2012 Author: RjRjh Hack3r Software Link: http://www.brnameg.com/download.php?id=3859 Tested on: Windows XP SP2 EN Greetz: Inj3ct0r Exploit DataBase...

znif 2.2.1 (.pls) Local Buffer Overflow Exploit (SEH)

Exploit for windows platform in category local exploits !/usr/bin/perl Title: znif 2.2.1 .pls Local Buffer Overflow Exploit SEH Date: 19.03.2012 Author: RjRjh Hack3r Greetz: Inj3ct0r Exploit DataBase 1337day.com Software Link:...

Apache Tomcat - Account Scanner PUT Request Command Execution

Apache Tomcat - Account Scanner PUT Request Command Execution ISOWAREZ RELEASE By KINGCOPE - YEAR 2012 -== Apache Tomcat Remote Exploit and Account Scanner ==- the modified pnscan scanner utility scans a range of IPs to find open apache tomcat servers by trying the following login access...

Apache Tomcat - Account Scanner / 'PUT' Request Command Execution

ISOWAREZ RELEASE By KINGCOPE - YEAR 2012 -== Apache Tomcat Remote Exploit and Account Scanner ==- the modified pnscan scanner utility scans a range of IPs to find open apache tomcat servers by trying the following login access combinations: tomcat:tomcat password:password admin:admin admin:passwo...

CreateVision CMS - id SQL Injection

CreateVision CMS - id SQL Injection source: https://www.securityfocus.com/bid/52648/info CreateVision CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromi...

Mercury MR804 Router - Multiple HTTP Header Fields Denial of Service Vulnerabilities

Mercury MR804 Router - Multiple HTTP Header Fields Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/52106/info Mercury MR804 router is prone to multiple denial-of-service vulnerabilities. Remote attackers can exploit these issues to cause the device to crash, denying...

UltraPlayer 2.112 Denial Of Service

!/usr/bin/perl sub logo print STDERR Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail : submitat1337day.com 1 0 0 1 1 0 I'm KedAns-Dz member from Inj3ct0r Team 1 1 0...

tty from web shell

эмулятор nc -l -s ADDR -p PORT ввод/вывод которого управляется через файлы in/out написан для получения tty из под веб-шелла tty from web shell с ним из веб шела можно юзать su, запускать эксплоиты и получать рута пример работы: Код: ./ttyServer.pl Server is ready at 127.0.0.1:43157 ./ttyClient.p...

ShareCenter D-Link DNS-320 Remote reboot/shutdown/reset (DoS)

Exploit for hardware platform in category dos / poc !/usr/bin/perl Title: ShareCenter D-Link DNS-320 remote reboot/shutdown/reset DoS. Type: Hardware Remote: yes Author: rigan - imrigan sobachka gmail.com Tested on: Firmware : DNS320-v2.00b06 Security flaws: dskmgr.cgi allows execute reboot via...

ShareCenter D-Link DNS-320 Denial Of Service

!/usr/bin/perl Title: ShareCenter D-Link DNS-320 remote reboot/shutdown/reset DoS. Type: Hardware Remote: yes Author: rigan - imrigan sobachka gmail.com Tested on: Firmware : DNS320-v2.00b06 Security flaws: dskmgr.cgi allows execute reboot via POST request with parameter cmd=FMTrestart...

GLSA-201111-09 : Perl Safe module: Arbitrary Perl code injection

The remote host is affected by the vulnerability described in GLSA-201111-09 Perl Safe module: Arbitrary Perl code injection Unsafe code evaluation prevents the Safe module from properly restricting the code of implicitly called methods on implicitly blessed objects. Impact : A remote attacker...

COMTREND CT-5624 Router - Root/Support Password Disclosure/Change

!/usr/bin/perl + Comtrend Router CT-5624 Remote Root/Support Password Disclosure/Change Exploit Author: Todor Donev Email: todor.donev@@gmail Type: Hardware Vuln Type: Remote Tested: Board ID : CT-5624 Software : A011-306TSR-C01R03 Bootloader : 1.0.37-0.7-3 ADSL : A2pB022c3.d20e Board ID : CT-563...

Polipo 1.0.4.1 - POST/PUT HTTP Header Processing Denial of Service

source: https://www.securityfocus.com/bid/49908/info Polipo is prone to a denial-of-service vulnerability. Remote attackers can exploit this issue to cause the application to crash, denying service to legitimate users. Polipo 1.0.4.1 is vulnerable; other versions may also be affected...