osCSS2 - '_ID' Local file Inclusion

Advisory: osCSS2 "ID" parameter Local file inclusion Advisory ID: SSCHADV2011-034 Author: Stefan Schurtz Affected Software: Successfully tested on osCSS2 2.1.0 latest version Vendor URL: http://oscss.org/ Vendor Status: Fixed in svn branche 2.1.0 and reported in develop version 2.1.1...

Crush FTP 5 - 'APPE' Remote JVM Blue Screen of Death (PoC)

Exploit Title: Crush FTP 5 'APPE' command Remote BSOD Poc Exploit Date: 06/09/2011 Author: BSOD Digital Fabien DROMAS Mail: [email protected] Test: OS: Windows 7 Versions: 5.7.096 Link: https://www.crushftp.com/early5/CrushFTP5PC.zip !/usr/bin/env python import socket host = rawinput"Type...

Crush FTP 5 'APPE' command Remote JVM BSOD PoC Exploit

Exploit for windows platform in category dos / poc Exploit Title: Crush FTP 5 'APPE' command Remote BSOD Poc Exploit Date: 06/09/2011 Author: BSOD Digital Fabien DROMAS Mail: email protected Test: OS: Windows 7 Versions: 5.7.096 Link: https://www.crushftp.com/early5/CrushFTP5PC.zip !/usr/bin/env...

Simple Machines forum (SMF) 2.0 session hijacking

Exploit for php platform in category web applications Simple Machines forum SMF 2.0 session hijacking Found by The X-C3LL and seth http://0verl0ad.blogspot.com/ || http://xd-blog.com.ar/ 2011-08-06 Website: http://www.simplemachines.org/ Greets: yoyahack, eddyw, www.portalhacker.net SMF stops csr...

D-Link DSL-2650U - Denial of Service (PoC)

D-Link DSL-2650U - Denial of Service PoC Exploit Title: Dlink DSL-2650U DoS/PoC Date: July 6th, 2011 Author: Li'el Fridman Software Link: ftp://ftp.dlink.ru/pub/ADSL/DSL-2650UBRUD/Firmware/RU1.20/DSL-2650UBRUD1RU1.2006222011.zip Version: 1.20 Tested on: Default firmware - Linux 2.6.8.1...

Media Player Classic v6.4.9.1 (.ogg) PoC Exploit

Exploit for windows platform in category dos / poc !/usr/bin/perl sub logo print STDERR Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail : submitat1337day.com 1 0 0 1 1 0 I'm KedAns-Dz member from Inj3ct0r Team 1 1 0...

BoutikOne - description.php SQL Injection

BoutikOne - description.php SQL Injection | || \ / \ / \ | | / \ / \ | | | | / \ | \ ||| | \ \ / / \ \ / \ || / / \ \ / / | ||| || / / \ \ | | \ \ | | | |/ / / / \ \ | | | | / / \ \ / / | | | | | | / / \ \ | |/ / | | |/ / / | | \ \ | | | | | |/ / | | \ \ / / | | | | / / | | \ \ |/ | | | | \ \ | |...

JAKCMS 2.01 RC1 - Blind SQL Injection

JAKCMS 2.01 RC1 - Blind SQL Injection !/usr/bin/python jakCMS = v2.01 RC1 Blind SQL Injection Exploit Understanding: The parameters 'JAKCOOKIENAME' and 'JAKCOOKIEPASS' are parsed via cookies to the application and are unchecked for malicious characters. The contents of these variables are directl...

Oracle 1011g - exp.exe?file Local Buffer Overflow

Oracle 1011g - exp.exe?file Local Buffer Overflow !/usr/bin/python Oracle 10/11g exp.exe - param file Local Buffer Overflow PoC Exploit Date found approx: 9/3/2010 Software Link: http://www.oracle.com/technology/products/database/oracle10g/index.html Version: 10.x and 11g r1 r2 untested Tested on...

Oracle 10/11g - 'exp.exe?file' Local Buffer Overflow

!/usr/bin/python Oracle 10/11g exp.exe - param file Local Buffer Overflow PoC Exploit Date found approx: 9/3/2010 Software Link: http://www.oracle.com/technology/products/database/oracle10g/index.html Version: 10.x and 11g r1 r2 untested Tested on: Windows XP SP3 En Usage: $ORACLEHOME\exp.exe...

Byte2 SQL Injection / Cross Site Scripting

======================================================= Byte2 Exploit database separated by exploit 3 3 type local, remote, DoS, etc. 3 7 7 1 + Site : 1337db.com 1 3 + Support e-mail : submitat1337db.com 3 3 3 7 7 1 I'm KnocKout 1337 Member from 1337 DataBase 1 3 3 3 3...

Free Simple Software - SQL Injection

'Free Simple Software' SQL Injection Vulnerability CVE-2010-4298 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in the 'Free Simple Software' download module which allows for a 'UNION SELECT' to easily expose the application...

Free Simple Software - SQL Injection

Free Simple Software - SQL Injection 'Free Simple Software' SQL Injection Vulnerability CVE-2010-4298 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in the 'Free Simple Software' download module which allows for a 'UNION...

Kandidat CMS 1.4.2 - Persistent Cross-Site Scripting

Vulnerability ID: HTB22648 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinkandidatcms.html Product: Kandidat CMS Vendor: Kan-Studio http://www.kan-studio.ru/ Vulnerable Version: 1.4.2 and probably prior versions Vendor Notification: 19 October 2010 Vulnerability Type: Stored XSS Cro...

SureThing CD Labeler Stack Overflow

/ surethingcdlabelerbofpoc.c SureThing cd labeler m3u/pls - unicode stack overflow PoC exploit Found by: Ruben Alejandro - chap0 Author: Steven Seeley - mrme http://net-ninja.net/ Greetz to: Corelan Security Team http://www.corelan.be:8800/index.php/security/corelan-team-members/ Writeup: Unicode...

SureThing CD Labeler (m3u/pls) - Unicode Stack Overflow PoC Exploit

Exploit for windows platform in category local exploits =================================================================== SureThing CD Labeler m3u/pls - Unicode Stack Overflow PoC Exploit =================================================================== / surethingcdlabelerbofpoc.c SureThing ...

Audio Converter 8.1 0day Stack Buffer Overflow PoC exploit

Exploit for windows platform in category local exploits ========================================================== Audio Converter 8.1 0day Stack Buffer Overflow PoC exploit ========================================================== Exploit Title : Audio Converter 8.1 0day Stack Buffer Overflow P...

Attachmate 13.0 / 14.0 Buffer Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Exploit Title: Reflection Attachmate Reflection Standard Suite 2008 activex buffer overflow Date: Mar 11, 2010 found Author: Rad L. Sneak JB Software Link: http://www.attachmate.com/Evals/ruo2/eval-form.htm Version: 13.0 & 14.0 Tested on: WinXP SP3 &...

Joomla! Component FDione Form Wizard 1.0.2 - Local File Inclusion

Joomla! Component FDione Form Wizard 1.0.2 - Local File Inclusion ----------------------------------------------------------------------------------------- Joomla Component FDione Form Wizard lfi vulnerability ---------------------------------------------------------------------------------------...

ESET Smart Security 4.2 and NOD32 AntiVirus 4.2 (x86x64) - LZH archive parsing (PoC)

ESET Smart Security 4.2 and NOD32 AntiVirus 4.2 x86x64 - LZH archive parsing PoC ESET Smart Security 4.2 and NOD32 Antivirus 4.2 x32-x64 LZH archive parsing PoC exploit. Scanning of malicious file causes heap corruption in context of the service process ekrn.exe. See Dr. Watson log drwtsn32.log f...