436 matches found
CyberBrau <= 0.9.4 (forum/track.php) Remote File Include Vulnerability
No description provided by source. --------------------------------------------------------------------------- CyberBrau = 0.9.4 path Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team :...
Gravity Board X <= 1.1 (csscontent) Remote Code Execution Exploit
No description provided by source. !/usr/bin/perl Gravity Board X v1.1 possibly prior versions remote code execution exploit coded by 1dt.w0lf 14.08.2005 RST/GHC http://rst.void.ru http://ghc.ru use LWP::UserAgent; if@ARGV1 exit0; $path = $ARGV0; header; print Creating shell... Please wait\n; $gr...
PIX Firewall 2.7/3.x/4.x/5 Forged TCP RST Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1454/info A connection through a Cisco Secure PIX Firewall can be reset by a third party if the source and destination IP addresses and ports of the connection can be determined or inferred. This can be accomplished by...
AROUNDMe <= 0.5.2 (templatePath) Remote File Include Vulnerability
No description provided by source. --------------------------------------------------------------------------- AROUNDMe = 0.5.2 templatePath Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team :...
Subdreamer 2.2.1 - SQL Injection / Command Execution Exploit
No description provided by source. !/usr/bin/perl Subdreamer 2.2.1 command exec exploit @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ supported targets: without forum integration with phpBB2 integration with ipb2 integration with vbulletin2 integration...
PHP-Nuke <= 8.0 Final (sid) Remote SQL Injection Exploit
No description provided by source. ?php UNPUBLISHED RST/GHC EXPLOIT PHP Nuke sid sql injection exploit for Search module POST method - the best for version 8.0 FINAL coded by Foster & 1dt.w0lf tested on 6.0 , 6.6 , 7.9 , 8.0 FINAL versions if isset$POST'Submit'...
PHPDirector <= 0.21 (videos.php id) Remote SQL Injection Vulnerability
No description provided by source. PHPDirector = 0.21 SQL injection/Upload SHELL Remote Vulnerabilities WEB APP: PHPDirector 0.21 SITE: http://www.phpdirector.co.uk/site/ DORK: Powered by PHP Director AUTHOR: Kw3rLn tehlostbyteatYaHoOd0tCom Romanian Security Team Ethical Hacking -...
AoA DVD Creator 2.6.2 - ActiveX
nseh="\xEB\x06\x90\x90"; seh="\x1f\x5c\x03\x10"; nops="\x90"; while nops.length10 nops+="\x90"; shellcode = "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49"+ "\x49\x51\x5a\x56\x54\x58\x36\x33\x30\x56\x58\x34\x41\x30\x42\x36"+...
AoA Audio Extractor Basic 2.3.7 - ActiveX
nse="\xEB\x06\xff\xff"; seh="\x58\xE4\x04\x10"; nops="\x90"; while nops.length10 nops+="\x90"; shellcode = "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49"+ "\x49\x51\x5a\x56\x54\x58\x36\x33\x30\x56\x58\x34\x41\x30\x42\x36"+...
AoA MP4 Converter ActiveX
Exploit for windows platform in category local exploits Exploit Title: AoA MP4 Converter ActiveX Date: 19.05.2014 Author:metacom Website: www.rstforums.com Software Link: www.aoamedia.com/AoAMP4Converter.exe Version: 4.1.2 Tested on: Windows xp sp3EN IE 6.0 nse="\xEB\x06\x90\x90";...
CVE-2014-3135
Multiple cross-site scripting XSS vulnerabilities in vBulletin 5.1.1 Alpha 9 allow remote attackers to inject arbitrary web script or HTML via 1 the PATHINFO to privatemessage/new/, 2 the folderid parameter to a private message in privatemessage/view, 3 a fragment indicator to /help, or 4 the vie...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in vBulletin 5.1.1 Alpha 9 allow remote attackers to inject arbitrary web script or HTML via 1 the PATHINFO to privatemessage/new/, 2 the folderid parameter to a private message in privatemessage/view, 3 a fragment indicator to /help, or 4 the vie...
CVE-2014-3135
Multiple cross-site scripting XSS vulnerabilities in vBulletin 5.1.1 Alpha 9 allow remote attackers to inject arbitrary web script or HTML via 1 the PATHINFO to privatemessage/new/, 2 the folderid parameter to a private message in privatemessage/view, 3 a fragment indicator to /help, or 4 the vie...
Internet Haut Debit Mobile Buffer Overflow SEH
Exploit for windows platform in category local exploits !/usr/bin/python Exploit Title:Internet Haut Debit Mobile Buffer Overflow SEH Software Link:https://app.box.com/s/4h9cm20hp5iiask8rwrm Poc video demo :http://www.youtube.com/watch?v=sAHfjmNHiow&feature=youtu.be Version:PCWMATMARV1.0.0B03 Dat...
ALLMediaServer 0.95 Buffer Overflow Vulnerability
This Metasploit module exploits a stack buffer overflow in ALLMediaServer 0.95. The vulnerability is caused due to a boundary error within the handling of HTTP request. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the...
MediaCoder 0.8.23.5530 SEH Buffer Overflow Vulnerability
Mediacoder version 0.8.23.5530 SEH buffer overflow exploit that spawns calc.exe. !/usr/bin/python print """ +Exploit Title: Mediacoder 0.8.23.5530 SEH Buffer Overflow +Download All Product: http://www.mediacoderhq.com/editions.html +Vulnerable Product:! +Mediacoder 0.8.23.5530 +Vulnerabilities Fi...
Mediacoder - .m3u Local Buffer Overflow (SEH)
Mediacoder - .m3u Local Buffer Overflow SEH !/usr/bin/python import os import sys from struct import pack from time import sleep if os.name == "nt": os.system"cls" os.system"color 3f" else: os.system"clear" print """ +Exploit Title: All Mediacoder Product SEH Buffer Overflow +Download All Product...
Mediacoder PMP Edition 0.8.17 - '.m3u' Local Buffer Overflow
print """ +Exploit Title: MediaCoder PMP Edition 0.8.17 Buffer Overflow Exploit SEH +Download link: http://www.mediacoderhq.com/device/mpx.htm +Vulnerable Product: MediaCoder Personal Media Player Edition +Date found: 21.06.2013 +Date publish: 21.06.2013 +Founder: metacom +RST +Tested on: Windows...
AudioCoder 0.8.18 - Local Buffer Overflow (SEH)
!/usr/bin/env ruby Exploit Title:AudioCoder 0.8.18 Buffer Overflow Exploit SEH Download link :http://www.mediacoderhq.com/getfile.htm?site=dl.mediacoderhq.com&file=AudioCoder-0.8.18.exe Vulnerable Product:AudioCoder Date found: 30.04.2013 Date publish: 01.05.2013 RST Author: metacom Version:...