Adobe Acrobat, Reader和Flash Player远程代码执行漏洞

No description provided by source...

WINMOD 1.4 (.lst File) Local Buffer Overflow Exploit (SEH)

No description provided by source. !/usr/bin/perl by hack4love [email protected] WINMOD V 1.4 .lst File Local Buffer Overflow Exploit SEH http://www.software112.com/products/winmod+download.html easy Thanks for ELNAMER ELMASRY\EL7ADRANY\DeCo017\ZAX\ASER ELRO7 this work sooooooooo good Tested...

Streaming Audio Player 0.9 - 'skin' Local Stack Overflow (SEH)

+°.+°.+°.+°.+°.+°.+°.+°.+°.+°.+°.+°.+°.+°.+°.+°.+°.+°.+°.+°.+°. SkuLL-HacKeR +°.+°.+°.+°.+°.+°.+°.+°.+°.+°.+°.+°.+°.+°.+°.+°.+°.+°.+°.+°.+°. !/usr/bin/perl + Streaming Audio Player 0.9 skin Local Stack Overflow SEH win32exec - EXITFUNC=seh CMD=calc Size=3...

ZenPhoto Gallery 1.2.5 Password Reset

?php Zen Photo Adminstrator Password Steal/Reset Exploit +================================================================+ Discovered and coded by petros at dusecurity.com +----------------------------------------------------------------+ Affects: ZenPhoto Gallery 1.2.5...

Greenwood Content Manager 0.3.2 Local File Inclusion Exploit

Exploit for unknown platform in category web applications ============================================================ Greenwood Content Manager 0.3.2 Local File Inclusion Exploit ============================================================ !usr/bin/python Greenwood Content Manager Remote Code...

Pirch IRC 98 Client (response) Remote BOF Exploit (SEH)

Exploit for windows platform in category remote exploits ======================================================= Pirch IRC 98 Client response Remote BOF Exploit SEH ======================================================= !/usr/bin/python Usage : python pirch.py | || | / \ | | | | | | | | | - | | ...

censura 1.16.04 - Blind SQL Injection Cross-Site Scripting

censura 1.16.04 - Blind SQL Injection Cross-Site Scripting ================================================================================================ Title : Blind SQL/XSS Multiple Remote Vulnerabilities Software : Censura v1.16.04 Vendor : http://www.censura.info/ Date : 12 July 2009...

d.net CMS Arbitrary Reinstall/Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ========================================================= d.net CMS Arbitrary Reinstall/Blind SQL Injection Exploit ========================================================= + Arbitrary Re-Installation Vulnerability There's no check about...

Miffat 2.2 SQL Injection

?php iniset"maxexecutiontime",0; printr' || || | || o,7 || . o7 || q||| o///, : / / . /QQQQQQQQQQQQQQQQQQQ\ q Mlffat 2.2 Blind SQL Inj. /QQQ/\QQQ\ /QQQQQ/ \QQQQQQ\ q Cookie 3 /QQQQ/ QQQQ\ /QQQQ/ \QQQQ\ q http://www.mlffat.com |QQQQ/ By Qabandi \QQQQ| |QQQQ| |QQQQ| |QQQQ| From Kuwait, PEACE...

Nwahy Dir 2.1 Arbitrary Change Admin Password Exploit

No description provided by source. ? / Nwahy Dir v2.1 Change Admin Password Exploit - Author : rEcruit - Mail : [email protected] - Download : http://nwahy.com/showdownload-3105.html - Vuln in ./admincp/admininfo.php code $u = addslashes$COOKIE'username'; $query = mysqlquery "SELECT FROM dliladmi...

AdminLog 0.5 Authentication Bypass

AdminLog 0.5 Login Bypass Vulnerability + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + down: http://www.manlyfamily.net/wiki/doku.php?id=programming:php:adminlog + Login Bypass - Conditions : registerglobals = ON - PoC...

Apple Safari 4.x Crash Exploit

Apple Safari 4.x JavaScript Reload Denial of Service Author : Marcell 'SkyOut' Dietl, Achim Hoffmann Email : mail at marcell-dietl dot de Vendor : http://www.apple.com/ Product : http://www.apple.com/safari/ Found : 12.06.2009 Released : 01.07.2009 Tested on: - Safari 4.0 at Windows XP SP3 - Safa...

Green Dam Change System Time

// Green Dam listen on udp port 1234 and wait for the 4 bytes time value // We can send some bytes to change the time of the dest system // testgreendamatgmail.com include include include int mainint argc, char argv try if argc != 3 std::cerr " std::endl; std::cerr "Example: testgd 192.168.0.12...

SMF Mod Member Awards 1.0.2 - Blind SQL Injection

SMF Mod Member Awards 1.0.2 - Blind SQL Injection ------------------------------------------------------------------------- SMF Component Member Awards Blind SQL-injection Vulnerability ------------------------------------------------------------------------- author: eLwaux thanks: mailbrush,...

Messages Library 2.0 - Arbitrary Administrator Account

ThE g0bL!N Messages Library 2.0 Remote Add Admintsrator Account Username Password milw0rm.com 2009-06-30...

Zen Cart 1.3.8 - Remote Code Execution

Zen Cart 1.3.8 - Remote Code Execution !/usr/bin/php | ======================================================================== | | | $system php $argv0 | | Notes: ex: http://victim.com/site no slash | | | ======================================================================== ";exit1; $url =...

Bopup Communications Server 3.2.26.5460 - Remote SYSTEM

Bopup Communications Server 3.2.26.5460 - Remote SYSTEM / bopup-down.c Copyright c 2008 by Bopup Communications Server remote SYSTEM exploit by mu-b - Sat Feb 08 2008 - Tested on: Bopup Communications Server 3.2.26.5460 Mar 18 2009 .text:00407A17 lea eax, ebp+pkt0x19 .text:00407A1D push eax...

Elgg (XSS/CSRF/Change Password) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications =============================================================== Elgg XSS/CSRF/Change Password Multiple Remote Vulnerabilities =============================================================== + CMS Elgg uploading to a host.Save as cookie.php...

Mozilla Firefox 'NPObject'访问远程代码执行漏洞

Bugraq ID: 35360 CVE ID：CVE-2009-1837 CNCVE ID：CNCVE-20091837 Mozilla Firefox是一款开放源代码的WEB浏览器。 Mozilla Firefox访问NPObject JS封装类对象的私有数据时存在竞争条件错误，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 当访问NPObject属性一个封装的JSObject时NPObjWrapperNewResolve存在竞争条件错误，在装载Java...

'Compress::Raw::Zlib' Perl模块远程代码执行漏洞

Bugraq ID: 35307 CVE ID：CVE-2009-1391 CNCVE ID：CNCVE-20091391 Compress::Raw::Zlib是一款Zlib压缩库提供perl低级接口的模块。 Compress::Raw::Zlib inflate存在缓冲区溢出，远程攻击者可以利用漏洞使应用程序崩溃或以应用程序权限执行任意指令。 Zlib.xs中的"inflate"函数存在单字节错误，当处理特殊构建的压缩数据时存在堆缓冲区溢出，可导致perl进程关起或崩溃。 Compress::Raw::Zlib 2.015 Compress::Raw::Zlib 2.014 升级程序...