Megacubo 5.0.7 - 'mega://' Arbitrary File Download and Execute

Megacubo 5.0.7 download & Execute by :JJunior site: http://www.musicastop.com.br/ tested against Internet Explorer 7 and Mozilla Firefox 1.5 Windows Xp sp 3 software site: http://www.megacubo.net/tv/ download url:...

FlexPHPDirectory 0.0.1 - Authentication Bypass

Autore: x0r Email: [email protected] Site: http://w00tz0ne.altervista.org/index.php Cms: Flexphpdiren Version: 0.0.1 Download: http://www.china-on-site.com/flexphpdir/ Bug In \admin\usercheck.php 'n' \add.php $sql = "select username,adminid from linkexadmin where username='$checkuser' and...

Flexphplink Pro - Arbitrary File Upload

Flexphplink Pro - Arbitrary File Upload !/usr/bin/perl HAPPY CHRISTMAS !! Flexphplink Pro http://www.hotscripts.com/jump.php?listingid=21062&jumptype=1 Bug: Arbitrary File Upload I coded this exploit just for fun ; Exploit coded by Osirys osirysatlivedotit http://osirys.org Greets: x0r, miclen,...

Flexphplink Pro Arbitrary File Upload Exploit

No description provided by source. !/usr/bin/perl HAPPY CHRISTMAS !! Flexphplink Pro http://www.hotscripts.com/jump.php?listingid=21062&jumptype=1 Bug: Arbitrary File Upload I coded this exploit just for fun ; Exploit coded by Osirys osirysatlivedotit http://osirys.org Greets: x0r, miclen, emgent...

Flexphplink Pro - Arbitrary File Upload

!/usr/bin/perl HAPPY CHRISTMAS !! Flexphplink Pro http://www.hotscripts.com/jump.php?listingid=21062&jumptype=1 Bug: Arbitrary File Upload I coded this exploit just for fun ; Exploit coded by Osirys osirysatlivedotit http://osirys.org Greets: x0r, miclen, emgent, str0ke, Todd and AlpHaNiX Example...

Amaya Web Browser 11.0.1 (Windows Vista) - Remote Buffer Overflow

!/usr/bin/perl Amaya Web Browser = 11.0.1 Remote Buffer Overflow Exploit Found/Exploit by SkD [email protected] [email protected] ----------------------------------------------- This is advanced buffer overflow exploitation using my new method called shellhunting : Get more information about this...

RoundCube Webmail <= 0.2b Remote Code Execution Exploit

No description provided by source. !/bin/sh I was hoping the PoC would not appear so soon, but now that it is out, i thought i might as well publish my real exploit. Hunger http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5619 FOR LEARNING PURPOSES ONLY! PHP echoiniget'disablefunctions';...

PHPmotion 2.1 - Cross-Site Request Forgery

PHPmotion Source of pwned.html file: Once your victim has visited your evil page, You may now be able to log into their PHPMotion account, using password "password123" an...

CoolPlayer 2.19 - '.Skin' Local Buffer Overflow

/ CoolPlayer 2.19 Skin File Local Buffer Overflow Exploit Advisory: http://www.bmgsec.com.au/advisory/43/ Test box: WinXP Pro SP2 English Code reference is in skin.c, lines 464 - 480 Written and discovered by: r0ut3r writ3r at gmail.com / www.bmgsec.com.au / include include include //exit using...

Aiyoota! CMS - Blind SQL Injection

php '.$argv0.' -1 http://www.site.com Example Method 2 for http://www.site.com/english/8/8/45001/liste9.html = php '.$argv0.' -2 http://www.site.com english 8 8 45001 liste9.html '; $automatic = $argv1; $url = $argv2; if $argv1 == "-1" | $argv1 == "-2" & $argc == 3 | $argc == 8 if $argv1 == "-1"...

clickandemail - SQL Injection / Cross-Site Scripting

-------------------------------AlpHaNiX---------------------------------- Found By : AlpHaNiX website : www.offensivetrack.org contact : AlpHaATHACKERDOTBZ script : ClickAndEmaiL download : null Demo : http://icash.ch/ClickAndEmailDEMO Exploits : --=SQL INJECTION=--...

Flatnux - htmlJavaScript Injection Cookie Grabber

Flatnux - htmlJavaScript Injection Cookie Grabber titolo /textarea Immagine File -- !-- xss variables mod foto /sections/05...

Feed CMS 1.07.03.19b - lang Local File Inclusion

Feed CMS 1.07.03.19b - lang Local File Inclusion Feed Cms 1.07.03.19 Beta LFI Autore: x0r Email: [email protected] Download: http://heanet.dl.sourceforge.net/sourceforge/feedcms/FeedCms1.07.03.19Beta.rar Bug In: index.php if $GET'lang' $language = $GET'lang';...

Microsoft Internet Explorer (Windows Vista) - XML Parsing Buffer Overflow

Microsoft Internet Explorer Windows Vista - XML Parsing Buffer Overflow // ksOSe 12/10/2008 // Tested on Vista SP1, Explorer 7.0.6001.18000 and Vista SP0, Explorer 7.0.6000.16386 // Heap spray address adjusted for Vista - muts / offensive-security.com //...

Living Local 1.1 (XSS-RFU) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ========================================================== Living Local 1.1 XSS-RFU Multiple Remote Vulnerabilities ========================================================== Authot: Bgh7 Home: http://ozelteam.com - Turk Bilisim Gucleri...

eZ Publish < 3.9.5/3.10.1/4.0.1 Privilege Escalation Exploit

No description provided by source. ?php / eZ Publish privilege escalation exploit by s4avrd0w [email protected] Versions affected = 3.5.6 Resolved in 3.9.5, 3.10.1, 4.0.1 More info:...

PHPepperShop 1.4 Cross Site Scripting

Vulnerable Version:PHPepperShop v 1.4 Homepage:http://www.phpeppershop.com This is 4 reflective XSS flaws in the URI. Trust no one not even your $SERVERPHPSELF http://10.1.1.10/shop/kontakt.php/'alert1 http://10.1.1.10/index.php/%22%3Cscript%3Ealert1%3C/script%3E...

Bonza Cart <= 1.10 Admin Password Changing Exploit

No description provided by source. ?php / ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

PayPal eStore Admin Password Changing Exploit

Exploit for unknown platform in category web applications ============================================= PayPal eStore Admin Password Changing Exploit ============================================= ?php / ============================================================================== / \ | | | | / \...

Bonza Cart <= 1.10 Admin Password Changing Exploit

Exploit for unknown platform in category web applications ================================================== Bonza Cart = 1.10 Admin Password Changing Exploit ================================================== ?php / ============================================================================== /...