CVE-2008-7102

DotNetNuke 2.0 through 4.8.4 allows remote attackers to load .ascx files instead of skin files, and possibly access privileged functionality, via unknown vectors related to parameter validation...

CVE-2008-6965

AJ Square AJ Auction OOPD, Pro Platinum Skin 1, Pro Platinum Skin 2, and Web 2.0 send a redirect but do not exit when certain scripts are called directly, which allows remote attackers to bypass authentication via a direct request to 1 site.php, 2 auction.php, 3 mail.php, 4 feesetting.php, 5...

Authentication flaw

AJ Square AJ Auction Pro Platinum Skin 1 sends a redirect but does not exit when it is called directly, which allows remote attackers to bypass authentication via a direct request to admin/user.php...

CVE-2008-6966

The CVE-2008-6966 entry concerns AJ Square AJ Auction Pro Platinum Skin #1, where a redirect is not exited when accessed directly, enabling a remote attacker to bypass authentication via a direct request to admin/user.php. The issue is tied to improper flow control after a redirect, allowing an a...

CVE-2008-6965

AJ Square AJ Auction OOPD, Pro Platinum Skin 1, Pro Platinum Skin 2, and Web 2.0 send a redirect but do not exit when certain scripts are called directly, which allows remote attackers to bypass authentication via a direct request to 1 site.php, 2 auction.php, 3 mail.php, 4 feesetting.php, 5...

CVE-2008-6966: Undefined Security Weakness

AJ Square AJ Auction Pro Platinum Skin 1 sends a redirect but does not exit when it is called directly, which allows remote attackers to bypass authentication via a direct request to admin/user.php...

UltraPlayer Media Player 2.112 Local Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ======================================================== UltraPlayer Media Player 2.112 Local Buffer Overflow PoC ======================================================== !/usr/bin/perl UltraPlayer Media Player 2.112 Coded by SarBoT511 Download :...

Soritong MP3 Player 1.0 - SKIN Local Stack Overflow (SEH)

Soritong MP3 Player 1.0 - SKIN Local Stack Overflow SEH -------------------- SkuLL-HacKeR ----------------- !/usr/bin/perl + Bug : Soritong MP3 Player 1.0 SKIN Local Stack Overflow Exploit SEH win32exec - EXITFUNC=seh CMD=calc Size=343 Encoder=PexAlphaNum http://metasploit.com my $shellcode =...

Soritong MP3 Player 1.0 - 'SKIN' Local Stack Overflow (SEH)

-------------------- SkuLL-HacKeR ----------------- !/usr/bin/perl + Bug : Soritong MP3 Player 1.0 SKIN Local Stack Overflow Exploit SEH win32exec - EXITFUNC=seh CMD=calc Size=343 Encoder=PexAlphaNum http://metasploit.com my $shellcode =...

Soritong MP3 Player 1.0 - 'SKIN' Local Stack Overflow (PoC) (SEH)

Soritong MP3 Player 1.0 SKIN Local Stack Overflow PoC Seh First:http://milw0rm.com/exploits/8624 By: ThE g0bL!N my $crash="\x41" x 5000 ; just random openmyfile,'UI.txt' ; print myfile $crash; Usage: After Clicking On file Perl Copy TXT File on this Diredtory skin\default\ Then Run The Program Bo...

CVE-2009-2037

Multiple directory traversal vulnerabilities in Online Grades & Attendance 3.2.5 and earlier, and possibly 3.2.6, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 GLOBALSSKIN parameter to index.php and the 2 skin...

Slayer 2.4 - skin Universal Buffer Overflow (SEH)

Slayer 2.4 - skin Universal Buffer Overflow SEH !/usr/bin/python print "" print "Slayer v2.4 skin Universal Seh Overflow Exploit SEH\n" print "AUTHOR: SuNHouSe2 ALGERIAN HaCkEr\n" print "Email : [email protected]\n" print "HOME : http://www.snakespc.com\n" print "Tested on: Windows XP Pro SP3...

Winamp MAKI Buffer Overflow

This module exploits a stack based buffer overflow in Winamp 5.55. The flaw exists in the genff.dll and occurs while parsing a specially crafted MAKI file, where memmove is used in an insecure way with user controlled data. To exploit the vulnerability the attacker must convince the victim to...

CVE-2009-1498: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in inc/profilemain.php in Game Maker 2k Internet Discussion Boards iDB 0.2.5 Pre-Alpha SVN 243 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the skin parameter in a settings action to profile.php...

CoolPlayer Portable 2.19.1 (Skin) Buffer Overflow Exploit

No description provided by source. CoolPlayer Portable 2.19.1 Skin Buffer Overflow exploit Credit To Goldm http://www.milw0rm.com/exploits/8489 By Stack Sysworm.com Note abouts this Exploit : right click Option Open select our target file and boooooom calc executed :d Note abouts the last exploit...

CoolPlayer Portable 2.19.1 - Skin Local Buffer Overflow

CoolPlayer Portable 2.19.1 - Skin Local Buffer Overflow CoolPlayer Portable 2.19.1 Skin Buffer Overflow exploit Credit To Goldm http://www.milw0rm.com/exploits/8489 By Stack Sysworm.com Note abouts this Exploit : right click Option Open select our target file and boooooom calc executed :d Note...

CoolPlayer Portable 2.19.1 Overflow

CoolPlayer Portable 2.19.1 Skin Buffer Overflow exploit Credit To Goldm http://www.milw0rm.com/exploits/8489 By Stack Sysworm.com Note abouts this Exploit : right click Option Open select our target file and boooooom calc executed :d Note abouts the last exploit m3u: my first Exploit Have just 21...

CoolPlayer Portable 2.19.1 - 'Skin' Local Buffer Overflow

CoolPlayer Portable 2.19.1 Skin Buffer Overflow exploit Credit To Goldm http://www.milw0rm.com/exploits/8489 By Stack Sysworm.com Note abouts this Exploit : right click Option Open select our target file and boooooom calc executed :d Note abouts the last exploit m3u: my first Exploit Have just 21...

CoolPlayer Portable 2.19.1 (Skin) Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ========================================================= CoolPlayer Portable 2.19.1 Skin Buffer Overflow Exploit ========================================================= CoolPlayer Portable 2.19.1 Skin Buffer Overflow exploit Note abouts...

CVE-2008-6732

Cross-site scripting XSS vulnerability in the Language skin object in DotNetNuke before 4.8.4 allows remote attackers to inject arbitrary web script or HTML via "newly generated paths."...