F-Secure Multiple Products SEH Overwrite

Exploit Title: F-Secure Multiple Products ActiveX Remote SEH Overwrite VulnerabilityHeap Spray Discovered Date: 24/05/2011 Author: 41.w4r10r Version: Multiple Tested on : Windows XP SP2 Eng, IE 6,7,8 Affected Products : F-Secure Anti-Virus 2011 F-Secure Anti-Virus 2010 F-Secure Internet Security...

JSS-Shop SQL Injection

Exploit Title: JSS-Shop E-Commerce System SQL Injection Date: 2011 Author: Eyup CELIK Software Link: http://www.turnkeycentral.com Version: All Version Tested on: All versions are Vulnerability ISSUE SQL Injection can be done using the command input Example cart.php?pid=&todo=add Exploit:...

Bonza Digital Cart Script - SQL Injection

Exploit Title: Bonzo Cart E-Commerce System SQL Injection Date: 2011 Author: Eyup CELIK Software Link: http://www.turnkeycentral.com Version: All Version Tested on: All versions are Vulnerability ISSUE SQL Injection can be done using the command input Example...

WordPress Contus HD FLV Player 1.3 SQL Injection

Exploit Title: WordPress Contus HD FLV Player plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0&listItem=1 --------------- Vulnerable code --------------- $pid1 = $GET'playid'; foreach $GET'listItem' as $position = $item : mysqlquery"UPDATE $wpdb-prefix" . "hdflvmed2play SET sorder =...

Precision Technologies(page.php)sql Injection Vulnerability

Exploit for php platform in category web applications Exploit Title:Precision Technologiespage.phpsql Injection Vulnerability Date: 17/8/2011 Author: Angel Injection home Page: http://www.club-h.co.cc , http://www.sec-krb.org Email: Angel-Injectionathotmail.com Vendor or Software Link:...

HP Data Protector (Linux) - Remote Command Execution

HP Data Protector Linux - Remote Command Execution !/bin/bash Exploit Title: HP Data Protector Remote Root Shell for Linux Date: 2011-08-10 Author: SZ Software Link:http://www8.hp.com/us/en/software/software- product.html?compURI=tcm:245-936920&pageTitle=data-protector Version: 0.9 Tested on:...

A-PDF All to MP3 2.3.0 - Universal DEP Bypass

!/usr/bin/ruby +Exploit Title: A-PDF All to MP3 v2.3.0 Universal DEP Bypass Exploit +Date: 09\08\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.a-pdf.com/all-to-mp3/ +Version: 2.3.0 +Tested On: WIN-XP SP3 Brazilian Portuguese +CVE: N/A Dep bypass method: LoadLibraryA"kernel32.dll" +...

WordPress Plugin Social Slider 5.6.5 - SQL Injection

Exploit Title: Social Slider...

Title Web Solutions Blind SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Title Web Solutions Blind SQL-i Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

cFTP 0.1 r80 Shell Upload

Software Link: https://code.google.com/p/clients-oriented-ftp/downloads/list Version: 0.1 Tested on: linux // Vulnerable URL $url = 'http://url domain/cFTP/'; // The file to upload $filename = dirnameFILE.'/info.php'; $failext = array'php', 'pl'; $username = 'hackname'.rand0, 999999;...

CVE-2011-2743: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Chyrp 2.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the action parameter to 1 the default URI or 2 includes/javascript.php, or the 3 title or 4 body parameter to admin/help.php...

PT-2011-4055

Name of the Vulnerable Software and Affected Versions Chyrp versions 2.1 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the action parameter to the default URI or includes/javascript.php, or the title or body parameter to...

Symantec Backup Exec 12.5 - Man In The Middle

Exploit Title: Symantec Backup Exec MiTM Attack Date: 27/05/2011 Author: Nibin Software Link: http://www.symantec.com/business/products/family.jsp?familyid=backupexec Version: - Symantec Backup Exec for Windows Servers versions 11.0, 12.0, and 12.5 - Symantec Backup Exec 2010 versions 13.0 and 13...

Various Indian Sites Cross Site Scripting

%+ $...............4.........|........0............// %+ %+ %+ %+++++++++++++++++++++++++++++ +++++++++++ Exploit Title: .in.com XSS vulnerability Vendor: various Date: 6th july,2011 Author: r007k17 a.k.a Raghavendra Karthik D link: http://shadowrootkit.wordpress.com/ Google Dork: © Copyright...

VietNext CMS Multiple Vulnerabilities

Exploit for php platform in category web applications + Exploit Title:Multiple Vulnerabilities + Date: 2011 + script:VietNext cms + Software: http://vietnextco.com & http://vietnext.vn + Author : pentesters.ir + Website : WwW.PenTesters.IR + dorks :"Developed & Design By VietNext" and "Design by...

SVM Infotech SQL injection Vulnerability

Exploit for php platform in category web applications ‡‡‡‡‡‡‡‡‡‡‡‡‡‡ + Exploit Title : SVM Infotech.. SQL injection Vulnerability + Author : k's0uR! + Category : WebApps + d0rk : "Developed & Managed By: SVM Infotech"Or"Designed & Developed By: SVM Infotech" + Tested o...

Technote 7.2 - Blind SQL Injection

Exploit Title: technote blind sql injection Google Dork: inurl:/technote7/board.php?board= Date: 2011.06.11 Author: BlueH4G http://blueh4g.org Software Link: http://www.technote.co.kr/php/technote1/board.php?board=consult&command=skininsert&exe=insertdownshop Version: technote7.2 && Mysql 3.x sor...

Ani-Shell v1.1 - Back-Connect and Bind-Shell Features by lionaneesh

Ani-Shell v1.1 - Back-Connect and Bind-Shell Features by lionaneesh New Features in this version 0x01A Bind Shell 0x01B Back Connect 0x01C Fixed Some Coding errors! 0x01D Rename Files 0x01E Encoded Title Download or Read More...

Ani-Shell v1.1 - Back-Connect and Bind-Shell Features by lionaneesh

Ani-Shell v1.1 - Back-Connect and Bind-Shell Features by lionaneesh New Features in this version 0x01A Bind Shell 0x01B Back Connect 0x01C Fixed Some Coding errors! 0x01D Rename Files 0x01E Encoded Title Download or Read More...