1068 matches found
SlimFTPd <= 3.15 Remote Buffer Overflow Exploit
No description provided by source. / SlimFTPd = 3.15, Remote Buffer Overflow Exploit v0.1. Bind a shellcode to the port 101. Full disclosure and exploit by class101 at DFind.kd-team.com & n3ws at EFnet 10 november 2004 Thanx to HDMoore and Metasploit.com for their kickass ASM work...
win32/xp pro sp3 (EN) 32-bit - add new local administrator 113 bytes
No description provided by source. / Title: win32/xp pro sp3 EN 32-bit - add new local administrator 113 bytes Author: Anastasios Monachos secuid0 - anastasiosmatgmaildotcom Method: Hardcoded opcodes kernel32.winexec@7c8623ad, kernel32.exitprocess@7c81cafa Tested on: WinXP Pro SP3 EN 32bit - Buil...
Half-Life Server 3.1.1.0 - Remote Buffer Overflow Exploit
No description provided by source. / hoagiehlserver.c Remote exploit for Halflife-Servers. Binds a shell to port 30464/tcp and connects to it. Author: [email protected] This hole was found by Auriemma Luigi. Uses code from the proof-of-concept DoS-exploit by Auriemma Luigi. Tested with HL-Server...
Radasm 2.2.1.6 - (.rap) Universal Buffer Overflow Exploit
No description provided by source. !/usr/bin/python + Radasm .rap Universal buffer overflow Exploit + Original : http://www.exploit-db.com/exploits/11392 + Exploit : Dzattacker [email protected] header1= \x5b\x50\x72\x6f\x6a\x65\x63\x74\x5d\x0d\x0a\x41\x73\x73\x65\x6d\x62\x6c\x65\x72...
Xerver 4.31, 4.32 HTTP Response Splitting
No description provided by source. Xerver 4.31, 4.32 HTTP Response Splitting Discovered: 04-10-08 By: SecureState R&D Team - sasquatch Vendor Notified: 04-11-08 Vendor Response: 04-13-08 New version also vulnerable: 10-07-09 Tested Win32 v4.32 Vendor Notified: 10-07-09 Vendor Response: NONE...
SHOUTcast DNAS/win32 1.9.4 File Request Format String Overflow
No description provided by source. $Id: shoutcastformat.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
Win32 Shellcode (cmd.exe) for XP SP3 English 26 Bytes
No description provided by source. / 26 Bytes Win32 Shellcode cmd.exe for XP SP3 English Author: Hellcode Research || TCC The Computer Cheats http://tcc.hellcode.net memberz: celil 'karak0rsan unuver , murderkey, murat kaslioglu, bob from murderkey: I love you merve lol from karak0rsan: fuck u ys...
Win32 Mini HardCode WinExec&ExitProcess Shellcode 16 bytes
No description provided by source. Title: Win32 Mini HardCode WinExec&ExitProcess Shellcode 16 bytes ;Test on xpsp2cn,no zero in shellcode,it will run write.exe ;--------------------------------------------- push 7C808E9DH ;write ;68 xx xx xx xx ;program string in memory push 7C81CAA2H ;exitproce...
PHP <= 5.2.0 (php_win32sti) Local Buffer Overflow PoC (win32)
No description provided by source. ?php // ================================================================================== // // phpwin32sti.dll PHP = 5.2.0 win32 Buffer Overflow // // x Discovery: boecke [email protected] // x Risk: Local Buffer Overflow Medium - High Risk // x Notes: EDX...
Oracle 9i XDB FTP PASS Overflow (win32)
No description provided by source. $Id: oracle9ixdbftppass.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms ...
Lunar CMS 3.3 - Remote Command Execution
!/usr/bin/env python Lunar CMS 3.3 Unauthenticated Remote Command Execution Exploit Vendor: Lunar CMS Product web page: http://www.lunarcms.com Affected version: 3.3 Summary: Lunar CMS is a freely distributable open source content management system written for use on servers running the ever so...
Lunar CMS 3.3 - Cross-Site Request Forgery / Persistent Cross-Site Scripting
CSRF Add Admin ===============...
Lunar CMS 3.3 - Cross-Site Request Forgery Persistent Cross-Site Scripting
Lunar CMS 3.3 - Cross-Site Request Forgery Persistent Cross-Site Scripting CSRF Add Admin =============== input type="hidden" name="name" value="Hacker"...
SHOUTcast DNAS 2.2.1 - Stored XSS Vulnerability
Exploit for php platform in category web applications Exploit Title: SHOUTcast DNAS v2.2.1 win32 XSS\HTML Injection in Song history other version may be also affected Date: 2014-06-11 Exploit Author: robercik101 Vendor Homepage: http://www.shoutcast.com/ ?t=373139 Software Link:...
openSUSE Security Update : vlc (openSUSE-SU-2014:0315-1)
VLC was updated to version 2.1.3 bnc864422 : + Core : - Fix broken behaviour with SOCKSv5 proxies - Fix integer overflow on error when using vlcreaddir + Access : - Fix DVB-T2 tuning on Linux. - Fix encrypted DVD playback. - Fix v4l2 frequency conversion. + Decoders : - Fix numerous issues M2TS,...
ZeroCMS 1.0 - SQL Injection Vulnerability
Exploit for php platform in category web applications ZeroCMS 1.0 articleid SQL Injection Vulnerability Vendor: Another Awesome Stuff Product web page: http://www.aas9.in/zerocms/ Affected version: 1.0 Summary: ZeroCMS is a very simple Content Management System built using PHP and MySQL. Desc:...
SHOUTcast DNAS 2.2.1 - Persistent Cross-Site Scripting
Exploit Title: SHOUTcast DNAS v2.2.1 win32 XSS\HTML Injection in Song history other version may be also affected Date: 2014-06-11 Exploit Author: robercik101 Vendor Homepage: http://www.shoutcast.com/ ?t=373139 Software Link: http://forums.winamp.com/showthread.php?t=373139 Version: 2.2.1 for Win...
ZeroCMS 1.0 SQL Injection
ZeroCMS 1.0 articleid SQL Injection Vulnerability Vendor: Another Awesome Stuff Product web page: http://www.aas9.in/zerocms/ Affected version: 1.0 Summary: ZeroCMS is a very simple Content Management System built using PHP and MySQL. Desc: Input passed via the 'articleid' GET parameter to...
Apache Win32 DOS Batch File Arbitrary Command Execution - Ver2 (CVE-2002-0061)
A command execution vulnerability has been reported in Apache Software Foundation Apache HTTP Server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Kemana Directory 1.5.6 Remote Code Execution Vulnerability
Kemana Directory suffers from an authenticated arbitrary code execution. The vulnerability is caused due to the improper verification of uploaded files in several modules thru several POST parameters. This can be exploited to execute arbitrary PHP code by uploading a malicious PHP script file tha...