Allwin URLDownloadToFile + WinExec + ExitProcess Shellcode

Allwin URLDownloadToFile + WinExec + ExitProcess Shellcode. Shellcode exploit for windows platform / Title: Allwin URLDownloadToFile + WinExec + ExitProcess Shellcode Date: 2013-22-01 Author: RubberDuck Web: http://bflow.security-portal.cz http://www.security-portal.cz Tested on: Win 2k, Win XP...

CMS snews SQL injection and fix-vulnerability warning-the black bar safety net

Title: CMS snews SQL Injection Vulnerability Author: By onestree Download address : http://snewscms.com/ Test platform : ubuntu 12.10 / win 7 Keywords: inurl:"tanyakan pada rumput yang bergoyang" SQL poc: http://www.2cto.com /snews/snews. php? act=shownews&id=SQL Example...

Cydia Repo Manager - Cross-Site Request Forgery

Cydia Repo Manager - Cross-Site Request Forgery Cydia Repo Manager CSRF Vulnerability By cr4wl3r http://bastardlabs.info http://bastardlabs.info/exploits/CydiaRepoManager.txt Software Link: http://damarist.de/?lang=en Download : http://damar1st.de/downloads/CydiaRepoManager3.1.zip Tested: Win 7...

Cydia Repo Manager - Cross-Site Request Forgery

Cydia Repo Manager CSRF Vulnerability By cr4wl3r http://bastardlabs.info http://bastardlabs.info/exploits/CydiaRepoManager.txt Software Link: http://damarist.de/?lang=en Download : http://damar1st.de/downloads/CydiaRepoManager3.1.zip Tested: Win 7 Proof of concept: Login :...

Snews CMS SQL Injection

/ | / \ / / \ / /\ \ / / \ | \ / \ \ | | | | /\ /\ / /|| /\ | | || \ \ / / / / / Exploit Title : CMS snews SQL Injection Vulnerability Author : By onestree Software Link : http://snewscms.com/ tested : ubuntu 12.10 / win 7 Dork : inurl:"tanyakan pada rumput yang bergoyang" SQL poc:...

FreeSSHd 1.2.6 Authentication Bypass Vulnerability

This Metasploit module exploits a vulnerability found in FreeSSHd versions 1.2.6 and below to bypass authentication. You just need the username which defaults to root. The exploit has been tested with both password and public key authentication. require 'msf/core' require 'tempfile' class...

Joomla Component com_aclassif XSS Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

VNC Server (Reflective Injection), Reverse TCP Stager (RC4 Stage Encryption, Metasm)

Inject a VNC Dll via a reflective loader staged. Connect back to the attacker -- coding: binary -- This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 413 include Msf::Payload::Stager...

BlazeDVD 6.1 - .PLF File (ASLR + DEP Bypass) (Metasploit)

BlazeDVD 6.1 - .PLF File ASLR + DEP Bypass Metasploit This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

BlazeDVD 6.1 PLF Exploit DEP/ASLR Bypass

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'BlazeDVD 6.1 PLF...

Joomla Aclassif Cross Site Scripting

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Microsoft windows remote desktop PoC C# Exploit

It Case The Dead Blue Screen :D 4 DoS ! //ms12-020 "chinese shit" PoC //Tested On Win7 Ultimate & Win 2008 Server & Win 2003 Serrver R2 //C Coded By Yomi :D using System; using System.Net; using System.Net.Sockets; namespace RDPPoCExploit class Program public static readonly string strshell =...

PT-2013-36: XML External Entity Injection in Wonderware Win-XML Exporter

Positive Research Center experts have discovered "XML External Entity Injection" vulnerability in Wonderware Win-XML Exporter. If an attacker manages to make a victim open a project that contains specially crafted XML, Wonderware Win-XML Exporter will automatically send the contents of local or...

Joomla Component com_autostand shell upload Vulnerability

Exploit for php platform in category web applications Exploit Title: joomla comautostand file upload Author: Over-X email: email protected Vendor or Software Link: forum.joomla.org Version: v3 Google dork: "inurl:comautostand" Tested on: win Xp...

Joomla Component com_garyscookbook file upload Vulnerability

Exploit for php platform in category web applications Exploit Title: joomla comgaryscookbook file upload Author: Over-X email: email protected Vendor or Software Link: www.joomla.it Version: 242 Google dork: "inurl:comgaryscookbook" Tested on: win Xp...

hMailServer 5.3.3 Remote Denial Of Service

Exploit Title: hMailServer 5.3.3 IMAP Remote Crash PoC Date: 10/27/2012 Vendor Homepage: http://hmailserver.com Software Link: http://www.hmailserver.com/index.php?page=backgrounddownloadfile&downloadid=207 Version: hMailServer 5.3.3 - Build 1879 Tested on: - hMailServer 5.3.3 with default settin...

hMailServer 5.3.3 IMAP Remote Crash PoC

Exploit for windows platform in category dos / poc Exploit Title: hMailServer 5.3.3 IMAP Remote Crash PoC Vendor Homepage: http://hmailserver.com Software Link: http://www.hmailserver.com/index.php?page=backgrounddownloadfile&downloadid=207 Version: hMailServer 5.3.3 - Build 1879 Tested on: -...

ManageEngine Security Manager Plus 5.5 build 5505 - Directory Traversal

ManageEngine Security Manager Plus 5.5 build 5505 - Directory Traversal !/usr/bin/python +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Security Manager Plus 0x90.nl Software link :...

PHP 5.3.4 Win Com Module - Com_sink

Exploit Title: PHP 5.3.4 Win Com Module Comsink Local Exploit Google Dork: Nil Date: 9/10/2012 Author: FB1H2S Software Link: PHP Windows Version: 5.3.4 Tested on: Microsoft XP Pro 2002 SP2...

PHP 5.3.4 Win Com Module - Com_sink

PHP 5.3.4 Win Com Module - Comsink Exploit Title: PHP 5.3.4 Win Com Module Comsink Local Exploit Google Dork: Nil Date: 9/10/2012 Author: FB1H2S Software Link: PHP Windows Version: 5.3.4 Tested on: Microsoft XP Pro 2002 SP2...