yPlay 1.0.76 Proof Of Concept

!/usr/bin/perl Usage--file created--load file--b00m.mp3 BOOM print "\n"; print "! yPlay 1.0.76 .mp3 Local Crash PoC\n"; print "\n"; print "! Author: cr4wl3r\n"; print "! Mail: cr4wl3r!linuxmail.org\n"; print "\n"; my $boom = "A" x 1337; my $filename = "b00m.mp3"; open FILE,"$filename"; print FILE...

vBulletin nulled (validator.php) files/directories disclosure

Description: With this file you can see all files.sql - .tar.gz - .zip - .rar - .php - .anything / directories from the folder with vBulletin installed... Exploit: http://www.website.com/vBforum/validator.php Author: PaxNwo www.rstcenter.com...

MediaMonkey 3.2.0 - Local Denial of Service

Download : http://download.cnet.com/MediaMonkey-Standard/3000-21414-10109807.html Author: Red-D3v1L sh0otz fly t0 : j0rd4n14n.r1z,H1s0k4,ThE-g0bl!N,T3rr0rist,zAx,dr@g,h311 c0d3 And All sEc-r1z CrEw n00bz : ZombieKSA g0t 0wn3d hehehe n00b pakbugs zf0 ... Version: 3.2.0 my Home : www.sec-r1z.com ,...

Joomla Uploader Shell Upload

|| || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ team wlhaan hacker | | // | | |...

BS.Player 2.51 - Universal Overflow (SEH)

Exploit Title: BS.Player v2.51 Universal SEH Overflow Exploit Date: 15/01/2010 Author: Dzattacker Version: 2.51 Tested on: Windows xp sp3 Code : Discover : mertsarica Exploit : DzAttacker [email protected] junk = "Options\nSkin=" win32exec - EXITFUNC=process CMD=calc Size=343...

Rosoft Media Player 4.4.4 - Local Buffer Overflow (SEH) (1)

Exploit Title: Rosoft Media Player 4.4.4 Buffer OverFlow Exploit SEH Download : http://download.cnet.com/3001-204-10044022.html?spi=02537eab7f440a326729a3dd1f7c6485 Date: 16/01/2010 Author: Red-D3v1L Special Thx For : H1s0k4 bEst 0verflower In ThE World xD sh0otz fly t0 :...

Max's File Uploader - Arbitrary File Upload

in the name of allah Exploit Title: Max's File Uploader Date: 15/1/2010 Author:S2K9 Site: www.soqor.net , www.xp10.me Software Link: http://www.phpf1.com/product/file-upload-script.html Tested on: windows xp sp2 Dork : use your head exploit : add u r shell upload it your shell uploaded successful...

TermiSBloG 1.0 SQL Injection

TermiSBloG V 1.0 SQL Injections Vulnerability Author : Cyber945 Home : Ar-ge.Org Greetz : D3xer and All Ar-ge.Org Members Not3 : Ar-ge.Org Online Name : TermiSBloG V 1.0 SQL Injection Bug Type : SQL Infection : Adminin bilgileri alinabilir. Dork : "© 2008 DevWorx - devworx.somee.com"...

MobPartner Counter Shell Upload

|| || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ team wlhaan hacker | | // | | |...

SafeCms 2.0.1.0 Cross Site Scripting

Exploit Title: SafeCms Software Link: http://demo.safecms.co.il/ Version: X = 2.0.1.0 Beta XSS http://URL/admin/sendpass.asp?q=%22%3E%3Cscript%3Ealert1%3C/script%3E http://URL/admin/info.asp?q=%E0%22%3E%3Cscript%3Ealert1%3C/script%3E E0F...

Zeeways Technology - product_desc.php SQL Injection

Zeeways Technology - productdesc.php SQL Injection Zeeways Technology productdesc.php SQL Injection Vulnerability Vendor: http://www.zeeways.com/ Author: Gamoscu Site: www.1923turk.com Blog: http://gamoscu.wordpress.com/ DORK :powered by zeeways Exploit: xxxxx/xxx/productdesc.php?id=SQL-inj...

MediaWiki 1.15.1 SQL Injection

MediaWiki 1.15.1 SQL Injection Vulnerability Plugin Home: http://www.mediawiki.org/wiki/MediaWiki Author: Gamoscu Site: www.1923turk.com Blog: http://gamoscu.wordpress.com/ Download Script : http://www.mediawiki.org/wiki/MediaWiki : http://www.mediawiki.org/wiki/Download Exploit:...

Sniggabo CMS 2.21 Cross Site Scripting

Exploit Title: Sniggabo CMS v2.21 Cross Site Scripting Vulnerability Date: January 6th, 2010 Author: Sora Version: v2.21 Tested on: Windows Vista Home Premium and Linux 2.6.32 —————————————- Sniggabo CMS v2.21 Cross Site Scripting Vulnerability Author: Sora Contact: vhr95zw at hotmail dot com...

WorldPay Script Shop (productdetail) SQL Injection Exploit

Exploit for unknown platform in category web applications ========================================================== WorldPay Script Shop productdetail SQL Injection Exploit ========================================================== ============================================ | WorldPay Script...

BigAnt Server v2.52 Remote Buffer Overflow Exploit 2

No description provided by source. !/usr/bin/python BigAnt Server 2.52 remote buffer overflow exploit 2 Author: DouBleZer0 Vulnerability discovered by Lincoln a another version of the original exploit by Lincoln application is little hazy.. import sys,socket host = sys.argv1 buffer= "\x90" 20...

Pay Per Minute Video Chat Script 2.02.1 - Multiple Vulnerabilities

Pay Per Minute Video Chat Script 2.02.1 - Multiple Vulnerabilities ? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe: suffer from multi XSS Vulnerability Vendor: payperviewvideosoftware.com ? Software : Pay Per Minute Video Chat Script V 2.1 - pR!CE :...

WorldPay Script Shop - productdetail SQL Injection

WorldPay Script Shop - productdetail SQL Injection ============================================ | WorldPay Script Shop productdetail SQL Injection Vulnerability ============================================ + Author: Err0R + Site : www.sa-hacker.com/vb + Email : [email protected]...

Smart Vision Script News - 'newsdetail.php' SQL Injection (1)

Exploit Title: Smart Vsion Script News newsdetail SQL Injection Vulnerability Software Link: www.esmart-vision.com ============================================ | Smart Vision Script News newsdetail SQL Injection Vulnerability ============================================ + Author: Err0R + Site :...

Western Digital ODAY through the kill vulnerability-vulnerability warning-the black bar safety net

Western Digital ODAY through the kill vulnerability Speak directly to use of the method. In the registered members,“the applicant name in Chinese”here written on the "Chinese',utype='1 1 1 1 1 1"Note, does not include outside of the double quotation marks. Else as usual, and then register...

PHP-Addressbook 3.1.5 SQL Injection

@ php-addressbook v3.1.5edit.php SQL Injection Vulnerability @ Author: Hussin X @ Home : www.iq-ty.com, @ email: darkangelg85atYahoodotcom @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @ script : http://sourceforge.net/project/showfiles.php?groupid=157964 @ DorK : php-addressbook v3.1...