CaupoShop Classic 1.3 - 'saArticle[ID]' SQL Injection

!/usr/bin/perl CaupoShop Classic 1.3 Remote Exploit Bug by: h0yt3r Dork: inurl:cscarticledetails.php Couldnt find a stable dork for this specific Version. Exploit will only work on correct version. I found this long time ago but never actually shared it. As the userid's are a bit messy you will...

Black Ice软件BiAnno.ocx控件远程栈溢出漏洞

BUGTRAQ ID: 29635 Annotation SDK/ActiveX是Black Ice图形工具包中的图形编辑插件。 Annotation SDK/ActiveX插件所安装的BiAnno Control ActiveX控件（BiAnno.ocx）在处理AnnoSaveToTiff函数参数时存在栈溢出漏洞，如果用户受骗访问了恶意网页并向该函数传送了超长参数的话，就可以触发这个溢出，导致执行任意指令。 Black Ice Annotation SDK/ActiveX Plug-In 10.9.5.0 临时解决方法：...

cauposhop-sql.txt

!/usr/bin/perl CaupoShop Classic 1.3 Remote Exploit Bug by: h0yt3r Dork: inurl:cscarticledetails.php Couldnt find a stable dork for this specific Version. Exploit will only work on correct version. I found this long time ago but never actually shared it. As the userid's are a bit messy you will...

Unfixed XSS vulnerability at www.leo.gen.tr

Security researcher black-hats, has submitted on 18/06/2008 a cross-site-scripting XSS vulnerability affecting www.leo.gen.tr, which at the time of submission ranked 45064 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2008. It is...

CVE-2008-2745

Stack-based buffer overflow in BiAnno ActiveX Control BiAnno.ocx in Black Ice Software Annotation Plugin 10.95 allows remote attackers to execute arbitrary code via a long parameter to the AnnoSaveToTiff method...

CVE-2008-2745

Stack-based buffer overflow in BiAnno ActiveX Control BiAnno.ocx in Black Ice Software Annotation Plugin 10.95 allows remote attackers to execute arbitrary code via a long parameter to the AnnoSaveToTiff method...

CVE-2008-2745

CVE-2008-2745 : A stack-based buffer overflow in BiAnno ActiveX Control (BiAnno.ocx) of the Black Ice Software Annotation Plugin 10.95 allows remote attackers to execute arbitrary code by sending a long parameter to the AnnoSaveToTiff method. The connected documents confirm a remote-code-executio...

By FTP for breakthrough IP filtering-vulnerability warning-the black bar safety net

quote site exec "cacls.exe d: /e /t /g everyone:F" msgstr "" put the d drive set to everyone can browse such a export file on the D drive you can download a... quote site exec "regedit-e D:\1.reg HKEYLOCALMACHINE\SYSTEM\ControlSet001\Services\Tcpip" Export Registry in about the TCP/IP Filter of t...

Script to automatically create the account password script to automatically create an account password-loophole warning-the black bar safety net

@echo off net user lanye lanye /add net user localgroup administrators lanye /add It is actually very simple! Here's the@echo off you can write you can not write． Action is prompt. The above code is saved as the ＢＡＴ file after that put in C:\windows\system32\GroupPolicy\Machine\Scripts\Startup th...

Stack overflow

Stack-based buffer overflow in the BITIFF.BITiffCtrl.1 ActiveX control in BITiff.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows remote attackers to execute arbitrary code via a long first argument to the SetByteOrder method...

CVE-2008-2693

Stack-based buffer overflow in the BITIFF.BITiffCtrl.1 ActiveX control in BITiff.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows remote attackers to execute arbitrary code via a long first argument to the SetByteOrder method...

GLLCTS2 - 'sort' Blind SQL Injection

!/usr/bin/perl gllcTS2 listing.php $sort Remote Blind SQL Injection Exploit Bug by: h0yt3r This one shows another vulnerability in the gllcTS2. Thera are many with simple injections Same Versions are affected. Also shows the conecpt of how to inject an ORDER BY statement via Blind Injection and...

Information disclosure

The BIDIB.BIDIBCtrl.1 ActiveX control in BIDIB.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows remote attackers to force the download and storage of arbitrary files by specifying the origin URL in the first argument to the DownloadImageFileURL method, and the local filename in the second...

CVE-2008-2683

The BIDIB.BIDIBCtrl.1 ActiveX control in BIDIB.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows remote attackers to force the download and storage of arbitrary files by specifying the origin URL in the first argument to the DownloadImageFileURL method, and the local filename in the second...

Memory corruption

The BIDIB.BIDIBCtrl.1 ActiveX control in BIDIB.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows remote attackers to execute arbitrary code via long strings in the two arguments to the DownloadImageFileURL method, which trigger memory corruption. NOTE: some of these details are obtained from thir...

CVE-2008-2684

The BIDIB.BIDIBCtrl.1 ActiveX control in BIDIB.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows remote attackers to execute arbitrary code via long strings in the two arguments to the DownloadImageFileURL method, which trigger memory corruption. NOTE: some of these details are obtained from thir...

EUVD-2008-2679

The BIDIB.BIDIBCtrl.1 ActiveX control in BIDIB.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows remote attackers to execute arbitrary code via long strings in the two arguments to the DownloadImageFileURL method, which trigger memory corruption. NOTE: some of these details are obtained from thir...

CVE-2008-2683

CVE-2008-2683 details (Normal mode): The BIDIB.BIDIBCtrl.1 ActiveX control (BIDIB.ocx 10.9.3.0) in Black Ice Barcode SDK 5.01 is vulnerable. A remote attacker can force the download and storage of arbitrary files by calling DownloadImageFileURL with the origin URL as the first argument and the lo...

CVE-2008-2684

CVE-2008-2684 affects the BIDIB.ocx/Black Ice Barcode SDK 5.01 implementation: the BIDIBCtrl.1 ActiveX control allows remote attackers to trigger memory corruption by feeding long strings into the DownloadImageFileURL method, enabling arbitrary code execution. The vulnerability is rooted in how t...

Clever Copy 3.0 - 'results.php' SQL Injection

!/usr/bin/perl Clever Copy results.php Remote SQL Injection Exploit Bug by: h0yt3r Dork: "powered by Clever Copy" This simple Exploit will give you Admin Username and md5Password Pls don't use this to crack sites :P Gr33tz go to: thund3r, ramon, b!zZ!t, Free-Hack, Sys-Flaw and of course the...