117 matches found
fastjson < 1.2.24 remote code execution vulnerability
No description provided by source...
FreeBSD : magento -- multiple vulnerabilities (ea1d2530-72ce-11e5-a2a1-002590263bf5)
Magento, Inc. reports : SUPEE-6482 - This patch addresses two issues related to APIs and two cross-site scripting risks. SUPEE-6285 - This patch provides protection against several types of security-related issues, including information leaks, request forgeries, and cross-site scripting. SUPEE-59...
Samsung iPOLiS ReadConfigValue Remote Code Execution Exploit
Exploit for windows platform in category remote exploits var shellcode =...
ElasticSearch Unauthenticated Remote Code Execution Exploit
Exploit for linux platform in category remote exploits !/bin/python2 coding: utf-8 Author: Darren Martyn, Xiphos Research Ltd. Version: 20150309.1 Licence: WTFPL - wtfpl.net import json import requests import sys import readline readline.parseandbind'tab: complete' readline.parseandbind'set...
Discuz! x3.1 /utility/convert/index.php 代码执行漏洞
No description provided by source...
Windows Kernel Zero Day Vulnerability Found in Duqu Installer
Windows Kernel Zero Day Vulnerability Found in Duqu Installer Duqu malware attack exploited a zero-day vulnerability in the Windows kernel, according to security researchers tracking the Stuxnet-like cyber-surveillance Trojan. The vulnerability has since been reported to Microsoft and Microsoft i...
AVIPreview 0.26 Alpha - Denial of Service
done by BraniX www.hackers.org.pl found: 2011.03.15 published: 2011.03.15 tested on: Windows XP SP3 Home Edition App: AVIPreview 0.26 Alpha App Url: http://www.divx-digest.com/software/avipreviewaj.html AVIPreview.exe MD5: 399ab43edd26c655d0876dc5ddcaa3a7 DoS is caused by Access Violation...
ToyLog 0.1 - SQL Injection Remote Code Execution
ToyLog 0.1 - SQL Injection Remote Code Execution --+++=====================================================================================+++-- --+++====== ToyLog 0.1 SQL Injection Vulnerability/Remote Command Execution Exploit ======+++--...
Zen Cart 1.3.8 Remote Code Execution Exploit
No description provided by source. !/usr/bin/php ?php ------- Zen Cart 1.3.8 Remote Code Execution http://www.zen-cart.com/ Zen Cart Ecommerce - putting the dream of server rooting within reach of anyone! A new version 1.3.8a is avaible on http://www.zen-cart.com/ BlackH : errorreportingEALL ^...
BaoFeng ActiveX OnBeforeVideoDownload() Remote BOF Exploit
Exploit for windows platform in category remote exploits ========================================================== BaoFeng ActiveX OnBeforeVideoDownload Remote BOF Exploit ========================================================== BaoFeng mps.dll Remote Code Execution Exploit By: MITBOY Download...
Mozilla Firefox <= 1.0.4 "Set As Wallpaper" Code Execution Exploit
No description provided by source. // Exploit by Michael Krax !DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" html head titleFirewalling - Proof-of-Concept/title script function stopload // in some cases the javascript url never stops to load // therefore we force a stop after the...
Real Player rmoc3260.dll ActiveX Control Remote Code Execution Exploit
Exploit for unknown platform in category remote exploits ====================================================================== Real Player rmoc3260.dll ActiveX Control Remote Code Execution Exploit ====================================================================== Real Player rmoc3260.dll...
Mail Machine <= 3.989 Local File Inclusion Exploit
No description provided by source. !/usr/bin/perl -w Mail Machine Local File Include Exploit Vuln. v3.980, v3.985, v3.987, v3.988 and v3.989 ! Application homepage : http://www.mikesworld.net/mailmachine.shtml ! Author : H4 / Team XPK ! Contact : [email protected]...
MyBulletinBoard (MyBB) <= 1.2.3 Remote Code Execution Exploit
No description provided by source. !/usr/bin/php ?php errorreportingEALL ^ ENOTICE; http://www.milw0rm.com/exploits/2012 They corrected not all a lot of SQL requests which use the ipaddress, with $db-escapestring. They don't corrected the function this is a choice ... the bad and they forgot to...
PHP 4.4.55.2.1 - shmop Local Code Execution
PHP 4.4.55.2.1 - shmop Local Code Execution ?php //////////////////////////////////////////////////////////////////////// // // // | || | | | | | | | || || \ // // | |/ || '|/ |/ -| ' \ / -/ |||| /| || / // // ||||,||| ,|||||||,| || |||||| // // // // Proof of concept code from the...
MOPB-01-2007:PHP 4 Userland ZVAL Reference Counter Overflow Vulnerability
Summary The Month of PHP Bugs starts with a PHP 4 security vulnerability that exploits a problem known for many years among the PHP developers. When a PHP application is run in PHP 4 it can overflow the variable reference counter because it is only 16 bit wide. Whenever this happens it will resul...
CS-Gallery 2.0 (index.php album) Remote File Include Exploit
No description provided by source. ?php //File Inclusion Exploit for CSGallery = 2.0 //Found and Exploit Coded by burncycle - burncycleathotmaildotde //| //Vendor: http://www.cschneider.de/ //Dork: . www.cschneider.info //| //Bug in "index.php": //.. //$codefile=$POST'album'.'/code.php';...
Quick.Cms.Lite <= 0.3 (Cookie sLanguage) Local File Include Exploit
Exploit for unknown platform in category web applications =================================================================== Quick.Cms.Lite = 0.3 Cookie sLanguage Local File Include Exploit =================================================================== ? print ' ::::::::: :::::::::: ::: :::...
PHP Blue Dragon CMS 2.9.1 - Cross-Site Scripting SQL Injection Code Execution
PHP Blue Dragon CMS 2.9.1 - Cross-Site Scripting SQL Injection Code Execution !/usr/bin/php -q -d shortopentag=on ? $devilteam = " ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + +...
PHP Proxima <= v.6 completepack Remote Code Execution Exploit
Exploit for unknown platform in category web applications ============================================================= PHP Proxima = v.6 completepack Remote Code Execution Exploit ============================================================= !/usr/bin/php -q -d shortopentag=on ? $devilteam = "...