Joomla HuruHelpDesk SQL Injection

Exploit Title: joomla component huruhelpdesk SQL injection Vulnerability Date: 09 april 2010 Author: bumblebe Software Link: N/A Tested on: Windows XP 2 ====================================================================== x author : bumblebe [email protected] x dork : inurl:option=comhuruhelpdes...

Multi Profit Websites Local File Inclusion

Local File Inclusion LFI in Multi Profit Websites Multi Profit Websites is a commercial script that is running on multiple domains and they claims that this script earns money for the owner. Vulnerability Local File Inclusion Via URL which can be reproduced by...

Kwik Pay Payroll v4.10.3 .mdb Crash PoC

Exploit for windows platform in category dos / poc =============================== Kwik Pay Payroll .mdb Crash PoC =============================== Version: 4.10.3 Tested on: Windows XP SP3 Cost: 100.00 AU Author: chap0 Email: chap0x90atgmaildotcom Site: http://www.setfreesecurity.com Usage: Run...

Kwik Pay Payroll 4.10.3 - '.mdb' Crash (PoC)

Exploit Title: Kwik Pay Payroll .mdb Crash PoC Date: April 1, 2010 Version: 4.10.3 Tested on: Windows XP SP3 Cost: 100.00 AU Author: anonymous Site: http://www.setfreesecurity.com Usage: Run Script, Open the program File - Import Payroll Data Select From Data Source Drop-Down: Kwik-Pay Payroll Da...

SAP MaxDB Malformed Handshake Request Remote Code Execution

No description provided by source. !/usr/bin/python Exploit title: SAP MaxDB Malformed Handshake Request Remote Code Execution Date: 2010.03.26 Author: S2 Crew Hungary Software link: sap.comhttp://sap.com Version: 7.7.06.09 Tested on: Windows XP SP2 EN CVE: ZDI-10-032 Code: Trying 172.16.29.133...

SAP MaxDB - Malformed Handshake Request Remote Code Execution

SAP MaxDB - Malformed Handshake Request Remote Code Execution !/usr/bin/python Exploit title: SAP MaxDB Malformed Handshake Request Remote Code Execution Date: 2010.03.26 Author: S2 Crew Hungary Software link: sap.com Version: 7.7.06.09 Tested on: Windows XP SP2 EN CVE: ZDI-10-032 Code: Trying...

SAP MaxDB - Malformed Handshake Request Remote Code Execution

!/usr/bin/python Exploit title: SAP MaxDB Malformed Handshake Request Remote Code Execution Date: 2010.03.26 Author: S2 Crew Hungary Software link: sap.com Version: 7.7.06.09 Tested on: Windows XP SP2 EN CVE: ZDI-10-032 Code: Trying 172.16.29.133... Connected to 172.16.29.133. Escape character is...

Quality Point 1.0 NewsFeed Cross Site Scripting / SQL Injection

sEc-r1z crEw The Leaders for Penetration Testing In Middle East. +===================================================================================+ ./SEC-R1Z / / / / /\ \ Demo :...

ProSSHD Buffer Overflow

Exploit Title: ProSSHD buffer overflow Date: 2010.02.19 Author: S2 Crew Hungary Software Link: http://www.labtam-inc.com/ Version: 1.2 20090726 Tested on: Windows XP SP2 EN CVE: - Registers: EAX 000003E4 ECX 0012ED44 EDX 7C90EB94 ntdll.KiFastSystemCallRet EBX 00000674 ESP 0012EFC0 ASCII...

ProSSHD v1.2 20090726 Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ============================================= ProSSHD v1.2 20090726 Buffer Overflow Exploit ============================================= Author: S2 Crew Hungary Tested on: Windows XP SP2 EN CVE: - Registers: EAX 000003E4 ECX 0012ED44 EDX...

Joomla! 1.5 Core Design Scriptegrator Local File Inclusion

Exploit Title: Core Design Scriptegrator plugin for Joomla! 1.5 file inclusion Date: 2010.02.03 Author: S2 Crew Hungary Software Link: http://www.greatjoomla.com/extensions/plugins/core-design-scriptegrator-plugin.html Version: 1.4.1 stable release Tested on: Debian Linux, Apache, Joomla! 1.5 Cod...

gitWeb 1.x Remote Command Execution

Exploit Title: gitWeb remote command execution Date: 2009.06.19 Author: S2 Crew Hungary Software Link: - Version: GIT 1.X Tested on: debian linux, GIT 1.5.2 CVE: CVE-2008-5516 - CVE-2008-5517 Code:...

gitWeb 1.5.2 - Remote Command Execution

Exploit Title: gitWeb remote command execution Date: 2009.06.19 Author: S2 Crew Hungary Software Link: - Version: GIT 1.5.2 Tested on: debian linux, GIT 1.5.2 CVE: CVE-2008-5516 - CVE-2008-5517 Code: The cgi script doesn't show the command output blind command execution ; Vulnerable functions in...

Z-Blog Database Disclosure

/ /| | || || | | | | | || | / \ / || | / | | | | / / |||| | | | | | | / \ | | | / /| /| // |\ || |||| || ||||// \||\ ||| \ ..Bl4ck H4T.. ============================================================================== » Z-Blog 1.8 Remote Database Disclosure Vulnerability...

InterTech Co 1.0 - SQL Injection

------------------------------------------------------ ./SEC-R1Z / / / / /\ ...

Alqatari Group 1.0 Blind SQL Injection

+===================================================================================+ ./SEC-R1Z / / / / /\ \ |/ / \ \ / / / / | | / | | / / \ / / / / | || / | | / / \ \ \ \2010 | \ | | / / / \ /\ / ||\ \ ||/ \ R.I.P MichaelJackson !!!!!...

Alqatari Group 1.0 - Blind SQL Injection

+===================================================================================+ ./SEC-R1Z / / / / /\ \ |/ / \ \ / / / / | | / | | / / \ / / / / | || / | | / / \ \ \ \2010 | \ | | / / / \ /\ / ||\ \ ||/ \ R.I.P MichaelJackson !!!!!...

Ibibo.com Cross Site Scripting

Cross Site Scripting XSS Vulnerability in ibibo In search fields of cityads.ibibo.com ibibo.com is India’s first entertainment and talent based social network. It gives the youth of India a unique platform to showcase their talent, express themselves, create their own social network, audience and...

Muziic Player 2.0 - .mp3 Local Denial of Service

Muziic Player 2.0 - .mp3 Local Denial of Service Exploit Title: Muziic Player .mp3 Local Denial of Service DoS Download : http://download.cnet.com/3001-204-10910117.html?spi=e0c701df9e16242fca1997f71350aba0 Author: Red-D3v1L sh0otz fly t0 : r1z , D3v1L-Fuck3r, SarBooT511 , Sas-Terr0risT , AnGeL25...

Rosoft Media Player 4.4.4 - Local Buffer Overflow (SEH) (1)

Exploit Title: Rosoft Media Player 4.4.4 Buffer OverFlow Exploit SEH Download : http://download.cnet.com/3001-204-10044022.html?spi=02537eab7f440a326729a3dd1f7c6485 Date: 16/01/2010 Author: Red-D3v1L Special Thx For : H1s0k4 bEst 0verflower In ThE World xD sh0otz fly t0 :...