Cycade Gallery SQL Injection Exploit

No description provided by source. Exploit Title: Cycade Gallery SQL Injection Exploit Date: 3/12/2012 Author: -DownFall Vendor or Software Link: Cycade Content Management - http://www.cycade.com/ Category: Web Apps - 0-Day Google dork: intext:Powered by Cycade inurl:gid= Tested on: Windows 7...

Tiny Server <= 1.1.9 HTTP HEAD DoS

No description provided by source. !/usr/bin/python Overflow exploiting a vulnerability in Tiny Server =1.1.9 HTTP HEAD request. Date of Discovery: 3/19/2012 0 Day Author: Brock Haun Vulnerable Software Download: http://tinyserver.sourceforge.net/tinyserverfull.zip Software Version: =1.1.9 Target...

FreeFTPD Remote Authentication Bypass Zeroday Exploit

No description provided by source. FreeFTPD all versions Remote System Level Exploit Zero-Day -- No username needed, straightforward rooting! Discovered & Exploited By Kingcope Year 2011 -- http://www.exploit-db.com/sploits/23079.zip Example banner: WeOnlyDo-wodFTPD 2.3.6.165 This package include...

Oracle Java BytePackedRaster.verify() Signed Integer Overflow

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 +------------------------------------------------------------------------------+ | Packet Storm Advisory 2013-0819-1 | | http://packetstormsecurity.com/ |...

Free MP3 CD Ripper 2.6 - 0day (2)

No description provided by source. Exploit Title: Free MP3 CD Ripper 2.6 0 day Date: 30/03/2010 Author: Richard leahy Reference: http://www.exploit-db.com/exploits/11975 Software Link: http://www.soft32.com/Download/Free/FreeMP3CDRipper/4-250188-1.html Version: 2.6 Tested on: Windows Xp Sp2 to...

XOOPS Module resmanager <= 1.21 - Blind SQL Injection Exploit

No description provided by source. html head titleXOOPS Module resmanager = 1.21 editday.php BLIND SQL Injection Exploit/title script type=text/javascript //'=============================================================================================== //'Script Name: XOOPS Module resmanager =...

PHP-Nuke <= 8.1.0.3.5b (Downloads) Remote Blind SQL Injection

No description provided by source. !/usr/bin/perl 0-Day PHP-Nuke = 8.1.0.3.5b Downloads Remote Blind SQL Injection Date: 2010.07.04 after 50 days the bug was discovered. Author/s: Dante90, WaRWolFz Crew Crew Members: 4lasthor, Andryxxx, Cod3, Gho5t, HeRtZ, N.o.3.X, RingZero, s3rg3770, Shades...

Rosoft Media Player 4.2.1 - Local Buffer Overflow Exploit

No description provided by source. Rosoft Media Player 4.2.1 Local Buffer Overflow Exploit0-day By:Encrypt3d.M!nd Well,There is a buffer overflow in the program were all the supported types are Affectedm3u,rml,txt,Also Rosoft Media Player treat all the other types as txt so all the types are...

Winamp <= 5.12 - (.pls) Remote Buffer Overflow Exploit (0Day)

No description provided by source. / Winamp 5.12 Remote Buffer Overflow Universal Exploit Zero-Day Bug discovered & exploit coded by ATmaCA Web: http://www.spyinstructors.com && http://www.atmacasoft.com E-Mail: [email protected] Credit to Kozan / / Tested with : Winamp 5.12 on Win XP Pro Sp2 / ...

Audiotran 1.4.2.4 SEH Overflow Exploit

No description provided by source. Audiotran 1.4.2.4 SEH Overflow Exploit 0 day Author Abhishek Lyall - abhilyallatgmaildotcom, infoataslitsecuritydotcom Web - http://www.aslitsecurity.com/ Blog - http://www.aslitsecurity.blogspot.com/ Download Vulnerable application from...

No-IP DUC <= 2.1.7 - Remote Code Execution Exploit

No description provided by source. / | |/ / / |/ / / / | / / / / /|/ / / / / / / / / / / / / // / / / / // / // // / //|// //// //,//,/ xenomuta arroba phreaker punto net http://xenomuta.tuxfamily.org/ - Methylxantina 256mg Permlink: http://xenomuta.tuxfamily.org/exploits/noIPwn3r.c...

WordPress Count per Day plugin <= 2.17 SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress Count per Day plugin = 2.17 SQL Injection Vulnerability Date: 2011-09-05 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/count-per-day.2.17.zip Version: 2.17 tested Note...

WPtouch WordPress Plugin 1.9.27 URL redirection

No description provided by source. Hello , that's a 0day on the must downloaded WordPress plugin. Exploit Title: 0-Day WPtouch WordPress Plugin 1.9.27 URL redirection Google Dork: intext:Powered by Wordpress + WPtouch with iphone/android User-Agent Author: MaKyOtOx special Pwet to ansx & Zizounet...

MySQL Denial of Service Zeroday PoC

No description provided by source. 5.5.19-log on SuSE Linux DoS exploit: -------------------------------------------------------------------------------------------------------- use Net::MySQL; use Unicode::UTF8 qwdecodeutf8 encodeutf8; $|=1; my $mysql = Net::MySQL-new hostname = '192.168.2.3',...

PHP-Nuke <= 8.0 - Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl 0-Day PHP-Nuke = 8.0 News Remote SQL Injection Exploit Created: 2010.04.23 after 3 days the bug was discovered. Author/s: Dante90 & The:Paradox, WaRWolFz Crew Crew Members: 4lasthor, Andryxxx, Cod3, Gho5t, HeRtZ, N.o.3.X, RingZero, s3rg3770, Shade...

Windows OpenType Font - File Format DoS Exploit

No description provided by source. OpenType font file format remote client-side DoS exploit for Windows By Oleksiuk Dmytro aka Cr4sh http://twitter.com/dolex http://blog.cr4.sh mailto:[email protected] INFO: Zero day vulnerability exists in kernel-mode library ATMFD.DLL, that using by OS for worki...

MS13-069 Microsoft Internet Explorer CCaret Use-After-Free

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

Adobe GetPlus get_atlcom 1.6.2.48 - ActiveX Remote Exec PoC (0day)

No description provided by source. object id=TestObj classid=CLSID:E2883E8F-472F-4fb0-9522-AC9BF37916A7 style=width:100;height:350 PARAM NAME=cx VALUE=0xFFFFFFFF PARAM NAME=cy VALUE=0xFFFFFFFF PARAM NAME=Service-URL...

Wordpress Count-per-day plugin Multiple Vulnerabilities

No description provided by source. Exploit Title: Count-per-day Wordpress plugin Arbitrary file download and XSS Version: 3.1.1 Date: 2011-01-12 Author 6Scan http://6scan.com security team Software Link: http://wordpress.org/extend/plugins/count-per-day/ Official fix: This advisory is released...

BitchX 1.1 Final - MODE Remote Heap Overflow Exploit (0day)

No description provided by source. !/usr/bin/env ruby BitchX-1.1 Final MODE Heap Overflow 0-day By bannedit Discovered May 16th 2007 - Yet another overflow which can overwrite GOT I found this vuln after modifying ilja's ircfuzz code. Currently this exploit attempts to overwrite the GOT with the...