Barcodewiz BarCode ActiveX 3.29 - Denial of Service (PoC)

Barcodewiz BarCode ActiveX 3.29 - Denial of Service PoC BarCodeWiz Barcode ActiveX Control 3.29 PoC SEH Bug found: 24th July 2010 Found by: loneferret Software: http://www.barcodewiz.com/ Nods to exploit-db.com Vulnerable file BarCodeWiz.dll LoadProperties method Tested on: Windows XP Professiona...

HTML Email Creator 2.42 build 718 - Local Buffer Overflow (SEH)

.-----.--.--.--.----.----.-.---| | | | | | | | -| | | |||||| || By MadjiX Sec4ever.com Title : HTML Email Creator 2.42 build 718 - 0day buffer overflow exploit SEH author : MadjiX Gr33tz : His0k4 , Bibi-info , volc4n0 version 2.3 : http://www.exploit-db.com/exploits/9446/ by flo flow version 2.1 ...

EZ-Oscommerce 3.1 Remote File Upload / File Disclosure

Exploit for php platform in category web applications ====================================================== EZ-Oscommerce 3.1 Remote File Upload / File Disclosure ====================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1...

HTML Email Creator 2.42 build 718 - Local Buffer Overflow (SEH)

HTML Email Creator 2.42 build 718 - Local Buffer Overflow SEH .-----.--.--.--.----.----.-.---| | | | | | | | -| | | |||||| || By MadjiX Sec4ever.com Title : HTML Email Creator 2.42 build 718 - 0day buffer overflow exploit SEH author : MadjiX Gr33tz : His0k4 , Bibi-info , volc4n0 version 2.3 :...

New vulnerabilities in Cetera eCommerce

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting, SQL Injection и SQL DB Structure Extraction уязвимостях в Cetera eCommerce. XSS: http://site/cms/templates/search.php?q=111&sobject=223E3Cscript3Ealertdocument.cookie3C/script3E...

Cetera eCommerce 14.0 Cross Site Scripting / SQL Injection

============================================================= I want to warn you about security vulnerabilities in Cetera eCommerce. Which I disclosed already in December 2009 SecurityVulns ID: 10489. ----------------------------- Advisory: Vulnerabilities in Cetera eCommerce...

QQPlayer 2.3.696.400p1 - .smi File Buffer Overflow

QQPlayer 2.3.696.400p1 - .smi File Buffer Overflow !/usr/bin/env python Title: QQPlayer smi File Buffer Overflow Exploit Author: Lufeng Li of Neusoft Corporation Vendor: www.qq.com Platform: Windows XPSP3 Chinese Simplified Tested: QQPlayer 2.3.696.400p1 Vulnerable: QQPlayer video...

EZ-Oscommerce 2.1 Remote File Upload

Exploit for php platform in category web applications ==================================== EZ-Oscommerce 2.1 Remote File Upload ==================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1...

EZ-Oscommerce 3.1 by Pass / Creat and Download Backup Vulnerability

Exploit for php platform in category web applications =================================================================== EZ-Oscommerce 3.1 by Pass / Creat and Download Backup Vulnerability ===================================================================...

Hero DVD Buffer Overflow Exploit (meta)

Exploit for windows platform in category remote exploits ======================================= Hero DVD Buffer Overflow Exploit meta ======================================= .-----.--.--.--.----.----.-| | | | | | | | -| | | |||||| || By MadjiX Sec4ever.com Note: Use Backtrack! place httpd.conf i...

Hero DVD - Remote Buffer Overflow (Metasploit)

Hero DVD - Remote Buffer Overflow Metasploit .-----.--.--.--.----.----.-| | | | | | | | -| | | |||||| || By MadjiX Sec4ever.com Note: Use Backtrack! place httpd.conf in /etc/apache2/ and start apache Have Someone Connect to your Server /sploit Credit goes to chap0 for the nice bug! require...

MoreAmp 0.1.25 Beta Buffer Overflow (SEH)

MoreAmp Seh Buffer Overflow meta Greetz:His0k4 , Bibi-info , Volc4n0 sec4ever.com require 'msf/core' class Metasploit3 'MoreAmp 0.1.25 Beta Buffer Overflow SEH', 'Description' = %q This module exploits a SEH overflow in 0.1.25 MoreAmp Beta By creating a specially crafted .m3u file, an an attacker...

Struts2/XWork < 2.2.0 remote execution of arbitrary code vulnerability analysis and patch-vulnerability warning-the black bar safety net

Neeao's Blog http://neeao.com/ : 1. exploit-db website on 7 month 1 4 day broke aStruts2 remote execution of arbitrary code vulnerabilityvulnerability, hazard of large, can be described as a crack shot, directly to the root, as long as the use Struts2 and webwork framework of the system for the...

Kanarya Shop Database Disclosure

======================================================================= kanarya shop Data Base Dump Vulnerability ======================================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\...

MoreAmp - Local Buffer Overflow (SEH) (Metasploit)

MoreAmp - Local Buffer Overflow SEH Metasploit MoreAmp Seh Buffer Overflow meta Greetz:His0k4 , Bibi-info , Volc4n0 sec4ever.com require 'msf/core' class Metasploit3 'MoreAmp 0.1.25 Beta Buffer Overflow SEH', 'Description' = %q This module exploits a SEH overflow in 0.1.25 MoreAmp Beta By creatin...

zenPHOTO (Cross Site Scripting in URI) Vulnerability

Exploit for php platform in category web applications ==================================================== zenPHOTO Cross Site Scripting in URI Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'...

SAP DB 7.4 - WebTools Buffer Overflow (Metasploit)

$Id: sapdbwebtools.rb 9842 2010-07-16 02:33:25Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Site2Nite Boat Classifieds Multiple SQLi Vulnerabilities - Active Check

Site2Nite Boat Classifieds is prone to multiple SQL injection SQLi vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

MooreAdvice SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail :...

VGM Forbin SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail :...