ZoIPer 2.22 - Call-Info Remote Denial of Service

!/usr/bin/python ZoIPer v2.22 Call-Info Remote Denial Of Service. Remote Crash P.O.C. Author: Tomer Bitton Gr33nG0bL1n Tested on Windows XP SP2 , SP3 , Ubuntu 8.10 Vendor Notified on: 21/09/2009 Vendor Fix: Fixed in version 2.24 Library 5324 Bad Chars: \x20 , \x09 import sys import socket import ...

NTSOFT BBS E-Market Professional XSS

+==========================================================================+ + NTSOFT BBS E-Market Professional & XSS - Remote Evil Java + +==========================================================================+ Authors: Ivan Sanchez Product: BBS E-Market Professional Vendor Overview: NTSOFT...

Oracle DB SQL Injection via SYS.LT.FINDRICSET Evil Cursor Method

This module will escalate an Oracle DB user to DBA by exploiting a sql injection bug in the SYS.LT.FINDRICSET package via Evil Cursor technique. Tested on oracle 10.1.0.3.0 -- should work on thru 10.1.0.5.0 and supposedly on 11g. Fixed with Oracle Critical Patch update October 2007. This module...

Magician Blog 1.0 Authentication Bypass

============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ============================================================================== » Note : Been Repoted The Programed...

Magician Blog <= 1.0 (Auth Bypass) SQL injection Vulnerability

No description provided by source. ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ==============================================================================...

Magician Blog 1.0 - Authentication Bypass

Magician Blog 1.0 - Authentication Bypass ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

Magician Blog 1.0 - ids SQL Injection

Magician Blog 1.0 - ids SQL Injection ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

Magician Blog 1.0 - Authentication Bypass

============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ============================================================================== » Note : Been Repoted The...

Magician Blog 1.0 - 'ids' SQL Injection

============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ============================================================================== » Note : Been Repoted The...

Unfixed XSS vulnerability at msn.yallakora.com

Security researcher Evil-Cod3r, has submitted on 18/07/2009 a cross-site-scripting XSS vulnerability affecting msn.yallakora.com, which at the time of submission ranked 1164 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/06/2010. It is...

PHPGenealogy 2.0 (DataDirectory) RFI Vulnerability

Exploit for unknown platform in category web applications ================================================== PHPGenealogy 2.0 DataDirectory RFI Vulnerability ================================================== PHPGenealogy v2.0 Rfi AUTHOR : Sina Yazdanmehr R3d.W0rm Download :...

Inside Microsoft's July Security Patch Batch

Microsoft released six security bulletins today — three rated Critical and three rated Important. Two of the issues are being actively exploited on the Internet and four of the issues are client-side vulnerabilities, which means the exploit can only occur if a user visits an evil website or opens...

Unfixed XSS vulnerability at tools.web-max.ca

Security researcher DeAr EviL, has submitted on 07/11/2009 a cross-site-scripting XSS vulnerability affecting tools.web-max.ca, which at the time of submission ranked 81479 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/07/2010. It is...

Unfixed XSS vulnerability at www.budd-marseille.fr

Security researcher DeAr EviL, has submitted on 07/11/2009 a cross-site-scripting XSS vulnerability affecting www.budd-marseille.fr, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/07/2010. It is...

Unfixed XSS vulnerability at www.rdsm.fr

Security researcher DeAr EviL, has submitted on 07/11/2009 a cross-site-scripting XSS vulnerability affecting www.rdsm.fr, which at the time of submission ranked 27343135 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/07/2010. It is current...

OtsAv DJ/TV/Radio Multiple Local Heap Overflow PoCs

No description provided by source. ----------------------------------the first Poc------------------------------------ !/usr/bin/perl OtsAv DJ .olf Local Heap Overflow Poc Down :...

OtsAV Heap Overflow Exploits

----------------------------------the first Poc------------------------------------ !/usr/bin/perl OtsAv DJ .olf Local Heap Overflow Poc Down : http://serv-08.download.otszone.com/download.cgi/otsavdjtrialsetup.exe?A=13JTHRVWJLLLZ5JG2AYRNSMN%2DWJMQXDJKA%2DRFQ&otsavdjtrialsetup.exe Desc : 7000 A'...

Glossword 1.8.11 Install/Uninstall

----------------------------- Evil-Cod3r ------------------------------- ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || &n bsp;...

OtsAv DJ/TV/Radio Multiple Local Heap Overflow PoCs

Exploit for unknown platform in category dos / poc =================================================== OtsAv DJ/TV/Radio Multiple Local Heap Overflow PoCs =================================================== ----------------------------------the first Poc------------------------------------...

Glossword <= 1.8.11 Arbitrary Uninstall / Install Vulnerability

No description provided by source. ----------------------------- Evil-Cod3r ------------------------------- ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || &n...