Magician Blog 1.0 - Authentication Bypass

Magician Blog 1.0 - Authentication Bypass ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

Magician Blog 1.0 - ids SQL Injection

Magician Blog 1.0 - ids SQL Injection ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

Unfixed XSS vulnerability at msn.yallakora.com

Security researcher Evil-Cod3r, has submitted on 18/07/2009 a cross-site-scripting XSS vulnerability affecting msn.yallakora.com, which at the time of submission ranked 1164 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/06/2010. It is...

PHPGenealogy 2.0 (DataDirectory) RFI Vulnerability

Exploit for unknown platform in category web applications ================================================== PHPGenealogy 2.0 DataDirectory RFI Vulnerability ================================================== PHPGenealogy v2.0 Rfi AUTHOR : Sina Yazdanmehr R3d.W0rm Download :...

Inside Microsoft's July Security Patch Batch

Microsoft released six security bulletins today — three rated Critical and three rated Important. Two of the issues are being actively exploited on the Internet and four of the issues are client-side vulnerabilities, which means the exploit can only occur if a user visits an evil website or opens...

Unfixed XSS vulnerability at www.rdsm.fr

Security researcher DeAr EviL, has submitted on 07/11/2009 a cross-site-scripting XSS vulnerability affecting www.rdsm.fr, which at the time of submission ranked 27343135 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/07/2010. It is current...

Unfixed XSS vulnerability at www.budd-marseille.fr

Security researcher DeAr EviL, has submitted on 07/11/2009 a cross-site-scripting XSS vulnerability affecting www.budd-marseille.fr, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/07/2010. It is...

Unfixed XSS vulnerability at tools.web-max.ca

Security researcher DeAr EviL, has submitted on 07/11/2009 a cross-site-scripting XSS vulnerability affecting tools.web-max.ca, which at the time of submission ranked 81479 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/07/2010. It is...

OtsAv DJ/TV/Radio Multiple Local Heap Overflow PoCs

No description provided by source. ----------------------------------the first Poc------------------------------------ !/usr/bin/perl OtsAv DJ .olf Local Heap Overflow Poc Down :...

OtsAv DJ/TV/Radio Multiple Local Heap Overflow PoCs

Exploit for unknown platform in category dos / poc =================================================== OtsAv DJ/TV/Radio Multiple Local Heap Overflow PoCs =================================================== ----------------------------------the first Poc------------------------------------...

OtsAV Heap Overflow Exploits

----------------------------------the first Poc------------------------------------ !/usr/bin/perl OtsAv DJ .olf Local Heap Overflow Poc Down : http://serv-08.download.otszone.com/download.cgi/otsavdjtrialsetup.exe?A=13JTHRVWJLLLZ5JG2AYRNSMN%2DWJMQXDJKA%2DRFQ&otsavdjtrialsetup.exe Desc : 7000 A'...

Glossword 1.8.11 Install/Uninstall

----------------------------- Evil-Cod3r ------------------------------- ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || &n bsp;...

Glossword <= 1.8.11 Arbitrary Uninstall / Install Vulnerability

No description provided by source. ----------------------------- Evil-Cod3r ------------------------------- ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || &n...

Glossword 1.8.11 - Arbitrary Uninstall Install

Glossword 1.8.11 - Arbitrary Uninstall Install ----------------------------- Evil-Cod3r ------------------------------- ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \...

Glossword 1.8.11 - Arbitrary Uninstall / Install

----------------------------- Evil-Cod3r ------------------------------- ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || &n bsp;...

School Data Navigator - page LocalRemote File Inclusion

School Data Navigator - page LocalRemote File Inclusion ---------------------------------------------------------------------------------------------------- Name : School Data Navigator Site : http://sourceforge.net/projects/school-data-nav/ Down : http://216.92.6.173/datanavigator/appandreadme.z...

Apple Safari local file theft vulnerability

Hi, Safari prior to version 4 may permit an evil web page to steal files from the local system. This is accomplished by mounting an XXE attack against the parsing of the XSL XML. This is best explained with a sample evil XSL file which includes a DTD that attempts the XXE attack: !DOCTYPE doc...

SDP Downloader v2.3.0 (.ASX File) Local Heap Overflow PoC

Exploit for unknown platform in category dos / poc ========================================================= SDP Downloader v2.3.0 .ASX File Local Heap Overflow PoC ========================================================= !/usr/bin/perl Found By : Cyber-Zone ABDELKHALEK == Proud To Be Figuigian...

Shadow Stream Recorder Overflow

!/usr/bin/perl Shadow Stream Recorder .m3u file Local Universal Stack Overflow Exploit By AlpHaNiX NullArea.Net alphaathacker.bz Made in Tunisia program : Shadow Stream Recorder download : http://www.rm-to-mp3.net/downloads/ssrecordersetup.exe program homepage :...

My Simple Forum 7.1 (LFI) Remote Command Execution Exploit

No description provided by source. !/usr/bin/perl My Simple Forum v7.1 Remote Command Execution Exploit Apache Log Poisoning/Injection Local File Inclusion at /theme/default/index.template.php?action=lf%00 XSS at /theme/default/index.template.php?Name=XSS - This needs Register Globals ON Credits ...