Coppermine Photo Gallery 1.4.14 picEditor.php Command Execution

$Id: copperminepiceditor.rb 8562 2010-02-19 07:31:12Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Coppermine Photo Gallery picEditor.php Command Execution

This module exploits a vulnerability in the picEditor.php script of Coppermine Photo Gallery versions 1.4.14 and earlier. When configured to use the ImageMagick library, the 'quality', 'angle', and 'clipval' parameters are not properly escaped before being passed to the PHP 'exec' command. In ord...

Hipergate 4.0.12 - Multiple Vulnerabilities

Permanent XSS: Advisory Name: Permanent Cross-Site Scripting XSS in Hipergate 4.0.12 Vulnerability Class: Permanent Cross-Site Scripting XSS Release Date: 2010-02-02 Affected Applications: Confirmed in Hipergate 4.0.12. Other versions may also be affected Affected Platforms: Multiple Local /...

Hipergate v4.0.12 Multiple Vulnerabilities

Exploit for jsp platform in category web applications ========================================== Hipergate v4.0.12 Multiple Vulnerabilities ========================================== Permanent XSS: Advisory Name: Permanent Cross-Site Scripting XSS in Hipergate 4.0.12 Vulnerability Class: Permanen...

Xunlei XPPlayer ActiveX Remote Exec 0day POC

Date: 2010.01.17 Author: superli Software Link: http://down.sandai.net/Thunder5.9.14.1246.exe Version: = 5.9.14.1246 Tested on: xpsp3 ie6 Greeting to Xunlei Security Center guys,your guys still not yet release patch or new version to fix the vunl which also can attack Xunlei KanKan...

Baidu Security Center FireFoxProxy ActiveX Remote Exec 0day POC

Date: 2010.01.17 Author: superli Software Link: http://an.baidu.com/ Version: 2.0 Tested on: xpsp3 ie6 Greeting to all the guys of Baidu Security Center,please dont use Kingsoft sht to keep your user safe,you can use 360safe instead.I guess I will join your team and play games together one day...

Internet Explorer Eventparam use-after-free vulnerability

Added: 01/20/2010 CVE: CVE-2010-0249 BID: 37815 OSVDB: 61697 Background Internet Explorer is an HTML web browser which comes by default on Microsoft operating systems. Problem A vulnerability in the Eventparam function can cause Internet Explorer's HTML engine to access memory that has already be...

Kingsoft DuBa Browser Shield ActiveX Remote Exec 0day POC

Date: 2010.01.17 Author: superli Software Link: http://i2d.www.duba.net/i2d/kws3/KWSSetup.exe Version: 3.0 Tested on: xpsp3 ie6 greeting to KingSoft,can you really help users avoiding being hacked ? this vuln almost effect in all of the duba security software. Code : object id=TestObj...

Adobe GetPlus get_atlcom v1.6.2.48 ctiveX Remote Exec 0day POC

Exploit for unknown platform in category remote exploits ============================================================== Adobe GetPlus getatlcom v1.6.2.48 ctiveX Remote Exec 0day POC ============================================================== Download: http://www.inj3ct0r.com/sploits/10126.zip...

TrendMicro Web-Deployment ActiveX Remote Exec 0day POC

Exploit for unknown platform in category remote exploits ====================================================== TrendMicro Web-Deployment ActiveX Remote Exec 0day POC ====================================================== Exploit Title: TrendMicro Web-Deployment ActiveX Remote Exec 0day POC Date:...

Xunlei Aplayer ActiveX Remote Exec 0day POC

No description provided by source. Exploit Title: Xunlei Aplayer ActiveX Remote Exec 0day POC Date: 2010.01.17 Author: superli Software Link: http://down.sandai.net/Thunder5.9.14.1246.exe Version: 5.9.14.1246 Tested on: xpsp3 ie6 Code : object id=TestObj...

Kingsoft DuBa Browser Shield ActiveX Remote Exec 0day POC

No description provided by source. Exploit Title: Kingsoft DuBa Browser Shield ActiveX Remote Exec 0day POC Date: 2010.01.17 Author: superli Software Link: http://i2d.www.duba.net/i2d/kws3/KWSSetup.exe Version: 3.0 Tested on: xpsp3 ie6 greeting to KingSoft,can you really help users avoiding being...

PPmate PMChannel and CTVUAxCtrl ActiveX Remote Exec 0day POC

No description provided by source. Exploit Title: PPmate PMChannel and CTVUAxCtrl ActiveX Remote Exec 0day POC Date: 2010.01.17 Author: superli Software Link: http://www.ppmate.com Version: 2.3.3.6 Tested on: xpsp3 ie6 Code : object id=TestObj classid="CLSID:2BE6A92D-D51C-4659-B372-BB18C99BC439"...

splayer XvidDecoder ActiveX Remote Exec 0day poc

No description provided by source. Exploit Title: splayer XvidDecoder ActiveX Remote Exec 0day poc Date: 2010.01.08 Author: superli Software Link: http://dl.splayer.org/SPlayerSetup.exe Version: 3.3 Tested on: xpsp3 ie6 Code : object id=TestObj classid="CLSID:E5960BC4-A76B-4211-BEEC-9AEE2AF8AAE6"...

SopCast SopCore Control ActiveX Remote Exec 0day PoC

Exploit for unknown platform in category dos / poc ==================================================== SopCast SopCore Control ActiveX Remote Exec 0day PoC ==================================================== Exploit Title: SopCast SopCore Control ActiveX Remote Exec 0day poc Author: superli...

UUSee ReliPlayer ActiveX Remote Exec 0day PoC

Exploit for unknown platform in category dos / poc ============================================= UUSee ReliPlayer ActiveX Remote Exec 0day PoC ============================================= Exploit Title: UUSee ReliPlayer ActiveX Remote Exec 0day POC Author: superli Version: 2008 Tested on: xpsp3...

Flashget 3.x IEHelper remote exec 0day poc

No description provided by source. Exploit Title:flashget 3.x IEHelper remote exec 0day poc Date: 2010.01.05 Author: superli Version: 3.x Tested on: xp sp3 Code : object id=TestObj classid="CLSID:C6262DCE-6E64-45D2-B080-801F1E298AC2" style="width:100;height:350"/object...

flashget 3.x IEHelper remote exec 0day poc

Exploit for unknown platform in category remote exploits ========================================== flashget 3.x IEHelper remote exec 0day poc ========================================== Exploit Title:flashget 3.x IEHelper remote exec 0day poc Date: 2010.01.05 Author: superli Version: 3.x Tested o...

Wu-ftpd SITE EXEC/INDEX Format String Vulnerability

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'wu-ftpd SITE...

PlayMeNow - .M3U Playlist Buffer Overflow (SEH)

PlayMeNow - .M3U Playlist Buffer Overflow SEH !/usr/bin/perl Greets: His0k4 : Then His0k4 and After That His0k4 Special Greets :01000001 01101001 01100011 01101000 01100001 00100000 win32exec - EXITFUNC=seh CMD=calc Size=158 Encoder=PexFnstenvMov http://metasploit.com my $shellcode =...