OpenX - phpAdsNew Remote File Inclusion

OpenX - phpAdsNew Remote File Inclusion Exploit Title: OpenX phpAdsNew Remote File inclusion Vulnerability Date: 2010/07/20 Author: ViRuS Qalaa Email: [email protected] My Sites : www.pal-mafia.com & www.vbspiders.com Script url: http://www.opensourcescripts.com/dir/PHP/AdManagement/phpadsnew11.html...

Microsoft Windows automatically executes code specified in shortcut files

Overview Microsoft Windows automatically executes code specified in shortcut LNK and PIF files. Description Microsoft Windows supports the use of shortcut or LNK files. A LNK file is a reference to a local file. A PIF file is a shortcut to a MS-DOS application. Clicking on a LNK or PIF file has...

PyroCMS 0.9.9.1 Cross Site Request Forgery

input type="hidden" name="btnAction" value="sav...

MP3 Cutter 1.5 - Denial of Service

MP3 Cutter 1.5 - Denial of Service Legion of Xtremers & Hackers Garage www.loxian.co.cc www.garage4hackers.com MP3 Cutter 1.5 Crash Exploit Author: Prashant a.k.a t3rm!n4t0r c0ntact: [email protected] Greetz to: vinnu, b0nd, fb1h2s, Anarki, Nikhil, D4RK3ST exploit.py MP3 cutter Crash...

Hero DVD 3.0.8 Buffer Overflow

Exploit Title : Hero DVD Remote Buffer Overflow Exploit Date : July 7, 2010 Author : chap0 www.seek-truth.net Software Link : http://download.cnet.com/Hero-DVD-Player/3000-79704-10127412.html Version : 3.0.8 OS : Windows XP SP3 Greetz to : God the Creator, Sud0 Thanks Bro for the Support The Crew...

EvoCam Web Server OSX ROP Remote Exploit (Snow Leopard)

Exploit for macOS platform in category remote exploits ======================================================= EvoCam Web Server OSX ROP Remote Exploit Snow Leopard ======================================================= !/usr/bin/python EvoCam Web Server OSX 3.6.6 and 3.6.7 import socket import...

Unreal Engine 2.5 - 'UpdateConnectingMessage()' Remote Stack Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/41424/info Unreal Engine is prone to a remote stack-based buffer-overflow vulnerability because it fails to properly bounds-check messages before copying them to an insufficiently sized memory buffer. Successful exploits can allow remote attackers to...

Sun Java System Web Server Stack Overflow

/ Sun Java Web Server Exploit Tested on: Sun Java Web Server 7.0 update 7 - XP SP3 Ref: CVE-2010-0361 This vulnerability was identified by Evgeny Legerov Author: Dominic Chell Date: 23/01/2010 / include "stdafx.h" include include include include include "winsock2.h" pragma commentlib, "ws232"...

NetWorld Alliance portal SQL Injection Vulnerability

Exploit for php platform in category web applications ==================================================== NetWorld Alliance portal SQL Injection Vulnerability ==================================================== EDB-ID: CVE: OSVDB-ID: Author: Dr.0rYX and Cr3w-DZ Published: Verified: Exploit Code...

WM Downloader 2.9.2 - Local Stack Buffer Overflow

WM Downloader 2.9.2 - Local Stack Buffer Overflow !/usr/bin/perl WM Downloader 2.9.2 stack buffer overflow win sp3 By Madjix Dz8athotmaildotcom my $hd = "EXTM3U\n"; my $jnk="http://"."\x41" x 257 ; my $eip = "\x7B\x46\x86\x7C" ; 0x7C86467B jmp esp kernel 32 my $shellcode = "\x90" x 25; $shellcode...

Linker IMG 1.0 - Remote File Inclusion

1 1 0 I'm Sn!pEr.S!Te Hacker member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 ------------------------------------------------------------ Remote File Inclusion Vulnerability ----------------------------------------------------------- Linker...

Infront of the program the presence of SQL injection vulnerabilities-vulnerability warning-the black bar safety net

Infront of programs existSQL injectionvulnerability, you can obtain administrative privileges. Bulk: google: the intext:Powered by Infront Vulnerabilities page : breakingnews.php Exploit Code : http://www.hack58.com/ 变量 路径 /breakingnews.php?newsid=union select...

WebsiteBaker 2.8.1 Cross Site Request Forgery

Exploit Title: WebsiteBaker 2.8.1 CSRF Date: 05/18/10 Author: Luis Santana Software Link: http://www.websitebaker2.org/modules/downloadgallery/dlc.php?file=88&id=1269641667 Version: 2.8.1 Tested on: All CVE : N/A Code : http://hacktalk.net/exploits/websitebakercsrfPOC.zip The full advisory can be...

File Sharing Wizard 1.5.0 - Remote Overflow (SEH)

File Sharing Wizard 1.5.0 - Remote Overflow SEH !/usr/bin/python print "\n" print " Team Hackers Garage " print " www.garage4hackers.com " print " " print " File Sharing Wizard Version 1.5.0 " print " Remote Command Execution " print " Author: b0nd " print " [email protected] " print " " print...

Yahoo! Mail Cross Site Scripting

Title: Yahoo mail Dom Based Cross Site Scripting Author: Pratul Agrawal Date: 13/06/2010 Indian Hacker Service: Webmail Vendor: Yahoo mail, and possibly others Vulnerability: Cross Site Scripting / Cookie-Theft / Relogin attacks Severity: High Tested on: Microsoft IE 7.0 Details: Yahoo mail filte...

Google Chrome 5.0.375.70 Remote Dos

Exploit for windows platform in category dos / poc =================================== Google Chrome 5.0.375.70 Remote Dos =================================== Author: PoisonCode Download Exploit Code Download Vulnerable app Title:Google Chrome 5.0.375.70 Remote Dos Software...

Infront - SQL Injection

Infront - SQL Injection Exploit Title: Infront SQL Injection Vulnerability Date: 12-06-2010 Author: TheMaster Software Link: http://www.infront.com/ Version: N/A Tested on: Windows XP SP3 Author : TheMaster Dork : intext:Powered by Infront Type of attack : SQLi File : breakingnews.php Exploit Cod...

Pre Web Host - SQL Injection

EDB-ID: 1310 CVE: OSVDB-ID: Author: Mr.Benladen Published: 2010-06-07 Verified: No Download: Exploit Code Download: N/A InformatioN Title : Pre Web Host sql inj3ction Vulnerability Author : Mr.Benladen Homepage : http://www.joomlaservice.info Or http://www.dz4all.com Vendor :...

Pre Web Host sql injection Vulnerability

Exploit for php platform in category web applications ======================================== Pre Web Host sql injection Vulnerability ======================================== EDB-ID: 1310 CVE: OSVDB-ID: Author: Mr.Benladen Published: 2010-06-07 Verified: No Download: Exploit Code Download: N/A...

Patient Folder SQL Injection

============================================================ Patient folder THEME ASP Local SQL Injection Vulnerability ============================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ ...