2130 matches found
idm405.txt
/ Title : Internet Download Manager = 4.05 universal remote overflow Exploit bug analyse and exploit code by : c0d3r "Kaveh Razavi" [email protected] my advisory : http://www.ihsteam.com/advisory/downloadmanageradv.txt this bug is differnt from what was found in application called altnet download...
TCP Chat (TCPX) 1.0 Denial of Service Exploit
Exploit for unknown platform in category dos / poc ============================================= TCP Chat TCPX 1.0 Denial of Service Exploit ============================================= / TCP ChatTCPX DoS Exploit ---------------------------------------- Resolve host... OK + Connecting... OK Targ...
Internet Download Manager 4.0.5 - Input URL Stack Overflow
Internet Download Manager 4.0.5 - Input URL Stack Overflow / Title : Internet Download Manager = 4.05 universal remote overflow Exploit bug analyse and exploit code by : c0d3r "Kaveh Razavi" [email protected] my advisory : http://www.ihsteam.com/advisory/downloadmanageradv.txt this bug is differn...
Nokia Affix < 3.2.0 btftp Remote Client Exploit
Exploit for hardware platform in category remote exploits =============================================== Nokia Affix open 00:04:3e:65:a1:c8 Connected. ftp ls Z8????Tnb 6 u???u???3?????????^v?0^????5??24????????V6?V ????? ????????Xq?X6?Y0 ----------------------...
ashleyDoS.txt
Update: 10:38 PM 3/27/2005 Subject: " Ashley's Server DoS Exploit " Vulnerable version: Ashley's 1.0 Description: Ashley's Web Server its currently supports perl cgi. Also supported are directory listings,custom front pages, custom error pages.It also supports flash, pdf,realmedia, mp3s, avi's,...
RaXnet Cacti 0.5/0.6.x/0.8.x - 'Graph_Image.php' Remote Command Execution Variant
source: https://www.securityfocus.com/bid/14129/info RaXnet Cacti is prone to a remote command execution vulnerability that manifests in the 'graphimage.php' script. The issue is due to a bug in the input filters that leads to a failure in the application to properly sanitize user-supplied input...
ASPNuke 0.80 - 'comment_post.asp' SQL Injection
!/usr/bin/perl -w SQL Injection Exploit for ASPNuke = 0.80 This exploit retrieve the username of the administrator of the board and his password crypted in SHA256 Related advisory: http://www.securityfocus.com/archive/1/403479/30/0/threaded Discovered and Coded by Alberto Trivero use LWP::Simple;...
ipdatalook.txt
/ IP-DATALOOK Local DoS Exploit --------------------------------- INFGP - Hacking&security Research Resolve host...OK + Connecting...OK Target locked Sending bad procedure...OK Server Disconnected! Tested on Windows2000 SP4 Infos: infamous.2hell.com / [email protected] / include string.h...
TCP-IP Datalook <= 1.3 Local Denial of Service Exploit
No description provided by source. / IP-DATALOOK Local DoS Exploit --------------------------------- INFGP - Hacking&security Research Resolve host...OK + Connecting...OK Target locked Sending bad procedure...OK Server Disconnected! Tested on Windows2000 SP4 Infos: infamous.2hell.com /...
UBBCentral UBB.Threads 6.5.2 Beta - mailthread.php SQL Injection
UBBCentral UBB.Threads 6.5.2 Beta - mailthread.php SQL Injection Alphaprogrammer , Oilkarchack , TheCephaleX , Str0ke And Iranian Hacking & Security Teams : IHS TeaM , alphaST , Shabgard Security Team , Emperor Hacking Team , Crouz Security Team & Simorgh-ev Security Team Config : please replace...
[EXPL] eXtropia WebStore Remote Command Execution (web_store.cgi)
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
Bitrix Site Manager 4.0.5 - Remote File Inclusion
Bitrix Site Manager 4.0.5 - Remote File Inclusion + Author : Don Tukulesto [email protected] + Date : November 13, 2009 + Homepage : http://www.indonesiancoder.com + Vendor : http://www.bitrixsoft.com/ + Method : Remote File Inclusion + Location : INDONESIA Notes : I know this is an old...
SQL Injection Exploit for Portail PHP < 1.3
!/usr/bin/perl -w SQL Injection Exploit for Portail PHP 1.3 This exploit show the username of the administrator of the portal and his password crypted in MD5 Related advisory: http://www.securityfocus.com/archive/1/398728/2005-05-21/2005-05-27/0 Coded by Alberto Trivero use LWP::Simple; print...
Kaspersky AntiVirus - klif.sys Local Privilege Escalation
Kaspersky AntiVirus - klif.sys Local Privilege Escalation / Added NOSTRICT to 1 on line 2 /str0ke ! milw0rm.com / define NOSTRICT 1 include undef STRICT PUCHAR pCodeBase=PUCHAR0xBE9372C0; PDWORD pJmpAddress=PDWORD0xBE9372B0; PUCHAR pKAVRets=PUCHAR0xBE935087,PUCHAR0xBE935046; PUCHAR pKAVRet;...
Crob FTP Server <= 3.6.1 Remote Stack Overflow Exploit
Exploit for unknown platform in category remote exploits ====================================================== Crob FTP Server LSS Security / http://security.lss.hr / include include include pragma comment lib,"ws232" char fzzrecv int sock fdset fds; struct timeval tv; static char buf10000; char...
FutureSoft TFTP Server 2000 - Remote Denial of Service
/ FutureSoft TFTP Server 2000 Remote Denial of Service Exploit http://www.futuresoft.com/products/lit-tftp2000.htm Bug Discovered by SIG^2 http://www.security.org.sg Exploit coded By ATmaCA Web: atmacasoft.com && spyinstructors.com E-Mail: [email protected] Credit to kozan Usage:tftpexp targetPo...
phpStat 1.5 - setup.php Authentication Bypass (PHP) (2)
phpStat 1.5 - setup.php Authentication Bypass PHP 2 ? / PHP Stat Administrative User Authentication Bypass POC Exploit Code by Nikyt0x - Soulblack Security Research Advisory: http://www.soulblack.com.ar/repo/papers/phpstatadvisory.txt Saludos: Soulblack Staff, Status-x, NeosecurityTeam, KingMetal...
phpStat 1.5 - 'setup.php' Authentication Bypass (PHP) (2)
? / PHP Stat Administrative User Authentication Bypass POC Exploit Code by Nikyt0x - Soulblack Security Research Advisory: http://www.soulblack.com.ar/repo/papers/phpstatadvisory.txt Saludos: Soulblack Staff, Status-x, NeosecurityTeam, KingMetal, SWP, Trespasser... [email protected]...
BookReview 1.0 - add_booklist.htm?node Cross-Site Scripting
BookReview 1.0 - addbooklist.htm?node Cross-Site Scripting source: https://www.securityfocus.com/bid/13783/info BookReview is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may...
Exim <= 4.41 dns_build_reverse Local Exploit
No description provided by source. / ripped straight off iDEFENSE advisory - so lazy I just picked up GDB... bored on a weeknight : nothing to write home to mother about due to the fact that you need a local user account on a server and all you get is to read other people's emails .... not even m...