PT-2025-24433 · Unknown · Feng Office

Name of the Vulnerable Software and Affected Versions: Fengoffice Feng Office version 3.2.2.1 Description: A problematic issue has been found in the Document Upload Handler component, specifically affecting some unknown functionality of the file /application/models/ApplicationDataObject.class.php...

Exploit for CVE-2019-13272

No description...

Multiple Cobalt Personality Disorder

Introduction Despite the notion that modern cybersecurity protocols have stopped email-based attacks, email continues to be one of the primary attack vectors for malicious actors — both for widespread and targeted operations. Recently, Cisco Talos has observed numerous email-based attacks that ar...

i.FTP 2.21 - Host Address / URL Field (SEH)

!/usr/bin/python Exploit Title: i.FTP 2.21 Host Address / URL Field SEH Exploit Date: 3-5-2016 Exploit Author: Tantaryu MING Vendor Homepage: http://www.memecode.com/iftp.php Software Link: http://www.memecode.com/data/iftp-win32-v2.21.exe Version: 2.21 Tested on: Windows 7 SP1 x8664 How to...

ZipWiz 2005 5.0 - '.zip' Buffer Corruption

!/usr/bin/perl +Exploit Title: ZipWiz 2005 v5.0 .ZIP File Buffer Corruption Exploit +Date: 08\07\2011 +Author: C4SS!0 G0M3S +Software Link: http://download.cnet.com/ZipWiz-2005/3000-22504-10011590.html +Version: v5.0 +Tested On: WIN-XP SP3 Brazilian Portuguese +CVE: N/A use strict; use warnings; ...

Office^2 iPhone - .XLS Denial of Service

Office^2 iPhone - .XLS Denial of Service I wrote a fuzzer "dumb fuzzer" and used a sample from http://www.ccp14.ac.uk/ccp/web-mirrors/bca-spreadsheets/scanplot101.xls which I randomly found on the internet. I mutated the data and tested roughly 1000 cases on several Document Reader Applications f...

phpged.txt

========================================================================================================================== PhpGedView 4.0.2 DOCUMENTROOT File inclusion Vulnerablity ======================================= Script:PhpGedView ============= Version:4.0.2 ============= script...

MultiHTML.txt

Title : MultiHTML vulnerability. Description : Retrieve files from the server. Vendor status : Notified and a new not much improved script is released. Short description of the tool: ============================== MultiHTML allows you to put an SSI call where you want the HTML file to be displaye...