Icy Phoenix 1.3.0.53a - HTTP Referer Persistent Cross-Site Scripting

Exploit Title: Icy Phoenix 1.3.0.53a http referer stored XSS Google Dork: " Powered by Icy Phoenix " Date: 16-2-2011 Author: Saif El-Sherei Software Link: http://www.icyphoenix.com/dload.php?action=file&fileid=171 Version: Icy Phoenix 1.3.0.53a Tested on:FF 3.0.15, IE 8 Vendor Response:...

Openstock Facture 2.02 Local File Inclusion

======================================================= Openstock Facture 2.02 Local File Include Vulnerability ======================================================= + Openstock Facture 2.02 Local File Include Vulnerability 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=...

xwine 1.0.1 - '.exe' Local Crash (PoC)

xwine v1.0.1 .exe file Local Crash PoC Exploit Install: sudo apt-get install xwine Author: JosS mail: sys-projectathotmaildotcom site: http://hack0wn.com/ team: Spanish Hackers Team - SHT This was written for educational purpose. Use it at your own risk. Author will be not responsible for any...

Samba 3.0.10 < 3.3.5 - Format String / Security Bypass

The following proof of concept is available: smb: \ put aa%3Fbb...

Novell eDirectory 8.8sp5 BoF

Exploit for unknown platform in category remote exploits ============================ Novell eDirectory 8.8sp5 BoF ============================ Title: Novell eDirectory 8.8sp5 BoF CVE-ID: OSVDB-ID: Author: karak0rsan, murderkey Published: 2009-10-26 Verified: yes view source print? PoC for...

butterfly-sqlxss.txt

====================================================================== Butterfly Organizer 2.0.0 SQL/XSS Multiple Remote Vulnerabilities ====================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground...

Cheese Tracker <= 0.9.9 Local Buffer Overflow Exploit PoC

No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include stdint.h include string.h define VER "0.1" define CPOS 243 // reader.getfilepos-pcpos define JUNKSZ 500 + CPOS // Uint8 junkbuster500 define OVERFLOW 740 // overflow define BOFSZNUM JUNKSZ + OVERFLOW...

WWWeb Concepts Events System 1.0 - 'login.asp' SQL Injection

source: https://www.securityfocus.com/bid/13859/info WWWeb Concepts Events System is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'login.asp' script before using it in an SQL query. Successful exploitati...

vBulletin 3.0.6 - PHP Code Injection

vBulletin 3.0.6 - PHP Code Injection Tested on vBulletin Version 3.0.1 /str0ke http://www.xxx.net/misc.php?do=page&template=$systemid SCAN Associates Security Advisory http://www.scan-associates.net Proof of concept ================ http://site.com/misc.php?do=page&template=$phpinfo milw0rm.com...

Exim <= 4.41 dns_build_reverse Local Exploit PoC

Exploit for linux platform in category local exploits ================================================ Exim int main int argc, char argv static char shellcode= "\xeb\x17\x5e\x89\x76\x08\x31\xc0\x88\x46\x07\x89\x46\x0c\xb0\x0b\x89"...

phpBB highlight Arbitrary File Upload (Santy.A)

No description provided by source. Santy.A - phpBB = 2.0.10 Web Worm Source Code Proof of Concept -SECU For educational purpose See : http://isc.sans.org/diary.php?date=2004-12-21 http://www.f-secure.com/v-descs/santya.shtml !/usr/bin/perl use strict; use Socket; sub PayLoad; sub DoDir$; sub DoFi...

TipxD 1.1.1 - Not SETUID Local Format String

/ tipxdexp.c TipxD Format String Vulnerability TipxD - SECU No System Group - http://www.nosystem.com.ar / include include define PATH "/bin/tipxd" define OBJDUMP "/usr/bin/objdump" define GREP "/usr/bin/grep" unsigned char shellcode= / aleph1 shellcode.45b /...

CoffeeCup FTP Clients Buffer Overflow Vulnerability

AUTHOR Komrade [email protected] http://unsecure.altervista.org DATE 22/11/2004 PRODUCTS CoffeCup Direct FTP - FTP client for Windows. CoffeeCup Free FTP - free FTP client for Windows. AFFECTED VERSION Versions verified to be vulnerable: CoffeeCup Direct FTP 6.2.0.62 latest version CoffeeCu...

Multiple AntiVirus (zip file) Detection Bypass Exploit

Exploit for multiple platform in category local exploits ====================================================== Multiple AntiVirus zip file Detection Bypass Exploit ====================================================== / zipbrk.c - Proof-of-Concept for CAN-2004-0932 - CAN-2004-0937 Copyright C...

NetNote Server 2.2 build 230 - Crafted String Denial of Service

/ NetNote Server v2.2 build 230, crafted string vulnerability. Poc included crash the server. Full disclosure and poc exploit by class101 at DFind.kd-team.com & n3ws at EFnet 13 november 2004 ------------------ WHAT IS NETNOTE ------------------ Homepage - http://www.alshare.com/ NetNote is the...

Socat 1.4.0.2 - Not SETUID Local Format String

/ socatexp.c Socat Format String Vulnerability socat No System Group - http://www.nosystem.com.ar coki@servidor:$ make socatexp coki@servidor:$ ./socatexp socat shellcode address = 0xbfffffb9 .dtors address = 0x080740c4 2004/10/19 09:49:46 socat26197 E unknown syslog facility...

socat <= 1.4.0.2 Local Format String Exploit (not setuid)

Exploit for linux platform in category local exploits ========================================================= socat No System Group - http://www.nosystem.com.ar email protected:$ make socatexp email protected:$ ./socatexp socat shellcode address = 0xbfffffb9 .dtors address = 0x080740c4 2004/10/...

ProFTPd 1.2.10 - Remote Users Enumeration

ProFTPd 1.2.10 - Remote Users Enumeration / Details Vulnerable Systems: ProFTPD Version 1.2.10 and below It is possible to determine which user names are valid, which are special, and which ones do not exist on the remote system. This can be accomplished by code execution path timing analysis...

Zinf 2.2.1 Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ======================================== Zinf 2.2.1 Local Buffer Overflow Exploit ======================================== / -------------------------------Advisory---------------------------------- Luigi Auriemma I don't know why this bug h...

GNU Sharutils <= 4.2.1 Local Format String PoC Exploit

Exploit for linux platform in category local exploits ====================================================== GNU Sharutils includ...