449 matches found
Magento eCommerce - Remote Code Execution
Exploit Title : Magento Shoplift exploit SUPEE-5344 Author : Manish Kishan Tanwar AKA error1046 Date : 25/08/2015 Love to : zero cool,Team indishell,Mannu,Viki,Hardeep Singh,Jagriti,Kishan Singh and ritu rathi Debugged At : Indishell Laboriginally developed by joren //////////////////////// ///...
Magento eCommerce - Remote Code Execution Exploit
Magento shoplift exploit that adds an administrator account. Flaw originally discovered by CheckPoint. Exploit Title : Magento Shoplift exploit SUPEE-5344 Author : Manish Kishan Tanwar AKA error1046 Date : 25/08/2015 Love to : zero cool,Team indishell,Mannu,Viki,Hardeep Singh,Jagriti,Kishan Singh...
Internet Download Manager - .ief Crash (PoC)
Internet Download Manager - .ief Crash PoC !/usr/bin/env python Title : Internet Download Manager - Crash Proof Of Concept Affected Versions: All Version Founder : InternetDownloadManager Tested on Windows 7 / Server 2008 Author : Mohammad Reza Espargham Linkedin : https://ir.linkedin.com/in/reza...
HP-Data-Protector-A.06.20
This script allows to execute a command with an arbitrary number of arguments. The trick calls 'perl.exe' interpreter installed with HP Data Protector inside the directory installpath/bin/. The main goal of the script is to bypass the limitation of executing only a single command without any...
Exploit for OS Command Injection in Gnu Bash
This is a PoC exploit for CVE-2014-6271, a remote interactive sh...
Duyuru Scripti Goster.ASP SQL injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/22910/info Duyuru Scripti is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. Exploiting this vulnerability could permit remot...
Mandriva Linux Mandrake 7.0 - Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1265/info The linux cdrecorder binary is vulnerable to a locally exploitable buffer overflow attack. When installed in a Mandrake 7.0 linux distribution, it is by default setgid cdburner which is a group, gid: 80, that is...
Novell Iprint LPD Remote Code Execution Vulnerability
No description provided by source. !/usr/bin/perl Source: http://www.protekresearchlab.com/index.php?option=comcontent&view=article&id=21&Itemid=21 use Getopt::Std; use IO::Socket::INET; $SIGINT = \ my $host = '10.102.3.79'; my $port = 515; my $proto = 'tcp'; my $sockType = SOCKSTREAM; my $timeou...
MailMax <= 4.6 - POP3 "USER" Remote Buffer Overflow Exploit (No Login Needed)
No description provided by source. !/usr/bin/python MailMax =v4.6 POP3 USER Remote Buffer Overflow Exploit No Login Needed Newer version's not tested, maybe vulnerable too A hard one this, the shellcode MUST be lowercase. Plus there are many opcode's that break the payload and opcodes that gets...
Samba 2.0.x/2.2 - Remote Arbitrary File Creation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2928/info Samba is a freely available file and printer sharing application maintained and developed by the Samba Development Team. Samba allows file and printer sharing between operating systems on the Unix and Microsoft...
BlueZone Desktop .zap file Local Denial of Service Vulnerability
No description provided by source. Exploit Title: BlueZone Desktop Malformed .zap file Local Denial of Service Date: 10-15-11 Author: Silent Dream Software Link: http://www.rocketsoftware.com/bluezone/downloads/desktop-free-trial Version: Latest Tested on: Windows XP SP3 To trigger: Run this...
Simplog <= 0.9.3.1 comments.php Remote SQL Injection Exploit
No description provided by source. !/usr/bin/php ?php / Simplog 0.9.3.1 Remote SQL Injection Vulnerability Note: Requires at least one blog entry to be made prior to injection Usage: php script.php host path user id Usage Example: php script.php domain.com /simplog/ 1 Googledork: intext:Powered b...
Hacking Wireless DSL routers via Administrative password Reset Vulnerability
If you want to hack a Netgear and Linkys Wireless Routers, there is a quick backdoor entry available, that allow an attacker to reset the admin panel password to defaults. Eloi Vanderbeken, a hacker and reverse-engineer from France has discovered an administration password Reset vulnerability in...
TP-Link TL-WR740N TL-WR740ND 150M Wireless Lite N Router - HTTP Denial of Service
TP-Link TL-WR740N TL-WR740ND 150M Wireless Lite N Router - HTTP Denial of Service Exploit title: 150M Wireless Lite N Router HTTP DoS Date: 28.11.2013 Exploit Author: Dino Causevic Hardware Link: http://www.tp-link.com/en/products/details/?model=TL-WR740N Vendor Homepage: http://www.tp-link.com/...
Jolix Media Player 1.1.0 - '.m3u' Denial of Service
!/usr/bin/python print """ +Judul Ledakan:Jolix Media Player .m3u Denial of Service Exploit +Celah versi: Version 1.1.0 +Mengunduh produk: http://www.jolixtools.com/downloads/jolix-media-player-setup.exe +Hari Tanggal Tahun: 09.07.2013 +Penulis: IndonesiaGokilTeam +Dicoba di sistem operasi: Windo...
CMSLogik 1.2.1 (upload_file_ajax()) Shell Upload Exploit
Summary CMSLogik is built on a solid & lightweight framework called CodeIgniter, and design powered by Bootstrap. This combination allows for greater security, extensive flexibility, and ease of use. You can use CMSLogik for almost any niche that your project might fall into. Description The...
mcrypt 2.5.8 Stack Based Overflow
!/usr/bin/perl Title : mcrypt ', $filename; print F $file; close F; sub buildfile magic $file .= "\x00m\x03"; flags $file .= pack'C', 1 6; algorithm $file .= "H@Ck3d\x00"; keysize $file .= pack'S', 0xdead; mode $file .= "h@cK3d\x00"; keymode $file .= "H@CK3D\x00"; sflags $file .= "\xff"; payload...
MySQL 5.5.8 - Remote Denial of Service
MySQL 5.5.8 - Remote Denial of Service import socket, sys print "\n" print "----------------------------------------------------------------" print "| MySQL 5.5.8 Null Ptr windows |" print "| Level Smash the Stack |" print "----------------------------------------------------------------" print...
Freefloat FTP Server - 'ALLO' Remote Buffer Overflow
source: https://www.securityfocus.com/bid/49265/info Freefloat FTP Server is prone to a buffer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition...
Sagem 3304 Router PPPOE Password Retrieval
!/bin/bash Exploit Title: Sagem 3304 Routers Get PPPOE Password Date 27/07/2011 Author: [email protected] Software Link: null Version: Sagem Routers F@st 3304 Tested on: Sagem F@ST 3304 Usage echo "Usage : $0 IPADDRESS" if "$1" != "" then IPADDRESS="$1" else Usage exit 1 fi USERNAME=wget...