Symantec Web Gateway 5.0.2 (blocked.php id parameter) Blind SQL Injection

No description provided by source. !/usr/bin/python Exploit Title: Symantec Web Gateway 5.0.2 blocked.php id parameter Blind SQL Injection Date: Jul 23 2012 Author: muts Version: Symantec Web Gateway 5.0.2 Vendor URL: http://www.symantec.com Timeline: 29 May 2012: Vulnerability reported to CERT 3...

pGB 2.12 kommentar.php SQL Injection Vulnerability

No description provided by source. Exploit Title: pGB 2.12 SQL Injection Vulnerability Date: 18/01/2012 - 03.52 Author: 3spi0n Software Website: http://www.powie.de/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: kommentar.php $ Demo Sites:...

PicoPublisher 2.0 - Remote SQL Injection

No description provided by source. Exploit Title : PicoPublisher v2.0 Remote SQL injection Date : 29/03/2012 Author : ZeTH Contact : zeth/at/hacktheplan8/dot/com http://www.hacktheplan8.com Vendor : Pico Software Site : http://pico.no/ Version : 2.0 Price : $29,00 Dork : intext:Drives med...

QQPlayer 2.3.696.400p1 (.wav) Denial of Service Vulnerability

No description provided by source. !/usr/bin/python Exploit Title: QQPlayer 2.3.696.400p1.wav Denial of Service Vulnerability Date: 07-09-2010 Author: Hadji Samir , s-Dzathotmaildotfr Software Link: www.qq.com Version: QQPlayer 2.3.696.400p1 Tested on: Windows XP sp2 CVE : Notes: Working with...

CMS Ignition SQL Injection Exploit

No description provided by source. |------------------------------------------------| | neavorc@gmaildotcom | ================================================== + SQL Injection Vulnerability + Dorks: allinurl:shop.htm?shopMGID= + Bug in shop.htm?shopMGID + Exploit:...

WordPress VideoWhisper Video Presentation plugin <= 1.1 - SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress VideoWhisper Video Presentation plugin = 1.1 SQL Injection Vulnerability Date: 2011-09-02 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link:...

LiteRadius <= 3.2 - Multiple Blind SQL Injection Vulnerabilities

No description provided by source. Exploit Title: LiteRadius = 3.2 - Multiple Blind SQL Injection vulnerabilities Google Dork: allinurl: locator.php?long= Date: 7/12/2011 Author: Robert Cooper adminatwebsiteauditing.org Software Link: http://www.escaperadius.com/er/products/literadius/lr.php Test...

FathFTP 1.8 (EnumFiles Method) ActiveX Buffer Overflow (SEH)

No description provided by source. html object classid='clsid:62A989CE-D39A-11D5-86F0-B9C370762176' id='target'/object script language='vbscript' ' Exploit Title: FathFTP 1.8 SEH EnumFiles ActiveX Buffer Overflow ' Author: MadjiX ' Software Link: http://www.fathsoft.com/fathftp.html ' Version 1.7...

SantriaCMS - SQL Injection Vulnerability

No description provided by source. I Think, I can, But i'm just loser Author : Troy Date : Thursday, Dec 08, 2011 Location : /home/troy -------- CMS info ----------- Vendor : http://www.jasawebsitemurah.info/cms/ Exploit title : SantriaCMS SQL Injection Vulnerability Dork : view.php?idArtikel=...

boastMachine 3.1 - Remote File Upload Vulnerability

No description provided by source. :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: Exploit Title : boastMachine v3.1 Remote File Upload Vulnerability Author: alnjm33 Software Link: http://boastology.com/pages/dload.php?id=bmachine-3.1.zip Software...

Immunity Debugger 1.85 - Stack Overflow Vulnerabil?ity (PoC)

No description provided by source. / Filename : CrashPOC.cpp Exploit Title: title Date: 20 March 2014 Exploit Author: Veysel HATAS [email protected] - Web Page : www.binarysniper.net Vendor Homepage: https://www.immunityinc.com/ Software Link: https://www.immunityinc.com/products-immdbg.shtml...

Zyxware Health Monitoring System - Multiple Vulnerabilities

No description provided by source. Exploit Title: Zyxware Health Monitoring System Multiple Vulnerability Google Dork: Inurl:maps/layers.php?bdywidth= and more Date: 07 Sep 2013 Vendor Homepage: http://www.zyxware.com/ Software Link: https://github.com/zyxware/Zyxware-Health-Monitoring-System/...

iSO Filer Lite 2.1.0 - Directory Traversal

No description provided by source. Exploit Title: Filer Lite v2.1.0 for iPhone / iPod touch, Directory Traversal Date: 02/24/2011 Author: R3d@l3rt, Sp@2K, Sunlight, H@ckk3y Software Link : http://itunes.apple.com/kr/app/filer-lite-download-view-manage/id350939597?mt=8 Version: 2.1.0 Tested on:...

VLC Player 2.0.8 (.m3u) - Local Crash PoC

No description provided by source. Exploit Title: VLC Player 2.0.8 = Local Crash PoC Vendor URI: http://www.videolan.org/vlc/ Vendor Description: VLC is a free and open source cross-platform multimedia player and framework that plays most multimedia files as well as DVD, Audio CD, VCD, and variou...

SOOP Portal Raven 1.0b SQL Injection Vulnerability

No description provided by source. Exploit Title: SOOP Portal Raven 1.0b sql injection Google Dork: Powered by SOOP Portal Raven 1.0b Date: date Author: Evil-Thinker Version: Raven 1.0b Tested on: Windows Soft Technologie : ASP.net Exploit Details :...

Traidnt UP - Cross-Site Request Forgery Add Admin Account

No description provided by source. Exploit Title: Traidnt UP - CSRF Add Admin Account Date: 24-09-2010 Author: G0D-F4Th3r Software Link: http://www.traidnt.net Software Download: http://traidntup.googlecode.com/files/Traidnt%20up%20V3.0.zip Version: 3.0 Exploit html body onload=javascript:fireFor...

WordPress Occasions Plugin 1.0.4 - CSRF Vulnerability

No description provided by source. html !-- Exploit Title: WordPress Occasions Plugin 1.0.4 CSRF Google Dork: inurl:/wp-content/plugins/occasions Date: 18.03.2013 Exploit Author: m3tamantra http://m3tamantra.wordpress.com/blog Vendor Homepage: http://wordpress.org/extend/plugins/occasions/ Softwa...

AudioTran 1.4.2.4 SafeSEH+SEHOP Exploit

No description provided by source. Exploit Title: AudioTran SafeSEH+SEHOP all-at-once attack method exploit Date: 2010.10.1 Author: x90c Software Link: http://www.exploit-db.com/application/14961/ Version: 1.4.2.4 Tested on: - MS Win xp sp3 pro ko SafeSEH - MS Win xp sp3 pro en SafeSEH - MS Win...

Axous 1.1.1 - Multiple Vulnerabilities (CSRF - Persistent XSS)

No description provided by source. +-----------------------------------------------------------------------------------------------------------+ Exploit Title : Axous 1.1.1 Multiple Vulnerabilities CSRF - Persistent XSS Date : 30-04-2012 Author : Ivano Binetti http://www.ivanobinetti.com Software...

Create a New User with UID 0 - ARM (Meta)

No description provided by source. Exploit Title: Linux/ARM - Create a new user with UID 0 MSF Date: 2010-11-25 Author: Jonathan Salwan - twitter @jonathansalwan Tested on: ARM926EJ-S rev 5 v5l Issue link: https://metasploit.com/redmine/issues/3254 This file is part of the Metasploit Framework an...