OpenMyZip 0.1 .ZIP Buffer Overflow

!/usr/bin/perl +Exploit Title: OpenMyZip V0.1 .ZIP File Buffer Overflow Vulnerability +Date: 02\05\2011 +Author: C4SS!0 G0M3S +Software Link: http://download.cnet.com/OpenMyZip/3000-22504-10657274.html +Version: v0.1 +Tested On: WIN-XP SP3 Brazil Portuguese +CVE: N/A use strict; use warnings; my...

Brainee Creations SQL Injection

+Exploit Title: Brainee Creations Database Access vulnerability +Author : ^Xecuti0n3r + Date : 15.04.2011 + Hour : 13:37 PM + E-mail : xecuti0n3ryahoo.com + dork1 : intext:"Site Designed by Brainee Creations" inurl:product.php? + dork2 : intext:"Site Designed by Brainee Creations" inurl:page.php?...

Vallen Zipper 2.30 - .zip Heap Overflow

Vallen Zipper 2.30 - .zip Heap Overflow !/usr/bin/perl +Exploit Title: Vallen Zipper V2.30 .ZIP File Heap Overflow +Date: 11\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.vallen.de/freeware/vzsetup.exe +Version: 2.30 +Tested On: WIN-XP SP3 Brazil Portuguese +CVE: N/A use strict; use...

Banner Ad Management Script - SQL Injection

Exploit Title : Banner Ad Management Script Sql Injection Vulnerability + Author : Egyptian.H4x0rz + Contact : SpYatHotmail.Com + Date : 02-04-2011 + Software Link: http://www.softbizscripts.com/banner-ads-management-script-features.php + category: Web Apps SQli + HomePage : Black-hat.cc...

Word List Builder 1.0 Buffer Overflow

Exploit Title: Word List Builder Buffer Overflow ExploitSEH Software Link: http://download.cnet.com/Word-List-Builder/3000-185414-10398336.html Version: 1.0 triggering details : open .dic file Tested on: Win XP SP3 French Date: 31/03/2011 Author: h1ch4m Hicham Oumounid Email: [email protected] Home:...

GOM Media Player 2.1.6.3499 Denial Of Service

!/usr/bin/perl +Exploit Title: GOM Media Player 2.1.6.3499 0day Buffer overflow/DOS Exploit +Software Link: download.cnet.com/GOM-Media-Player/3000-21394-10701768.html +Software : GOM Media Player +Version : 2.1.6.3499 +Tested On : WIN-XP SP3 + Date : 31.03.2011 + Hour : 3:37 PM Similar Bug was...

GOM Media Player 2.1.6.3499 - Buffer Overflow (Denial of Service) (PoC)

!/usr/bin/perl +Exploit Title: GOM Media Player 2.1.6.3499 0day Buffer overflow/DOS Exploit +Software Link: download.cnet.com/GOM-Media-Player/3000-21394-10701768.html +Software : GOM Media Player +Version : 2.1.6.3499 +Tested On : WIN-XP SP3 + Date : 31.03.2011 + Hour : 3:37 PM Similar Bug was...

If-CMS 2.07 Local File Inclusion

!/usr/bin/python INFORMATION Exploit Title: If-CMS 2.07 Pre-Auth Local File Inclusion 0day Exploit Author: TecR0c Date: 13/3/2011 Software link: http://bit.ly/hh9ZB4 Tested on: Linux bt Version: 2.07 PHP.ini Settings: gpcmagicquotes = Off import...

N`CMS 1.1E Pre-Auth Local File Inclusion Remote Code Exploit

Exploit for php platform in category web applications !/usr/bin/python INFORMATION Exploit Title: NCMS 1.1E Pre-Auth Local File Inclusion Remote Code Exploit Date: 11/3/2011 Software link: http://bit.ly/eJAyw5 Tested on: Linux bt Version: 1.1E PHP.ini Settings: gpcmagicquotes = Off Note: The web...

vTiger CRM 5.0.4 - Local File Inclusion

!/usr/bin/python INFORMATION: Exploit Title: Vtiger CRM 5.0.4 Pre-Auth Local File Inclusion Exploit Google Dork: "The honest Open Source CRM" "vtiger CRM 5.0.4" Date: 5/3/2011 CVE: CVE-2009-3249 Windows link: http://bit.ly/fiOYCL Linux link: http://bit.ly/hluzLf Tested on: Windows XP/Linux Ubuntu...

SnapProof (cart.php) Cross Site Scripting

Exploit Title: SnapProof cart.php Cross Site Scripting Google Dork: inurl:"Created and powered by SnapProof" home : www.D99Y.com Date: 1/3/2011 Author: Difficult 511 Software Link: http://www.snapproof.com/ file : cart.php exploit : http://localhost/cart.php?retPageID= XSS...

iOS myDBLite 1.1.10 - Directory Traversal

iOS myDBLite 1.1.10 - Directory Traversal Exploit Title : myDBLite v1.1.10 for iPhone / iPod touch, Directory Traversal Date: 02/24/2011 Author: R3d@l3rt, Sp@2K, Sp@2K, Sunlight, H@ckk3y Software Link: http://itunes.apple.com/kr/app/mydb-lite/id335521112?mt=8 Version: 1.1.10 Tested on: iPhone, iP...

iOS SideBooks 1.0 - Directory Traversal

Exploit Title: SideBooks v1.0 for iPhone / iPod touch, Directory Traversal Date: 02/22/2011 Author: R3d@l3rt, Sp@2K, Sunlight, Hackkey Software Link: http://itunes.apple.com/kr/app/sidebooks/id409777225?mt=8 Version: 1.0 Tested on: iPhone, iPod 3GS with 4.2.1 firmware There is directory traversal...

Escort Directory CMS SQL Injection

Exploit Title: Escort Directory CMS SQL Injection Vunerability Google Dork: "Powered By Escort Web design" Platform: php Date: 09.02.2011 Author: NoNameMT Software Link: http://www.escortwebsitedesign.co.uk/directory-design/ Price: 750 € Tested on: Windows 7 Mail: [email protected] Homepage:...

Escort Directory CMS - SQL Injection

Escort Directory CMS - SQL Injection Exploit Title: Escort Directory CMS SQL Injection Vunerability Google Dork: "Powered By Escort Web design" Platform: php Date: 09.02.2011 Author: NoNameMT Software Link: http://www.escortwebsitedesign.co.uk/directory-design/ Price: 750 € Tested on: Windows 7...

ActFax Server (LPD/LPR) 4.25 Build 0221 (2010-02-11) - Remote Buffer Overflow

!/usr/bin/perl Exploit Title: ActFax Server LPD/LPR Remote Buffer Overflow Exploit Date: Feb 15, 2011 Author: chap0 Software Link: http://www.actfax.com/download/actfaxsetupen.exe Version: Version 4.25, Build 0221 2010-02-11 Tested on: Windows XP SP3 en Big thanks to Sud0 - and an extra greetz to...

jSchool Advanced SQL Injection Vulnerability

Exploit for php platform in category web applications ----------------------------------------------------------------------- Exploit Title : jSchool Advanced SQL Injection Vulnerability Dork : inurl: "action=profil.main" Found : 15 Jan '11 Author : eXa.DisC Software : jSchool Advanced...

XM Easy Personal FTP Server 5.8.0 (TYPE) Denial Of Service

Exploit for windows platform in category dos / poc !/usr/bin/python Exploit Title : XM Easy Personal FTP Server 5.8.0 Denial Of Service LIST command Date: 10/02/2011 Author: Houssam Sahli Software Link: http://www.dxm2008.com/data/ftpserversetup.exe Version: 5.8.0 Tested on: Windows XP SP3 French...

PHP-CMS 1.2 / 3.0 SQL Injection

Exploit Title : content Management PHPCMS 3.0 Sql Injection Vunerability Author : ThunDEr HeaD Contact : [email protected] Date : 11-01-2011 HomePage : www.indishell.in Version : 1.2 , 3.0 Tested on : PBL Technology Vulnerability Style : PHPCMS Sql Injection Vunerability...

MyMarket 1.71 (index.php) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: MyMarket version 1.71index.php sql Injection Google Dork: allinurl:mymarket/shopping/index.php Date: 7-2-2011 Author: ahmadso Version: 1.71 Tested on: win xp sp2 ====================================================...