CMSLogik 1.2.1 (upload_file_ajax()) Shell Upload Exploit

Summary CMSLogik is built on a solid & lightweight framework called CodeIgniter, and design powered by Bootstrap. This combination allows for greater security, extensive flexibility, and ease of use. You can use CMSLogik for almost any niche that your project might fall into. Description The...

mcrypt 2.5.8 Stack Based Overflow

!/usr/bin/perl Title : mcrypt ', $filename; print F $file; close F; sub buildfile magic $file .= "\x00m\x03"; flags $file .= pack'C', 1 6; algorithm $file .= "H@Ck3d\x00"; keysize $file .= pack'S', 0xdead; mode $file .= "h@cK3d\x00"; keymode $file .= "H@CK3D\x00"; sflags $file .= "\xff"; payload...

MySQL 5.5.8 - Remote Denial of Service

MySQL 5.5.8 - Remote Denial of Service import socket, sys print "\n" print "----------------------------------------------------------------" print "| MySQL 5.5.8 Null Ptr windows |" print "| Level Smash the Stack |" print "----------------------------------------------------------------" print...

Freefloat FTP Server - 'ALLO' Remote Buffer Overflow

source: https://www.securityfocus.com/bid/49265/info Freefloat FTP Server is prone to a buffer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition...

Sagem 3304 Router PPPOE Password Retrieval

!/bin/bash Exploit Title: Sagem 3304 Routers Get PPPOE Password Date 27/07/2011 Author: [email protected] Software Link: null Version: Sagem Routers F@st 3304 Tested on: Sagem F@ST 3304 Usage echo "Usage : $0 IPADDRESS" if "$1" != "" then IPADDRESS="$1" else Usage exit 1 fi USERNAME=wget...

Kaillera Multiple Clients Buffer Overflow Vulnerabilities

Exploit for windows platform in category remote exploits !/usr/bin/perl Exploit Title: Remote Buffer Overflows in Kaillera clients Date: 6/30/11 Author: sil3ntdre4m Software Link: Multiple: 1. Kaillera original client: An emulator to download with this client bundled with it is Project64K 0.13:...

Php-Nuke (modules.php id) SQL Injection Exploit (.py)

Exploit for php platform in category web applications ===================================================== Php-Nuke modules.php id SQL Injection Exploit .py ===================================================== !/usr/bin/env python -- coding:cp1254 -- Php-Nuke modules.php id SQL Injection Exploi...

MP3 Cutter 1.5 Denial Of Service

" Legion of Xtremers & Hackers Garage www.loxian.co.cc www.garage4hackers.com MP3 Cutter 1.5 Crash Exploit Author: Prashant a.k.a t3rm!n4t0r c0ntact: [email protected] Greetz to: vinnu, b0nd, fb1h2s, Anarki, Nikhil, D4RK3ST "" exploit.py MP3 cutter Crash Exploit print " MP3 Cutter Crash...

Netvolution CMS 2.x - SQL Injection Script

Netvolution CMS 2.x - SQL Injection Script !/usr/bin/perl Exploit Title: Netvolution exploit script for CMS Version = 2.xx.xx.xx Date: 10/6/2010 Sotware Link: www.netvolution.net Bug found : amquen, krumel Exploited by: krumel Exploit Coded: mr.pr0n Many thanks to icesurfer author of SQLNINJA and...

Netvolution CMS <= 2.x SQL Injection Exploit Script

Exploit for asp platform in category web applications =================================================== Netvolution CMS = 2.xx.xx.xx Date: 10/6/2010 Sotware Link: www.netvolution.net Exploited by: krumel Exploit Coded: mr.pr0n Many thanks to icesurfer author of SQLNINJA and all p0wnbox members....

Boutique SudBox 1.2 Cross Site Request Forgery

======================================================================================== | Title : Boutique SudBox 1.2 Changer Login et Mot de Passe CSRF Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com/vb | Tested on: windows SP2 Français V.Pnx2 2.0 ...

Excitemedia CMS - SQL Injection

Excitemedia CMS - SQL Injection !/usr/bin/perl -w Excitemedia CMS Sql injection vulnerability + Author : Dr.0rYX AND Cr3W-DZ + Greetz : HIS0K4 - claw and all the other friends + inurl:”galleryimage.php?imageid=” + Vendor: http://www.excitemedia.com.au + sell script with host print "\t\t|...

MusicBox v 3.3 SQL Injection Exploit

Exploit for php platform in category web applications ==================================== MusicBox v 3.3 SQL Injection Exploit ==================================== !/usr/bin/perl use LWP::Simple; print "\n"; print "\n"; print " MusicBox v 3.3 SQL INJECTION EXPLOIT \n"; print " Author: Ctacok...

MusicBox 3.3 - SQL Injection

MusicBox 3.3 - SQL Injection !/usr/bin/perl use LWP::Simple; print "\n"; print "\n"; print " MusicBox v 3.3 SQL INJECTION EXPLOIT \n"; print " Author: Ctacok Russian \n"; print " Special for Antichat forum.antichat.ru and xakep.ru \n"; print "\n"; print "\n Usage: exploit.pl host path "; print "\...

MKPortal Anekdot Cross Site Scripting

========================================= MKPortal Anekdot module XSS Vulnerability ========================================= The largest Exploit Database in the world ! 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/...

Millenium MP3 Studio 2.0 - .m3u Local Buffer Overflow

Millenium MP3 Studio 2.0 - .m3u Local Buffer Overflow + Vulnerability : .m3u File Local Stack Overflow Universal Exploit SEH + Product : Millenium MP3 Studio + Versions affected : v2.0 + Download : http://www.software112.com/products/mp3-millennium+download.html + Method : seh + Tested on : Windo...

BaBB 2.8 Code Injection

!usr/bin/python BaBB 2.8 Full Code Injection Exploit AUTHOR : Sina Yazdanmehr R3d.W0rm Discovered by : Sina Yazdanmehr R3d.W0rm Our Site : http://IrCrash.com My Official WebSite : http://R3dW0rm.ir IRCRASH Team Members : Khashayar Fereidani - R3d.w0rm Sina Yazdanmehr Download :...

BaBB 2.8 Remote Code Injection Exploit

Exploit for unknown platform in category web applications ====================================== BaBB 2.8 Remote Code Injection Exploit ====================================== !usr/bin/python BaBB 2.8 Full Code Injection Exploit Download :...

BaBB 2.8 Remote Code Injection Exploit

No description provided by source. !usr/bin/python BaBB 2.8 Full Code Injection Exploit AUTHOR : Sina Yazdanmehr R3d.W0rm Discovered by : Sina Yazdanmehr R3d.W0rm Our Site : http://IrCrash.com My Official WebSite : http://R3dW0rm.ir IRCRASH Team Members : Khashayar Fereidani - R3d.w0rm Sina...

Zen Cart 1.3.8 Remote Code Execution Exploit

No description provided by source. !/usr/bin/php ?php ------- Zen Cart 1.3.8 Remote Code Execution http://www.zen-cart.com/ Zen Cart Ecommerce - putting the dream of server rooting within reach of anyone! A new version 1.3.8a is avaible on http://www.zen-cart.com/ BlackH : errorreportingEALL ^...