JBC Explorer <= 7.20 RC 1 Remote Code Execution Exploit

No description provided by source. !/usr/bin/php ?php errorreportingEALL ^ ENOTICE; head; if$argc 3 usage; $url = getparam'url', true; $prx = getparam'proxy', false; $pra = getparam'proxyauth', false; $cod = 'eval$SERVERHTTPSHELL;'; $xpl = new phpsploit; $xpl-agent'Mozilla Firefox';...

Jack De Winter WinSMTP 1.6 f/2.0 - Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1680/info A number of unchecked buffers exist in the SMTP and POP3 components of Jack De Winter's WinSMTP mail daemon which could lead to denial of service attacks or arbitrary code execution, depending on the data entere...

DubSite CMS 1.0 - CSRF Vulnerability

No description provided by source. Pentest Information: ==================== Connection has discovered a Cross Site Request ForgeryCSRF vulnerability in DubSite CMS v1.0 Details ======= Tested on OS: Windows XP Tested with Software: Mozilla Firefox 3.5.x Vulnerable Products: DubSite CMS Affected...

MyTickets 1 to 2.0.8 Blind SQL Injection

No description provided by source. ?php / --------------------------------------------------------------- MyTickets = Remote Blind SQL Injection Exploit by al-swisre --------------------------------------------------------------- author...............: al-swisre mail.................:...

Linux Kernel <= 2.2.25, <= 2.4.24, <= 2.6.2 - "mremap()" Local Proof-of-Concept (2)

No description provided by source. / Proof-of-concept exploit code for domremap 2 Copyright C 2004 Christophe Devine This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either versi...

Painkiller <= 1.35 in-game cd-key alpha-numeric Buffer Overflow Exploit

No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h include time.h / Painkiller packet's password encoder/decoder 0.1 by Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org INTRODUCTION ============ When you want to...

Qutecom Softphone 2.2.1 Heap Overflow DoS/Crash Proof of Concept

No description provided by source. Title: Qutecom Cross-platform, open source softphone Heap Overflow DoS/Crash Proof of Concept Date: 14th June 2012 Exploit Author: Debasish Mandal Author's Blog : http://www.debasish.in/ Vendor Homepage: http://qutecom.org/ Software Link:...

X11R6 <= 6.4 XKEYBOARD - Local Buffer Overflow Exploit (sco/x86)

No description provided by source. / X11R6 XKEYBOARD extension Strcmp for SCO UnixWare 7.1.3 x86 Copyright 2006 RISE Security [email protected], Ramon de Carvalho Valle [email protected] This program is free software; you can redistribute it and/or modify it under the terms of the GNU...

Galatolo Web Manager <= 1.0 - Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w Portal : Galatolo WebManager 1.0 exploit aported password crypted exploit tatjibe password mcrypté :d mgharba :d:d:d:d Founded & Exploited by : Stack Contact: Ev!L = see down Greetz : Houssamix & Djekmani & Jadi & Simo64 & iuoisn & All muslims...

NOKIA Siemens FlexiISN 3.1 - Multiple Auth Bypass Vulnerabilities

No description provided by source. NOKIA Siemens FlexiISN GGSN Multiple Authentication bypass Vulnerability: NOKIA Siemens FlexiISN Remote: Yes Local: No Class: Input Validation Error Critical: Moderately critical OS : FlexiISN GGSN FISN 3.1 URL 1 for bypassing authentication on AAA Configuration...

Ventrilo <= 2.3.0 - Remote Denial of Service Exploit (all platforms)

No description provided by source. / by Luigi Auriemma Windows compiled version: http://aluigi.altervista.org/poc/ventboom.zip /str0ke / include stdio.h include stdlib.h include string.h / Ventrilo UDP status algorithm 0.1 by Luigi Auriemma e-mail: [email protected] web:...

phf buffer overflow exploit for Linux-x86

No description provided by source. / | phx.c -- phf buffer overflow exploit for Linux-ix86 | Copyright c 2000 by proton. All rights reserved. | | This program is free software; you can redistribute it and/or modify | it under the terms of the GNU General Public License as published by | the Free...

LuxCal 3.2.2 - Multiple Vulnerabilities (CSRF/Blind SQL Injection)

No description provided by source. + Author: TUNISIAN CYBER + Exploit Title: LuxCal v3.2.2 CSRF/Blind SQL Injection Vulnerabilities + Date: 09-03-2014 + Category: WebApp + Tested on: KaliLinux/Windows 7 Pro + CWE: CWE-352/CWE-89 + Vendor: http://www.luxsoft.eu/ + Friendly Sites:...

Microsoft Visual Studio .NET msdds.dll Remote Code Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14594/info Microsoft Visual Studio .NET is prone to a vulnerability that could allow remote arbitrary code execution. This is due to a buffer overflow that is exposed during COM object instantiation. The list of vulnerabl...

Data General DG/UX 5.4 inetd Service Exhaustion Denial of Service

No description provided by source. source: http://www.securityfocus.com/bid/1071/info A Denial of service DoS attack is possible with the default version of inetd distributed with Data General's DG/UX operating system. By performing a scan utilizing nmap's OS detection option -O, the inetd daemon...

DG/UX 4.20 lpsched Long Error Message Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2509/info DGUX is the Data General revision of UNIX. It is designed as a solution for Intel systems produced by Data General. A problem in the handling of error messages by the printer scheduler could allow arbitrary...

Cisco/Protego CS-MARS < 4.2.1 (JBoss) Remote Code Execution Exploit

No description provided by source. !/usr/bin/perl Cisco/Protego CS-MARS 4.2.1 remote command execution, system compromise via insecure JBoss installation. Fully functional POC code by Jon Hart [email protected] Addressed in CSCse47646 CS-MARS is an event correlation product orginally written by...

Crafty Syntax Image Gallery <= 3.1g Remote Code Execution Exploit

No description provided by source. !/usr/bin/perl This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or at your option any later version. This...

Linux Kernel 2.4/2.6 - sock_sendpage() Local Root Exploit (PPC Edition)

No description provided by source. / Linux socksendpage NULL pointer dereference Copyright 2009 Ramon de Carvalho Valle [email protected] This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Softwar...

glibc and eglibc 2.5, 2.7, 2.13 - Buffer Overflow Vulnerability

No description provided by source. / Exploit-DB Note: Reportedly does not work. See output at the bottom of the entry. $FILE: bug-mangle.c Comment: Proof of concept $VERSION$ Author: Hector Marco [email protected] Ismael Ripoll [email protected] $LICENSE: This program is free software; you can...