CVE-2008-5756

Buffer overflow in BreakPoint Software Hex Workshop 5.1.4 allows user-assisted attackers to cause a denial of service and possibly execute arbitrary code via a long mapping reference in a Color Mapping .cmap file...

Hex Workshop 5.1.4 (Color Mapping File) Local Buffer Overflow PoC

No description provided by source. Hex Workshop 5.1.4 Color Mapping File Local Buffer Overflow Poc other versions are affected By:Encrypt3d.M!nd Merry Christmas & Happy New Year 2009 Greetz:-=Mizo=-Perra :-l,L!0N,El Mariachi,MiNi SpIder,GGY,and all my friends Just import enc.cmap From ToolsColor...

Hex Workshop 5.1.4 - Color Mapping File Local Buffer Overflow (PoC)

Hex Workshop 5.1.4 - Color Mapping File Local Buffer Overflow PoC Hex Workshop 5.1.4 Color Mapping File Local Buffer Overflow Poc other versions are affected By:Encrypt3d.M!nd Merry Christmas & Happy New Year 2009 Greetz:-=Mizo=-Perra :-l,L!0N,El Mariachi,MiNi SpIder,GGY,and all my friends Just...

Hex Workshop 5.1.4 (Color Mapping File) Local Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ================================================================= Hex Workshop 5.1.4 Color Mapping File Local Buffer Overflow PoC ================================================================= Hex Workshop 5.1.4 Color Mapping File Local Buffer...

Hex Workshop 5.1.4 - Color Mapping File Local Buffer Overflow (PoC)

Hex Workshop 5.1.4 Color Mapping File Local Buffer Overflow Poc other versions are affected By:Encrypt3d.M!nd Merry Christmas & Happy New Year 2009 Greetz:-=Mizo=-Perra :-l,L!0N,El Mariachi,MiNi SpIder,GGY,and all my friends Just import enc.cmap From ToolsColor Mapping And See What Happen ^^ I...

Autodesk DWF Viewer Control / LiveUpdate Module Remote Exploit

Exploit for unknown platform in category remote exploits ============================================================== Autodesk DWF Viewer Control / LiveUpdate Module Remote Exploit ============================================================== !-- Autodesk DWF Viewer Control / LiveUpdate Module...

Autodesk DWF Viewer Control / LiveUpdate Module - Remote Code Execution

!-- Autodesk DWF Viewer Control / LiveUpdate Module remote code execution exploit by Nine:Situations:Group::bruiser site: http://retrogod.altervista.org/ tested against IE6 tested software: Revit Architecture 2009 sp2 Autodesk Design Review 2009 which also comes with Revit dll settings both: RegK...

Stash 1.0.3 Multiple SQL Injection Vulnerabilities

No description provided by source. Stash v1.0.3 Admin bypass / Remote File Disclosure AUTHOR : IRCRASH R3d.W0rm Sina Yazdanmehr Discovered by : IRCRASH R3d.W0rm Sina Yazdanmehr Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash - R3d.w0rm Sina Yazdanmehr Download :...

LiteNews <= 0.1 (id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================= LiteNews = 0.1 id Remote SQL Injection Vulnerability ======================================================= litenews-01 = 1.2 Remote sql injection Download :...

Outpost Security Suite Pro文件名解析安全绕过漏洞

BUGTRAQ ID: 30347 CNCAN ID：CNCAN-2008072305 Outpost Security Suite Pro是一款集合反病毒和反木马功能的专业防火墙安全套装。 Outpost Security Suite Pro处理文件名存在问题，远程攻击者可以利用漏洞绕过扫描，导致恶意程序在系统上信任执行。 特殊字符构建的文件名可绕过病毒保护，导致恶意文件不被检测到，另外使用特殊的字符构建文件名，可导致运行时不被防火墙阻止。 Outpost Security Suite Pro 目前没有解决方案提供：...

IPSwitch IMail Server &lt;= 8.1 Local Password Decryption Utility

No description provided by source. / IpSwitch IMail Server = ver 8.1 User Password Decryption by Adik netmaniac hotmail KG IpSwitch IMail Server uses weak encryption algorithm to encrypt its user passwords. It uses polyalphabetic Vegenere cipher to encrypt its user passwords. This encryption sche...

Pidgin MSN协议文件名处理拒绝服务漏洞

BUGTRAQ ID: 29956 Pidgin是支持多种协议的即时通讯客户端。 Pidgin的libpurple/protocols/msnp9/slplink.c文件中的msnslplinkprocessmsg函数在处理MSN P2P文件传输请求时存在使用后释放漏洞，如果用户受骗接收了带有特制文件名的文件的话，就会引用之前已经释放的内存，导致拒绝服务。 Pidgin 2.4.1 Pidgin ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://pidgin.im/pidgin/home/ 创建包含有以下字符的文件...

Cartweaver 3 (prodId) Remote Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl Cartweaver 3 PHP Blind SQL Injection Substring Vulnerability Bug by: h0yt3r Dork: n/a brainusing required Releasing it to the public No error messages are being returned. Exploit need a vaild Product ID! SQL Injection:...

JAMM CMS (id) Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================ JAMM CMS id Remote Blind SQL Injection Exploit ================================================ !/usr/bin/perl JAMM CMS id Blind SQL Injection Vulnerability Bug by: h0yt3r Dork: "powered by...

Teach you clever with a text editor find system vulnerabilities-vulnerability warning-the black bar safety net

Although Kaspersky, rising and other security software can help us to find the vulnerabilities, but today the editor to introduce a method to find loopholes in the new method: use a hexadecimal editor to find the vulnerability. A hex Editor can be used to check and repair various files, recover...

BlogMe PHP 1.1 - comments.php SQL Injection

BlogMe PHP 1.1 - comments.php SQL Injection + BlogMe PHP remote SQL injection exploit + Script download : http://www.drumster.net/gamma/downloads/BlogMe11.zip + Founded by : His0k4 ALGERIAN HaCkEr + Greetz : All friends & muslims HaCkeRs... + Dork : "BlogMe PHP created by Gamma Scripts" + Exploit...

Breakthrough SQL injection limit of a little thought-vulnerability warning-the black bar safety net

Suddenly wonder if we can use what method to bypassSQL injectionlimit? Online to study a bit, and the method mentioned most of them are for AND with“'”and“=”, filter breakthrough, although a little progress, but still there are some keyword is not a bypass, because I don't ofteninvasionsite so di...

gamingdir-sql.txt

--==+================================================================================+==-- --==+ Gaming Directory 1.0 SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovered On: 5 April 2008...

Gaming Directory 1.0 - 'cat_id' SQL Injection

--==+================================================================================+==-- --==+ Gaming Directory 1.0 SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovered On: 5 April 2008...

famp3-sql.txt

FaScript FaMp3 v1 Remote Sql Injection BY IRCRASH AUTHOR : IRCRASH Dr.Crash Script Download : http://www.fascript.com/persian.rar Injection Adress : http://127.0.0.1/famp3/show.php?id= Help : In This Script Admin Username and Password Save in ./admin/pconfig.php You can open this file with loadfi...