Mozilla Browser 0.8/0.9/1.x Refresh Security Property Spoofing Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10796/info Mozilla and Firefox may permit malicious Web pages to spoof security properties of a trusted site. An attacker can exploit this issue to spoof the URI and SSL certificate of a site trusted by an unsuspecting...

Microsoft Works 7 WkImgSrv.dll WKsPictureInterface() ActiveX Exploit

No description provided by source. $Id: msworkswkspictureinterface.rb 10477 2010-09-25 11:59:02Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

MKPortal 1.0/1.1 Admin.PHP Authentication Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/25515/info MKPortal is prone to an authentication-bypass vulnerability because it fails to restrict access to certain administrative functions. Attackers can exploit this issue to gain unauthorized access to the...

AOL Instant Messenger AIM "Away" Message Remote Exploit

No description provided by source. / CAN-2004-0636 / / AIM Away Message Buffer Overflow Exploit Exploit by John Bissell A.K.A. HighT1mes Exploit: ======== drizzit.c Vulnerable Software: ==================== - AIM 5.5.3588 - AIM 5.5.3590 Beta - AIM 5.5.3591 - AIM 5.5.3595 and a couple others...

Pandora FMS 3.2.1 - Cross Site Request Forgery

No description provided by source. Exploit Title: Pandora FMS v3.2.1 Cross Site Request Forgery Google Dork: intitle:Pandora FMS - the Flexible Monitoring System intext:Your IP Date: 12-07-2011 Author: Mehdi Boukazoula Software Link: http://pandorafms.org/ Version: v 3.2.1 Tested on: v = 3.2.1...

MS14-012 Internet Explorer TextRange Use-After-Free

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "MS14-012 Internet Explorer TextRange Use-After-Free", 'Description' = %q This module exploits a use-after-free vulnerability found in...

Apple Quicktime 7 Invalid Atom Length Buffer Overflow

This module exploits a vulnerability found in Apple Quicktime. The flaw is triggered when Quicktime fails to properly handle the data length for certain atoms such as 'rdrf' or 'dref' in the Alis record, which may result a buffer overflow by loading a specially crafted .mov file, and allows...

RealPlayer 16.0.0.282 (.html) Memory Corruption

Exploit for windows platform in category dos / poc Title : RealPlayer 16.0.0.282 .html Memory Corruption Date: 2013-02-18 Softwares Link: http://fr.real.com/realplayer/ phone : +447024073406 Author: The Black Devils Tested on: Windows XP SP2 Home: www.arab47.com Greeting To : 3xp1r3 Cyber Army...

Weboptima CMS Add Administrator / Shell Upload

cs 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Attackers Targeting Windows Media Bug With Malware

Security researchers have seen attackers going after the newly patched CVE-2012-0003 vulnerability in the Windows Media Player. The flaw, which was patched earlier this month by Microsoft, is a critical one that can enable remote code execution, and it affects a wide range of Windows systems. Whe...

InverseFlow 2.4 - Cross-Site Request Forgery (Add Admin)

InverseFlow 2.4 - Cross-Site Request Forgery Add Admin + Exploit Title: InverseFlow v2.4 CSRF Vulnerabilities Add Admin User + Version : 2.4 + Author : EjRaM HaCkEr + Contact : m2z9.cn + Dork : inurl:"ticket.php?cmd=lost" + Software Link : http://asria.info/download/script/inverseflow.zip...

Internet Explorer6 DOS(2011-6-7)

No description provided by source. html body onload=”location.reload” script function Demo var a = document.createElement‘table’; var b = document.createElement‘frameset’; a.appendChildb; Demo; /script /body /html http://www.huimaozi.net/?p=139...

Mozilla Firefox (all) Crash Handler Vulnerabilities

Exploit for windows platform in category dos / poc =============================================================================== Title : Mozilla Firefox all Crash Handler Vulnerabilities Author : KedAns-Dz E-mail : email protected Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter :...

Mozilla Firefox 3.6 - URL Spoofing

Tested on: Windows XP SP2/3 Code : You can trick a user into accessing a malicious website by using the following exploit The first link would be the malicious one. http://www.yahoo.com...

Microsoft Internet Explorer 8.0.7100.0 - Simple HTML Remote Crash (PoC)

Microsoft Internet Explorer 8.0.7100.0 - Simple HTML Remote Crash PoC Veryfied with IE8.0.7100.0 on W7 x64 RC. Any comments reaseon? dangerous? ... are welcome. schnuddelbuddel milw0rm.com 2009-08-05...

MW6 Barcode ActiveX (Barcode.dll) Reamote Heap Overflow PoC

No description provided by source. html ----------------------------------------------------------- br/ Author : Houssamix br/ ----------------------------------------------------------- br/ MW6 Barcode ActiveX Barcode.dll Reamote Heap Overflow Poc br/...

1Book Guestbook Script 1.0.1 - Code Execution

1Book Guestbook Script 1.0.1 - Code Execution ========================================================= =============== JIKI TEAM Maroc And YameN =============== ========================================================= Author : jiko email : [email protected] Home : www.no-back.org &...

1Book Guestbook Script Code Execution Vulnerability

Exploit for unknown platform in category web applications =================================================== 1Book Guestbook Script Code Execution Vulnerability =================================================== ========================================================= =============== JIKI TEAM...

Snitz2000 SQL Injection: A user can gain admin level

WwW.BugReport.ir AmnPardaz Security Research & Penetration Testing Group Title: A user can gain admin level in snitz 2000 by SQL Injection vendor: http://forum.snitz.com/ Googling: "Powered by Snitz" 2,440,000 victims Last bug report in 2007-02-16 with 4692 visitors Exploit: Available Fix...

snitz-sql.txt

WwW.BugReport.IR AmnPardaz Security Research & Penetration Testing Group Title: A user can gain admin level in snitz 2000 by SQL Injection vendor: http://forum.snitz.com/ Googling: "Powered by Snitz" 2,440,000 victims Last bug report in 2007-02-16 with 4692 visitors Exploit: Available Fix...