Photodex ProShow Gold 4 (.psh File) Universal BOF Exploit XP SP3 (SEH)

No description provided by source. + Vulnerability : ProShow Gold 4 BOF + Detected by : Bkis - http://blog.bkis.com/?p=737 Sploit coded by : corelanc0d3r corelanc0d3ratgmaildotcom Sploit coded on : August 20, 2009 Type : local OS : Windows Product : Photodex ProShow Gold Versions affected : 4.0...

Lanai Core 0.6 Remote File Disclosure / Info Disclosure Vulns

No description provided by source. Lanai Core v 0.6 Remote File Disclosure / IG AUTHOR : Sina Yazdanmehr R3d.W0rm Discovered by : Sina Yazdanmehr R3d.W0rm Our Site : http://IrCrash.com My Official WebSite : http://R3dW0rm.ir IRCRASH Team Members : Khashayar Fereidani - R3d.w0rm Sina Yazdanmehr...

Facebook Attack: Personal Info Theft via CSRF

This video is a demonstration of an attack exploiting a vulnerability in Facebook. It is a companion video to this blog post quaji.com that describes and discusses the hack. In a nutshell, a Facebook user’s personal is stolen. The only thing he does is view a regular, legitimate forum site...

HTML Email Creator & Sender 2.3 - Local Buffer Overflow (PoC) (SEH)

/0day HTML Email Creator & Sender v2.3 Local Buffer OverflowSeh Poc Debugging info Seh handler is overwriten , the offset is at 60 bytes in our buffer so you have to build your buffer as follows: PONTER TO NEXT SEH-------SEH HANDLER----NOP------SHELLCODE | | | | JMP 4 bytes POP POP RET 500x90...

DS CMS 1.0 SQL Injection

======================================================= +++++++++++++++++++ information +++++++++++++++++++++++ ======================================================= + Script :DS CMS 1.0 nFileId Remote SQL Injection Vulnerability + Script site : http://cms.dsinternal.com/Home + D0rk : Copyright...

DS CMS 1.0 - nFileId SQL Injection

DS CMS 1.0 - nFileId SQL Injection ======================================================= +++++++++++++++++++ information +++++++++++++++++++++++ ======================================================= + Script :DS CMS 1.0 nFileId Remote SQL Injection Vulnerability + Script site :...

In-Portal 4.3.1 Local File Inclusion

Securitylab.ir Application Info: Name: In-Portal Version: 4.3.1 Website: http://www.in-portal.net Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & [email protected] Vulnerability Info: Type: Local File Inclusion Vulnerability Risk: Medium...

CVE-2009-2606

ASP Football Pool 2.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for NFL.mdb...

CVE-2008-6872

ASPThai.NET ASPThai Forums 8.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/aspthaiForum.mdb...

Wmshop Premium Database Config Disclosure

Cyber-Warrior & Security TIM - Bug Researchers Group Application Name : Wmshop Premium v.8.1 - 12.0 - 13.0 Vulnerable Type : Arbitrary Database Config Disclosure Vulnerability Infection : SQL Info Get... Author : Septemb0x Script Down.& WebSite : http://s2.dosya.tc/wmshop12.rar.html -...

Valentina Cookie Handling Privilege Escalation

Cyber-Warrior & Security TIM - Bug Researchers Group Application Name : Valentina Vulnerable Type : Cookie Handling Vulnerebility Infection : SQL Info GET... Author : Septemb0x Script Down.& WebSite : http://s2.dosya.tc/valentina.zip.html - http://www.valya.ru Cyber-Warrior & Security TIM - Bug...

Knigman Shop Script Database Config Disclosure

Application Name : Knigman Shop Script Vulnerable Type : Arbitrary Database Config Disclosure Vulnerability Infection : SQL Info Get... Author : Septemb0x Script Down.& WebSite : http://knigman.net/buy.php?tovid=22764 & http://s2.dosya.tc/knigman.zip.html EXPLOIT : http://target/path/config.inc G...

ILIAS LMS <= 3.9.9/3.10.7 Arbitrary Edition/Info Disclosure Vulns

No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ME VOY A LA PLAYA!...QUE CALOoOoOoR!...Lo0oL Ä„PROUD TO BE SPANISH! ------------------------------------...

Admin News Tools 2.5 (fichier) Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications =================================================================== Admin News Tools 2.5 fichier Remote File Disclosure Vulnerability ===================================================================...

Big Sister File Exchange Server 0.03 Disclosure

Application Name : Big Sister File Exchange Server 0.03 Vulnerable Type : Arbitrary Db Config Download Vulnerability Infection : SQL Info Get... Author : Septemb0x Script Down.& WebSite : http://sourceforge.net/projects/bigsifes/files/bigsifes/bigsifes-0.03.tgz EXPLOIT : http://target/path/config...

Microsoft DirectShow MPEG2TuneRequest Stack Overflow Exploit-vulnerability warning-the black bar safety net

The legendary rate is 6 0 per cent. Source: Xeye Microsoft DirectShow presence may be remotely exploitable stack overflow vulnerability. The key code is as follows: -------------------------The following contents are in danger, only for research use-------------- var appllaa='0'; var...

YourTube 2.0 Database Disclosure

exploit : YourTube info : http://www.ac4p.com //= DORK: "powered by yourtube" //= found by: Security Code Team - thanks for sniper code and Qabandi -- //= our home: WwW.Sec-Code.com //= greats 4 our members in our home -- /// // - Upload this file to Apache server and fill victim site in the feil...

CVE-2009-2272

The Huawei D100 stores the administrator's account name and password in cleartext in a cookie, which allows context-dependent attackers to obtain sensitive information by 1 reading a cookie file, by 2 sniffing the network for HTTP headers, and possibly by using unspecified other vectors...

Virtue Online Test Generator XSS / SQL Injection

+===================================================================================+ | | | Virtue Online Test Generator AB/SQL/XSS Multiple Remote Vulnerabilities | | | +===================================================================================+ | | | Author.: HxH | | Contact:...

Sun Solaris Cassini Gigabit-Ethernet设备驱动远程拒绝服务漏洞

Bugraq ID: 35439 Sun Solaris是一款商业性质的操作系统。 Solaris Cassini Gigabit-Ethernet设备驱动和Jumbo帧处理Solaris TCP/IP网络栈存在安全问题，远程攻击者可以利用漏洞对系统进行拒绝服务攻击。 目前没有详细漏洞细节提供。 Sun Solaris 10.0x86 Sun Solaris 10 Sun OpenSolaris build snv82 Sun OpenSolaris build snv80 Sun OpenSolaris build snv78 Sun OpenSolaris build snv77 S...