VLC 0.9.8a Web UI (input) Remote Denial of Service Exploit

No description provided by source. !/usr/bin/perl VLC 0.9.8a Web UI Remote Stack Overflow DoS by TheLeader GreetZ: forums.hacking.org.il TiP oF TEh DaY: Rock on! = use IO::Socket; my $host = shift || 'localhost'; Target host my $port = shift || 8080; Target port. Default port = 8080 Note: for som...

Talkative IRC 0.4.4.16 Stack Overflow

!/usr/bin/perl Title: Talkative IRC 0.4.4.16 Remote Stack Overflow Exploit SEH Summary: The easiest and fastest way to meet people online. With Talkative IRC you can chat with thousands of people at the same time. Find people with the same interests as you. Join channels where you can meet people...

VLC 0.9.8a Web UI (input) Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ========================================================== VLC 0.9.8a Web UI input Remote Denial of Service Exploit ========================================================== !/usr/bin/perl VLC 0.9.8a Web UI Remote Stack Overflow DoS by TheLeader...

RhinoSoft Serv-U FTP Server 7.4.0.1 - 'SMNT' (Authenticated) Denial of Service

!/usr/bin/perl Soft : FTP Serv-U Version : v7.4.0.1 Denial of Service in Serv-u up to 7.4.0.1 no crash Just the server is saturated, it stops responding. Author: Jonathan Salwan Mail: submit AT shell-storm.org Web: http://www.shell-storm.org use IO::Socket; print "+ Author : Jonathan Salwan \n";...

JDKChat 1.5 Integer Overflow

!/usr/bin/perl Title: JDKChat v1.5 Remote Integer Overflow PoC Summary: JDKChat is a simple C++ chat server for GNU/Linux systems. Users can connect to it through a simple tcp client like telnet. WebSite : http://www.jdkoftinoff.com/ ---------------------------- Demo...

GuildFTPd FTP Server 0.999.14 Remote Delete Files Exploit

No description provided by source. !/usr/bin/perl Exploit: GuildFTPd FTP Server Version 0.x.x Remote Delete Files More detail for the vulnerability = http://secunia.com/advisories/32218/ 2 A vulnerability is caused due to an input validation error when handling FTP "DELE" requests. This can be...

EFS Easy Chat Server 2.2 - Authentication Request Buffer Overflow (Perl)

EFS Easy Chat Server 2.2 - Authentication Request Buffer Overflow Perl !/usr/bin/perl EFS Easy Chat Server Authentication Request Buffer Overflow SEH Reference: http://www.milw0rm.com/exploits/8142 Tested in Windows XP Pro SP2-3 Coded by Dr4sH Bruno F. Contact: dr4shathotmaildotcom Thankz: His0ka...

Yaws 1.80 - Multiple Headers Remote Denial of Service Vulnerabilities

Yaws 1.80 - Multiple Headers Remote Denial of Service Vulnerabilities !usr/bin/perl -w Yaws before 1.80 allows remote attackers to cause a denial of service memory consumption and crash via a request with a large number of headers. Refer: http://yaws.hyber.org/...

Yaws < 1.80 (multiple headers) Remote Denial of Service Exploit

Exploit for multiple platform in category dos / poc =============================================================== Yaws ; chomp$vulnhostip; $port = 80; $sockhttp = IO::Socket::INET-new...

Pop Peeper 3.4.0.0 UIDL Buffer Overflow Exploit

!/usr/bin/perl KL0209EXP-poppeeperuidl-bof.pl 02.27.2009 Krakow Labs Development www.krakowlabs.com POP Peeper 3.4.0.0 UIDL Remote Buffer Overflow Exploit SEH overwrite exploitation, uses Imap.dll included with POP Peeper for universal exploitation gotta love no /SafeSEH. Special thanks goes to...

Coppermine Photo Gallery 1.4.20 - IMG Privilege Escalation

Coppermine Photo Gallery 1.4.20 - IMG Privilege Escalation !/usr/bin/perl inphex - inphex0 at gmail dot com based on http://milw0rm.com/exploits/8114 - found by StAkeR In case this does not work check out posLine 80 and find another value for it use IO::Socket; use LWP::UserAgent; use LWP::Simple...

Free Arcade Script 1.0 LFI Command Execution Exploit

No description provided by source. !/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS |...

Pyrophobia 2.1.3.1 LFI Command Execution Exploit

No description provided by source. !/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS |...

pPIM 1.01 - notes.php Remote Command Execution

pPIM 1.01 - notes.php Remote Command Execution !/usr/bin/perl pPIM 1.01 notes.php id Remote Command Execution Exploit url: http://www.phlatline.org/docs/files/ppim.zip Author: Jose Luis Gongora Fernandez a.k.a JosS mail: sys-projectathotmaildotcom site: http://www.hack0wn.com/ team: Spanish Hacke...

pPIM 1.01 Command Execution Exploit

!/usr/bin/perl pPIM 1.01 notes.php id Remote Command Execution Exploit url: http://www.phlatline.org/docs/files/ppim.zip Author: Jose Luis Gongora Fernandez a.k.a JosS mail: sys-projectathotmaildotcom site: http://www.hack0wn.com/ team: Spanish Hackers Team - SHT thanks for the base code: CWH...

MDPro Module My_eGallery - 'pid' SQL Injection

!/usr/bin/perl $host, PeerPort = 80, Proto = 'tcp' or die $!; $packet .= "GET /$inject HTTP/1.1\r\n"; $packet .= "Host: $host\r\n"; $packet .= "User-...

Pyrophobia 2.1.3.1 Command Execution

!/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS | |----------------------------------------------------------------------------------------------------------------------------------|...

pPIM 1.01 (notes.php id) Remote Command Execution Exploit

Exploit for unknown platform in category web applications ========================================================= pPIM 1.01 notes.php id Remote Command Execution Exploit ========================================================= !/usr/bin/perl pPIM 1.01 notes.php id Remote Command Execution...

Graugon Forum 1 - 'id' Command Injection / SQL Injection

!/usr/bin/perl |--------------------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS |...

TPTEST GetStatsFromLine()函数远程栈溢出漏洞

BUGTRAQ ID: 33785 TPTEST是用于测试Internet连接速度的工具。 TPTEST的engine/tpcommon.c或src/net/tpcommon.cpp文件的GetStatsFromLine函数在处理STATS命令时存在栈溢出漏洞。如果远程攻击者向服务器发送了带有超长email或pwd标签字段的STATS行的话，就可以触发这个溢出，导致执行任意代码。 TPTEST 3.1.7 厂商补丁： TPTEST ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...