McAfee E-Business Server 8.5.2 - Remote Code Execution Denial of Service (PoC)

McAfee E-Business Server 8.5.2 - Remote Code Execution Denial of Service PoC !/usr/bin/perl McAfeeR E-Business ServerTM 8.5.2 Remote preauth crash PoC - tested on Windows and Linux Leon Juranic , Infigo IS use IO::Socket; $saddr = "192.168.1.3"; $sport = 1718; $exp1 = "\x01\x3f\x2f\x05\x25\x2a"...

XZero Community Classifieds <= 4.95.11 LFI / SQL Injection

Exploit for unknown platform in category web applications ========================================================== XZero Community Classifieds = 4.95.11 LFI / SQL Injection ========================================================== !/usr/bin/perl XZero Community Classifieds = v4.95.11 LFI & SQL...

AuraCMS 2.2 - Remote Add Administrator

AuraCMS 2.2 - Remote Add Administrator !/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ AuraCMS 2.2 - adminusers.php Remote Add Administrator Exploit Waktu : Dec 25 2007 04:50AM Software : AuraCMS 2.2 Vendor : http://www.auracms.org/ Ditemukan oleh : k1tk4t...

BadBlue 2.72 - PassThru Remote Buffer Overflow

BadBlue 2.72 - PassThru Remote Buffer Overflow !/usr/bin/perl -w http://aluigi.altervista.org/adv/badblue-adv.txt https://www.securityfocus.com/bid/26803 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6379 exploit for stack overflow in badblue 2.72 Credit to Luigi Auriemma Jacopo Cervini...

Sendmail with clamav-milter < 0.91.2 Remote Root Exploit

Exploit for multiple platform in category remote exploits ======================================================== Sendmail with clamav-milter newPeerAddr = $ARGV0, PeerPort = '25', Proto = 'tcp'; print $sock "ehlo you\r\n"; print $sock "mail from: \r\n"; print $sock "rcpt to:...

3proxylogurl-overflow.txt

!/usr/bin/perl This module exploits a stack overflow in 3Proxy prior to 0.5.3h, and 0.6b-devel before 20070413. By sending a long host header in HTTP GET request to the default port of 3128, a remote attacker could overflow a buffer and execute arbitrary code. Marcin Kozlowski based on vade79 PoC...

3proxy 0.5.3g logurl() Remote Buffer Overflow Exploit (win32) (pl)

No description provided by source. !/usr/bin/perl This module exploits a stack overflow in 3Proxy prior to 0.5.3h, and 0.6b-devel before 20070413. By sending a long host header in HTTP GET request to the default port of 3128, a remote attacker could overflow a buffer and execute arbitrary code...

3proxy 0.5.3g logurl() Remote Buffer Overflow Exploit (win32) (pl)

Exploit for unknown platform in category remote exploits ================================================================== 3proxy 0.5.3g logurl Remote Buffer Overflow Exploit win32 pl ================================================================== !/usr/bin/perl This module exploits a stack...

Tftpd32 2.81 (GET Request) Format String Denial of Service PoC

No description provided by source. !/usr/bin/perl Tftpd32 Format String PoC DoS by Critical Security research http://www.critical.lt use IO::Socket; $port = "69"; $host = "127.0.0.1"; $tftpudp = IO::Socket::INET-newPeerPort = $port,PeerAddr = $host,Proto= 'udp'; $bzz = "\x00\x01" ; GET $bzz .=...

MS Internet Explorer 6 (Content-Type) Stack Overflow Crash

No description provided by source. !/usr/bin/perl Stack overflow in wininet.dll while parsing huge 1M Content-Type response ex.: Unhandled exception at 0x771c00ee in IEXPLORE.EXE: 0xC00000FD: Stack overflow. discovered by Firestorm Usage: 1 run this code 2 open http://127.0.0.1/ with IE...

Cisco Phone 7940 - Remote Denial of Service

Cisco Phone 7940 - Remote Denial of Service !/usr/bin/perl Vulnerabily discovered using KiF Kiph Authors: Humberto J. Abdelnur Ph.D Student Radu State Ph.D Olivier Festor Ph.D Madynes Team, LORIA - INRIA Lorraine http://madynes.loria.fr use IO::Socket::INET; use String::Random; die "Usage $0 "...

Exploits PHP-Nuke Module Advertising Blind SQL Injection

No description provided by source. !/usr/bin/perl Product: PHP-Nuke Module Advertising BugFounder: 0x90 HomePage: WwW.0x90.COM.Ar Problem: Blind SQL Injection use strict; use warnings; use LWP; use Time::HiRes; use IO::Socket; my $host = "http://url/modules.php?name=Advertising"; my $useragent =...

IBM Lotus Domino 7.0.2FP1 IMAP4 Server LSUB Command Exploit

No description provided by source. !perl "IBM Lotus Domino" IMAP4 Server 'LSUB' Command Exploit Author: Manuel Santamarina Suarez e-Mail: [email protected] use IO::Socket; use File::Basename; destination TCP port $port = 143; SE handler...

IBM Lotus Domino 7.0.2FP1 IMAP4 Server LSUB Command Exploit

Exploit for unknown platform in category remote exploits =========================================================== IBM Lotus Domino 7.0.2FP1 IMAP4 Server LSUB Command Exploit =========================================================== !perl "IBM Lotus Domino" IMAP4 Server 'LSUB' Command Exploit...

IBM Lotus Domino 7.0.2FP1 - IMAP4 Server LSUB Command

IBM Lotus Domino 7.0.2FP1 - IMAP4 Server LSUB Command !perl "IBM Lotus Domino" IMAP4 Server 'LSUB' Command Exploit Author: Manuel Santamarina Suarez e-Mail: [email protected] use IO::Socket; use File::Basename; destination TCP port $port = 143; SE handler You can only use HEX values from 0x20 to...

IBM Lotus Domino 7.0.2FP1 - IMAP4 Server LSUB Command

!perl "IBM Lotus Domino" IMAP4 Server 'LSUB' Command Exploit Author: Manuel Santamarina Suarez e-Mail: [email protected] use IO::Socket; use File::Basename; destination TCP port $port = 143; SE handler You can only use HEX values from 0x20 to 0x7e! printable ASCII characters You must use a...

Jakarta Slide 2.1 RC1 - Remote File Disclosure

Jakarta Slide 2.1 RC1 - Remote File Disclosure !/usr/bin/perl Jakarta Slide Remote File Disclosure Zeroday Xploit eliteb0y / 2007 thanx to the whole team & andi : +++KEEP PRIV8+++ This Bug may reside in different WebDav implementations, Warp your mind! +You will need auth for the exploit to work...

Jakarta Slide 2.1 RC1 - Remote File Disclosure

!/usr/bin/perl Jakarta Slide Remote File Disclosure Zeroday Xploit eliteb0y / 2007 thanx to the whole team & andi : +++KEEP PRIV8+++ This Bug may reside in different WebDav implementations, Warp your mind! +You will need auth for the exploit to work... use IO::Socket; use MIME::Base64; FIXME! May...

Apache Tomcat - WebDAV SSL Remote File Disclosure

Apache Tomcat - WebDAV SSL Remote File Disclosure !/usr/bin/perl ================================================================ Apache Tomcat Remote File Disclosure Zeroday Xploit - With support for SSL MoDiFiEd version by : h3rcul3s ORiGiNaL Version by : kcdarookie aka eliteb0y / 2007...

Simple Forum (for WordPress) sql-inject exploit (public version)

No description provided by source. !/usr/bin/perl use IO::Socket; if @ARGV 4 print q Simple Forum for WordPress sql-inject exploit public version Tested on SF version 1.0, 1.1, 1.9 and WordPress 2.1.0, 2.1.1, 2.1.2 This exploit gives you selected user passwd hash, for more features use Private...