984 matches found
DigiAffiliate <= 1.4 (visu_user.asp id) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Script Name: DigiAffiliate = V1.4 Remote Blind SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.digiappz.com $$ : .299 .. : ajann,Turkey use IO::Socket; if@ARGV 1 print...
JDKChat 1.5 - Remote Integer Overflow PoC
No description provided by source. !/usr/bin/perl Title: JDKChat v1.5 Remote Integer Overflow PoC Summary: JDKChat is a simple C++ chat server for GNU/Linux systems. Users can connect to it through a simple tcp client like telnet. WebSite : http://www.jdkoftinoff.com/ ----------------------------...
Mercury/32 Mail Server <= 4.01a (check) Buffer Overflow Exploit
No description provided by source. ===== Start Mercury32Overflow.pl ===== Usage: Mercury32Overflow.pl ip imap4 user imap4 pass Mercury32Overflow.pl 127.0.0.1 hello moto Mercury/32, v4.01a, Dec 8 2003 Download: http://www.pmail.com/ use IO::Socket; use strict; my$socket = ; if $socket =...
GuestBook Script <= 1.7 (include_files) Remote Code Execution Exploit
No description provided by source. !/usr/bin/perl use IO::Socket; print guestbook script = 1.7 exploit\r\n; print rgod [email protected]\r\n; print dork: \powered by guestbook script\r\n\r\n; short explaination: we have this code in nearly all scripts: ... if isset $includefiles and isarray...
Microsoft Office (2010 beta) Communicator SIP Denial of Service Exploit
No description provided by source. ======================================================================================== | Title : Microsoft Office 2010 beta Communicator SIP denial of service Exploit | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com/vb | Tested...
Avant Browser <= 11.0 build 26 Remote Stack Overflow Crash Exploit
No description provided by source. !/usr/bin/perl Avant Browser ALL Version Remot Stack OverFlow Crash Discovered by DATASNIPER Usage: connect from Avant browser to http://127.0.0.1/ use IO::Socket; my $sock=new IO::Socket::INET Listen = 1, LocalAddr = 'localhost', LocalPort = 80, Proto = 'tcp';...
Squid < 3.1 5 - HTTP Version Number Parsing Denial of Service Exploit
No description provided by source. !usr/bin/perl -w Reference: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-0478 http://www.securityfocus.com/bid/33604/discuss $$$$$This was strictly written for educational purpose. Use it at your own risk.$$$$$ $$$$$Author will not bare any...
phpMyAgenda <= 3.1 (templates/header.php3) Local File Include Exploit
No description provided by source. !/usr/bin/perl use IO::Socket; use LWP::Simple; print \n; print \n; print \n; print phpMyAgenda 3.1 Multiple Remote Vulnerabilities Exploit \n; print Bug found By : Ashiyane Corporation \n; print Email: Nima Salehi nimaatashiyane.ir \n; print Web Site :...
MNOGoSearch 3.1.20 Search.CGI UL Buffer Overflow Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/7865/info mnoGoSearch 'search.cgi' has been reported prone to a buffer overflow vulnerability. The issue is a result of a lack of sufficient bounds checking performed on user-supplied URI parameters that are passed to the...
SturGeoN Upload Arbitrary File Upload Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18764/info SturGeoN Upload is prone to an arbitrary file-upload vulnerability. An attacker can exploit this vulnerability to upload arbitrary code and execute it in the context of the webserver process. This may facilitat...
MailEnable Enterprise & Professional https Remote BoF Exploit
No description provided by source. !/usr/bin/perl This tools and to consider only himself to educational purpose -=MailEnable Enterprise & Professional HTTPS remote BoF exploit=- -= =- -= Discovered & Coded by CorryL info:www.x0n3-h4ck.org=- -= irc.xoned.net x0n3-h4ck corryl80atgmail.com=-...
AuraCMS <= 2.2.1 (online.php) Remote Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w Indonesian Newhack Security Advisory ------------------------------------ AuraCMS 2.x online.php - Remote Blind SQL Injection Exploit Waktu : Feb 15 2008 01:00PM Software : AuraCMS Versi : 2.0 2.1 2.2.1 Vendor : http://www.auracms.org/...
ActivePerl 5.6.1 perlIIS.dll Buffer Overflow Vulnerability (3)
No description provided by source. source: http://www.securityfocus.com/bid/3526/info ActivePerl is an implementation of the Perl scripting language for Microsoft Windows systems developed by Activestate. ActivePerl allows for high-performance integration with IIS using a DLL called 'perlIIS.dll'...
Invision Power Board 2.0.0 - 2.0.2 - SQL Injection Exploit
No description provided by source. !/usr/bin/perl use IO::Socket;...
Convert-UUlib 1.04/1.05 Perl Module Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13401/info Convert-UUlib Perl module is prone to a remotely exploitable buffer-overflow vulnerability. A remote attacker may leverage this condition to overwrite sensitive program control variables and thus gain control o...
MemHT Portal <= 4.0 - Remote Code Execution Exploit
No description provided by source. !/usr/bin/perl =about MemHT Portal = 4.0 Perl exploit AUTHOR: Discovered and written by Ams ax330d doggy gmail dot com DESCRIPTION: Here we are able to make SQL-injection due to weak filtering. So, look at inc/incheader.php lines 74, where hides code $checktitle...
Microsoft IIS 6.0 ASP Stack Overflow (Stack Exhaustion) Denial of Service (MS10-065)
... Microsoft Internet Information Services是由微软公司提供的基于运行Microsoft Windows的互联网基本服务。 ... Microsoft Internet Information Services IIS 5.1, 6.0, 7.0和7.5版本中的ASP实施中存在栈消耗漏洞。远程攻击者可以借助对IIS所承载网站的ASP页面发送特制URI请求导致拒绝服务守护进程中断。该漏洞与asp.dll有关，又名"IIS重复参数请求拒绝服务漏洞"。 IIS 6.0 ASP DoS PoC usage: perl IISdos.pl use...
Roger Wilco 1.4.1 - Remote Server Side Buffer Overrun Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8566/info A vulnerability has been reported for various Roger Wilco server releases. The problem occurs server-side, and can be triggered when processing malformed client packets. Specifically, when connecting to a server...
Eznet 3.5.0 - Remote Stack Overflow and Denial of Service Exploit
No description provided by source. !/usr/bin/perl -w Stack Overflow in eZnet.exe - Remote Exploit Will download a trojan from any address which you provide on the target system, then will execute the trojan. For this exploit I have tried several strategies to increase reliability and performance:...
MemHT Portal 4.0.1 - SQL Injection Code Execution Exploit
No description provided by source. !/usr/bin/perl =about MemHT 4.0.1 Perl exploit AUTHOR discovered & written by Ams ax330d doggy gmail dot com VULN. DESCRIPTION: Due to weak params filtering we are able to make SQL-Injection. So, 1. Look at 'inc/ajax/ajaxrating.php', line 29. It is not enough to...