AdaptBB 1.0 - 'topic_id' SQL Injection / Credentials Disclosure

!/usr/bin/perl -w AdaptBB 1.0 topicid SQL Injection / Credentials Disclosure Exploit Description ----------- AdaptBB contains a flaw that allows an attacker to carry out an SQL injection attack. The issue is due to the inc/bb/topic.php script not properly sanitizing user-supplied input to the...

X-Forum 0.6.2 Remote Command Execution Exploit

No description provided by source. !/usr/bin/perl Web App: X-Forum 0.6.2 Link : http://freefr.dl.sourceforge.net/sourceforge/x-forum/xforum-0.6.2.tar.gz Bug : Auth Bypass via Cookie Handling : There are also other SQL Injections Remote Command Execution Exploit Credits to Giovanni Buzzin,...

Sami HTTP Server 2.x - 'HEAD' Remote Denial of Service

!/usr/bin/perl Sami HTTP Server v2.x Remote Denial of Service with HEAD request. -------------------------------------------------------------------- The vulnerability is caused due to an error in handling the HEAD command. This can be exploited to crash the HTTP service...

PhotoStand 1.2.0 - Remote Command Execution

PhotoStand 1.2.0 - Remote Command Execution !/usr/bin/perl App : PhotoStand 1.2.0 Site : http://www.photostand.org Remote Command Execution Exploit Credits to : Giovanni Buzzin, "Osirys" osirysatautisticidotorg Greets: drosophila, emgent, Fireshot PhotoStand is a used Image Gallery CMS. PhotoStan...

Codice CMS 2 SQL Command Execution

--+++===========================================================+++-- --+++====== Codice CMS 2 Remote Command Execution Exploit ======+++-- --+++===========================================================+++-- !/usr/bin/perl use strict; use warnings; use IO::Socket; sub banner print...

Codice CMS 2 Remote SQL Command Execution Exploit

No description provided by source. --+++===========================================================+++-- --+++====== Codice CMS 2 Remote Command Execution Exploit ======+++-- --+++===========================================================+++-- !/usr/bin/perl use strict; use warnings; use...

Codice CMS 2 - Command Execution (via SQL Injection)

Codice CMS 2 - Command Execution via SQL Injection --+++===========================================================+++-- --+++====== Codice CMS 2 Remote Command Execution Exploit ======+++-- --+++===========================================================+++-- !/usr/bin/perl use strict; use...

Bloginator 1a - SQL Injection Command Injection (via Cookie Bypass )

Bloginator 1a - SQL Injection Command Injection via Cookie Bypass Author = FireShot , Jacopo Vuga. Thx to = Osirys for develop the Exploitation Code with me Mail = fireshotautisticiorg / osirysautisticiorg Vulnerability = SQL Command Injection mq = off Software = Bloginator V1A Download =...

VLC 0.9.8a Web UI (input) Remote Denial of Service Exploit

No description provided by source. !/usr/bin/perl VLC 0.9.8a Web UI Remote Stack Overflow DoS by TheLeader GreetZ: forums.hacking.org.il TiP oF TEh DaY: Rock on! = use IO::Socket; my $host = shift || 'localhost'; Target host my $port = shift || 8080; Target port. Default port = 8080 Note: for som...

Serv-U 7.4.0.1 (MKD) Create Arbitrary Directories Exploit

No description provided by source. !/usr/bin/perl Soft : FTP Serv-U Version : v7.4.0.1 A vulnerability is caused due to an input validation error when handling FTP "MKD" requests. This can be exploited to escape the FTP root and create arbitrary directory on the system via directory traversal...

Talkative IRC 0.4.4.16 Stack Overflow

!/usr/bin/perl Title: Talkative IRC 0.4.4.16 Remote Stack Overflow Exploit SEH Summary: The easiest and fastest way to meet people online. With Talkative IRC you can chat with thousands of people at the same time. Find people with the same interests as you. Join channels where you can meet people...

RhinoSoft Serv-U FTP Server 7.4.0.1 - 'SMNT' (Authenticated) Denial of Service

!/usr/bin/perl Soft : FTP Serv-U Version : v7.4.0.1 Denial of Service in Serv-u up to 7.4.0.1 no crash Just the server is saturated, it stops responding. Author: Jonathan Salwan Mail: submit AT shell-storm.org Web: http://www.shell-storm.org use IO::Socket; print "+ Author : Jonathan Salwan \n";...

VLC 0.9.8a Web UI (input) Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ========================================================== VLC 0.9.8a Web UI input Remote Denial of Service Exploit ========================================================== !/usr/bin/perl VLC 0.9.8a Web UI Remote Stack Overflow DoS by TheLeader...

JDKChat 1.5 Integer Overflow

!/usr/bin/perl Title: JDKChat v1.5 Remote Integer Overflow PoC Summary: JDKChat is a simple C++ chat server for GNU/Linux systems. Users can connect to it through a simple tcp client like telnet. WebSite : http://www.jdkoftinoff.com/ ---------------------------- Demo...

GuildFTPd FTP Server 0.999.14 Remote Delete Files Exploit

No description provided by source. !/usr/bin/perl Exploit: GuildFTPd FTP Server Version 0.x.x Remote Delete Files More detail for the vulnerability = http://secunia.com/advisories/32218/ 2 A vulnerability is caused due to an input validation error when handling FTP "DELE" requests. This can be...

EFS Easy Chat Server 2.2 - Authentication Request Buffer Overflow (Perl)

EFS Easy Chat Server 2.2 - Authentication Request Buffer Overflow Perl !/usr/bin/perl EFS Easy Chat Server Authentication Request Buffer Overflow SEH Reference: http://www.milw0rm.com/exploits/8142 Tested in Windows XP Pro SP2-3 Coded by Dr4sH Bruno F. Contact: dr4shathotmaildotcom Thankz: His0ka...

Yaws 1.80 - Multiple Headers Remote Denial of Service Vulnerabilities

Yaws 1.80 - Multiple Headers Remote Denial of Service Vulnerabilities !usr/bin/perl -w Yaws before 1.80 allows remote attackers to cause a denial of service memory consumption and crash via a request with a large number of headers. Refer: http://yaws.hyber.org/...

Yaws < 1.80 (multiple headers) Remote Denial of Service Exploit

Exploit for multiple platform in category dos / poc =============================================================== Yaws ; chomp$vulnhostip; $port = 80; $sockhttp = IO::Socket::INET-new...

Pop Peeper 3.4.0.0 UIDL Buffer Overflow Exploit

!/usr/bin/perl KL0209EXP-poppeeperuidl-bof.pl 02.27.2009 Krakow Labs Development www.krakowlabs.com POP Peeper 3.4.0.0 UIDL Remote Buffer Overflow Exploit SEH overwrite exploitation, uses Imap.dll included with POP Peeper for universal exploitation gotta love no /SafeSEH. Special thanks goes to...

Coppermine Photo Gallery 1.4.20 - IMG Privilege Escalation

Coppermine Photo Gallery 1.4.20 - IMG Privilege Escalation !/usr/bin/perl inphex - inphex0 at gmail dot com based on http://milw0rm.com/exploits/8114 - found by StAkeR In case this does not work check out posLine 80 and find another value for it use IO::Socket; use LWP::UserAgent; use LWP::Simple...