CVE-2009-3119

Summary: CVE-2009-3119 is a SQL injection in the PHP-Fusion Download System mSF (dsmsf) module, in the file screen.php , where the parameter view_id can be manipulated to execute arbitrary SQL. Affected component: PHP-Fusion dsmsf module (screen.php). Root cause (as stated): Input from view_id is...

CVE-2009-3119: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in screen.php in the Download System mSF dsmsf module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the viewid parameter...

FreeSSHD 1.2.1 (Post Auth) Remote Seh Overflow Exploit

!/usr/bin/perl FreeSSHD 1.2.1 Post Auth Remote Seh Overflow http://freeddsshd.com/ Exploit based on securfrog Poc http://www.milw0rm.com/exploits/5709 Coded by Matteo Memelli aka ryujin Spaghetti & PwnSauce http://www.be4mind.com http://www.gray-world.net Tested on Windows XPSp2 EN / Windows Vist...

freeSSHd 1.2.1 - (Authenticated) Remote Overflow (SEH)

!/usr/bin/perl FreeSSHD 1.2.1 Post Auth Remote Seh Overflow http://freeddsshd.com/ Exploit based on securfrog Poc http://www.milw0rm.com/exploits/5709 Coded by Matteo Memelli aka ryujin Spaghetti & PwnSauce http://www.be4mind.com http://www.gray-world.net Tested on Windows XPSp2 EN / Windows Vist...

sh3llc0de development and testing in the dumpbin of use-vulnerability warning-the black bar safety net

Of course, based on the MSFMetasploit Frameworkshellcode development of a simple have almost don't you go learn programming on something details, please refer to himself the preparation of the MSF Chinese manual, but for a beginner and like to explore the bottom of the people, The do-it-yourself...

ani_loadimage_chunksize-browser.rb.txt

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ require 'msf/core' module Msf class...

navicopa-201.txt

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

Berlios GPSD <= 2.7 Remote Format String Exploit (meta)

No description provided by source. package Msf::Exploit::gpsdformatstring; use base "Msf::Exploit"; use strict; use Pex::Text; use IO::Socket; my $advanced = ; my $info = 'Name' = 'Berlios GPSD Format String Vulnerability', 'Version' = '$ 1.0 $', 'Authors' = 'Enseirb senotier at enseirb.fr', ,...

Berlios GPSD <= 2.7 Remote Format String Exploit (meta)

Exploit for linux platform in category remote exploits ======================================================= Berlios GPSD 'Berlios GPSD Format String Vulnerability', 'Version' = '$ 1.0 $', 'Authors' = 'Enseirb ', , 'Arch' = 'x86' , 'OS' = 'linux' , 'Priv' = 1, 'UserOpts' = 'RHOST' = 1, 'ADDR',...

D-Link DWL-G132 Wireless Driver Beacon Rates Overflow Exploit (meta)

No description provided by source. require 'msf/core' module Msf class Exploits::Windows::Driver::DLinkDWLG132WiFiRates Msf::Exploit::Remote include Exploit::Lorcon include Exploit::KernelMode def initializeinfo = superupdateinfoinfo, 'Name' = 'D-Link DWL-G132 Wireless Driver Beacon Rates...

MS Windows NetpIsRemote() Remote Overflow Exploit (MS06-040) (2k3)

No description provided by source. netapiwin2003.pm MS06-040 Exploit for Windows Server 2003 SP0 Author: Trirat Puttaraksa Kira trir00t at gmail.com http://sf-freedom.blogspot.com For educational purpose only Note: This exploit is developed because of my question "Is it exploitable on Windows...

20051231.ie_xp_pfv_metafile.pm

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

mailenable-imap-examine.py.txt

!/usr/bin/python Remote Mailenable Enterprise 1.1 EXAMINE buffer Overflow Discovered and exploited by [email protected] This vulnerability affects Mailenable Enterprise 1.1 without the ME-10009.EXE patch. Details: SEH gets overwritten at 965 968 in VMWare bytes in the EXAMINE command. Filteri...

Microsoft Windows XP/2003 - Metafile Escape() Code Execution (Metasploit)

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

MailEnable Enterprise Edition 1.1 - 'EXAMINE' Remote Buffer Overflow

!/usr/bin/python Remote Mailenable Enterprise 1.1 EXAMINE buffer Overflow Discovered and exploited by [email protected] This vulnerability affects Mailenable Enterprise 1.1 without the ME-10009.EXE patch. Details: SEH gets overwritten at 965 968 in VMWare bytes in the EXAMINE command. Filteri...

MS Windows IIS SA WebAgent 5.2/5.3 Redirect Overflow Expl (meta)

Exploit for unknown platform in category remote exploits =================================================================== MS Windows IIS SA WebAgent 5.2/5.3 Redirect Overflow Exploit meta =================================================================== This file is part of the Metasploit...

Microsoft IIS - SA WebAgent 5.2/5.3 Redirect Overflow (Metasploit)

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

Barracuda Spam Firewall < 3.1.18 Command Execution Exploit (meta)

Exploit for cgi platform in category web applications ================================================================= Barracuda Spam Firewall 'Barracuda IMG.PL Remote Command Execution', 'Version' = '$Revision: 1.0 $', 'Authors' = 'Nicolas Gregoire ' , 'Arch' = 'x86' , 'OS' = 'linux' , 'Priv' =...

maxdb_webdbm_get_overflow.pm

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

Java Signed Applet Social Engineering Code Execution

This exploit dynamically creates a .jar file via the Msf::Exploit::Java mixin, then signs the it. The resulting signed applet is presented to the victim via a web page with an applet tag. The victim's JVM will pop a dialog asking if they trust the signed applet. On older versions the dialog will...