Arris VAP2500 - Authentication Bypass

!/usr/bin/env ruby require 'net/http' require 'digest/md5' if !ARGV0 puts "Usage: $0 " exit0 end host = ARGV0 newpass = "h4x0r3d!" http = Net::HTTP.newhost.start users = nil users = http.requestget"/admin.conf".body.split"\n".map! |user| user.sub/^.?,.$/,"\1" if users puts " found user accounts:...

ilchClan <= 1.0.5B SQL Injection Vulnerability Exploit

No description provided by source. ----------------------------Information------------------------------------------------ +Name :ilchClan = 1.0.5B SQL Injection Vulnerability Exploit +Autor : Easy Laster +ICQ : 11-051-551 +email : [email protected] +Date : 15.04.2010 +Script : ilchClan = 1.0.5B...

Alibaba Clone <= 3.0 (Special) - SQL Injection Vulnerability Exploit

No description provided by source. ----------------------------Information------------------------------------------------ +Name : Alibaba Clone Version = 3.0 Special SQL Injection Vulnerability Exploit +Autor : Easy Laster +ICQ : 11-051-551 +Date : 09.05.2010 +Script : Alibaba Clone Version 3.0...

mygamingladder MGL Combo System <= 7.5 game.php SQL injection Exploit

No description provided by source. ----------------------------Information------------------------------------------------ +Name : mygamingladder MGL Combo System = 7.5 game.php SQL injection Exploit +Autor : Easy Laster +Date : 10.10.2010 +Script : mygamingladder MGL Combo System = 7.5 +Price :...

Alibaba Clone Diamond Version - SQL Injection Vulnerability Exploit

No description provided by source. ----------------------------Information------------------------------------------------ +Name : Alibaba Clone Diamond Version SQL Injection Vulnerability Exploit +Autor : Easy Laster +ICQ : 11-051-551 +Date : 09.05.2010 +Script : Alibaba Clone Diamond Version...

mygamingladder MGL Combo System <= 7.5 - SQL Injection

No description provided by source. ----------------------------Information------------------------------------------------ +Name : mygamingladder MGL Combo System = 7.5 SQL injection Vulnerability & SQL injection Exploit +Autor : Easy Laster +Date : 10.04.2010 +Script : mygamingladder MGL Combo...

WordPress Count per Day Plugin 3.2.5 (counter.php) - XSS Vulnerability

No description provided by source. !/usr/bin/ruby Exploit Title: WordPress Count per Day 3.2.5 CSRF Google Dork: inurl:/wp-content/plugins/count-per-day Date: 18.03.2013 Exploit Author: m3tamantra http://m3tamantra.wordpress.com/blog Vendor Homepage:...

Apache Commons FileUpload and Apache Tomcat - Denial of Service

CVE-2014-0050 Apache Commons FileUpload and Apache Tomcat Denial-of-Service Author: Oren Hafif, Trustwave SpiderLabs Research This is a Proof of Concept code that was created for the sole purpose of assisting system administrators in evaluating whether their applications are vulnerable to this...

Apache Commons FileUpload and Apache Tomcat - Denial of Service

Apache Commons FileUpload and Apache Tomcat - Denial of Service CVE-2014-0050 Apache Commons FileUpload and Apache Tomcat Denial-of-Service Author: Oren Hafif, Trustwave SpiderLabs Research This is a Proof of Concept code that was created for the sole purpose of assisting system administrators in...

Apache Commons FileUpload and Apache Tomcat Denial of Service

Exploit for multiple platform in category dos / poc CVE-2014-0050 Apache Commons FileUpload and Apache Tomcat Denial-of-Service Author: Oren Hafif, Trustwave SpiderLabs Research This is a Proof of Concept code that was created for the sole purpose of assisting system administrators in evaluating...

CVE-2013-6627

net/http/httpstreamparser.cc in Google Chrome before 31.0.1650.48 does not properly process HTTP Informational aka 1xx status codes, which allows remote web servers to cause a denial of service out-of-bounds read via a crafted response...

CVE-2013-6627: Improper Restriction of Operations within the Bounds of a Memory Buffer

net/http/httpstreamparser.cc in Google Chrome before 31.0.1650.48 does not properly process HTTP Informational aka 1xx status codes, which allows remote web servers to cause a denial of service out-of-bounds read via a crafted response...

PT-2013-6057

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 31.0.1650.48 Description The issue is related to the improper processing of HTTP Informational status codes by the net/http/http stream parser.cc component. This can be exploited by remote web servers to cause a...

Woltlab Burning Board Regenbogenwiese 2007 Addon SQL Injection Exploit

Exploit for php platform in category web applications Exploit Title: Woltlab Burning Board Regenbogenwiese 2007 Addon SQL Injection Exploit Google Dork: inurl:regenbogenwiese.php wbb and more Date: 04.09.2013 Exploit Author: Easy Laster Software Name: Regenbogenwiese v1.5 © 2007 by DieKrabbe...

Woltlab Burning Board Regenbogenwiese 2007 Addon - SQL Injection

Exploit Title: Woltlab Burning Board Regenbogenwiese 2007 Addon SQL Injection Exploit Google Dork: inurl:regenbogenwiese.php wbb and more Date: 04.09.2013 Exploit Author: Easy Laster Software Name: Regenbogenwiese v1.5 © 2007 by DieKrabbe Version: 1.5 Tested on: Windows 8/Backtrack !/usr/bin/ruby...

KNet Web Server 1.04b - Buffer Overflow SEH Vulnerability

Exploit for windows platform in category remote exploits !/usr/bin/ruby Exploit Title: KNet Web Server Buffer Overflow SEH Date: 2013-03-27 Exploit Author: Myo Soe, http://yehg.net/ Software Link: http://www.softpedia.com/progDownload/KNet-Download-20137.html Version: KNet 1.04b Tested on: Window...

WordPress IndiaNIC FAQS Manager 1.0 SQL Injection

Exploit Title: WordPress IndiaNIC FAQ 1.0 Plugin Blind SQL Injection Google Dork: inurl:wp-content/plugins/faqs-manager Date: 21.03.2013 Exploit Author: m3tamantra http://m3tamantra.wordpress.com/blog Vendor Homepage: http://wordpress.org/extend/plugins/faqs-manager/ Software Link:...

WordPress IndiaNIC FAQs Manager Plugin 1.0 - Blind SQL Injection

The "order" and "orderby" parameter is vulnerable for SQL Injection Example URL: http://127.0.0.1:9001/wordpress/wp-admin/admin.php?page=3Din= icfaq&orderby=3D PoC take some time to finish 15min on my Testsystem. I could speed it up with Multithreading but I'm to lazy right now Vulnerable code pa...

ClanSphere 2011.3 - cs_lang Cookie Local File Inclusion

ClanSphere 2011.3 - cslang Cookie Local File Inclusion Exploit Title: ClanSphere 2011.3 cslang cookie parameter Local File Include Vulnerability Google Dork: "Copyright 2012 Seitentitel. All rights reserved." || inurl:index.php?mod=clansphere Date: 10/22/2012 Author: Marco Tulio blkhtc0rp Vendor...

CVE-2011-1465

The SPDY implementation in net/http/httpnetworktransaction.cc in Google Chrome before 11.0.696.14 drains the bodies from SPDY responses, which might allow remote SPDY servers to cause a denial of service application exit by canceling a stream...