BitchX <= 1.0c20 Local Buffer Overflow Exploit

No description provided by source. / Tested on BitchX-1.0c19 /str0ke / / P.o.C Exploit Code for BitchX made for Version BitchX-1.0c20cvs -- Date 20020325 C 2004. GroundZero Security Research and Software Development http://www.groundzero-security.com released under the GNU GPL -...

Manhali 1.8 - Local File Inclusion Vulnerability

No description provided by source. Exploit Title: Manhali v1.8 Local File Inclusion Vulnerability Date: 20/09/2012 Author: L0n3ly-H34rT Contact: [email protected] My Site: http://se3c.blogspot.com/ Vendor Link: http://www.manhali.com/ Software Link:...

Mobilelib Gold 3.0 - Local File Disclosure Vulnerability

No description provided by source. || || | || o,7 || . o7 || q||| o\, : / / . /QQQQQQQQQQQQQQQQQQQ\ /QQQ/\QQQ\ /QQQQQ/ \QQQQQQ\ /QQQQ/ QQQQ\ /QQQQ/ \QQQQ\ |QQQQ/ By Qabandi \QQQQ| |QQQQ| |QQQQ| |QQQQ| From Kuwait, PEACE... |QQQQ| |QQQQ| |QQQQ| |QQQQ\ iqaahotmail.fr /QQQQ| \QQQQ\ /QQQQ/ \QQQQ...

Core FTP Server Version 1.2, build 535, 32-bit - Crash Poc

D-Link DIR-652, DIR-835, DIR-855L, DGL-500, and DHP-1565 suffer from clear text storage of passwords, cross site scripting, and sensitive information disclosure vulnerabilities. !/usr/bin/python import socket,sys,time def Usage: print "Core FTP Server Version 1.2, build 535, 32-bit - Crash P.O.C....

Web eXperts文件上传和SQL注入漏洞

No description provided by source. + Author: TUNISIAN CYBER + Exploit Title: Web eXperts FileUpload/SQLi vulnerabilities + Date: 14-01-2014 + Category: WebApp + Google Dork: :intext:"Website Design & Developed By Web eXperts" + Tested on: KaliLinux + Friend's blog: www.na3il.com +Exploit: Web...

Web eXperts Shell Upload / SQL Injection

Author: TUNISIAN CYBER + Exploit Title: Web eXperts FileUpload/SQLi vulnerabilities + Date: 14-01-2014 + Category: WebApp + Google Dork: :intext:"Website Design & Developed By Web eXperts" + Tested on: KaliLinux + Friend's blog: www.na3il.com +Exploit: Web eXperts suffers from a File Upload/SQLi...

Joomla Component com_melody跨站脚本漏洞

No description provided by source. + Author: TUNISIAN CYBER + Exploit Title: Joomla Component commelody XSS Vulnerability + Date: 09-01-2014 + Category: WebApp + Google Dork: :inurl:"components/commelody/" + Tested on: KaliLinux + Friend's blog: www.na3il.com +Exploit: The Joomla melody component...

RedAxScript v1.1 <= Multiple Blind SQL Injection Vulnerabilities

RedAxScript suffer from multiple SQL Injection Usage Info POST Inject via HTTP headers attack's or HTTP debugger, HackBar / or use any toolkit like sqlmap, sql-ninja etc.. 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/...

WordPress Blooog 1.1 jplayer.swf Cross Site Scripting

X-------------------------------------------------------------X | | | | | \ | | / | |/ \ | \ | | / \ \ / / \ | \ | | | | | | | | | | \ --. | | / /\ | | | | / /\ V /| |/ / | | |/ / | | | | | | . | | | --. \ | | | || . | | | \ / | \ || / | | | || | |\ || |// /| || | | || |\ | | /\ | | | |/ /...

Joomla JDownloads Cross Site Scripting

Title:comjdownloads xss Vulnerability | / | /\ | | | | | | / | | \ / | / \ | | | | | | | | | | | | | |/| | / /\ \ | | | | | | | | | | | \ \ | | | |/ | || | || || | | | | || |// \/|||| || |/ Author:Darksnipper & Dream.killer Email:[email protected] Home:- www.MadLeeTs.com Vendor...

Feindura CMS v2.0.4 <= (thumbnail) File Upload Vulnerability

The Bug is 0day on Feindura CMS v2.0.4 when use Thumbnail to upload images attacker can upload remote and big file/webShell 100mb .gif to the target . Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail : submitat1337day.com...

MaxForum 2.0.0 Local File Inclusion

Exploit Title: MaxForum v2.0.0 Local File Inclusion Vulnerability Date: 25/09/2012 Author: L0n3ly-H34rT Contact: [email protected] My Site: http://se3c.blogspot.com/ Vendor Link: http://www.max4dev.com/demo/ar/ Software Link:...

MaxForum 2.0.0 Local File Inclusion

Exploit for php platform in category web applications Exploit Title: MaxForum v2.0.0 Local File Inclusion Vulnerability Date: 25/09/2012 Author: L0n3ly-H34rT Contact: email protected My Site: http://se3c.blogspot.com/ Vendor Link: http://www.max4dev.com/demo/ar/ Software Link:...

LuxCal 2.7.0 XSS / LFI / Information Disclosure

Exploit Title: LuxCal v2.7.0 Multiple Remote Vulnerabilities Date: 17/09/2012 Author: L0n3ly-H34rT Contact: [email protected] My Site: http://se3c.blogspot.com/ Vendor Link: http://www.luxsoft.eu/ Software Link: http://www.luxsoft.eu/dloader.php?file=luxcal270.zip Version: 2.7.0 Tested on:...

Akcms 4.2.4 Information Disclosure

Exploit Title: akcms v4.2.4 Information Disclosure Vulnerability Date: 10/09/2012 Author: L0n3ly-H34rT Contact: [email protected] My Site: http://se3c.blogspot.com/ Vendor Link: http://www.akcms.com/ Software Link: http://download.akcms.com/download/akcms4.2.4.tar.gz Version: 4.2.4 may be o...

ProQuiz 2.0.2 LFI / RFI / XSS / SQL Injection

Exploit Title: ProQuiz v2.0.2 - Multiple Vulnerabilities Date: 18/7/2012 Author: L0n3ly-H34rT My Site: http://se3c.blogspot.com/ Contact: [email protected] Vendor Homepage: http://proquiz.softon.org/ Software Link: http://code.google.com/p/proquiz/downloads/list Tested on: Linux/Windows 1-...

Communique Detail ID (communique_detail) SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================================================== Communique Detail ID communiquedetail.php SQL Injection Vulnerability ======================================================================== Title: Communique Detail...

ZoIPer v2.22 Call-Info Remote Denial Of Service

Exploit for unknown platform in category dos / poc ================================================================== Vulnerability in Zoiper softphone version 2.22 - Denial Of Service ==================================================================...

ZoIPer Call-Info Denial Of Service

!/usr/bin/python ZoIPer v2.22 Call-Info Remote Denial Of Service. Remote Crash P.O.C. Author: Tomer Bitton Gr33nG0bL1n Tested on Windows XP SP2 , SP3 , Ubuntu 8.10 Vendor Notified on: 21/09/2009 Vendor Fix: Fixed in version 2.24 Library 5324 Bad Chars: \x20 , \x09 import sys import socket import ...

ZoIPer 2.22 - Call-Info Remote Denial of Service

ZoIPer 2.22 - Call-Info Remote Denial of Service !/usr/bin/python ZoIPer v2.22 Call-Info Remote Denial Of Service. Remote Crash P.O.C. Author: Tomer Bitton Gr33nG0bL1n Tested on Windows XP SP2 , SP3 , Ubuntu 8.10 Vendor Notified on: 21/09/2009 Vendor Fix: Fixed in version 2.24 Library 5324 Bad...