ClipShare 2.6 - Remote User Password Change Exploit

No description provided by source. !/usr/bin/perl -w priv8 Pr0metheuS Exploit Name: Clipshare Remote User Password Change Exploit Version Script: Clipshare 2.6 Dork: Powered by Clipshare EnjoY print -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-; print \nClipshare 2.6 Remote User Passord Change...

Envolution <= 1.1.0 (topic) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; if@ARGV 3 usage; exit; $site = $ARGV0; Site Target $path = $ARGV1; Path direktori envolution1-0-1 $usid = $ARGV2; member id $www = new LWP::UserAgent; $sql =...

Novell eDirectory 8.8 SP5 (Post Auth) Remote BOF Exploit

No description provided by source. Exploit Title: Novell eDirectory 8.8 SP5 Post Auth Remote BOF Exploit 0day Date: 06/01/2010 Author: His0k4 & Simo36 Version: 8.8 SP5 Tested on: Windows xp sp3 Code : !usr\bin\perl use WWW::Mechanize; use HTTP::Cookies; use HTTP::Headers; $target=$ARGV0; if!$ARGV...

Golden FTP Server <= 2.02b Remote Buffer Overflow Exploit

No description provided by source. !/usr/bin/perl -w Barabas - www.whitehat.co.il - cheers to muts and all peeps at WH. XPSP2 goldenftpserver sploit - bind 4444 use strict; use Net::FTP; my $payload=\x41x260; $payload .=\x65\x82\xa5\x7c;jmpesp $payload .=\x90x32;not really necessary...blah...

Woltlab 1.1/2.x Info-DB Info_db.PHP Multiple SQL Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/15214/info Info-DB is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...

MyBB Member.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14684/info MyBB is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. Successful exploitation could result in a compromise of the...

CompleteFTP 3.3.0 - Remote Memory Consumption DoS

No description provided by source. !/usr/bin/perl Title: CompleteFTP v3.3.0 - Remote Memory Consumption DoS Author: Jonathan Salwan submit!shell-storm.org Web: http://www.shell-storm.org 60 sec for satured 2Go RAM use IO::Socket; print \nxCompleteFTP v3.3.0 - Remote Memory Consumption DoS\n; if...

YourArcadeScript 2.0b1 - Blind SQL Injection

No description provided by source. !/usr/bin/perl use LWP::UserAgent; use HTTP::Request::Common qwPOST; use Getopt::Long; '/ -.- ------------------oOO------OOo----------------- | | | / / / / | | / / / / / / / / / / / | | // // / / / // / // / // | | ///,// /./,/, // | | Security Research...

MyBulletinBoard (MyBB) < 1.1.3 - Remote Code Execution Exploit

No description provided by source. !/usr/bin/perl Tue Jun 13 12:37:12 CEST 2006 [email protected] Exploit HOWTO - read this before flood my Inbox you bitch! - First you need to create the special user to do this use: ./mybibi.pl --host=http://www.example.com --dir=/mybb -1 this step needs a graph...

EQdkp <= 1.3.2 (listmembers.php rank) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w EQdkp = 1.3.2 SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code listmembers.php: $sql = 'SELECT m., m.memberearned-m.memberspent+m.memberadjustment AS...

eZip Wizard 3.0 (.zip) SEH

No description provided by source. !/usr/bin/perl Software : eZip Wizard 3.0 .zip Author : Lincoln & corelanc0d3r Discovered by : fl0 fl0w Reference : http://www.exploit-db.com/exploits/8180 OS : Windows Tested on : XP SP3 En VirtualBox Type of vuln : SEH Greetz to : Corelan Security Team & fl0...

CoolPlayer+ Portable 2.19.4 - Local Buffer Overflow

No description provided by source. !/usr/bin/perl Exploit Title: CoolPlayer+ Portable v2.19.4 - Local Buffer Overflow Date: 11-15-2013 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software: CoolPlayer+ Portable v2.19.4 Software Link:...

Abe Timmerman zml.cgi File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3759/info zml.cgi is a perl script which can be used to support server side include directives under Apache. It recognizes a simple set of commands, and allows access to cgi parameters and environment variables. It can ru...

gAlan 0.2.1 - Buffer Overflow 0day Exploit

No description provided by source. !/usr/bin/perl kpasa.pl AKA gAlan Buffer Overflow 0day Exploit Jeremy Brown [email protected]//jbrownsec.blogspot.com//krakowlabs.com 12.07.2009 From Static Analysis to 0day Exploit Originally a SecurityTubeCon Presentation, which I'm guessing was canceled...

TPTEST <= 3.1.7 Stack Buffer Overflow PoC

No description provided by source. !/usr/local/bin/perl TPTEST = 3.1.7 maby also 5.0.2? tptest.sourceforge.net stackbased buffer overflow poc in server client can also be exploit author: ffwd use IO::Socket;$host,$port=@ARGV; $rem=IO::Socket::INET-newProto=tcp,PeerAddr=$host,PeerPort=$port;...

Halloween Linux 4.0,RedHat Linux 6.1/6.2 imwheel Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/1060/info A vulnerability exists in the 'imwheel' package for Linux. This package is known to be vulnerable to a buffer overrun in its handling of the HOME environment variable. By supplying a sufficiently long string...

phpBB <= 2.0.15 Register Multiple Users Denial of Service (perl code)

No description provided by source. !/usr/bin/perl Name: NsT-phpBBDoS Perl Version Copyright: Neo Security Team Author: HaCkZaTaN Ported: g30rg3x Date: 20/06/05 Description: NsT-phpBB DoS By HackZatan Ported tu perl By g30rg3x A Simple phpBB Registration And Search DoS Flooder...

Kloxo Remote Root Exploit

Kloxo remote root exploit that leverages a blind SQL injection and injects a perl connect back shell /bin/sh with root privilege. !/usr/bin/perl Title: Kloxo remote root exploit Author: Simo Ben youssef Contact: SimoatMorxploitcom Coded: 28 January 2014 Published: 26 February 2014 MorXploit...

[CGE] Cisco Global Exploiter

Cisco Global Exploiter CGE, is an advanced, simple and fast security testing tool/ exploit engine, that is able to exploit 14 vulnerabilities in disparate Cisco switches and routers. CGE is command-line driven perl script which has a simple and easy to use front-end. CGE can exploit the following...

WordPress Plugin Global Flash Gallery - 'swfupload.php' Arbitrary File Upload

source: https://www.securityfocus.com/bid/65060/info The Global Flash Gallery plugin for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because it fails to properly validate file extensions before uploading them. An attacker may leverage this...