Heise.de Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory: heise.de - Cross-site Scripting vulnerability Advisory ID: SSCHADV2013-002 Author: Stefan Schurtz Affected Software: Successfully tested on heise.de Vendor URL: http://www.heise.de Vendor Status: fixed ========================== Vulnerabilit...

Microsoft windows remote desktop PoC C# Exploit

It Case The Dead Blue Screen :D 4 DoS ! //ms12-020 "chinese shit" PoC //Tested On Win7 Ultimate & Win 2008 Server & Win 2003 Serrver R2 //C Coded By Yomi :D using System; using System.Net; using System.Net.Sockets; namespace RDPPoCExploit class Program public static readonly string strshell =...

Microsoft Internet Explorer 9 - Memory Corruption Crash (PoC)

Microsoft Internet Explorer 9 - Memory Corruption Crash PoC / settimelimit0; iniset'memorylimit', '300M'; if!fileexists"junk.htm" $string = ""; fileputcontents"junk.htm", $string; print "View the sourcecode of the iframe below right click - view source: \n"; print "\n"; for$i = 0; $i \n"; /...

Internet Explorer 9 Memory Corruption

/ settimelimit0; iniset'memorylimit', '300M'; if!fileexists"junk.htm" $string = ""; fileputcontents"junk.htm", $string; print "View the sourcecode of the iframe below right click - view source: \n"; print "\n"; for$i = 0; $i \n"; / http://0xffe4.org / ?...

Microsoft Internet Explorer 9 - Memory Corruption Crash (PoC)

/ settimelimit0; iniset'memorylimit', '300M'; if!fileexists"junk.htm" $string = ""; fileputcontents"junk.htm", $string; print "View the sourcecode of the iframe below right click - view source: \n"; print "\n"; for$i = 0; $i \n"; / http://0xffe4.org / ?...

NeXus Infotech CMS SQL Injection

Exploit title : NeXus Infotech CMS SQL Injection Vulnerability Date : May 05,2012 Author : gr00vehack3r Contact : groove.hacker7/a/t/gmail.com Homepage : www.gr00ve-hack3r.com Vendor : NeXus Infotech Vendor Site : http://www.nexusinfotech.org/ Google Dork : intext:"Powered By NeXus Infotech"...

'phpMoneyBooks' Local File Inclusion (CVE-2012-1669)

'phpMoneyBooks' Local File Inclusion CVE-2012-1669 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in index.php for module handling that allows for local file inclusion using a null-byte attack on the 'module' GET parameter...

GENU CMS - SQL Injection

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- GENU CMS SQL Injection Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- bug found by h0rd h0rdatnull.net homepage http://h0rd.net download http://www.gnew.fr/pages/download.php?file=GENU-2012.3.tar.gz vulnerability in read.php vuln code:...

GENU CMS - SQL Injection

GENU CMS - SQL Injection -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- GENU CMS SQL Injection Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- bug found by h0rd h0rdatnull.net homepage http://h0rd.net download http://www.gnew.fr/pages/download.php?file=GENU-2012.3.tar.gz vulnerability ...

phpPaleo 4.8b156 Local File Inclusion

'phpPaleo' Local File Inclusion CVE-2012-1671 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in index.php for language handling that allows for local file inclusion using a null-byte attack on the 'lang' GET parameter. II...

KnFTPd 1.0.0 Denial Of Service

!/usr/bin/perl Advisory: KnFTPd 1.0.0 'FEAT' DoS PoC-Exploit Author: Stefan Schurtz Affected Software: Successfully tested on KnFTPd 1.0.0 Vendor URL: http://knftp.sourceforge.net/ Vendor Status: informed CVE-ID: - PoC-Version: 1.0 use strict; use Net::FTP; my $user = "system"; my $password =...

KnFTPd 1.0.0 - FEAT Denial of Service (PoC)

KnFTPd 1.0.0 - FEAT Denial of Service PoC !/usr/bin/perl Advisory: KnFTPd 1.0.0 'FEAT' DoS PoC-Exploit Author: Stefan Schurtz Affected Software: Successfully tested on KnFTPd 1.0.0 Vendor URL: http://knftp.sourceforge.net/ Vendor Status: informed CVE-ID: - PoC-Version: 1.0 use strict; use Net::FT...

phpMoneyBooks 1.0.2 Local File Inclusion

Exploit for php platform in category web applications 'phpMoneyBooks' Local File Inclusion CVE-2012-1669 Mark Stanislav - email protected I. DESCRIPTION --------------------------------------- A vulnerability exists in index.php for module handling that allows for local file inclusion using a...

Dragonfly CMS 9.3.3.0 Cross Site Request Forgery

================================================================================================= Vulnerable Software: Dragonfly CMS v9.3.3.0 Downloaded and tested from: http://dragonflycms.org/Downloads/get=28/ Fileinfo:dragonflycms.org Dragonfly9.3.3.0.zip 2.25 MB 70aea682301253637844d7caa10c3e...

ATutor 2.0.3 Cross Site Scripting

Advisory: ATutor 2.0.3 Multiple XSS vulnerabilities Advisory ID: SSCHADV2012-002 Author: Stefan Schurtz Affected Software: Successfully tested on ATutor 2.0.3 Vendor URL: http://atutor.ca Vendor Status: informed ========================== Vulnerability Description ========================== ATuto...

VertrigoServ 2.25 Cross-Site-Scripting vulnerability

Advisory: VertrigoServ 2.25 Cross-Site-Scripting vulnerability Advisory ID: INFOSERVE-ADV2011-11 Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on VertrigoServ 2.25 Vendor URL: http://vertrigo.sourceforge.net/ Vendor Status: informed...

Tiki Wiki CMS Groupware Stored Cross-Site-Scripting

Advisory: Tiki Wiki CMS Groupware Stored Cross-Site-Scripting Advisory ID: INFOSERVE-ADV2011-07 Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on Tiki 8.1 & 6.4 LTS affects all current releases Vendor URL: http://info.tiki.org/ Vendor Status: fixed...

zFTPServer Suite 6.0.0.52 'rmdir' Directory Traversal

Advisory: zFTPServer Suite 6.0.0.52 'rmdir' Directory Traversal Advisory ID: INFOSERVE-ADV2011-09 Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on zFTPServer Suite 6.0.0.52 Vendor URL: http://www.zftpserver.com/ Vendor Status: fixed CVE-ID:...

PHP Inventory 1.3.1 SQL Injection

Advisory: PHP Inventory 1.3.1 Remote Auth Bypass SQL Injection Vulnerability Advisory ID: INFOSERVE-ADV2011-08 Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on PHP Inventory 1.3.1 Vendor URL: http://www.phpwares.com/ Vendor Status: fixed CVE-ID:...

Tiki Wiki CMS Groupware Multiple XSS vulnerabilities

Advisory: Tiki Wiki CMS Groupware Multiple XSS vulnerabilities Advisory ID: INFOSERVE-ADV2011-01 Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on Tiki 7.2 & 8.0 RC1 Vendor URL: http://info.tiki.org/ Vendor Status: fixed for Tiki 7 New Tiki 6 LTS...