SumatraPDF 2.0.1 - '.chm' / '.mobi' Memory Corruption

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= ============================================================================= SumatraPDF v2.0.1 chm and mobi files memory corruption Author: shinnai mail:...

KnFTPd 1.0.0 Denial Of Service

!/usr/bin/perl Advisory: KnFTPd 1.0.0 'FEAT' DoS PoC-Exploit Author: Stefan Schurtz Affected Software: Successfully tested on KnFTPd 1.0.0 Vendor URL: http://knftp.sourceforge.net/ Vendor Status: informed CVE-ID: - PoC-Version: 1.0 use strict; use Net::FTP; my $user = "system"; my $password =...

iLister Multi-Purpose Listing CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: iLister Multi-Purpose Listing CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/ilister-multipurpose-listing-script/23352/ Category:: webapps Demo : http://demo.worksforweb.com/iLister/admin Greet...

Wordpress Kish Guest Posting Plugin 1.0 (uploadify.php) Unrestricted File Upload Vulnerability

-------------------------------------------------------------------------------- Wordpress Kish Guest Posting Plugin 1.0 uploadify.php Unrestricted File Upload -------------------------------------------------------------------------------- author............: Egidio Romano aka EgiX...

zFTPServer Suite 6.0.0.52 - 'rmdir' Directory Traversal

!/usr/bin/perl Advisory: zFTPServer Suite 6.0.0.52 'rmdir' Directory Traversal Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on zFTPServer Suite 6.0.0.52 Vendor URL: http://www.zftpserver.com/ Vendor Status: fixed CVE-ID: CVE-2011-4717 PoC-Version: 0....

Microsoft Office Word 2007 Denial of Service (Memory Corruption?) (SH-012-20110922)

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ?php ------------------------------------------------------------------------------ Microsoft Office Word 2007 Denial of Service Memory Corruption? author: shinnai mail: shinnaiatautisticidotorg site:...

AdvancedDvdPlayer Local Exploit

Exploit for windows platform in category local exploits / Not so usual exploit method Local Heapoverflow exploit An Advanced Exploit For An AdvancedDvdPlayer ; 02-10-2011 AdvancedDvdPlayer 3.03 Download Link : http://download.cnet.com/Advanced-DVD-Player/3000-21394-10310889.html?tag=mncol;3 Teste...

EC_word enterprise management system injection exploit-vulnerability warning-the black bar safety net

The program uses maple General-purpose anti injection 1. 0 asp Edition, this anti-injection completely tasteless, the site program proshow. asp with cookies to injection, or variant of the injection, before injection can first determine what number of fields: ORdeR By xx Injected statement: ANd 1...

Device Type

Based on the remote operating system, it is possible to determine what the remote system type is eg: a printer, router, general-purpose computer, etc. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid54615; scriptversion"1.4";...

Android 1.x2.x HTC Wildfire - Local Privilege Escalation

Android 1.x2.x HTC Wildfire - Local Privilege Escalation / android 1.x/2.x the real youdev feat. init local root exploit. Modifications to original exploit for HTC Wildfire Stage 1 soft-root c 2010 Martin Paul Eve Changes: -- Will not remount /system rw NAND protection renders this pointless --...

digiSHOP 2.0.2 SQL Injection

----------------------------------- TM | | | Y | | | | |. 1 ||||.| | | | |. | -|. |-' | |: | | |: | | |::.|:. | |::.| | --- ---' ---' | Private Place Of 0days | ----------------------------------- ^Exploit Title : ^Date : 23/7/2010 ^Vendor Site : http://digishop.digisoft77.com/ ^MOD Version :...

digiSHOP 2.0.2 - SQL Injection

digiSHOP 2.0.2 - SQL Injection ----------------------------------- TM | | | Y | | | | |. 1 ||||.| | | | |. | -|. |-' | |: | | |: | | |::.|:. | |::.| | --- ---' ---' | Private Place Of 0days | ----------------------------------- ^Exploit Title : ^Date : 23/7/2010 ^Vendor Site :...

digiSHOP 2.0.2 - SQL Injection

----------------------------------- TM | | | Y | | | | |. 1 ||||.| | | | |. | -|. |-' | |: | | |: | | |::.|:. | |::.| | --- ---' ---' | Private Place Of 0days | ----------------------------------- ^Exploit Title : ^Date : 23/7/2010 ^Vendor Site : http://digishop.digisoft77.com/ ^MOD Version :...

Prevx 3.0.5.206 ACCESS DENIED Exploit

Exploit for windows platform in category local exploits ===================================== Prevx 3.0.5.206 ACCESS DENIED Exploit ===================================== Author : STRELiTZIA Software : Prevx 3.0.5.206 and old Tested on : Windows All ============================ = Description =...

Mini-stream RM-MP3 ConverterWMDownloaderASX to MP3 Converter - Local Stack Buffer Overflow

Mini-stream RM-MP3 ConverterWMDownloaderASX to MP3 Converter - Local Stack Buffer Overflow Exploit Title: Mini-stream RM-MP3 Converter/WMDownloader/ASX to MP3 Converter Stack Buffer Overflow Exploit Tested on Windows XP SP3 Pro Found By : Cyber-Zone ABDELKHALEK...

Mini-stream RM-MP3 Converter/WMDownloader/ASX to MP3 Converter - Local Stack Buffer Overflow

Exploit Title: Mini-stream RM-MP3 Converter/WMDownloader/ASX to MP3 Converter Stack Buffer Overflow Exploit Tested on Windows XP SP3 Pro Found By : Cyber-Zone ABDELKHALEK https://www.securityfocus.com/bid/34494 The way exploit written is slightly different than above Vulnerability Refer:...

Linux Kernel 2.2.x<= 25 – 2.4.x<21 ptrace/kmod Local Root Exploit

No description provided by source. / Linux kernel ptrace/kmod local root exploit This code exploits a race condition in kernel/kmod.c, which creates kernel thread in insecure manner. This bug allows to ptrace cloned process, allowing to take control over privileged modprobe binary. Should work...

REZERVI 3.0.2 - Remote Command Execution

!/usr/bin/perl 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail...

SIESTTA 2.0 - Local File Inclusion Cross-Site Scripting

SIESTTA 2.0 - Local File Inclusion Cross-Site Scripting SIESTTA 2.0 LFI/XSS Multiple Vulnerabilities download: http://ramoncastro.es/siesttaold/ Author: Jose Luis Gongora Fernandez 'aka' JosS mail: sys-projectathotmaildotcom site: http://www.hack0wn.com/ team: Spanish Hackers Team - SHT Hack0wn...

SIESTTA 2.0 - Local File Inclusion / Cross-Site Scripting

SIESTTA 2.0 LFI/XSS Multiple Vulnerabilities download: http://ramoncastro.es/siesttaold/ Author: Jose Luis Gongora Fernandez 'aka' JosS mail: sys-projectathotmaildotcom site: http://www.hack0wn.com/ team: Spanish Hackers Team - SHT Hack0wn Security Project!! This was written for educational...