CVE-2009-3694

CVE-2009-3694 affects ezRecipe-Zee 91; a directory traversal flaw in config/config.php allows remote inclusion and execution of local files via a .. in cfg[prePath] when register_globals is enabled. Root cause is improper handling of user-controlled path input enabling local file inclusion. The c...

Linux Kernel 2.6.32-rc1 (x86-64) - Register Leak

Linux Kernel 2.6.32-rc1 x86-64 - Register Leak / written by Ingo Molnar -- it's true because this comment says the exploit was written by him! / include include unsigned int r81; unsigned int r82; unsigned int r91; unsigned int r92; unsigned int r101; unsigned int r102; unsigned int r111; unsigne...

Linux Kernel 2.6.32-rc1 (x86-64) - Register Leak

/ written by Ingo Molnar -- it's true because this comment says the exploit was written by him! / include include unsigned int r81; unsigned int r82; unsigned int r91; unsigned int r92; unsigned int r101; unsigned int r102; unsigned int r111; unsigned int r112; unsigned int r121; unsigned int r12...

PT-2009-5715 · Zenas · Zenas Paobacheca Guestbook

Name of the Vulnerable Software and Affected Versions: Zenas PaoBacheca Guestbook version 2.1 Description: The issue allows remote attackers to bypass authentication and gain administrative access. This is achieved by setting the login ok parameter to 1 when register globals is enabled...

MicroCMS 3.5 (SQL/LFI) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ====================================================== MicroCMS 3.5 SQL/LFI Multiple Remote Vulnerabilities ====================================================== Micro CMS File inclusion Vuln Micro CMS SQLi login bypass By learn3r hacker...

Portable E.M Magic Morph 1.95b .MOR File Stack Buffer Overflow PoC

No description provided by source. / Portable E.M Magic Morph 1.95b .MOR File Stack Buffer Overflow POC By fl0 fl0w "can't stop me/my time is now/your time is up/MY TIME IS NOW !!!!" / The EIP offset is at 312 bytes 0x138 HEX After you compile and create the .MOR file ,edit it with HEX EDITOR and...

Portable E.M Magic Morph 1.95b Buffer Overflow

/ Portable E.M Magic Morph 1.95b .MOR File Stack Buffer Overflow POC By fl0 fl0w "can't stop me/my time is now/your time is up/MY TIME IS NOW !!!!" / The EIP offset is at 312 bytes 0x138 HEX After you compile and create the .MOR file ,edit it with HEX EDITOR and start counting from the start of t...

TBDev2 SQL Injection / Remote File Inclusion

======================================= TBDev2 Blind SQL Inj3ct0r + RFI Exploit ======================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database...

Discuz! Plugin Crazy Star < = 2.0 Sql injection Vulnerability-vulnerability warning-the black bar safety net

========================Author============================ + Founded : ZhaoHuAn + Contact : ZhengXingatshandagamesdotcom + Blog : http://www.patching.net/zhaohuan/ + Date : August, 26th 2 0 0 9 Double Seventh Festival ========================Soft Info========================= Software: Discuz!...

Discuz! Plugin Crazy Star 2.0 - fmid SQL Injection

Discuz! Plugin Crazy Star 2.0 - fmid SQL Injection ============================================================ Discuz! Plugin Crazy Star = 2.0 Sql injection Vulnerability ============================================================ ========================Author============================ +...

Discuz! Plugin Crazy Star <= 2.0 (fmid) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== Discuz! Plugin Crazy Star = 2.0 fmid SQL Injection Vulnerability ===================================================================...

XOR Encoder

An x64 XOR encoder. Uses an 8 byte key and takes advantage of x64 relative addressing. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'XOR Encoder', 'Description' = 'An x64 XOR encoder. Uses an...

Design/Logic Flaw

Skalfa Software SkaLinks Exchange Script 1.5 allows remote attackers to add new administrators and gain privileges via a direct request to admin/register.php...

Best Dating Script Arbitrary Shell Upload Vulnerability

No description provided by source. ======================================================= +++++++++++++++++++ |Script info| +++++++++++++++++++++ ======================================================= Shell Upload Vulnerability - script : bestdatingscript - Site : http://www.bestdatingscript.co...

Ultimate Fade-in slideshow 1.51 Shell Upload Vulnerability

Exploit for unknown platform in category web applications ========================================================== Ultimate Fade-in slideshow 1.51 Shell Upload Vulnerability ========================================================== ================== NaMe: Ultimate Fade-in slideshow 1.51 = She...

Best Dating Script Arbitrary Shell Upload Vulnerability

Exploit for unknown platform in category web applications ======================================================= Best Dating Script Arbitrary Shell Upload Vulnerability ======================================================= =======================================================...

Best Dating Script - Arbitrary File Upload

Best Dating Script - Arbitrary File Upload ======================================================= +++++++++++++++++++ |Script info| +++++++++++++++++++++ ======================================================= Shell Upload Vulnerability - script : bestdatingscript - Site :...

Ultimate Fade-in Slideshow 1.51 - Arbitrary File Upload

================== NaMe: Ultimate Fade-in slideshow 1.51 = Shell Upload Vulnerability Author : NeX HaCkeR Contact: [email protected] ================== Script site : http://www.dynamicdrive.com ================== ExplOiT: 1: register in site http://www.xxx.com/path/userregister.php 2: go to your Ad...

Best Dating Script - Arbitrary File Upload

======================================================= +++++++++++++++++++ |Script info| +++++++++++++++++++++ ======================================================= Shell Upload Vulnerability - script : bestdatingscript - Site : http://www.bestdatingscript.com...

Ultimate Fade-in slideshow 1.51 Shell Upload Vulnerability

No description provided by source. ================== NaMe: Ultimate Fade-in slideshow 1.51 = Shell Upload Vulnerability Author : NeX HaCkeR Contact: [email protected] ================== Script site : http://www.dynamicdrive.com ================== ExplOiT: 1: register in site...