ShopMaker CMS 2.0 - Blind SQL Injection Local File Inclusion

ShopMaker CMS 2.0 - Blind SQL Injection Local File Inclusion Shopmaker CMS bSQL/LFI Multiple Remote Vulnerabilities ============================================================================== Software : Shopmaker Asp version : version 2.0 Vendor : http://www.shopmaker.dk/ Author : Platen mail:...

Mediacoder 0.6.2.4275 - .lst Local Stack Buffer Overflow

Mediacoder 0.6.2.4275 - .lst Local Stack Buffer Overflow !/usr/bin/perl MediaCoder 0.6.2.4275 .lst Stack Based Overflow Discovered by : SKULL-HACKER my $header = "\x5B\x70\x6C\x61\x79\x6C\x69\x73\x74\x5D\x0A\x46\x69\x6C\x65\x31\x3D"; my $junk = "\x41" x 254; my $ret = "\x93\x43\x92\x7c"; my $nop ...

PHP Paid 4 Mail Script (paidbanner.php ID) SQL Injection Vulnerability

No description provided by source. + PHP Paid 4 Mail Script ID SQL Injection Vulnerability + Discovered By ThE g0bL!N + http://www.h4ckf0ru.com & http://sec-art.com/cc/ +Homepage : http://www.shop-020.de + Exploit: /paidbanner.php?ID=-1+union+select+1,2,3,4,5,user,7,8,9,10-- + Demo:...

MP3 Studio 1.0 - .mpf .m3u Local Stack Overflow (PoC)

MP3 Studio 1.0 - .mpf .m3u Local Stack Overflow PoC !/usr/bin/perl Found By :: HACK4LOVE MP3 Studio v 1.0 .mpf /.m3u File Local Stack Overflow PoC http://www.software112.com/products/mp3-millennium+download.html Thanks for SkuLL-HacKeR and all WwW.Sec-ArT.CoM/cc team EAX 00000000 ECX 41414141 EDX...

Mozilla Products 'select()' DoS Vulnerability - Linux

Mozilla Firefox/Seamonkey/Thunderbird is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Soritong MP3 Player 1.0 - 'SKIN' Local Stack Overflow (SEH)

-------------------- SkuLL-HacKeR ----------------- !/usr/bin/perl + Bug : Soritong MP3 Player 1.0 SKIN Local Stack Overflow Exploit SEH win32exec - EXITFUNC=seh CMD=calc Size=343 Encoder=PexAlphaNum http://metasploit.com my $shellcode =...

powerUpload 2.4 (Auth Bypass) Insecure Cookie Handling Vulnerability

No description provided by source. || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ \ | | \ \ /\ /\ \ \ \ /...

MultiMedia Jukebox 4.0 Heap Overflow

!/usr/bin/perl Found By :: HACK4LOVE MultiMedia Jukebox 4.0 Build 020124 .pst / .m3u Local Heap Overflow PoC http://www.brothersoft.com/sorcerer-software-multimedia-jukebox-251913.html special thanks for sec-code.com and sniper code my $crash="\x41" x 5000; openmyfile,'hack4love.m3u'; print myfil...

New DOM Flaw Can Crash IE, Other Major Browsers

From The H Security The Luxembourg security specialists G-SEC have published details of a vulnerability in the majority of browsers which will either crash the browser or consume so much memory that it makes the computer virtually unusable. The trick is simple. Using JavaScript’s DOM Document...

MultiMedia Jukebox 4.0 Build 020124 (.pst / .m3u) Heap Overflow PoC

No description provided by source. !/usr/bin/perl Found By :: HACK4LOVE MultiMedia Jukebox 4.0 Build 020124 .pst / .m3u Local Heap Overflow PoC http://www.brothersoft.com/sorcerer-software-multimedia-jukebox-251913.html special thanks for sec-code.com and sniper code my $crash="\x41" x 5000;...

AwingSoft Winds3D Player SceneURL Buffer Overflow

This module exploits a data segment buffer overflow within Winds3D Viewer of AwingSoft Awakening 3.x WindsPly.ocx v3.6.0.0. This ActiveX is a plugin of AwingSoft Web3D Player. By setting an overly long value to the 'SceneURL' property, an attacker can overrun a buffer and execute arbitrary code...

Nokia Phones RealPlayer and MMS Viewer Memory Corruption Issues

Nokia Phones RealPlayer and MMS Viewer Memory Corruption Issues Title : Nokia Phones RealPlayer and MMS Viewer Memory Corruption Issues VUPEN ID : VUPEN/ADV-2009-1815 CVE ID : GENERIC-MAP-NOMATCH CWE ID : CWE-119 Rated as : Critical Remotely Exploitable : Yes Locally Exploitable : Yes Release Dat...

Avax Vector 1.3 Denial Of Service

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Sec-r1z.com =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Vulnerabilities : Avax Vector ActiveX 1.3 avPreview.ocx Denial of Service Exploit Bug Hunter: SatanHackers...

WordPress Plugin DM Albums 1.9.2 - Remote File Disclosure

WordPress Plugin DM Albums 1.9.2 Remote File Dislosure Vulnerability + Author : Stack + Greetz : V4 Team & Sec R1z + Download Script : http://wordpress.org/extend/plugins/dm-albums/ + Xpl : +...

HT-MP3Player 1.0 (.ht3) Universal Buffer Overflow (SEH)

No description provided by source. usage: exploit.py print "" print " HT-MP3Player 1.0 .ht3 Universal Buffer Overflow SEH\n" print " Original author: hack4love=my friend\n" print " Universal exploit : His0k4\n" print " Tested on: Windows XP Pro SP3 EN\n" print " greetz: All friends...

WHOISCART (Auth Bypass) Information Disclosure Vulnerability

No description provided by source. +===================================================================================+ ./SEC-R1Z / / / / /\ \ |/ / \ \ / / / / | | / | | / / \ / / / / | || / | | / / \ \ \ \2009 | \ | | / / / \ /\ / ||\ \ ||/ ...

The Recipe Script 5 Remote XSS Vulnerability

Exploit for unknown platform in category web applications ============================================ The Recipe Script 5 Remote XSS Vulnerability ============================================ + The Recipe Script version 5 Cookie Grabber Exploit + Discovered By ThE g0bL!N + Greetz : All my...

[SECURITY] CVE-2009-0580 Apache Tomcat User enumeration vulnerability with FORM authentication

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2009-0580: Tomcat information disclosure vulnerability Severity: Low Vendor: The Apache Software Foundation Versions Affected: Tomcat 4.1.0 to 4.1.39 Tomcat 5.5.0 to 5.5.27 Tomcat 6.0.0 to 6.0.18 The unsupported Tomcat 3.x, 4.0.x and 5.0.x version...

SEC Consult SA-20090525-4 :: SonicOS Format String Vulnerability

SEC Consult Security Advisory 20090525-4 ========================================================================== title: SonicOS Format String Vulnerability program: SonicWALL Global VPN Client vulnerable version: PRO 4100 SonicOS 4.0.0.2-51e Standard and Enhanced possibly other versions...

SonicOS Format String

SEC Consult Security Advisory ========================================================================== title: SonicOS Format String Vulnerability program: SonicWALL Global VPN Client vulnerable version: PRO 4100 SonicOS 4.0.0.2-51e Standard and Enhanced possibly other versions homepage:...