seditio-upload.txt

Seditio CMS Remote File Upload Vulnerability ReSearcher : A.D.T Script : Seditio and Ldu Cms Version : All Versions Script HomePage : http://neocrome.net/ Dork : "powered by seditio" or "powered by ldu" Risk : Very High! Usage : Firstly, you register the victim web site. After, go to "pfs.php" an...

VMware 'IntraProcessLogging.dll' 5.5.3.42958 - Arbitrary Data Write

GoodFellas Security Research Team Technical Details ----------------- SetLogFileName method receives one argument filename in this format "c:\path\file". Proof of Concept ---------------- function Doit...

SecureBlackbox (PGPBBox.dll 5.1.0.112) Arbitary Data Write Exploit

No description provided by source. :. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: PGPBBox.dll 5.1.0.112 SecureBlackbox Arbitary Data Write Exploit. ================================================================ Test in patched XP SP2 IE 6.0/7.0 and Vista IE 7.0...

Program Checker (sasatl.dll 1.5.0.531) DebugMsgLog Heap Spraying Exploit

No description provided by source. :. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: sasatl.dll 1.5.0.531 Program Checker-Method DebugMsgLog Heap Spraying Exploit =============================================================================...

pgpbbox-write.txt

:. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: PGPBBox.dll 5.1.0.112 SecureBlackbox Arbitary Data Write Exploit. ================================================================ Test in patched XP SP2 IE 6.0/7.0 and Vista IE 7.0...

SecureBlackbox (PGPBBox.dll 5.1.0.112) Arbitary Data Write Exploit

Exploit for unknown platform in category remote exploits ================================================================== SecureBlackbox PGPBBox.dll 5.1.0.112 Arbitary Data Write Exploit ================================================================== :. GOODFELLAS Security Research TEAM .: :...

Program Checker (sasatl.dll 1.5.0.531) DebugMsgLog Heap Spraying Exploit

Exploit for unknown platform in category remote exploits ======================================================================== Program Checker sasatl.dll 1.5.0.531 DebugMsgLog Heap Spraying Exploit ======================================================================== :. GOODFELLAS Security...

SecureBlackbox 'PGPBBox.dll 5.1.0.112' - Arbitrary Data Write

:. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: PGPBBox.dll 5.1.0.112 SecureBlackbox Arbitary Data Write Exploit. ================================================================ Test in patched XP SP2 IE 6.0/7.0 and Vista IE 7.0...

Program Checker (sasatl.dll 1.5.0.531) Javascript Heap Spraying Exploit

No description provided by source. :. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: sasatl.dll 1.5.0.531 Program Checker - Javascript Heap Spraying Exploit ======================================================================== Internal ID: VULWAR200706280...

sapdb-seh.txt

/ Dreatica-FXP crew ---------------------------------------- Target : SAP DB 7.4 WebTools Site : http://www.sapdb.org Found by : NGSSoftware Insight Security Research ---------------------------------------- Exploit : SAP DB 7.4 WebTools Remote SEH overwrite exploit Exploit date : 07.07.2007...

Program Checker - 'sasatl.dll 1.5.0.531' JavaScript HeapSpray

:. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: sasatl.dll 1.5.0.531 Program Checker - Javascript Heap Spraying Exploit ======================================================================== Internal ID: VULWAR200706280. Introduction ------------ sasatl.dll is a...

Program Checker (sasatl.dll 1.5.0.531) Javascript Heap Spraying Exploit

Exploit for unknown platform in category remote exploits ======================================================================= Program Checker sasatl.dll 1.5.0.531 Javascript Heap Spraying Exploit ======================================================================= :. GOODFELLAS Security...

SAP DB 7.4 WebTools Remote SEH overwrite Exploit

No description provided by source. / Dreatica-FXP crew ---------------------------------------- Target : SAP DB 7.4 WebTools Site : http://www.sapdb.org Found by : NGSSoftware Insight Security Research ---------------------------------------- Exploit : SAP DB 7.4 WebTools Remote SEH overwrite...

SAP DB 7.4 WebTools Remote SEH overwrite Exploit

Exploit for unknown platform in category remote exploits ================================================ SAP DB 7.4 WebTools Remote SEH overwrite Exploit ================================================ / Dreatica-FXP crew ---------------------------------------- Target : SAP DB 7.4 WebTools Sit...

SAP DB 7.4 - WebTools Remote Overwrite (SEH)

SAP DB 7.4 - WebTools Remote Overwrite SEH / Dreatica-FXP crew ---------------------------------------- Target : SAP DB 7.4 WebTools Site : http://www.sapdb.org Found by : NGSSoftware Insight Security Research ---------------------------------------- Exploit : SAP DB 7.4 WebTools Remote SEH...

Unfixed XSS vulnerability at idahodocs.cdmhost.com

Security researcher frosTMaturidi, has submitted on 07/07/2007 a cross-site-scripting XSS vulnerability affecting idahodocs.cdmhost.com, which at the time of submission ranked 699952 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/07/2007. I...

SAP DB 7.x Web Server - WAHTTP.exe Multiple Buffer Overflow Vulnerabilities

SAP DB 7.x Web Server - WAHTTP.exe Multiple Buffer Overflow Vulnerabilities // source: https://www.securityfocus.com/bid/24773/info SAP DB Web Server is prone to multiple buffer-overflow vulnerabilities because it fails to adequately bounds-check user-supplied input before copying it to an...

HP Digital Imaging (hpqxml.dll 2.0.0.133) Arbitary Data Write Exploit

No description provided by source. :. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: !-- hpqxml.dll 2.0.0.133 from HP Digital Imaging Arbitary Data Write =============================================== Internal ID: VULWAR200706275. Introduction hpqxml.dll is a libra...

hpdi-write.txt

:. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: GoodFellas Security Research Team Technical Detail saveXMLAsFile method receives a filename as an argument, with this format "c:\path\file". Proof of C...

[GOODFELLAS - VULN ] Avaxswf.dll v.1.0.0.1 from Avax Vector software ActiveX Arbitrary Data Write

:. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: Avaxswf.dll v.1.0.0.1 from Avax Vector software ActiveX Arbitrary Data Write ============================================================================ Internal ID: VULWAR200706264 Introduction ------------...