Power Tab Editor 1.7 (Build 80) - Buffer Overflow

No description provided by source. Exploit Title : Power Tab Editor v1.7 Build 80 Date : 07/06/2010 Author : Sud0 Bug found by : Sud0 Software Link : http://www.power-tab.net/guitar.php Version : v1.7 Build 80 OS : Windows Tested on : XP SP3 En VirtualBox Type of vuln : EIP / SEH Thanks to my wif...

VerliAdmin <= 0.3 (language.php) Local File Inclusion Exploit

No description provided by source. !/usr/bin/perl VerliAdmin = 0.3 Remote Command Execution Exploit linK : http://bohyn.czechweb.cz/ d0rk: allinurl:verliadmin cod3d and f0unded by Kw3RLn from Romanian Security Team a.K.A http://RST-CREW.NET Contact: ciriboflacsATYaHOo.com or [email protected]...

SigPlus Pro 3.74 - ActiveX LCDWriteString() Remote BoF JIT Spray - aslr/dep bypass

No description provided by source. html !-- =================================================================================================== SigPlus Pro v3.74 ActiveX Signature Capture LCDWriteString Remote BoF JIT Spray - aslr/dep bypass Author: mrme - @StevenSeeley Download:...

TweakFS 1.0 (FSX Edition) Stack buffer overflow

No description provided by source. Exploit Title : TweakFS 1.0 FSX Edition CVE : CVE-2010-1458 Corelan : http://www.corelan.be:8800/advisories.php?id=CORELAN-10-026 Date : April 7th, 2010 Author : corelanc0d3r Bug found by : TecR0c Software Link : http://tweakfs.com/ Version : 1.0 OS : Windows...

ZippHo 3.0.6 (.zip) 0day stack buffer overflow PoC exploit

No description provided by source. !/usr/bin/python ZippHo 3.0.6 .zip 0day stack buffer overflow PoC exploit Author: mrme - http://net-ninja.net/ & http://twitter.com/StevenSeeley Download: http://www.brothersoft.com/zippho-71295.html Platform: Windows XP sp3 En Greetz to: Corelan Security Team &...

Archive Searcher .zip Stack Overflow

No description provided by source. !/usr/bin/ruby Software : Archive Searcher 2.1 Author : Lincoln OS : Windows Tested on : XP SP3 En VirtualBox Type of vuln : SEH Greetz to : Corelan Security Team http://www.corelan.be:8800/index.php/security/corelan-team-members/ Script provided 'as is', withou...

MyPHP CMS <= 0.3 (domain) Remote File Include Vulnerability

No description provided by source. --------------------------------------------------------------------------- MyPHP CMS = 0.3 domain Remote File Include Vulnerabilities --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team :...

Ez Album Blind SQL Injection Vulnerability

No description provided by source. Title : Ez Album Blind SQL Injection Vulnerability Author : Red Security TEAM Date : 31/01/2012 Risk : High Demo : http://www.scriptsez.com Tested On : CentOS Contact : Info 4t RedSecurity d0t COM Home : http://RedSecurity.COM Exploit :...

Android Kernel 2.6 - Local DoS Crash PoC

No description provided by source. Exploit Title: Android Kernel 2.6 Local DoS Date: 12/7/12 Author: G13 Twitter: @g13net Versions: Android 2.2, 2.3 Category: DoS android Vulnerability The Android OS is vulnerable to a local DoS when a filename with a length of 2048 or larger is attempted to be...

Easyzip 2000 3.5 - (.zip) 0day stack buffer overflow PoC exploit

No description provided by source. ?php / Easyzip 2000 v3.5 .zip 0day stack buffer overflow PoC exploit Author: mrme - http://net-ninja.net/ Download: http://www.thefreesite.com/ezip35.exe Platform: Windows XP sp3 Advisory: http://www.corelan.be:8800/advisories.php?id=10-032 Greetz to: Corelan...

QuickZip 4.x (.zip) 0day Local Universal Buffer Overflow PoC Exploit

No description provided by source. !/usr/bin/python Exploit Title : QuickZip 4.x .zip 0day Local Universal Buffer Overflow PoC Exploit Date : 9/3/2010 Author : corelanc0d3r & mrme Bug found by : corelanc0d3r http://corelan.be:8800/ Software Link : http://www.quickzip.org/downloads.html Version :...

Google SketchUp <= 7.1.6087 - 'lib3ds' 3DS Importer Memory Corruption

No description provided by source. !/usr/bin/python Google SketchUp = v7.1.6087 'lib3ds' 3DS Importer Memory Corruption Code by: mrme Found by Corelabs Advisory: http://www.coresecurity.com/content/google-sketchup-vulnerability Download:...

Harpia CMS <= 1.0.5 - Remote File Include Vulnerabilities

No description provided by source. --------------------------------------------------------------------------- Harpia CMS = 1.0.5 Remote File Include Vulnerabilities --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team Remote : Ye...

SyncBack Freeware 3.2.20.0

No description provided by source. !/usr/bin/ruby Software : SyncBack Freeware V3.2.20.0 Author : Lincoln Date : May 19, 2010 Reference : http://www.corelan.be:8800/advisories.php?id=CORELAN-10-041 OS : Windows Tested on : XP SP3 En VirtualBox Type of vuln : SEH Greetz to : Corelan Security Team...

Delivering Digital Media CMS - SQL Injection Vulnerability

No description provided by source. Title: Delivering Digital Media CMS SQL Injection Vulnerability EDB-ID: CVE-ID: OSVDB-ID: Author: Dr.0rYX and Cr3w-DZ Published: Verified: Download Exploit Code Download N/A N.A.S.T ALGERIAN HACKER - NORTH-AFRICA SECURITY TEAM - ! Delivering Digital Media CMS SQ...

Linux Kernel < 2.6.19 udp_sendmsg Local Root Exploit

No description provided by source. / hoagieudpsendmsg.c LOCAL LINUX KERNEL ROOT EXPLOIT 2.6.19 - CVE-2009-2698 udpsendmsg bug exploit via output callback function used in dstentry / rtable Bug reported by Tavis Ormandy and Julien Tinnes of the Google Security Team Tested with Debian Etch r0 $ cat...

Wordpress page-flip-image-gallery plugins Remote File Upload

No description provided by source. Exploit Title: Wordpress page-flip-image-gallery plugins Remote File Upload Vulnerability Author: Ashiyane Digital Security Team Date: 12/06/2013 Vendor Homepage: http://pageflipgallery.com Software Link :...

Wordpress Lazy SEO plugin 1.1.9 - Shell Upload Vulnerability

No description provided by source. Exploit Title : Wordpress Lazy SEO plugin Shell Upload Vulnerability Exploit Author : Ashiyane Digital Security Team Google Dork: : inurl:/wp-content/plugins/lazy-seo/ Date: 2013/09/21 Vendor Homepage : http://wordpress.org/plugins/lazy-seo Software Link :...

qemu -- denial of service vulnerability in VNC

Prasad J Pandit, Red Hat Product Security Team, reports: Qemu emulator built with the VNC display driver is vulnerable to an infinite loop issue. It could occur while processing a CLIENTCUTTEXT message with specially crafted payload message. A privileged guest user could use this flaw to crash th...

WordPress Easy Banners 1.4 Cross Site Scripting

Exploit Title : Wordpress easy-banners.1.4 Cross Site Scripting Exploit Author : Ashiyane Digital Security Team Vendor Homepage : http://wordpress.org/plugins/easy-banners/ Software Link : http://downloads.wordpress.org/plugin/easy-banners.1.4.zip Date : 2014-06-28 Tested on : Windows 7 / Mozilla...