12021 matches found
TinyIdentD <= 2.2 - Remote Buffer Overflow Exploit
No description provided by source. tinyidentd exploit code by thomas . pollet at gmail . com bug by Maarten Boone usage: python exploit.py target import socket,sys jmp into nop sled payload = '\xeb\x20' ident crap payload += ', 28 : USERID : UNIX : ' nop sled payload +='XXXX' jmp %esi payload +=...
BPTutors Tutoring site script - [ CSRF ] Create Administrator Account
No description provided by source. Title: BPTutors Tutoring site script - CSRF Create Administrator Account Date: 26/3/2010 Author: bi0 Software: http://bpowerhouse.info/tutoring-site-script.htm Version: 1.0 Code : /\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ \ \ // // // 01000010 01101001...
concrete5 CMS 5.6.1.2 - Multiple Vulnerabilities
No description provided by source. ============================================================= \ \ / / | | / \ / | | \ \ V / | | | | | | | | | / \ | ' \ | | | | | | | | | | | | '| | / / . \ | | | | | | || | | | | | | | | | // \ | ./ || / || || |/ || | | || blackpentesters.blogspot.com...
FAQEngine <= 4.16.03 (question.php questionref) SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w FAQEngine = v4.16.03 SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code question.php: $sql = select from .$tableprefix.questions where publish=1 and...
Windows XP PRO SP3 - Full ROP calc shellcode
No description provided by source. / Shellcode: Windows XP PRO SP3 - Full ROP calc shellcode Author: b33f http://www.fuzzysecurity.com/ Notes: This is probably not the most efficient way but I gave the dll's a run for their money ; Greets: Donato, Jahmel OS-DLL's used: Base | Top | Size | Version...
Mac OS X <= 10.4.7 fetchmail Privilege Escalation Exploit (x86)
No description provided by source. !/usr/bin/perl getpwnedmail.pl http://www.digitalmunition.com written by kf kflistsatdigitalmunitiondotcom This is a canibalized version of Kansas City POP Daemon Version 0.0 - Copyright c 1999 David Nicol [email protected] kevin-finisterres-mac-mini:...
125 bind port to 6778 XOR encoded polymorphic linux shellcode .
No description provided by source. / Title : bind port to 6678 XOR encoded polymorphic linux shellcode . Name : 125 bind port to 6678 XOR encoded polymorphic linux shellcode . Date : Tue Jul 6 01:52:33 WIT 2010 Author : gunslinger yudha.gunslingeratgmail.com Web : http://devilzc0de.org blog :...
PHPcounter <= 1.3.2 (defs.php l) Local File Inclusion Vulnerability
No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP YmmMMMM MMM YM Discovered by dun \ dunatstrcpy.pl PHPcounter = 1.3.2 Local File Inclusion Vulnerability Script: A multi-account real time web-site...
GLLCTS2 <= 4.2.4 - (login.php detail) SQL Injection Exploit
No description provided by source. ?php / 08000000088@M@@@M@2ZZZ8@aZX;ii,,:,iir777777777777777777777777r;i:, i ,@X:i:0a7 BMMM88000000000 08888888882aMMMMM,SZZ0WZ ........ 7a2MMMMM : MMM@aZ888888888 08888888888WMMMMM78aSXi XBMMMMMMMMMMMMMM2: MB.X:. ,SMMMMMMMMMMMM. r: MMM0a8888888888...
Clever Database Comparer ActiveX 2.2 - Remote Buffer Overflow PoC
No description provided by source. pre span style=font: 14pt Courier New;p align=centerb2007/05/14/b/p/span codespan style=font: 10pt Courier New;span class=general1-symbol----------------------------------------------------------------------------- bClever Database Comparer ActiveX version 2.2...
F5 BIG-IQ 4.1.0.2013.0 - Privilege Escalation
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'json' class Metasploit3 Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::HttpClien...
WordPress <= 1.5.1.1 "add new admin" SQL Injection Exploit
No description provided by source. !/usr/bin/perl WordPress = 1.5.1.1 sql injection add new admin exploit by RST/GHC , http://rst.void.ru , http://ghc.ru coded by 1dt.w0lf use LWP::UserAgent; use Getopt::Std; use HTTP::Cookies; use Digest::MD5 qwmd5hex; getopts'h:p:'; $path = $opth; $pref = $optp...
BitchX <= 1.1-final do_hook() Remote Denial of Service Exploit
No description provided by source. // BitchX epic =1.1-final | dohook Boundary Check Error Remote DoS ///////////////////////////////////////////////////////////////////////// // Federico L. Bossi Bonin // fbossiatnetcommdotcomdotar // 0 0x080a3fcc in BXdohook which=9999999, format=0x8119077 %s %...
Horde 3.3.12 Backdoor Arbitrary PHP Code Execution
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
ITA Forum <= 1.49 SQL Injection Exploit
No description provided by source. !/usr/bin/perl use LWP::UserAgent; ITA Forum 1.49 sql injection exploit with one char bruteforce by 1dt.w0lf // r57 :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: example: r57ita.pl http://127.0.0.1/ITA...
DMXReady Classified Listings Manager <= 1.1 - SQL Injection Vulnerability
No description provided by source. Title : DMXReady Classified Listings Manager = 1.1 SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.dmxready.com $$ : 99.97 $ Dork : inurl:incclassifiedlistingsmanager.asp DorkEx :...
NetCat CMS Multiple Vulnerabilities
No description provided by source. Exploit Title: NetCat CMS Code exec, SQL-injection Google Dork: none Date: 28.11.2010 Author: brainpillow Software Link: http://netcat.ru/ Version: UNKNOWN On different versions of this software next vulnerabilities are availible:...
FastStone Image Viewer 4.6 - ReadAVonIP Crash PoC
No description provided by source. !/usr/bin/perl FastStone Image Viewer 4.6 = ReadAVonIP Arbitrary Code Execution Author: Jean Pascal Pereira [email protected] Vendor URI: http://www.faststone.org Vendor Description: An image browser, converter and editor that supports all major graphic formats...
PeerCast <= 0.1216 - Remote Buffer Overflow Exploit (win32) (meta)
No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...
Campsite CMS 3.4.0 - Multiple CSRF Vulnerabilities
No description provided by source. !--- Title: Campsite CMS 3.4.0 Multiple CSRF Vulnerabilities Author: 10n1z3d 10n1z3datwdotcn Date: Mon 12 Jul 2010 03:40:46 PM EEST Vendor: http://www.sourcefabric.org/en/home/web/6/Campsite.htm?tpl=18 Download:...