Discussion Forums 2k 3.3 - Multiple SQL Injection Vulnerabilities

No description provided by source. Author: !DoktOR! Date found: 30.09.08 Product: Discussion Forums 2k Version: 3.3 URL: http://developer.berlios.de/projects/df2k/ Vulnerability Class: SQL Injection Condition: magicquotesgpc = Off Exploit 1:...

FreePBX 2.10.0 / Elastix 2.2.0 - Remote Code Execution Exploit

No description provided by source. !/usr/bin/python Exploit Title: FreePBX / Elastix pre-authenticated remote code execution exploit Google Dork: oy vey Date: March 23rd, 2012 Author: muts Version: FreePBX 2.10.0/ 2.9.0, Elastix 2.2.0, possibly others. Tested on: multiple CVE : notyet Blog post :...

Cyberfolio <= 2.0 RC1 (av) Remote File Include Vulnerabilities

No description provided by source. !/usr/bin/env python coding: utf-8 import re from pocsuite.net import req from pocsuite.poc import Output, POCBase from pocsuite.utils import register class CyberfolioRemoteFileIncludePOCBase: vulID = '64221' version = '1' vulDate = '2006-11-06' author = ' '...

wu-ftpd 2.6.2 - Remote Root Exploit (advanced version)

No description provided by source. / wu-ftpd v2.6.2 off-by-one remote 0day exploit. exploit by you dong-hunXpl017Elz, [email protected]. Update: v0.0.2 August 2, I added wu-ftpd-2.6.2, 2.6.0, 2.6.1 finally. v0.0.3 August 3, Brute-Force function addition. v0.0.4 August 4, Added FreeBSD, OpenBSD...

WordPress Allow PHP in Posts and Pages plugin <= 2.0.0.RC1 - SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress Allow PHP in Posts and Pages plugin = 2.0.0.RC1 SQL Injection Vulnerability Date: 2011-08-18 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link:...

Microsoft Windows Fax Services Cover Page Editor (.cov) Memory Corruption

No description provided by source. ?php / Microsoft Windows Fax Services Cover Page Editor .cov Memory Corruption poc by Andrea Micalizzi aka rgod tested on: Microsoft Windows Server 2003 Standard Edition r2 sp2 all patched vulnerability: Microsoft Cover Page Editor fxscover.exe, version 5.2 r2...

OTSCMS <= 2.1.3 - Multiple Remote File Include Vulnerabilities

No description provided by source. Coding 4 Fun c4f.pl OTSCMS = 2.1.3 by Wrzasq www.otscms.com ; Class = Remote File Inclusion ; Download = http://sourceforge.net/project/showfiles.php?groupid=145557 ; Found by = GregStar gregstaratc4fdotpl ;...

GeekLog <= 1.4.0sr3 (_CONF[path]) Remote File Include Vulnerabilities

No description provided by source. --------------------------------------------------------------------------- GeekLog = 1.4.0 CONFpath Remote File Include Vulnerabilities --------------------------------------------------------------------------- Google d0rk: powered by geeklog Discovered By...

DokuWiki <= 2006-03-09b (dwpage.php) System Disclosure Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? printr' -------------------------------------------------------------------------------- DokuWiki = 2006-03-09b release bin/dwpage.php system disclosure exploit by rgod [email protected] site: http://retrogod.altervista.org...

BigAnt Server 2.97 - DDNF Username Buffer Overflow

No description provided by source. !/usr/bin/python Title: BigAnt Server 2.97 DDNF Username Buffer Overflow Author: Craig Freyman @cd1zz http://pwnag3.com Tested on: Windows 7 64 bit DEP/ASLR Bypass Similar Exploits: http://www.exploit-db.com/exploits/24528/...

phpBB <= 2.0.12 Change User Rights Authentication Bypass (c code)

No description provided by source. / Paisterist's code was nice but heres mil's version. precompiled: http://www.milw0rm.com/sploits/897.rar Usage: bcc32 897.cpp and place the exe in your firefox profile dir. Usually C:\Documents and Settings\Application...

WvTFTPd 0.9 - Remote Root Heap Overflow Exploit

No description provided by source. / wvtftp option name heap overflow remote root exploit infamous42md AT hotpop DOT com exploitation is not exactly straight forward. When we overflow our buffer, we overwrite a pointer that is freed before we get to trigger our overwrite. so we have to restore th...

Adobe Acrobat Reader - JBIG2 Local Buffer Overflow PoC (2) (0day)

No description provided by source. !/usr/bin/perl ksOSe 02/22/2009 http://vrt-sourcefire.blogspot.com/2009/02/have-nice-weekend-pdf-love.html my $size = \x40\x00; my $factor = ABCD; my $data = A x 8314; print pdf; sub pdf %PDF-1.5\n . %\xec\xf5\xf2\xe1\xe4\xef\xe3\xf5\xed\xe5\xee\xf4\n . 3 0 \n...

PhpShop Core <= 0.9.0 RC1 (PS_BASE) File Include Vulnerabilities

No description provided by source. --------------------------------------|| Viva Palestine ||----------------------------------------- PhpShop-Core append.php Remot File Include Vulnerability Found By : CoLd Zero Wasem898 Source : includeonce $4AZHARTeAM.Securty.; PalesTine Arab Muslim Hacker's...

IPNPro3 <= 1.44 - Admin Password Changing Exploit

No description provided by source. ?php / ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

Joomla Component iDoBlog <= b24 Remote SQL Injection Vulnerability

No description provided by source. Joomla Component idoblog Remote SQL Injection Founded by : His0k4 Algerian HaCkeR; Contact: His0k4.hlmatgmail.com Greetz : All friends & muslims HaCkeRs : Greetz2 : http://www.palcastle.org/cc/ ScriptName: Joomla ComponentName: comidoblog DORK: inurl:comidoblog...

Apache OpenSSL - Remote Exploit (Multiple Targets) (OpenFuckV2.c)

No description provided by source. / http://paulsec.github.io/blog/2014/04/14/updating-openfuck-exploit/ OF version r00t VERY PRIV8 spabam Compile with: gcc -o OpenFuck OpenFuck.c -lcrypto objdump -R /usr/sbin/httpd|grep free to get more targets hackarena irc.brasnet.org / include arpa/inet.h...

PgmReloaded <= 0.8.5 - Multiple Remote File Include Vulnerabilities

No description provided by source. +------------------------------------------------------------------------------------------- + PgmReloaded = 0.8.5 Multiple Remote File Include Vulnerabilities +------------------------------------------------------------------------------------------- + Vendor...

Edraw Office Viewer Component 7.4 - ActiveX Stack Buffer Overflow

No description provided by source. !-- Exploit Title: Edraw Office Viewer Component V7.4 Stack Buffer Overflow Date: 25 Feb 2011 Author: Alexander Gavrun http://0x1byte.blogspot.com/ Software Link: http://www.ocxt.com/ Version: 7.4 Tested on: Windows Xp Sp2 + Internet Explorer 7 + OfficeViewer 7....

Novell iPrint Client Browser Plugin - ExecuteRequest debug Stack Overflow

No description provided by source. !-- | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-14-novell-iprint-client-browser-plugin-executerequest-debug-parameter-stack-overflow/ Title : Novell iPrint...