11989 matches found
PrecisionID Barcode ActiveX 1.3 - Denial of Service Exploit
No description provided by source. pre span style=font: 14pt Courier New;p align=centerb2007/05/12/b/p/span codespan style=font: 10pt Courier New;span class=general1-symbol-------------------------------------------------------------------------------- bPrecisionID Barcode ActiveX...
Flatnuke <= 2.5.8 file() Privilege Escalation / Code Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? printr' ----------------------------------------------------------------------------- Flatnuke =2.5.8 file/privilege escalation/remote commands xctn exploit by rgod [email protected] site: http://retrogod.altervista.org dor...
PHP Car Rental-Script (Auth Bypass) SQL Injection
No description provided by source. / Name : PHP Car Rental-Script Auth Bypass SQL Injection WebSite : http://www.carrentalphpscript.com/ Author : Hamza 'MizoZ' N. Email : [email protected] Greetz : Zuka , Achille Dark3r , int0x80 , geeksec.comhttp://geeksec.com ... / - Log-On page :...
File 3.x Local Stack Overflow Code Execution Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/7008/info It has been reported that a stack overflow exists in the file program. Although details of this issue are currently unavailable, it is likely that this issue could be exploited to execute code as the user invoki...
zenphoto 1.4.3.3 - Multiple Vulnerabilities
No description provided by source. waraxe-2012-SA096 - Multiple Vulnerabilities in Zenphoto 1.4.3.3 =============================================================================== Author: Janek Vind waraxe Date: 03. November 2012 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-96.html...
Nuked-klaN 1.7.6 - Remote Code Execution Exploit
No description provided by source. ?php Nuked-klaN 1.7.6 Remote Code Execution Exploit ------------------------------------------------ Author: DarkFig [email protected] Website: http://www.acid-root.new.fr/ PHP conditions: None = Private since 2 months. errorreportingEALL ^ ENOTICE; This file...
PHPFox 3.6.0 (build3) Multiple SQL Injection Vulnerabilities
No description provided by source. ------------------------------------------------------------ PHPFox v3.6.0 build3 Multiple SQL Injection vulnerabilities ------------------------------------------------------------ == Description == - Software link: http://www.phpfox.com - Affected versions:...
FastStone Image Viewer 4.6 - ReadAVonIP Crash PoC
No description provided by source. !/usr/bin/perl FastStone Image Viewer 4.6 = ReadAVonIP Arbitrary Code Execution Author: Jean Pascal Pereira [email protected] Vendor URI: http://www.faststone.org Vendor Description: An image browser, converter and editor that supports all major graphic formats...
Linux/ARM - add root user with password - 151 bytes
No description provided by source. / Title: Linux/ARM - add root user with password - 151 bytes Date: 2010-11-25 Tested on: ARM926EJ-S rev 5 v5l Author: Jonathan Salwan - twitter: @shellstorm http://shell-storm.org Informations: ------------- - user: shell-storm - pswd: toor - uid : 0 / include...
Discussion Forums 2k 3.3 - Multiple SQL Injection Vulnerabilities
No description provided by source. Author: !DoktOR! Date found: 30.09.08 Product: Discussion Forums 2k Version: 3.3 URL: http://developer.berlios.de/projects/df2k/ Vulnerability Class: SQL Injection Condition: magicquotesgpc = Off Exploit 1:...
Netvolution CMS <= 2.x SQL Injection Exploit Script
No description provided by source. !/usr/bin/perl Exploit Title: Netvolution exploit script for CMS Version = 2.xx.xx.xx Date: 10/6/2010 Sotware Link: www.netvolution.net Bug found : amquen, krumel Exploited by: krumel Exploit Coded: mr.pr0n Many thanks to icesurfer author of SQLNINJA and all...
PHP <= 5.2.3 (php_win32sti) Local Buffer Overflow Exploit
No description provided by source. ?php / Inphex 317 Bytes , Windows Command Shell Bind TCP Inline , Architecture x86 , Windows TinyXP - vm. GET /script.php HTTP/1.1\n telnet 192.168.2.32 4444 Microsoft Windows XP Version 5.1.2600 C Copyright 1985-2001 Microsoft Corp. C:\apache 7ffdf020 7c911005...
Edraw Office Viewer Component 7.4 - ActiveX Stack Buffer Overflow
No description provided by source. !-- Exploit Title: Edraw Office Viewer Component V7.4 Stack Buffer Overflow Date: 25 Feb 2011 Author: Alexander Gavrun http://0x1byte.blogspot.com/ Software Link: http://www.ocxt.com/ Version: 7.4 Tested on: Windows Xp Sp2 + Internet Explorer 7 + OfficeViewer 7....
Apache OpenSSL - Remote Exploit (Multiple Targets) (OpenFuckV2.c)
No description provided by source. / http://paulsec.github.io/blog/2014/04/14/updating-openfuck-exploit/ OF version r00t VERY PRIV8 spabam Compile with: gcc -o OpenFuck OpenFuck.c -lcrypto objdump -R /usr/sbin/httpd|grep free to get more targets hackarena irc.brasnet.org / include arpa/inet.h...
PgmReloaded <= 0.8.5 - Multiple Remote File Include Vulnerabilities
No description provided by source. +------------------------------------------------------------------------------------------- + PgmReloaded = 0.8.5 Multiple Remote File Include Vulnerabilities +------------------------------------------------------------------------------------------- + Vendor...
MS Windows 2000 sp1/sp2 isapi - .printer Extension Overflow Exploit (2)
No description provided by source. / IIS 5 remote .printer overflow. jill.c don't ask. by: dark spyrit [email protected] respect to eeye for finding this one - nice work. shouts to halvar, neofight and the beavuh bitchez. this exploit overwrites an exception frame to control eip and get to our...
Hycus CMS 1.0.1 - Multiple Cross Site Request Forgery Vulnerabilities
No description provided by source. !--- Title: Hycus CMS 1.0.1 Multiple CSRF Vulnerabilities Author: 10n1z3d 10n1z3datwdotcn Date: Thu 26 Aug 2010 07:53:22 PM EEST Vendor: http://www.hycus.com/ Download: http://www.hycus.com/download/hycuscms-1.0.1.zip --- -= CSRF PoC 1 - Change Admin Password =-...
DMXReady Classified Listings Manager <= 1.1 - SQL Injection Vulnerability
No description provided by source. Title : DMXReady Classified Listings Manager = 1.1 SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.dmxready.com $$ : 99.97 $ Dork : inurl:incclassifiedlistingsmanager.asp DorkEx :...
IPNPro3 <= 1.44 - Admin Password Changing Exploit
No description provided by source. ?php / ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...
sudo 1.8.0-1.8.3p1 (sudo_debug) - Root Exploit + glibc FORTIFY_SOURCE Bypass
No description provided by source. / death-star.c sudo v1.8.0-1.8.3p1 sudodebug format string root exploit + glibc FORTIFYSOURCE bypass by aeon - http://infosecabsurdity.wordpress.com/ This PoC exploits: - CVE-2012-0864 - FORTIFYSOURCE format string protection bypass via nargs integer overflow -...