MS11-046 Afd.sys Proof of Concept

Exploit for windows platform in category dos / poc / MS11-046 Was a Zero day found in the wild , reported to MS by Steven Adair from the Shadowserver Foundation and Chris S . Ronnie Johndas wrote the writeup dissecting a malware with this exploit . I Rahul Sasifb1h2s just made the POC exploit...

ManageEngine Support Center Plus <=7903 Multiple Vulnerabilities

Exploit for php platform in category web applications | |.--.--.| || | .-----.| | |. | || || | ||. | | | || | |. | ||.| \ ||. | |||||||| |: 1 | |: 1 ||: 1 | |::.. . | |::.. . ||::.. . | -------' -------'-------'...

Confluence does not respect HTTPS in Server Base URL when 301 redirecting

We have Confluence setup behind an Apache reverse proxy and our Server Base URL is set to "https://confluence...". However, when Confluence sends out a 301, it always sends the Location: http://confluence..., which then gets redirected by Apache to https://confluence... Confluence should respect...

Csound - '.hetro' File Handling Stack Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Csound hetro File Handling Stack Buff...

sX-CMS SQL Injection

Exploit Title: sX-CMS = SQL injection Vulnerability Date: 06/04/2012 Author: Ryuzaki Lawlet Web/Blog: http://justryuz.blogspot.com Category: webapps version: - Vendor or Software Link: http://www.source-worx.de/ Google dork: powered by sX-CMS Tested on: Linux Exploit/p0c :...

Advanced POWER Web Hosting CSRF

Exploit for php platform in category web applications Exploit Title: Advanced POWER Web Hosting CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/advanced-power-web-hosting-directory-script-php/22752/ Category:: webapps Demo :...

Virtual War v1.5.0 Multiple Vulnerabilities

Exploit for php platform in category web applications ===========================!Expl0!Ts!==================================== » --- Script : vwar150r15 » --- Exploit Title : Multiple Exploit SQL/Xss/Html Code injection/CSRF add admin » --- Date : 4- 01- 2012 » --- Author : Expl0!Ts » --- Softwa...

Bigace 2.7.7 <= CSRF add admin

Exploit for php platform in category web applications » Bigace 2.7.7 » --- Date : 29- 03- 2012 » --- Author : Expl0!Ts » --- Software Link : http://www.bigace.de/plugins/download/219-bigace2.7.7.zip » --- Version: 2.7.7 » --- Category: php » --- Tested on: wind xp & ubuntu 10.10 » --- Dork : your...

http-drupal-enum-users NSE Script

Enumerates Drupal users by exploiting an information disclosure vulnerability in Views, Drupal's most popular module. Requests to admin/views/ajax/autocomplete/user/STRING return all usernames that begin with STRING. The script works by iterating STRING over letters to extract all usernames. For...

Various Banks Cross Site Scripting

Title: Some bank websites that suffer from Cross-site scripting vulnerabilities. Author: Sony and Flexxpoint Data: 21.03.2012 Sony Blog: http://st2tea.blogspot.com Flexxpoint Blog : http://flexxpoint.blogspot.com/ Site: http://insecurity.ro We staged an experiment out of interest. We looked throu...

CVE-2012-1797

IBM DB2 9.5 uses world-writable permissions for nodes.reg, which has unspecified impact and attack vectors...

Oracle DataDirect ODBC drivers arsqls24. dll buffer overflow vulnerability-vulnerability warning-the black bar safety net

? php / Oracle DataDirect ODBC drivers arsqls24. dll buffer overflow vulnerability Overflow PoC . oce by rgod This poc will create a suntzu. the oce file which should work against Hyperion Interactive Reporting Studio which is delivered with the Oracle Hyperion Suite. When clicked a login box...

Saman Portal Local File Inclusion Vulnerability

Exploit for php platform in category web applications =========================================================== + Title: Iranian Saman portal LFI + Date: 2/28/12 + Author: TMT + Mail: taktazm2800a.tyahoo.com + Type: PHP + Vendor or Software Link: http://www.sis-eg.com + Customers:...

WordPress 3.3.1 Parameter Pollution

TITLE ....... Wordpress 3.3.1 post-auth SQL Injection ............. DATE ........ 16.02.2012 .......................................... AUTOHR ...... http://hauntit.blogspot.com ......................... SOFT LINK ... http://wordpress.org ................................ VERSION ..... 1.0.0...

Ad Manager Pro CSRF Vuln (add admin)

Exploit for php platform in category web applications Exploit Title: Ad Manager Pro CSRF Vuln add admin Author: Jonturk75 Vendor of Software Link: http://www.scripts.com/viewscript/php-text-ad-management/20881/ Category:: webapps Demo site:...

Google Chrome < 17.0.963.65 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 17.0.963.65 and is, therefore, affected by the following vulnerabilities: - Use-after-free errors exist related to 'v8 element wrapper', SVG value handling, SVG document handling, SVG use handling, multi-column handling,...

Mozilla Firefox 4.0.1 Integer Overflow

function hexx var y = x.toString16; y = "0x"+y; return y; function itoai return String.fromCharCodei; // n - length in bytes 1 unicode char = 2 bytes function puffx, n whilex.length n x += x; return x.substring0,n; function arr2hextab var s = ""; forvar i in tab x = tabi; x = x.toString16;...

Mozilla Firefox 4.0.1 - 'Array.reduceRight()' Remote Overflow

function hexx var y = x.toString16; y = "0x"+y; return y; function itoai return String.fromCharCodei; // n - length in bytes 1 unicode char = 2 bytes function puffx, n whilex.length n x += x; return x.substring0,n; function arr2hextab var s = ""; forvar i in tab x = tabi; x = x.toString16;...

Livejournal.com Cross Site Scripting

Exploit Title: Livejournal.com Cross Site Scripting Date: 27.02.2012 Author: Sony Software Link: http://www.livejournal.com/ Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/02/livejournalcom-cross-site-scripting.html...

Sagem F@ST 2604 ADSL Router - Cross-Site Request Forgery

================================================================================ || | | || || || |/ | || |/ | | | | | | | | | | | \ | | | | \ ================================================================================ Exploit Title: Sagem F@ST 2604 CSRF Vulnerability ADSL Router Author: KinG...