MP3 CD Converter Professional 5.3.0 Overflow

!/usr/bin/python +Exploit Title: MP3 CD Converter Professional Universal DEP Bypass Exploit +Date: 11\08\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.mp3-cd-converter.com/mp3cdconverter.exe +Version: 5.3.0 +Tested On: WIN-XP SP3 Brazilian Portuguese +CVE: N/A from struct import pack from...

EChat-Server-v2.5

EChat Server is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary-checks on user-supplied data. Successfully exploiting this issue will allow an attacker to execute arbitrary code within the context of the affected application. Failed exploit attempts...

Free-Float-FTP-ACCL

Free Float FTP Server ACCL Command Remote Buffer Overflow Exploit ToDo: Add execute shell ToDo: Test vulnerable targets from socket import import sys, struct, os def sploithost, port: open listener shell on port 4444 sc = "\xd9\xee\xd9\x74\x24\xf4\x5b\x31\xc9\xb1\x5e\x81\x73\x17\xe0\x66" sc +=...

ExtCalendar2 (Auth Bypass/Cookie) SQL Injection

No description provided by source. ? if!$argv1 die" Usage : php exploit.php site Example : php exploit.php http://site.tld/calendar/ "; printr" Exploit....: ExtCalendar2 Auth Bypass/Cookie SQL Injection Author.....: Lagripe-Dz Date.......: 05-o6-2o11 Twitter ...: @LagripeDz HoMe ......:...

FTP-Getter

There was an error when sending a response to the PASV command. Fortunately, these errors lead to buffer overflows. This exploit is unstable. It should only be used as a POC. Tested several times on various systems, the buffer sometimes changed. from socket import import struct import time total ...

Crack OS X 10.7 Hashes

Added: 07/14/2011 Background This tool attempts to crack the passwords retreived by the "Mac OS X Hash grab" exploit tool. Acounts are cracked using dictionaries/Commonpwlong.txt Limitations An existing macosxhashgrab.out file must exist in the /exploits directory. Platforms Mac OS X...

CVE-2011-1829

APT before 0.8.15.2 does not properly validate inline GPG signatures, which allows man-in-the-middle attackers to install modified packages via vectors involving lack of an initial clearsigned message...

ICMusic CMS 1.2 SQL Injection

ICMusic - Music Site Script CMS SQL Injection Vulnerability Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com / http://exploit-id.com / http://magelangcyber.web.id Date : 11 July, 2011 Software Information + Vendor : http://icloudcenter.net/ + Download : NOT FREE...

Freefloat FTP Server - 'LIST' Remote Buffer Overflow

!/usr/bin/python from struct import pack import socket,sys import os print " ||=============================================================||" print " || ||" print " || / \ 0-Exploit Zer0 Thunder ||" print " || \ \ ,, / /--------------------------------------------||" print " || '-./.-'...

Joomla 1.6.3 CSRF Exploit

No description provided by source. This vulnerability takes advantage of the recent Joomla 1.6.3 XSS vulnerability http://seclists.org/fulldisclosure/2011/Jun/519 to execute a CSRF vulnerability to create a superuser account. / joom163.js Joomla 1.6.3 XSS - CSRF Exploit Greetz to Shardy, Xires &...

LuxCal Web Calendar v2.4.2 / v2.5.0 SQL Injection Vulnerability

Exploit for php platform in category web applications LuxCal Web Calendar v2.4.2 / v2.5.0 SQL Injection Vulnerability Author : kaMtiEz email protected Homepage : http://www.indonesiancoder.com / http://exploit-id.com / http://magelangcyber.web.id Date : 6 July, 2011 Software Information + Vendor ...

Joomla 1.6.3 CSRF Exploit

Exploit for php platform in category web applications This vulnerability takes advantage of the recent Joomla 1.6.3 XSS vulnerability http://seclists.org/fulldisclosure/2011/Jun/519 to execute a CSRF vulnerability to create a superuser account.  / joom163.js Joomla 1.6.3 XSS - CSRF Exploit...

PhpFood CMS 2.00 - SQL Injection

PhpFood CMS 2.00 - SQL Injection PhpFood CMS restaurant.php?id= SQL Injection Vulnerability Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com / http://exploit-id.com / http://magelangcyber.web.id Date : 3 July, 2011 Software Information + Vendor :...

Destiny Player 1.6.1.0 Buffer Overflow

print " ||=============================================================||" print " || ||" print " || / \ 0-Exploit Zer0 Thunder ||" print " || \ \ ,, / /--------------------------------------------||" print " || '-./.-' =========================== ||" print " || .--' '--. Destiny Player v1.6.1.0...

P.A.S. (php web-shell)

P.A.S. v.3.0.x Возможности : - Авторизация по кукам. - Шифрование шелла по вашему паролю сразу при скачивании. - Файловый менеджер : групповое удаление, перемещение, копирование, скачка и загрузка файлов и директорий. переименование и создание файлов и директорий. правка, просмотр, изменении...

Dig Emperor Management Platform security vulnerabilities-vulnerability warning-the black bar safety net

Official website: 1, demo Station background turned out to have a place to upload pictures, does not prohibit the upload. 2, the upload image simple filtration, easy to break, Upload a php file, and can be executed. 3, the servervpsconfiguration severe lower, get a webshell directly after is a...

AIX 530012 : U841179

The remote host is missing AIX PTF U841179 which is related to the security of the package bos.rte.lvm You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

Catalog Builder - Ecommerce Software - Blind SQL Injection

Exploit for php platform in category web applications +------------------------------------------------------------------------------------------+ |------- Catalog Builder - Ecommerce Software - Blind SQL Injection Vulnerability -------|...

Microsoft Internet Explorer VML内存破坏CVE-2011-1266远程代码执行漏洞

Bugtraq ID: 48173 CVE ID：CVE-2011-1266 Microsoft Internet Explorer是一款微软开发的WEB浏览器。 从DOM解析VML对象时vgx.dll存在缺陷，具体来说，在页面结构过程中处理Imagedata参数时存在故障代码。通过向imagedata对象动态分配属性，进程会访问释放内存，成功利用漏洞可以应用程序上下文执行任意代码 Microsoft Internet Explorer 7.0.5730 .11 Microsoft Internet Explorer 8.0.7600.16385 Microsoft Internet...

Athollsweb SQL Injection Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...