Geomau 7 - '.wg2' Local Buffer Overflow (PoC)

!/usr/bin/perl Exploit Title : Geomau 7 .wg2 local Buffer Overflow Poc tested on windows xp SP 3 FR Author: MadjiX - Dz8atHotmaiLdotCoM download: http://math.exeter.edu/rparris/peanut/wgau32z.exe Special Greets:Bibi-info , His0k4 where are you : EAX 0012F640 ECX 00BB8F68 EDX 00004789 EBX 41414141...

Karkia SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 0...

Joomla Component com_eportfolio Upload Vulnerability

No description provided by source. Name : Joomla comeportfolio Upload Vulnerability Date : june, 20 2010 Critical Level : HIGH Vendor Url : http://www.joomplace.com/e-portfolio/e-portfolio-description.html Google Dork:inurl:comeportfolio Author : Sid3^effects aKa HaRi shellc99atyahoo.com special...

Elite Gaming Ladders 3.5 SQL Injection

/ - Elite Gaming Ladders v3.5 SQL Injection Vulnerability - ---Date : 2010-06-19 ---Author : ahwak2000 ---Email : z.u5athotmail.com - Script Info - ---Home : http://eliteladders.com/ ---Demo : http://eliteladders.com/demo/ - Vulnerability - http://site.com/path/standings.php?ladderid=SQL INj -...

File Sharing Wizard Version 1.5.0 (SEH) Exploit

No description provided by source. !/usr/bin/python print "\n" print " Team Hackers Garage " print " www.garage4hackers.com " print " " print " File Sharing Wizard Version 1.5.0 " print " Remote Command Execution " print " Author: b0nd " print " [email protected] " print " " print " Greetz to:...

VUPEN Security Research - Adobe Flash Player GIF/JPEG Data Parsing Heap Overflow Vulnerabilities (CVE-2010-2167)

VUPEN Security Research - Adobe Flash Player GIF/JPEG Data Parsing Heap Overflow Vulnerabilities CVE-2010-2167 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Adobe Flash Player is a cross-platform browser-based application runtime that delivers uncompromised viewin...

Samba 2.2.8 (BSD x86) - 'trans2open' Remote Overflow (Metasploit)

$Id: trans2open.rb 9552 2010-06-17 22:11:43Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

linux/x86 chmod("/etc/shadow", 0666) ASCII shellcode 443 bytes

Exploit for linux/x86 platform in category shellcode ============================================================== linux/x86 chmod"/etc/shadow", 0666 ASCII shellcode 443 bytes ============================================================== / | Title: Linux/x86 chmod"/etc/shadow", 0666 ASCII...

AIX 610004 : U833965

The remote host is missing AIX PTF U833965 which is related to the security of the package devices.pciex.b3154a63.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

AIX 610003 : U834155

The remote host is missing AIX PTF U834155 which is related to the security of the package bos.64bit You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

File Sharing Wizard 1.5.0 - Buffer Overflow (PoC)

!/usr/bin/python http://www.sharing-file.net/ File Sharing Wizard Version 1.5.0 build on 26-8-2008 controlling EAX ESP points to our buffer buffer grows if we increase our string more details on http://www.s3cur1ty.de have fun m1k3 at m1k3 dot at import socket import sys if lensys.argv " sys.exit...

Debian DSA-2058-1 : glibc, eglibc - multiple vulnerabilities

Several vulnerabilities have been discovered in the GNU C Library aka glibc and its derivatives. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-1391, CVE-2009-4880, CVE-2009-4881 Maksymilian Arciemowicz discovered that the GNU C library did not...

solaris/x86 - Sync() & reboot() & exit(0) - 48 bytes

Exploit for solaris/x86 platform in category shellcode ==================================================== Solaris/x86 - Sync & reboot & exit0 - 48 bytes ==================================================== / Title: Solaris/x86 - Sync & reboot & exit0 - 48 bytes Author: Jonathan Salwan Web:...

Rayzz Photoz Shell Upload

========================================================== Rayzz Photoz Upload Vulnerability ========================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /'...

linux/x86 - give all user root access when execute /bin/sh 45 bytes

45 bytes give all user root access when execute /bin/sh x86 linux shellcode. Shellcode exploit for linux platform / Name : 45 bytes give all user root access when execute /bin/sh x86 linux shellcode Date : Sat Jun 5 16:10:00 2010 Author : gunslinger Web : http://devilzc0de.org blog :...

TCExam 10.1.006 Shell Upload

============================================================================================================ //\ /\ /\ /\ /\ /\ ///\ //\ /\ /\///\ // \ // //\ \ / //\ \ / // //\ \ /\\ \ \ \ / / / / // \ \ // // // // \ // //\ \\ \ // /// \ \ / \ / // / // / / / / / \ \ / / / ...

linux/x86 change mode 0777 of "/etc/shadow" sys_chmod syscall 39 bytes

Exploit for linux/x86 platform in category shellcode =========================================================================== linux/x86 change mode 0777 of "/etc/shadow" with syschmod syscall 39 bytes =========================================================================== /...

linux/x86 sys_rmdir("/tmp/willdeleted") shellcode 41 bytes

Exploit for linux/x86 platform in category shellcode ========================================================== linux/x86 sysrmdir"/tmp/willdeleted" shellcode 41 bytes ========================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-...

Fusebox SQL Injection

----------------------------------------------------------------------------------------- AJSADVISORIES01&2010 fusebox ProductList.cfm?CatDisplay Remote SQL Injection Vulnerability ----------------------------------------------------------------------------------------- Author : Shamus Date : May...

Realtor WebSite System E-Commerce - SQL Injection

Realtor WebSite System E-Commerce - SQL Injection =============================================== Realtor WebSite System E-Commerce SQL Injection Vulnerability =============================================== .----..--.--.| |--..-----..----.| |.-----..-----. | || | || || -|| || || || | ||| |||||||...