QuickZip 4.x - .zip Local Universal Buffer Overflow

QuickZip 4.x - .zip Local Universal Buffer Overflow !/usr/bin/python Exploit Title : QuickZip 4.x .zip 0day Local Universal Buffer Overflow PoC Exploit Date : 9/3/2010 Author : corelanc0d3r & mrme Bug found by : corelanc0d3r http://corelan.be:8800/ Software Link :...

QuickZip 4.x - '.zip' Local Universal Buffer Overflow

!/usr/bin/python Exploit Title : QuickZip 4.x .zip 0day Local Universal Buffer Overflow PoC Exploit Date : 9/3/2010 Author : corelanc0d3r & mrme Bug found by : corelanc0d3r http://corelan.be:8800/ Software Link : http://www.quickzip.org/downloads.html Version : 4.60 OS : Windows Tested on : XP SP...

SA-CORE-2010-001 - Drupal core - Multiple vulnerabilities

Multiple vulnerabilities and weaknesses were discovered in Drupal. Installation cross site scripting A user-supplied value is directly output during installation allowing a malicious user to craft a URL and perform a cross-site scripting attack. The exploit can only be conducted on sites not yet...

CastRipper 2.9.6.0 (.wvx) file local BOF 0day exploit

Exploit for unknown platform in category local exploits ====================================================== CastRipper 2.9.6.0 .wvx file local BOF 0day exploit ====================================================== !/usr/bin/python CastRipper 2.9.6.0 .wvx file local BOF 0day by FB1H2S Greetz t...

Limny v2.0 Change Email and Password CSRF Exploit

Exploit for unknown platform in category web applications ================================================= Limny v2.0 Change Email and Password CSRF Exploit ================================================= /????????????????????????????\ :Limny 2.0 Change Pass CSRF : / /Discovered By: \ |Luis...

Limny 2.0 - Cross-Site Request Forgery (Change Email and Password)

Limny 2.0 - Cross-Site Request Forgery Change Email and Password /¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯\ :Limny 2.0 Change Pass CSRF : / /Discovered By: \ |Luis Santana | / Overview ¯¯¯¯¯¯¯¯¯¯ The Limny 2.0 CMS is vulnerable to a Cross-Site-Request Forgery exploit which allows for a malicious attacker to...

Limny 2.0 - Cross-Site Request Forgery (Create Admin User)

Limny 2.0 - Cross-Site Request Forgery Create Admin User /¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯\ :Limny 2.0 CSRF : / /Discovered By: \ |Luis Santana | / Overview ¯¯¯¯¯¯¯¯¯¯ The Limny 2.0 CMS is vulnerable to a Cross-Site-Request Forgery exploit which allows for a malicious attacker to create their own...

CastRipper 2.9.6.0 .wvx File Local Buffer Overflow

!/usr/bin/python CastRipper 2.9.6.0 .wvx file local BOF 0day by FB1H2S Greetz to all Darkc0de, Andhra Hackers and ICW Memebers Thanks : Mr bond,beenu,Wipu,GOdwinAustin,Theempty,hgH@x0r,r45c4l,itsecurity,eberly,Tia Shoutz : SMARTHAX0R,j4ckh4x0r,41w@r10r,Hackuin Catch us at www.andhrahackers.com or...

blog ink - Bypass Setting

======================================================================================== | Title : blog ink By Pass Setting Vulnerability | Author : indoushka | email : [email protected] | Home : www.iq-ty.com/vb | Script Home : powered by blog ink | Dork : Powered by PHP Melody 1.5.3 | Teste...

SOMPL Player Buffer Overflow

Exploit for unknown platform in category local exploits ============================ SOMPL Player Buffer Overflow ============================ Exploit Title : SOMPL Player Buffer Overflow Date : 20 January 2010 Author : Rick2600 Software Link :...

SOMPL Player 1.0 - Local Buffer Overflow

Exploit Title : SOMPL Player Buffer Overflow Date : 20 January 2010 Author : Rick2600 ricks2600atgmaildotcom Bug found by : Rick2600 ricks2600atgmaildotcom Software Link : http://www.softpedia.com/progDownload/SOMPL-Download-144999.html Version : 1.0 Issue fixed in: ??? OS : Windows Tested on : X...

Google SketchUp 7.1.6087 Memory Corruption

!/usr/bin/python Google SketchUp = v7.1.6087 'lib3ds' 3DS Importer Memory Corruption Code by: mrme Found by Corelabs Advisory: http://www.coresecurity.com/content/google-sketchup-vulnerability Download: http://download.cnet.com/Google-SketchUp/3000-66774-11097712.html Greetz to: Corelan Security...

Google SketchUp 7.1.6087 - lib3ds 3DS Importer Memory Corruption

Google SketchUp 7.1.6087 - lib3ds 3DS Importer Memory Corruption !/usr/bin/python Google SketchUp = v7.1.6087 'lib3ds' 3DS Importer Memory Corruption Code by: mrme Found by Corelabs Advisory: http://www.coresecurity.com/content/google-sketchup-vulnerability Download:...

Google SketchUp 7.1.6087 - 'lib3ds' 3DS Importer Memory Corruption

!/usr/bin/python Google SketchUp = v7.1.6087 'lib3ds' 3DS Importer Memory Corruption Code by: mrme Found by Corelabs Advisory: http://www.coresecurity.com/content/google-sketchup-vulnerability Download: http://download.cnet.com/Google-SketchUp/3000-66774-11097712.html Greetz to: Corelan Security...

TurboFTP Server 1.00.712 Denial Of Service

Exploit Title : TurboFTP Server 1.00.712 Remote DoS Date : 30 december 2009 Author : corelanc0d3r corelanc0d3ratgmaildotcom Bug found by : corelanc0d3r corelanc0d3ratgmaildotcom Software Link : http://www.tbsoftinc.com/download/tbftpsrv.exe Version : 1.00.712 Issue fixed in: 1.00.720 OS : Windows...

TurboFTP Server 1.00.712 - Remote Denial of Service

TurboFTP Server 1.00.712 - Remote Denial of Service Exploit Title : TurboFTP Server 1.00.712 Remote DoS Date : 30 december 2009 Author : corelanc0d3r corelanc0d3ratgmaildotcom Bug found by : corelanc0d3r corelanc0d3ratgmaildotcom Software Link : http://www.tbsoftinc.com/download/tbftpsrv.exe...

iPhone / iPod - Udisk FTP Basic Edition Remote 0day DoS Exploit

Exploit for unknown platform in category dos / poc =================================================================== Apple iPhone/iPod - Udisk FTP Basic Edition Remote 0day DoS Exploit ===================================================================...

iOS Udisk FTP Basic Edition - Remote Denial of Service

!/usr/bin/python Apple Iphone/Ipod - Udisk FTP Basic Edition Remote 0day DOS exploit Found by: Steven Seeley mrme seeleymagic at hotmail dot com Homepage: http://6tags.com/n/ Price: $4.99 Download: From the app store use your itunes account Tested on: Iphone 3G - firmware 3.1.2 Darwin kernel Gree...

Drupal 6.15 - Multiple Persistent Cross-Site Scripting Vulnerabilities

Exploit Title: 0day Drupal = 6.15 Multiple Permanent XSS Date: 07 01 2009 Author: Emanuele 'emgent' Gentili Software Link: http://ftp.drupal.org/files/projects/drupal-6.15.tar.gz Version: Drupal = 6.15 CVE : N/A Code : http://www.backtrack.it/emgent/exploits/DrupalMultiplePermanentXss-20090107.tx...

CentOS 5 : udev (CESA-2009:0427)

Updated udev packages that fix one security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. udev provides a user-space API and implements a dynamic device directory, providing only the...