AtomatiCMS - Upload Arbitrary File

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ ''' Abysssec Inc Public Advisory Title : AtomatiCMS Upload arbitrary file Vulnerability Affected Version : AtomatiCMS 10all Discovery : www.abysssec.com Vendor :...

AtomatiCMS - Upload Arbitrary File

AtomatiCMS - Upload Arbitrary File ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ ''' Abysssec Inc Public Advisory Title : AtomatiCMS Upload arbitrary file Vulnerability Affected Version : AtomatiCMS 10all Discovery :...

VisualSite CMS 1.3 - Multiple Vulnerabilities

VisualSite CMS 1.3 - Multiple Vulnerabilities ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-25-visualsite-cms-multiple-vulnerabilities/ ''' Abysssec Inc Public Advisory Title : VisualSite...

SnackAmp 3.1.38 SMP Buffer Overflow

Exploit Title: SnackAmp 3.1.3B Malicious SMP Buffer Overflow Vulnerability SEH Date: 09/24/10 Author: james AT learnsecurityonline DOT com Software Link: http://snackamp.sourceforge.net/ Version: 3.1.3 Beta Tested on: Windows XP SP3 CVE: N/A Just like the previous version there is plenty of room...

VisualSite CMS 1.3 - Multiple Vulnerabilities

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-25-visualsite-cms-multiple-vulnerabilities/ ''' Abysssec Inc Public Advisory Title : VisualSite CMS Multiple Vulnerabilities Affected Version :...

SnackAmp 3.1.3B Malicious SMP Buffer Overflow Vulnerability (SEH)

Exploit for windows platform in category local exploits ================================================================= SnackAmp 3.1.3B Malicious SMP Buffer Overflow Vulnerability SEH ================================================================= Exploit Title: SnackAmp 3.1.3B Malicious SMP...

OvBB v0.16a Multiple Local File Inclusion Vulnerabilities

Exploit for php platform in category web applications ========================================================= OvBB v0.16a Multiple Local File Inclusion Vulnerabilities ========================================================= OvBB v0.16a Multiple Local File Inclusion Vulnerabilities Found by...

RarCrack 0.2 Buffer Overflow

!/usr/bin/env ruby overflow.rb / / / / / / / / / / / / // / / / / / / / // / \ / / / // / , / // / // / // // / // ||/// //// Title: RarCrack 0.2 Buffer Overflow POC Date: 19.09.2010 Author: TheUnKn@wn Email: theunknown at group51.org Twitter: @TheUnKn0wn Homepage: http://group51.org Software...

RarCrack 0.2 - 'Filename init() .bss' (PoC)

The software can be downloaded here: http://rarcrack.sourceforge.net/ Author: stoke Date: 2010-09-20 Download: http://rarcrack.sourceforge.net/ Tested on: Backtrack 4 Site: http://devilcode.it | http://hack2web.altervista.org Special greetz to: nex, for reassure me when i sayed "WHY EIP IT'S NOT...

eNdonesia 8.4 - SQL Injection

eNdonesia 8.4 - SQL Injection ======================================================================/ eNdonesia 8.4 Print Module SQL Injection Vulnerability Download : http://sourceforge.net/projects/endonesia/files/eNdonesia Version : 8.4 or lower maybe also affected Dork :...

Month Of Abysssec Undisclosed Bugs - Luftguitar CMS

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-13-luftguitar-cms-vulnerability-upload-arbitrary-file/ ''' Abysssec Inc Public Advisory Title : Luftguitar CMS Vulnerability: Upload arbitrary...

freediscussionforums 1.0 - Multiple Vulnerabilities

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-14-freediscussionforums-multiple-remote-vulnerabilities/ ''' Abysssec Inc Public Advisory Title : FreeDiscussionForums Multiple Remote...

Joomla! Component JGen 0.9.33 - SQL Injection

Joomla! Component JGen 0.9.33 - SQL Injection +Title Joomla JGen Component comjgen SQL-i Vulnerability +Author RoAdKiLlEr +Contact RoAdKiLlEratKhg-CrewdotWs +Tested on Win Xp Sp 2/3 --------------------------------------------------------------------------- Founded by RoAdKiLlEr Team: Albanian...

YOPS - Web Server Remote Command Execution

DCA-00015 Software - YOPS Your Open Personal WEB Server Vendor Product Description - YOPS Your Own Personal WEB Server is a small SEDA-like HTTP server for Linux OS written in C. There are 7 stages accept, parse, launch, fetch, error, send and log, and pipes are used as interstage channels. Bug...

YOPS Web Server Remote Command Execution

Exploit for windows platform in category remote exploits ======================================== YOPS Web Server Remote Command Execution ======================================== - YOPS Your Open Personal WEB Server Vendor Product Description - YOPS Your Own Personal WEB Server is a small...

mBlogger 1.0.04 Cross Site Scripting

!/usr/bin/python Exploit Title: mBlogger v1.0.04 addcomment.php Persistent XSS Exploit Date : 04 September 2010 Author : Ptrace Security Gianni Gnesa gnix Contact : researchatptrace-securitydotcom Software Link: http://sourceforge.net/projects/mblogger/ Version : 1.0.04 Tested on : EasyPHP 5.3.1....

Joomla! Component Aardvertiser 2.1 - Blind SQL Injection

Joomla! Component Aardvertiser 2.1 - Blind SQL Injection Exploit Title: Joomla Component Aardvertiser 2.1 free Blind SQL Injection Vulnerability Date: 07.09.2010 Author: Stephan Sattler // www.solidmedia.de Software Link:...

mBlogger 1.0.04 - addcomment.php Persistent Cross-Site Scripting

mBlogger 1.0.04 - addcomment.php Persistent Cross-Site Scripting !/usr/bin/python Exploit Title: mBlogger v1.0.04 addcomment.php Persistent XSS Exploit Date : 04 September 2010 Author : Ptrace Security Gianni Gnesa gnix Contact : researchatptrace-securitydotcom Software Link:...

smbind 0.4.7 - SQL Injection

smbind 0.4.7 - SQL Injection smbind query"SELECT ID FROM users WHERE username = '" . $SESSION'username' ."' AND password = '" . md5$SESSION'password' . " ' "; Easy admin login Enter in username field: admin'; Enter in password field: anything Sql query will result like this: SELECT ID FROM users...

smbind 0.4.7 - SQL Injection

smbind query"SELECT ID FROM users WHERE username = '" . $SESSION'username' ."' AND password = '" . md5$SESSION'password' . " ' "; Easy admin login Enter in username field: admin'; Enter in password field: anything Sql query will result like this: SELECT ID FROM users WHERE username = 'admin'; ' A...