Typesoft FTP Server 1.1 Denial Of Service

!/usr/bin/python SEH overflow exploiting a vulnerability in Typesoft-FTP APPE command. Date of Discovery: 3/16/2012 0 Day Author: Brock Haun Vulnerable Software Download: http://sourceforge.net/projects/ftpserv/ Software Version: 1.1 Target OS: Windows 7 REQUIRES VALID CREDENTIALS. Luckily,...

TypesoftFTP Server 1.1 Remote DoS (APPE)

Exploit for windows platform in category dos / poc !/usr/bin/python SEH overflow exploiting a vulnerability in Typesoft-FTP APPE command. Date of Discovery: 3/16/2012 0 Day Author: Brock Haun Vulnerable Software Download: http://sourceforge.net/projects/ftpserv/ Software Version: 1.1 Target OS:...

Singapore 0.10.1 Cross Site Scripting

Exploit Title: singapore 0.10.1 Remote XSS Vulnerabilities Author: T0x!c Facebook Page: www.facebook.com/DzTem E-mail: [email protected] Category:: webapps Google Dork: OFF Software : http://sourceforge.net/projects/singapore/ Version: 0.10.1 Tested on: || Windows || +----+ xXx xXx +----+ ===...

PHP Address Book 6.2.12 - Multiple Vulnerabilities

PHP Address Book 6.2.12 - Multiple Vulnerabilities Advisory: PHP Address Book 6.2.12 Multiple security vulnerabilities Advisory ID: SSCHADV2012-007 Author: Stefan Schurtz Affected Software: Successfully tested on PHP Address Book 6.2.12 Vendor URL: http://sourceforge.net/projects/php-addressbook/...

PHP Address Book 6.2.12 Multiple vulnerabilities

Exploit for php platform in category web applications Advisory: PHP Address Book 6.2.12 Multiple security vulnerabilities Author: Stefan Schurtz Affected Software: Successfully tested on PHP Address Book 6.2.12 Vendor URL: http://sourceforge.net/projects/php-addressbook/ Vendor Status: informed...

PHP Address Book 6.2.12 - Multiple Vulnerabilities

Advisory: PHP Address Book 6.2.12 Multiple security vulnerabilities Advisory ID: SSCHADV2012-007 Author: Stefan Schurtz Affected Software: Successfully tested on PHP Address Book 6.2.12 Vendor URL: http://sourceforge.net/projects/php-addressbook/ Vendor Status: informed ==========================...

Zen Cart v.1.5.0 Remote Shell Upload

Exploit for php platform in category web applications Remote Shell Upload Vulnerability DaTe : 5.3.2012 Version : 1.5.0 Tested on: Linux " Ubuntu " , "win 7" Author : Mr.ExiT OrPh4n Email : email protected Site : sh4ck.com + v99x.com Dork : "Powered by Zen Cart" Software Link:...

lizard cart - 'search.php' SQL Injection

Exploit Title: lizard cart SQLi search.php Google Dork: inurl:search.php+intitle:"Lizard Cart"+intext:"Search Results:" Date: 05-03-2012 Author: Number 7 Software Link: http://sourceforge.net/projects/lizardcart/files/latest/download?source=directory Version: pp104 Tested on: Windows Usage:...

Lizard Cart SQL Injection

Exploit Title: lizard cart SQLi search.php Google Dork: inurl:search.php+intitle:"Lizard Cart"+intext:"Search Results:" Date: 05-03-2012 Author: Number 7 Software Link: http://sourceforge.net/projects/lizardcart/files/latest/download?source=directory Version: pp104 Tested on: Windows Usage:...

phxEventManager 2.0 Beta 5 SQL Injection

Exploit Title: phxEventManager 2.0 beta 5 search.php searchterms SQL Injection Vulnerability Date: 01/03/2012 Author: skysbsb Software Link: http://sourceforge.net/projects/phxeventmanager/ Version: Web Application Tested on: Apache/nix Dork: intext: "Powered by phxEventManager" Code : Exploited...

SourceForge.net Cross Site Scripting

Exploit Title: SourceForge.net Cross Site Scripting Date: 3.03.2012 Author: Sony Software Link: http://sourceforge.net/ Google Dorks: sourceforge.net/tracker/index.php?groupid= bugs or tracker Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC:...

phxEventManager 2.0 Beta 5 - search.php search_terms SQL Injection

phxEventManager 2.0 Beta 5 - search.php searchterms SQL Injection Exploit Title: phxEventManager 2.0 beta 5 search.php searchterms SQL Injection Vulnerability Date: 01/03/2012 Author: skysbsb Software Link: http://sourceforge.net/projects/phxeventmanager/ Version: Web Application Tested on:...

phxEventManager 2.0 Beta 5 - 'search.php' search_terms SQL Injection

Exploit Title: phxEventManager 2.0 beta 5 search.php searchterms SQL Injection Vulnerability Date: 01/03/2012 Author: skysbsb Software Link: http://sourceforge.net/projects/phxeventmanager/ Version: Web Application Tested on: Apache/nix Dork: intext: "Powered by phxEventManager" Code : Exploited...

Bitweaver v2.81 Local File Inclusion Vulnerability

Exploit for php platform in category web applications Exploit Title: Bitweaver v2.81 LFI exploit Date: 27.02.2012 Author: I2sec-PJH Software Link: http://sourceforge.net/projects/bitweaver/files/bitweaver2.x/bitweaver2.8.1.zip/download Version: v2.81 Tested on: windows xp...

Kongreg8 1.7.3 Cross Site Scripting

Exploit Title: Kongreg8 1.7.3 Mutiple XSS Date: 02/24/12 Author: G13 Software Link: https://sourceforge.net/projects/kongreg8/ Version: 1.7.3 Category: webapps php Vulnerability Kongreg8 1.7.3 has multiple XSS vulnerabilites. These vulnerabilities are in the Add Member and Add Group functions...

The Uploader 2.0.4 (Eng/Ita) Remote File Upload Remote Code Execution

Exploit for php platform in category web applications require 'msf/core' class Metasploit3 'The Uploader 2.0.4 Eng/Ita Remote File Upload', 'Description'= %q This module exploits various flaws in The Uploader to upload a PHP payload to target system. When run with defaults it will search possible...

PHP Gift Registry 1.5.5 SQL Injection

Exploit for php platform in category web applications Exploit Title: PHP Gift Registry 1.5.5 SQL Injection Date: 02/22/12 Author: G13 Software Link: https://sourceforge.net/projects/phpgiftreg/ Version: 1.5.5 Category: webapps php Vulnerability The userid parameter in the users.php file is...

[SECURITY] Fedora 15 Update: nagios-3.3.1-3.fc15

Nagios is a program that will monitor hosts and services on your network. It has the ability to send email or page alerts when a problem arises and when a problem is resolved. Nagios is written in C and is designed to run under Linux and some other NIX variants as a background process,...

MySQLDumper v1.2x.x SQL Injection/Execute Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

XSS phpLDAPadmin: 1.2.0.5 (Debian package) and 1.2.2 (sourceforge)

Attach some PoC analysis related to a XSS vulnerability to phpldapadmin. I previously coordinate with the Cert-US in order they contact with Sourceforge and Debian, but receive they was unable to put in contact with them. The first discover was on January 10 for 1.1.6 version, where after noticed...