SQL-Ledger SQL Injection Vulnerability

LedgerSMB and SQL-Ledger are prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent...

Simple HTTPd 1.42 - PUT Remote Buffer Overflow

Simple HTTPd 1.42 - PUT Remote Buffer Overflow !/usr/bin/env python part of femtocell research by TU-Berlin only for educational purposes Exploit Title: remote root on sfr/ubiquisys femtocell webserver wsal/shttpd/mongoose Date: 2011-08-02 Author: nion Software: http://code.google.com/p/mongoose/...

Simple HTTPd 1.42 Denial of Servive Exploit

Exploit for windows platform in category dos / poc !/usr/bin/python Exploit Title: Simple HTTPd 1.42 PoC DoS Date: 8/10/2011 Author: G13 Software Link: http://sourceforge.net/projects/shttpd/files/shttpd/1.42/shttpd-1.42.tar.gz/download Version: 1.42 Tested on: WinXP SP1 CVE : 2011-2900 Since...

MinaliC Webserver v2.0 Remote Source Disclosure

Exploit for windows platform in category remote exploits Exploit Title : MinaliC Webserver v2.0 Remote Source Disclosure Software link : http://sourceforge.net/projects/minalic/ Version : 2.0 Tested on : Windows 7 Home Premium Date : 27/07/2011 Author : X-h4ck Website : http://www.pirate.al ,...

MinaliC WebServer 2.0 - Remote Source Disclosure

MinaliC WebServer 2.0 - Remote Source Disclosure Exploit Title : MinaliC Webserver v2.0 Remote Source Disclosure Software link : http://sourceforge.net/projects/minalic/ Version : 2.0 Tested on : Windows 7 Home Premium Date : 27/07/2011 Author : X-h4ck Website : http://www.pirate.al ,...

MinaliC Webserver 2.0 Source Disclosure

Exploit Title : MinaliC Webserver v2.0 Remote Source Disclosure Software link : http://sourceforge.net/projects/minalic/ Version : 2.0 Tested on : Windows 7 Home Premium Date : 27/07/2011 Author : X-h4ck Website : http://www.pirate.al , http://theflashcrew.blogspot.com Email : [email protected]...

MinaliC WebServer 2.0 - Remote Source Disclosure

Exploit Title : MinaliC Webserver v2.0 Remote Source Disclosure Software link : http://sourceforge.net/projects/minalic/ Version : 2.0 Tested on : Windows 7 Home Premium Date : 27/07/2011 Author : X-h4ck Website : http://www.pirate.al , http://theflashcrew.blogspot.com Email : [email protected]...

MPlayer Lite 33064 Buffer Overflow

!/usr/bin/perl +Exploit Title: MPlayer Lite r33064 m3u Buffer Overflow ExploitDEP BYPASS +Date: 24\07\2011 +Author: C4SS!0 and h1ch4m +Software Link: http://sourceforge.net/projects/mplayer-ww/files/MPlayerRelease/Revision%2033064/mplayerliter33064.7z/download +Version: Lite 33064 +Tested On:...

Ani Shell v1.3 Released -- Mail Bomber (with less spam detection) & PHP Decoder

Ani Shell v1.3 Released -- Mail Bomber with less spam detection & PHP Decoder Introduction Ani-Shell is a simple PHP shell with some unique features like Mass Mailer , A simple Web-Server Fuzzer , DDoser, Back Connect , Bind Shell etc etc ! This shell has immense capabilities and have been writte...

MPlayer Lite r33064 - .m3u Local Buffer Overflow (DEP Bypass)

MPlayer Lite r33064 - .m3u Local Buffer Overflow DEP Bypass !/usr/bin/perl +Exploit Title: MPlayer Lite r33064 m3u Buffer Overflow ExploitDEP BYPASS +Date: 24\07\2011 +Author: C4SS!0 and h1ch4m +Software Link:...

MPlayer Lite r33064 - '.m3u' Local Buffer Overflow (DEP Bypass)

!/usr/bin/perl +Exploit Title: MPlayer Lite r33064 m3u Buffer Overflow ExploitDEP BYPASS +Date: 24\07\2011 +Author: C4SS!0 and h1ch4m +Software Link: http://sourceforge.net/projects/mplayer-ww/files/MPlayerRelease/Revision%2033064/mplayerliter33064.7z/download +Version: Lite 33064 +Tested On:...

ExtCalendar2 SQL Injection / Authentcation Bypass

ext20username pregmatchall'extcalcookieid = "."', DzCURL$target,0,0 , $prf; $prefix = $prf10; header .. $header = "Cookie: ".$prefix."username=admin ' or '1'= '1; ".$prefix."password=admin ' or '1'= '1;"; check if it's work by looking for logout echo eregi"logout", DzCURL$target,0,$header ? " Log...

ExtCalendar2 - Cookie Authentication Bypass / Backdoor Upload

ext20username pregmatchall'extcalcookieid = "."', DzCURL$target,0,0 , $prf; $prefix = $prf10; header .. $header = "Cookie: ".$prefix."username=admin ' or '1'= '1; ".$prefix."password=admin ' or '1'= '1;"; check if it's work by looking for logout echo eregi"logout", DzCURL$target,0,$header ? " Log...

ExtCalendar2 - Cookie Authentication Bypass Backdoor Upload

ExtCalendar2 - Cookie Authentication Bypass Backdoor Upload ext20username pregmatchall'extcalcookieid = "."', DzCURL$target,0,0 , $prf; $prefix = $prf10; header .. $header = "Cookie: ".$prefix."username=admin ' or '1'= '1; ".$prefix."password=admin ' or '1'= '1;"; check if it's work by looking fo...

ExtCalendar2 (Auth Bypass/Cookie) SQL Injection Vulnerability

Exploit for php platform in category web applications ext20username pregmatchall'extcalcookieid = "."', DzCURL$target,0,0 , $prf; $prefix = $prf10; header .. $header = "Cookie: ".$prefix."username=admin ' or '1'= '1; ".$prefix."password=admin ' or '1'= '1;"; check if it's work by looking for logo...

IBSng B1.34(T96) Cross Site Scripting

Exploit Title: XSS vulnerabilitiy in IBSng Date: 12-07-2011 Author: nImaarek Software Link: http://sourceforge.net/projects/ibs/ Version: B1.34T96 Tested on: CentsOs 5.5 Home : Pentesters.ir | sepehr-team.org Exploit "alert'xss' 1 . http:///IBSng/admin/user/searchuser.php 2...

BrewBlogger 2.8.2 Cross Site Scripting / SQL Injection

BrewBlogger 2.3.2 multiple security vulnerabilities Date: 2011-06-23 Author: Brendan Coles / / Advisory: http://itsecuritysolutions.org/2011-06-23BrewBlogger2.3.2multiplesecurityvulnerabilities/ Software: BrewBlogger Version: 2.3.2 Club Edition and Personal Edition Homepage:...

IF-CMS 2.07 - Local File Inclusion (Metasploit) (2)

IF-CMS 2.07 - Local File Inclusion Metasploit 2 $Id: if-cms.rb 2011-03-15 20:28:10 tecr0c $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

Puzzle Apps CMS 3.2 - Local File Inclusion

------------------------------------------------------------------------ Software................ Puzzle Apps CMS 3.2 Vulnerability........... Local File Inclusion Site.................... http://www.puzzleapps.org/ Download Link...

Puzzle Apps CMS 3.2 Local File Inclusion

Exploit for php platform in category web applications ------------------------------------------------------------------------ Software................ Puzzle Apps CMS 3.2 Vulnerability........... Local File Inclusion Site.................... http://www.puzzleapps.org/ Download Link...