BuzzyWall 1.3.2 File Disclosure

BuzzyWall 1.3.2 resolute.php Local File Disclosure Exploit Found by cr4wl3r @hackb0x d0rk: no d0rk f0r kiddi0ts Script: http://sourceforge.net/projects/buzzywall/files/buzzywall/ err0r c0de resolute.php ?PHP header "Content-type: image/jpeg"; $img = $GET'img'; header'Content-Disposition:...

Apache Struts ParametersInterceptor Remote Code Execution

This module exploits a remote command execution vulnerability in Apache Struts versions use exploit/multi/http/struts/codeexecparameters msf undefinedcodeexecparameters show actions ...actions... msf undefinedcodeexecparameters set ACTION msf undefinedcodeexecparameters show options ...show and s...

Sabadkharid SQL Injection

Exploit Title: sabadkharid SQLinjection Vulnerabilities Google Dork: Powered by Parsp.com - Date: 2011-sep-22 Author: s1nahack3r E-Mail ; [email protected] £££££££££££££££££££££££££££££££££££££££££££££££££££££££££££££££££££££££££ / Sql Injection: http://Target/cart.php?shoppingcart&add2cart=1...

Adobe PDF file PCX Buffer Overflow (APSB11-24; CVE-2011-2437)

A remote code execution vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability is due to buffer allocation error while parsing a PCX image header. A remote attacker may exploit this vulnerability by enticing an unsuspecting user to open a malicious PDF document file...

SpyEye Trojan stole $3.2 million from US victims,Android users will be next target !

SpyEye Trojan stole $3.2 million from US victims,Android users will be next target ! A Russian cybergang headed by a mysterious ringleader called 'Soldier' were able to steal $3.2 million £2 million from US citizens earlier this year using the SpyEye-Zeus data-stealing Trojan, security company...

RealVNC 4.1 Authentication Bypass

No description provided by source. $Id: realvnc41bypass.rb 13641 2011-08-26 04:40:21Z bannedit $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms...

CNELE SQL Injection

By : CR9 Greetz : Perspicacious Hackers In The World . ++++++++++++++++++++++++++++++++++++++++++++++++++++++ Title : CNELE SQL Injection Vulnerability Vendor : http://www.cnele.com Author : CR9 Home : Http://Nopotm.ir Archive : http://CR9Exploits.zio.ir Email : [email protected]...

Online Factor SQL Injection

By : CR9 Greetz : Perspicacious Hackers In The World . ++++++++++++++++++++++++++++++++++++++++++++++++++++++ Title : Online Factor SQL Injection Vulnerability Vendor : http://www.onlinefactor.com.au Author : CR9 Home : Http://Nopotm.ir Archive : http://CR9Exploits.zio.ir Email :...

Free Float FTP Server Buffer Overflow

!/usr/bin/python Free Float FTP server Response stack Buffer Overflow Exploit Tested on: Windows Xp SP2. Author Debasish Mandal URL:http://www.facebook.com/raza.whitehat import socket,sys from struct import pack buff = "A" 251 junk = "A"5 nop = "\x90"20 eip = pack'L',0x77F5801C Shell code generat...

WW Design SQL Injection

|=----=----=----=----=----=------------=| | / | | | | | | / | | | | | | / | | | | | | / | | | | / | | | | / | | | | / | | | / | / |=----=----=----=----=----=------------=| ============================================================================= \ Title :WW Design Injection Vulnerability / ...

Solar FTP Server 2.1.2 - PASV Buffer Overflow (Metasploit)

Exploit Title: Solarftp v2.1.2 PASV buffer overflow Date: Aug 17, 2011 Author: qnix Software Link: http://solarftp.com/files/solarftps-setup.exe Version: 2.1.2 Tested on: Windows XP Universal Detailed info: http://0x80.org/blog/?p=545 require 'msf/core' class Metasploit3 'Solarftp 2.1.2 PASV...

MS11-058: Vulnerabilities in DNS Server Could Allow Remote Code Execution (2562485) (remote check)

The version of Windows DNS server running on the remote host has a memory corruption vulnerability that can be triggered by making a specially crafted NAPTR query. This could allow an attacker to write arbitrary data to the heap and potentially execute arbitrary code. Note that upstream servers m...

Comfortsuite SQL Injection

|=----=----=----=----=----=--------=| | | | /\ /\ \ /\ /\ \ | | //\ /\ \ \L\ \ \ \ \ Turki$ hackers | | \ \ \ \ \ '\ \ \ | | \ \ \ \ \ \L\ \ \ \ \ \ | | \ \ \ / \ \ \ | | // // //// | | | | | |=----=----=----=----=----=--------=|...

Contrexx ShopSystem 2.2 SP3 - Blind SQL Injection

Exploit title: Contrexx Shopsystem Blind SQL Injection Exploit Exploit PoC: index.php?section=shop&productId=VALID productid and YOUR BLIND SQL CODE Exploit tested on: Debian 6, Ubuntu Linux 11.04 Exploit found and written by: Penguin Version: = [email protected] !/usr/bin/php...

Microsoft Remote Desktop Protocol Denial of Service Vulnerability (2570222)

This host is missing a critical security update according to Microsoft Bulletin MS11-065. OpenVAS Vulnerability Test $Id: secpodms11-065.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Remote Desktop Protocol Denial of Service Vulnerability 2570222 Authors: Madhuri D Copyright: Copyright c 2011...

CentOS Update for scsi-target-utils CESA-2010:0362 centos5 i386

Check for the Version of scsi-target-utils OpenVAS Vulnerability Test CentOS Update for scsi-target-utils CESA-2010:0362 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute i...

CentOS Update for scsi-target-utils CESA-2011:0332 centos5 i386

Check for the Version of scsi-target-utils OpenVAS Vulnerability Test CentOS Update for scsi-target-utils CESA-2011:0332 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute i...

CentOS Update for scsi-target-utils CESA-2011:0332 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for scsi-target-utils CESA-2010:0518 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for scsi-target-utils CESA-2010:0518 centos5 i386

Check for the Version of scsi-target-utils OpenVAS Vulnerability Test CentOS Update for scsi-target-utils CESA-2010:0518 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute i...