2121 matches found
HP Data Protector Manager 8.10 - Remote Command Execution
Exploit for windows platform in category remote exploits !/usr/bin/python Exploit Title: HP-Data-Protector-8.10 Remote command execution. Date: July 11 2014 Exploit Author: Christian Polunchis Ramirez https://intrusionlabs.org Exploit Author: Henoch Chanoc Barrera https://intrusionlabs.org...
Moscrack v2.08b - Multifarious On-demand Systems Cracker (cracking WPA keys in parallel on a group of computers)
Moscrack is a perl application designed to facilitate cracking WPA keys in parallel on a group of computers. This is accomplished by use of either Mosix clustering software, SSH or RSH access to a number of nodes. With Moscrack's new plugin framework, hash cracking has become possible. SHA256/512...
Microsoft Internet Explorer 910 - CFormElement Use-After-Free Memory Corruption (PoC) (MS14-035)
Microsoft Internet Explorer 910 - CFormElement Use-After-Free Memory Corruption PoC MS14-035 loaded = false ; function func if loaded document.body.innerHTML = "" ; // free CFormElement input1 = document.getElementById"input1" ; input1.onclick = func ; loaded = true ; input1.click; // Call DoClic...
Microsoft Internet Explorer 6.0 Resource Detection Weakness
No description provided by source. source: http://www.securityfocus.com/bid/11026/info Microsoft Internet Explorer is prone to a security weakness that may permit an attacker to determine the existence of resources on a vulnerable computer. An attacker can use an IFRAME that is accessible within...
VideoCharge Studio 2.12.3.685 - Buffer Overflow (SEH)
No description provided by source. !/usr/bin/python Exploit Title: VideoCharge Studio SEH Buffer Overflow Date found: 27.10.2013 Exploit Author: metacom URL: http://www.videocharge.com/download.php Software Link: www.videocharge.com/download/VideoChargeStudioInstall.exe Version: 2.12.3.685 Tested...
csUpload Script Site - Authentication Bypass
No description provided by source. Exploit Title: csUpload Script Site Authentication Bypass Google Dork: CSUpload.cgi?command= Date: 4/9/2014 Exploit Author: Satanic2000 Vendor Homepage: http://www.cgiscript.net Software Link:...
VMWare Fusion <= 2.0.5 vmx86 kext local PoC
No description provided by source. / vmware-pop.c Copyright c 2009 by [email protected] VMware Fusion = 2.0.5 vmx86 kext local denial of service POC by mu-b - Mon 22 June 2009 - Tested on: VMware Fusion 2.0.4 10.5.x VMware Fusion 2.0.5 10.5.x http://seclists.org/fulldisclosure/2009/Oct/29...
FortKnox Personal Firewall 9.0.305.0 & 10.0.305.0 - Kernel Driver (fortknoxfw.sys) Memory Corruption Vulnerability
No description provided by source. / Exploit Title: 0day FortKnox Personal Firewall kernel driver fortknoxfw.sys memory corruption vulnerability Date: 25/10/2013 Author: Arash Allebrahim Contact : [email protected] Vendor Homepage: http://www.fortknox-firewall.com/ Vulnerable software :...
Free CD to MP3 Converter 3.1 - Buffer Overflow Exploit (SEH)
No description provided by source. Exploit Title: Free CD to MP3 Converter 3.1 Buffer Overflow Exploit SEH Date: 10/18/10 Credit/Bug found by: C4SS!0 G0M3S Software Link: http://www.eusing.com/Download/cdtomp3freeware.exe Version: 3.1 Tested on: Windows XP SP3 EN VMWARE FUSION - Version 3.1.1 CVE...
quickphp web server 1.9.1 - Directory Traversal
No description provided by source. ------------------------------------------------------------------------ Software................QuickPHP Web Server 1.9.1 Vulnerability...........Directory Traversal Download................http://www.zachsaw.co.cc/?pg=quickphpphptesterdebugger Release...
Golf Club Site SQL Injection Vulnerability
No description provided by source. Exploit Title: Golf Club SQL injection Vulnerability Date: 30/06/2010 Author: JaMbA Script url: http://www.internetdm.co.uk/site/pages.php?fid=0,1,362 Version: N/A Tested on: Windows CVE : EXPL0!T http://server/path/pages.php?fid=0,13&ppid=38SQL Greetz to :...
Python Untrusted Search Path/Code Execution Vulnerability
No description provided by source. Exploit Title: Python untrusted search path/code execution vulnerability Date: 7.6.12 Exploit Author: rogueclown Vendor Homepage: http://www.python.org Software Link: http://www.python.org/getit/releases/ Version: python 2.7.2 and python 3.2.1 Tested on: linux m...
Ofilter Player (skin.ini) Local Crash PoC
No description provided by source. !/usr/bin/perl Exploit Title: Ofilter Player skin.ini Local Crash PoC Author:Vulnerability Discovered By Rehan Ahmed [email protected] Tested On: WinXP SP2 my $boom=\x41 x 5000; my $file=skin1.ini; C:\Program Files\OfilterPlayer\skin open$FILE,$file; print $FILE...
Arkeia Backup Client Type 77 Overflow (Mac OS X)
No description provided by source. $Id: type77.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
FiSH-irssi 0.99 - Evil ircd Buffer Overflow
No description provided by source. FiSH IRC encryption evil ircd PoC exploit. Abuses CVE-2007-1397 Bad ircd, nasty bnc provider, nicknames over 100 char -- ruin. Runs arbitrary code which which in this case shuts down irssi. Tested on my own compiled FiSH with irssi/fedora/x86 There are a lot mor...
FuzeZip 1.0.0.131625 - SEH Buffer Overflow
No description provided by source. !/usr/bin/python Exploit Title: SEH BUFFER OVERFLOW IN FUZEZIP V.1.0 Date: 16.Apr.2013 Vulnerability reported Exploit Author: Josep Pi Rodriguez, Pedro Guillen Nunez , Miguel Angel de Castro Simon Organization: RealPentesting Vendor Homepage: http://fuzezip.com/...
WordPress Occasions Plugin 1.0.4 - CSRF Vulnerability
No description provided by source. html !-- Exploit Title: WordPress Occasions Plugin 1.0.4 CSRF Google Dork: inurl:/wp-content/plugins/occasions Date: 18.03.2013 Exploit Author: m3tamantra http://m3tamantra.wordpress.com/blog Vendor Homepage: http://wordpress.org/extend/plugins/occasions/ Softwa...
Immunity Debugger 1.85 - Stack Overflow Vulnerabil?ity (PoC)
No description provided by source. / Filename : CrashPOC.cpp Exploit Title: title Date: 20 March 2014 Exploit Author: Veysel HATAS [email protected] - Web Page : www.binarysniper.net Vendor Homepage: https://www.immunityinc.com/ Software Link: https://www.immunityinc.com/products-immdbg.shtml...
Linux Kernel <= 2.6.17.4 - (proc) Local Root Exploit
No description provided by source. / Author: h00lyshit Vulnerable: Linux 2.6 ALL Type of Vulnerability: Local Race Tested On : various distros Vendor Status: unknown Disclaimer: In no event shall the author be liable for any damages whatsoever arising out of or in connection with the use or sprea...
Joomla (com_mochigames) SQL Injection Vulnerability
No description provided by source. ...BEGIN ADVISORY... !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! RESEARCHER: B-HUNT3|2 CONTACT: bhunt3ratnospamgmaildotnospamcom TESTED ON: LocalHost...