A-PDF All to MP3 Converter 2.0.0 - '.wav' Local Buffer Overflow (SEH)

Exploit Title: A-PDF All to MP3 Converter v.2.0.0 SEH overflow Software Link: http://www.a-pdf.com/all-to-mp3/download.htm Version: = 2.0.0 Tested on: Win XP SP2 English Date: 29/01/2011 Author: m0nna Email: [email protected] triggering details: Open the app, drag the crafted .wav file, cal...

ComercioPlus v.5.6 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Comerciosonline CMS SQLi Google Dork: allintext: " Servicio ofrecido por ComerciosOnLine " Date: 27/01/2011 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software...

comercioplus 5.6 - Multiple Vulnerabilities

comercioplus 5.6 - Multiple Vulnerabilities Exploit Title: Comerciosonline CMS SQLi Google Dork: allintext: " Servicio ofrecido por ComerciosOnLine " Date: 27/01/2011 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software Link:...

Web Articles SQL Injection

Exploit Title: Web Articlesarticledisp.phpSQL Injection Vulnerability Google Dork: inurl:"articledisp.php " Date: 24/01/2011 Author: PenetraDz AuthorEmail:[email protected] Home:Algeria/Freedom tO Palestine Language: php Tested on: windows xp sp3 en...

CultBooking 2.0.4 (cultbooking.php) Multiple XSS/PD Vulnerabilities

Summary Open source hotel booking system Internet Booking Engine IBE. Via a central api called CultSwitch it is possible to make bookings and set the actual availabilities in the hotels pms. This is easy to install and easy to integrate with full support. Description CultBooking Hotel Booking...

eXtremeMP3 Player Buffer Overflow (SEH)

Exploit for windows platform in category local exploits +Exploit Title: Exploit Bufer Overflow eXtremeMP3 PlayerSEH +Date: 01\15\2010 +Author: C4SS!0 G0M3S +Software Link: http://ukms.tucows.com/files2/xtremv20RC1.exe +Version: 2.0 +Tested on: WIN-XP SP3 BRAZILIAN +CVE: N/A Create by C4SS!0 G0M3S...

Siteframe 3.2.3 (user.php) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Siteframe 'user.php' SQL Injection Vulnerability Google Dork: "powered by Siteframe" Date: 29/12/2010 Author: AnGrY BoY Software Link: http://sitefrane.org/downloads/ Version: Siteframe 3.2.3 Tested on: windows SP2 CVE : N/A...

QuickPHP Web Server 1.9.1 - Directory Traversal

------------------------------------------------------------------------ Software................QuickPHP Web Server 1.9.1 Vulnerability...........Directory Traversal Download................http://www.zachsaw.co.cc/?pg=quickphpphptesterdebugger Release Date............12/27/2010 Tested...

OpenEMR v3.2.0 SQL Injection and XSS

Exploit for php platform in category web applications Exploit Title: OpenEMR v3.2.0 Multiple Vulnerabilities Date: December 26, 2010 Author: Blake Software Link: http://sourceforge.net/projects/openemr/ Version: 3.2.0 Tested on: Windows XP SP3 Description: Open Source Practice Management,...

Word Splash Pro <= 9.5 Buffer Overflow

Exploit for windows platform in category local exploits Exploit Title: Word Splash Pro Word list-Import then click on Word List Builder button my $file = "1.wsl"; my $size = 4112; my $nseh = "\xeb\x06\x90\x90"; jump 6 bytes my $seh = pack'V', 0x01de44dc; pop pop ret from CRDE2000.DLL my $egg =...

FreeAmp 2.0.7 Buffer Overflow

Exploit Title: FreeAmp 2.0.7 .m3u Buffer Overflow - Egghunter Google Dork: N/A Date: 11/12/2010 Author: zota Thanks to Andrew; [email protected] Software Link: http://letoltes.szoftverbazis.hu/bfc5ec1d5e80cee5b5d3f78459113ed93c51f649/4d03800a/freeamp-v2-0-7-JI2/freeampsetup207.exe...

PowerShell XP 3.0.1 Buffer Overflow 0day

Exploit for windows platform in category local exploits !/usr/bin/python vuln finders : kmkz, zadyree, hellpast author : m101 site : http://binholic.blogspot.com/ Exploit Title: PowerShell XP 3.0.1 0day Date: 11/12/2010 Author: m101 Software Link:...

FreeAmp 2.0.7 - &#039;.m3u&#039; Local Buffer Overflow

Exploit Title: FreeAmp 2.0.7 .m3u Buffer Overflow - Egghunter Google Dork: N/A Date: 11/12/2010 Author: zota Thanks to Andrew; [email protected] Software Link: http://letoltes.szoftverbazis.hu/bfc5ec1d5e80cee5b5d3f78459113ed93c51f649/4d03800a/freeamp-v2-0-7-JI2/freeampsetup207.exe...

Winzip 15.0 WZFLDVW.OCX IconIndex Property Denial Of Service

Exploit Title: Winzip WZFLDVW.OCX IconIndex property access violation Author: fady mohamed osman Software Link : http://www.winzip.com/downwz.htm Version: 15.0 Build 9334 Tested on: Win XP Sp2 CVE : N/A Website : http://www.darkmasters.co.cc/ Twitter : http://twitter.com/FadyOsman 'Wscript.echo...

WinZip 15.0 - WZFLDVW.OCX Text Property Denial of Service

Exploit Title: Winzip WZFLDVW.OCX text property access violation Author: fady mohamed osman Software Link : http://www.winzip.com/downwz.htm Version: 15.0 Build 9334 Tested on: Win XP Sp2 CVE : N/A Website : http://www.darkmasters.co.cc/ Twitter : http://twitter.com/FadyOsman 'Wscript.echo...

MODx Revolution CMS 2.0.4-pl2 Remote XSS POST Injection Vulnerability

Summary MODx Revolution is a powerful PHP Content Management Framework that plays nicely with custom code and helps you build sites faster and maintain them with ease. With Revolution you'll leverage the best things to come around since MVC and Active Record. Description The MODx Revolution CMS...

iFTPStorage 1.3 Directory Traversal

x3l http://gahor-krisztian.hu/xel [email protected] Exploit: iFTPStorage for iPhone / iPod touch = 1.3 - Directory Traversal Date: 02/12/2010 Author: x3l Software Link: http://itunes.apple.com/us/app/iftpstorage/id333357690?mt=8 Version: 1.3 Tested on: iPhone 3GS with 4.2.1 firmware There is...

J-Integra v2. 1 1 remote code execution vulnerability-vulnerability warning-the black bar safety net

J-Integra is a powerful, enables Java and COM, and J2EE, and. NET compatible middleware. J-Integra is divided into J-Integra for COM, J-Integra for . NET and J-Integra for Exchange of three partial products. J-Integra v2. 1 1 A control in the presence of a remote code execution vulnerability that...

FreeTrim MP3 2.2.3 - Denial of Service

FreeTrim MP3 2.2.3 - Denial of Service Exploit Title: FreeTrim MP3 Local Crash PoC Software Link: http://www.freetrimmp3.com/downloads/FreeTrimMP3.exe Tested on: Win XP SP3 Date: 02-12-2010 Author: h1ch4m Email: [email protected] sahra dyalna o jazayrya khotna my $file= "1.cda"; my $junk = "\x41" x...

Mediacoder 0.7.5.4792 Buffer Overflow

Exploit Title: Mediacoder 0.7.5.4792 SEH Buffer Overflow Exploit Date: 11/29/2010 Author: 0v3r Software Link: http://www.mediacoderhq.com/mirrors.htm?file=MediaCoder-0.7.5.4792.exe Version: 0.7.5.4792 Tested on: Windows XP SP3 EN CVE: N/A !/usr/bin/python win32bind - EXITFUNC=seh LPORT=4444...