velBox 1.2 Insecure Cookie Handling

======================================================================================== | Title : velBox v1.2 Insecure Cookie Handling Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | | Web Site : http://dl.p30vel.ir/scripts/velBox-cms-p30vel.zip |...

MusicBox 3.3 - Arbitrary File Upload

======================================================================================== | Title : Musicbox Version 3.3 Upload Shell Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Script : COPYRIGHT 2010 - Musicbox Version 3.3 Product of Shalwan...

eDisplay Personal FTP Server 1.0.0 Stack Buffer Overflow

Exploit Title : eDisplay Personal FTP server 1.0.0 Multiple Post-Authentication Stack BOF Type of sploit: Remote Code Execution Bug found by : loneferret march 19, 2010 Reference : http://www.exploit-db.com/exploits/11810 Exploit date : March 20, 2010 Author : corelanc0d3r Version : 1.0.0 OS :...

Uiga Fan Club - SQL Injection

Exploit Title: Uiga Fan Club SQL Injection Vulnerability Date: 22/03/2010 Author: Sioma Labs Site : http://www.scriptdevelopers.net/products/ufc.html Software Link: http://www.scriptdevelopers.net/download/uigafanclub.zip Version: N/A Tested on: Win Wamp CVE : N/A / / / | | \ | |/ | ' \ / | / / /...

PHP (Multiple Functions) - Local Denial of Service

cominvoke // http://www.nullbyte.org.il // // ================================================================================== $buffer = strrepeat"A", 9999; cominvoke$buffer, 1; ? compropput // http://www.nullbyte.org.il // //...

JAD java Decompiler 1.5.8g - argument Local Crash

JAD java Decompiler 1.5.8g - argument Local Crash !/usr/bin/env python JAD java decompiler 1.5.8g argument Local Crash Tested on Windows Software Link: http://www.varaneckas.com/jad Author: l3D Site: http://xraysecurity.blogspot.com IRC: irc://irc.nix.co.il Email: [email protected] The software...

Flare 0.6 - Local Heap Overflow Denial of Service

Exploit Title: Flare Site: xraysecurity.blogspot.com ---- Coming soon! Registers: EAX 003E0000 ECX 003E1088 ASCII "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA..." EDX 41414141 EBX 00004141 ESP 0022FB0C EBP 0022FBDC ESI 003E1080 EDI 41414141 EIP 77195B44 ntdll.77195B44 import os, sys if lensys.arg...

Dosya Yukle Scrtipi (DosyaYukle Scripti) 1.0 - Arbitrary File Upload

Dosya Yukle Scrtipi DosyaYukle Scripti 1.0 - Arbitrary File Upload ======================================================================================== | Title : Dosya Yukle Scrtipi v1.0 Upload Vulnerability | Author : indoushka | email : [email protected] | Home : www.sec-war.com | Dork ...

Fedora Update for php-ZendFramework FEDORA-2010-0652

Check for the Version of php-ZendFramework OpenVAS Vulnerability Test Fedora Update for php-ZendFramework FEDORA-2010-0652 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Orbital Viewer 1.04 SEH Overflow

!/usr/bin/python sinn3r: I'm just submitting this for mrme Orbital Viewer v1.04 .orb 0day Local Universal SEH Overflow Exploit Date: 27 Feb 2010 CVE: CVE-2010-0688 Download: http://www.orbitals.com/orb/ov.htm Found & exploited by: mrme http://net-ninja.net Greetz to:...

Maian Uploader 4.0 - Arbitrary File Upload

Maian Uploader 4.0 - Arbitrary File Upload ======================================================================================== | Title : Maian Uploader v4.0 Shell Upload Vulnerability | Author : indoushka | email : [email protected] | Home : www.iq-ty.com/vb - Souk Naamane - 04325 - Oum ...

Mediacoder 0.7.3.4605 - Local Buffer Overflow

/ Download: http://www.mediacoderhq.com/download.htm Compilation: mediac.c.......Win32cygwin,Devcpp Tested on Windows xp sp3 Date: 24.02.2010 1.We get control of EIP by overwriting a seh handler with pop pop retn instr and pass exception. 2.We position shellcode where is convienientbasicly anywhe...

New-CMS v1.08 Multiple Vulnerability

Exploit for unknown platform in category web applications ==================================== New-CMS v1.08 Multiple Vulnerability ==================================== Multiple Vulnerability in New-CMS Vendor SW: New-CMS Version: 1.08 but possible all versions Vendor URL: www.new-cms.org Tested...

SongForever.com-Clone Shell Upload

======================================================================================== | Title : SongForever.com-clone Shell Upload Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Web Site :...

Trade Manager Script - SQL Injection

::::::::::::::::::::::::: Exploit Title : Trade Manager Script SQL injection Vulnerability Author : JaMbA Script Site : www.commodityrentals.com Version : All Versions Tested on : Windows & Linux ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :::::::::::::::::::::::::...

VideoDB version 3.0.3 XSS Vulnerability

Exploit for unknown platform in category web applications ======================================= VideoDB version 3.0.3 XSS Vulnerability ======================================= Exploit Title: Permanent Cross-Site Scripting XSS in videoDB 3.0.3 Date: 2010-02-07 Author: vr Software Link:...

ThinkPHP 1.5 / 2.0 Cross Site Scripting

Title: ThinkPHP Securitylab.ir- the truly thief of Iran!! Spring Brother will blast ur Ass!!!...

The recent discovery of a windows overflow 0day demo-vulnerability warning-the black bar safety net

by Langouster Windows overflow vulnerability 1. This vulnerability for Windows somewhere on the design defect cause, should be early Windows legacy issues, the details will not say 2. Affected by this vulnerability the code quite a bit, have Microsoft The there are also third party; The...

CoreFTP 2.1 b1637 - Password field Universal Buffer Overflow

CoreFTP 2.1 b1637 - Password field Universal Buffer Overflow !/usr/bin/python Vulnerability : CoreFTP v2.1 b1637 password field Universal BOF exploit Found by : mrme seeleymagic at hotmail dot com Coded by : mrme & corelanc0d3r Download from : http://www.coreftp.com/download.html Tested on : XP S...

Apple Iphone/Ipod - Serversman 3.1.5 HTTP Remote DoS Exploit

Exploit for unknown platform in category dos / poc ============================================================ Apple Iphone/Ipod - Serversman 3.1.5 HTTP Remote DoS Exploit ============================================================ !/usr/bin/python Apple Iphone/Ipod - Serversman 3.1.5 HTTP Remo...