CMS Mini 0.2.2 - Multiple Vulnerabilities

No description provided by source. ------------------------------------------------------------------------------------------ Exploit Title: CMSMini - Multiple Vulnerability Author: SANTHO @s4n7h0 Vendor Homepage: http://sourceforge.net/projects/cmsmini/ Download link:...

VirtualDJ Pro/Home <= 7.3 - Buffer Overflow Vulnerability

No description provided by source. def encodeDatadecoder, data, validValues: assert data.find"\0" == -1, "Shellcode must be NULL free" data += "\0" End of shellcode encData = decoder-2: decoder = decoder:-2 for p in rangelendata: dByte = orddatap pxByte = ordencDatap+1 bx, by = encoderdByte ^...

MyVideoConverter 2.15 - Local DoS

No description provided by source. Exploit Title: MyVideoConverter Local DoS Date: April 5, 2010 Software Link: http://www.ivideogo.com/ Version: 2.15 Tested on: Windows XP SP3 Author: anonymous !/usr/bin/perl my $file = hmm.vro; my $null = \x00; open FILE, $file; print FILE $null; print Done...

Multiple D-Link Router Models Authentication Bypass Vulnerability

No description provided by source. Exploit Title: Multiple D-Link Router Authentication Bypass Vulnerabilities Date: 12-01-2011 Author: Craig Heffner, /dev/ttyS0 Firmware Link: http://www.dlink.co.uk/ Firmware Versions: All Tested on: DIR-300, DIR-320, DIR-615 revD Multiple D-Link routers that us...

Shellcode - Win32 MessageBox (Metasploit module)

No description provided by source. $Id: messagebox.rb 4 2010-02-26 00:28:00:00Z corelanc0d3r & rick2600 $ Installation instructions : Drop file in framework3/modules/payloads/singles/windows folder Usage : ./msfpayload windows/messagebox TITLE=Corelan TEXT=Greetz to corelanc0d3r P require...

SOOP Portal Raven 1.0b SQL Injection Vulnerability

No description provided by source. Exploit Title: SOOP Portal Raven 1.0b sql injection Google Dork: Powered by SOOP Portal Raven 1.0b Date: date Author: Evil-Thinker Version: Raven 1.0b Tested on: Windows Soft Technologie : ASP.net Exploit Details :...

AudioTran 1.4.2.4 SafeSEH+SEHOP Exploit

No description provided by source. Exploit Title: AudioTran SafeSEH+SEHOP all-at-once attack method exploit Date: 2010.10.1 Author: x90c Software Link: http://www.exploit-db.com/application/14961/ Version: 1.4.2.4 Tested on: - MS Win xp sp3 pro ko SafeSEH - MS Win xp sp3 pro en SafeSEH - MS Win...

VLC Player 2.0.8 (.m3u) - Local Crash PoC

No description provided by source. Exploit Title: VLC Player 2.0.8 = Local Crash PoC Vendor URI: http://www.videolan.org/vlc/ Vendor Description: VLC is a free and open source cross-platform multimedia player and framework that plays most multimedia files as well as DVD, Audio CD, VCD, and variou...

Create a New User with UID 0 - ARM (Meta)

No description provided by source. Exploit Title: Linux/ARM - Create a new user with UID 0 MSF Date: 2010-11-25 Author: Jonathan Salwan - twitter @jonathansalwan Tested on: ARM926EJ-S rev 5 v5l Issue link: https://metasploit.com/redmine/issues/3254 This file is part of the Metasploit Framework an...

Celestial Software AbsoluteTelnet 2.0/2.11 Title Bar Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6785/info A buffer overflow vulnerability was reported for AbsoluteTelnet. The vulnerability exists due to insufficient bounds checking performed when setting the title bar of the client. An attacker can exploit this...

Microsoft Internet Explorer 6.0 Pop-up Window Title Bar Spoofing Weakness

No description provided by source. source: http://www.securityfocus.com/bid/12602/info Internet Explorer is reported prone to a pop-up window title bar spoofing weakness. The weakness is reported to exist due to a flaw that manifests in script-initiated pop-up windows. This issue may be leveraged...

WordPress Contact Form plugin <= 2.7.5 - SQL Injection

No description provided by source. Exploit Title: WordPress Contact Form plugin = 2.7.5 SQL Injection Vulnerability Date: 2011-10-13 Author: Skraps jackie.craig.sparksatlive.com jackie.craig.sparksatgmail.com @skrapsfoo Software Link: http://downloads.wordpress.org/plugin/contact-form-wordpress.z...

PonVFTP Bypass and Shell Upload Vulnerability

No description provided by source. in the name of allah Exploit Title: PonVFTP Bbypass Vulnerability Date: 15/1/2010 Author:S2K9 Site: www.soqor.net , www.xp10.me Software home: http://pongles.com/index.php Tested on: windows xp sp2 Dork :in u r dream exploit : press login username : admin passwo...

Axous 1.1.1 - Multiple Vulnerabilities (CSRF - Persistent XSS)

No description provided by source. +-----------------------------------------------------------------------------------------------------------+ Exploit Title : Axous 1.1.1 Multiple Vulnerabilities CSRF - Persistent XSS Date : 30-04-2012 Author : Ivano Binetti http://www.ivanobinetti.com Software...

SocialCMS1.0.2 - Multiple CSRF Vulnerabilities

No description provided by source. !--- Title: socialcms1.0.2 Multiple CSRF Vulnerabilities Author: vir0e5 a.k.a banditc0de [email protected] Date: Wed 20 april 2011 11:18:22 AM Vendor: www.socialcms.com Download: http://sourceforge.net/projects/socialcms/ --- !-- Create Admin User -- body...

Model Agentur Script SQL Injection Vunerability

No description provided by source. Exploit Title: Model Agentur Script SQL Injection Vunerability Platform: php Date: 05.02.2011 Author: NoNameMT Software Link: http://www.media-products.de/model-agentur-p-269.html AND http://www.media-products.de/model-agentur-v2-p-420.html Price: 19,95 � / 29,9...

php volunteer management 1.0.2 - Multiple Vulnerabilities

No description provided by source. Exploit Title: PHP Volunteer Management 'id' 1.0.2 Multiple Vulnerabilities Date: 04/21/12 Author: G13 Twitter: @g13net Software Site: https://sourceforge.net/projects/phpvolunteer/ Version: 1.0.2 Category: webapp php ToC 0x01 Description 0x02 XSS 0x03 SQL...

iSO Filer Lite 2.1.0 - Directory Traversal

No description provided by source. Exploit Title: Filer Lite v2.1.0 for iPhone / iPod touch, Directory Traversal Date: 02/24/2011 Author: R3d@l3rt, Sp@2K, Sunlight, H@ckk3y Software Link : http://itunes.apple.com/kr/app/filer-lite-download-view-manage/id350939597?mt=8 Version: 2.1.0 Tested on:...

Virtuosa Phoenix Edition 5.2 ASX SEH BOF

No description provided by source. !/usr/bin/python Exploit Title: Virtuosa Phoenix Edition 5.2 ASX BOF SEH Overwrite Date found: Aug 16th 2010 Author: Acidgen Software Link: http://download1.virtuosa.com/VirtuosaTrial.exe Version: 5.2 Tested on: Windows XP SP2 Virtuosa - File Import Import song ...

ZPanel <= 10.0.1 CSRF, XSS, SQLi, Password Reset

No description provided by source. Exploit Title: ZPanel = 10.0.1 CSRF, XSS, SQLi, Password Reset Date: 04/11/2012 Exploit Author: pcsjj Vendor Homepage: http://www.zpanelcp.com/ Version: 10.0.1 Software Link: http://sourceforge.net/projects/zpanelcp/files/latest/download Downloads: 90,382 CVE :...