3897 matches found
Ultimate PHP Board <= 1.9.6 GOLD users.dat Password Decryptor
No description provided by source. !/usr/bin/perl Passwords Decrypter for UPB = 1.9.6 Related advisory: http://www.securityfocus.com/archive/1/402461/30/0/threaded Discovered and Coded by Alberto Trivero Password file is located at: http://www.example.com/upb/db/users.dat /str0ke use Getopt::Std;...
Smartfren Connex EC 1261-2 UI OUC Local Privilege Escalation Vulnerability
No description provided by source. ========================================================================== Smartfren Connex EC 1261-2 UI OUC Local Privilege Escalation Vulnerability ==========================================================================...
PCDJ Karaoki 0.6.3819 Denial of Service Vulnerability
No description provided by source. Exploit Title :Karaoki Denial of Service Vulnerability Software : Karaoki Software link :...
RM Downloader 3.1.3 - Local SEH Exploit (Win7 ASLR and DEP Bypass)
No description provided by source. !/usr/bin/perl Exploit Title: RM Downloader 3.1.3 Local SEH Exploit Win7 ASLR and DEP Bypass Date: July 1, 2010 Author: Node Software Link: http://www.mini-stream.net/downloads/RMDownloader.exe Version: RM Downloader 3.1.3.3.2010.06.26 Evaluation Tested on:...
UFO: Alien Invasion 2.2.1 - BoF Exploit (Win7 ASLR and DEP Bypass)
No description provided by source. !/usr/bin/python Exploit Title: UFO: Alien Invasion v2.2.1 BoF Exploit Win7 ASLR and DEP Bypass Date: July 5, 2010 Author: Node Software Link: http://sourceforge.net/projects/ufoai/files/UFOAI%202.x/2.2.1/ufoai-2.2.1-win32.exe/download Version: UFO: Alien Invasi...
Adobe Device Central CS5 DLL Hijacking Exploit (qtcf.dll)
No description provided by source. / Exploit Title: Adobe Device Central CS5 DLL Hijacking Exploit qtcf.dll Date: August 24, 2010 Author: Glafkos Charalambous glafkos@astalavistadotcom Version: Latest CS5 v3.0.0376 Tested on: Windows 7 x64 Ultimate Vulnerable extensions: .adcp Greetz: Astalavista...
NJStar Communicator MiniSmtp Buffer Overflow [ASLR Bypass]
No description provided by source. Exploit Title: NJStart Communicator MiniSmtp Buffer Overflow ASLR Bypass Date: 02/12/11 Author: Zune - Julian Pulido Software Link: http://www.njstar.com/download/njcom.exe Version: 3.0 Build: 11818 and previous Tested on: Windows 7 Ultimate CVE:2011-4040 !...
Inout Ad server Ultimate Shell Upload Vulnerabilty
No description provided by source. ============================================================== Inout Ad server Ultimate -- Shell upload Vulnerabilty ============================================================== Name : Inout Ad server Ultimate Shell upload Vulnerabilty Date : july 9,2010...
Adobe On Location CS4 DLL Hijacking Exploit (ibfs32.dll)
No description provided by source. / Exploit Title: Adobe On Location CS4 DLL Hijacking Exploit ibfs32.dll Date: August 25, 2010 Author: Glafkos Charalambous glafkos@astalavistadotcom Version: CS4 Build 315 Tested on: Windows 7 x64 Ultimate Vulnerable extensions: .olproj Greetz: Astalavista,...
Ultimate Uploader 1.3 - Remote File Upload Vulnerability
No description provided by source. ========================================================================== Script Name : Ultimate Uploader 1.3 Language : php Vendor : http://www.element-it.com Author : Master Mind Home : www.shdowskill.com , www.vbspiders.com...
ViArt Shop Enterprise 4.1 Arbitrary Command Execution Vulnerability
No description provided by source. ?php / ViArt Shop Enterprise 4.1 Arbitrary Command Execution Vulnerability Vendor: ViArt Software Product web page: http://www.viart.com Affected version: 4.1, 4.0.8, 4.0.5 Summary: Viart Shop is a PHP based e-commerce suite, aiming to provide everything you nee...
Xilisoft Video Converter Ultimate 7.8.1 build-20140505 DLL Hijacking
/ Title: Xilisoft Video Converter Ultimate Dll Hijacking Exploit quserex.dll Version: 7.8.1 build-20140505 Previous versions might be vulnerable Tested on: Windows XP SP2 en Vendor: http://www.xilisoft.com/ Software Link:...
Ultimate Weather Plugin <= 1.0 - Unauthenticated Reflected XSS
The last time it was checked the plugin was still affected and had been closed. PoC http://www.example.com/wp-content/plugins/ultimate–weather–plugin/magpierss/scripts/magpiedebug.php?url=%22%3E%3Cscript%3Ealert%281%29%3C%2Fscript%3E...
VirusChaser栈缓冲区溢出漏洞
Bugtraq ID:66475 Virus Chaser驱逐舰是拥有广告/间谍软件扫描功能+完美的病毒扫描与修复功能,能强力清除流氓软件、广告软件及间谍软件。 Virus Chaser存在一个基于栈的缓冲区溢出，允许攻击者构建恶意文件，诱使应用扫描，可使应用程序崩溃。 0 VirusChaser 8.0 目前没有详细解决方案提供： https://www.viruschaser.com/ Exploit Title: VirusChaser 8.0 - Stack Buffer Overflow Date: 2014/03/26 Exploit Author: wh1ant Vendo...
MS14-010 CVE-2014-0293 Technical Details and Code(I changed the web permanently)
Origin: Visit http://technet.microsoft.com/en-us/security/bulletin/ms14-010 Check "Acknowledgments" for "CVE-2014-0293". It says "Dieyu" and links to my website http://dieyu.org/ Technical Details: showModalDialog to keep script running, HTTP redirecting to target domain. Then script will run in...
MP3Info 0.8.5a - Local Buffer Overflow (SEH)
Exploit Title: mp3info SEH exploit Date: 18 March 2014 Exploit Author: Ayman Sagy Vendor Homepage: http://ibiblio.org/mp3info/ Software Link: https://www.exploit-db.com/apps/cb7b619a10a40aaac2113b87bb2b2ea2-mp3info-0.8.5a.tgz Version: MP3Info 0.8.5 Tested on: Windows 7 Ultimate 64 and 32 bit CVE ...
Ultimate Fun Book function.php gbpfad Parameter PHP Code Execution - Ver2 (CVE-2007-1059)
A code execution vulnerability has been reported in Ultimate Fun Book. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Ultimate Fun Book function.php gbpfad Parameter PHP Code Execution - Ver2 (CVE-2007-1059)
A code execution vulnerability has been reported in Ultimate Fun Book. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Code injection
The WP Ultimate Email Marketer plugin 1.1.0 and possibly earlier for Wordpress does not properly restrict access to 1 list/edit.php and 2 campaign/editCampaign.php, which allows remote attackers to modify list or campaign data...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the WP Ultimate Email Marketer plugin 1.1.0 and possibly earlier for Wordpress allow remote attackers to inject arbitrary web script or HTML via the 1 siteurl parameter to campaign/campaignone.php; the 2 action, 3 campaignname, 4 campaignformat...