1324 matches found
AMX Corp. VNC ActiveX Control - 'AmxVnc.dll 1.0.13.0' Remote Buffer Overflow
'metasploit one, add a user "su" with pass "tzu" scode = unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%49%49%49%49%49%49%37%49%49%49%49%49%49%49%49%49%49%49%51%5a%6a%44%58%50%30%41%30%41%6b%41%41%54%42%41%32%41%41%32%42%41%30%42%41%58%38%41%42...
AMX Corp. VNC ActiveX Control (AmxVnc.dll 1.0.13.0) BoF Exploit
Exploit for unknown platform in category remote exploits =============================================================== AMX Corp. VNC ActiveX Control AmxVnc.dll 1.0.13.0 BoF Exploit =============================================================== script language='...
Microsoft Speech API ActiveX control Remote BoF Exploit (xp sp2)
No description provided by source. !-- 6.30 10/06/2007 Microsoft Windows DirectSpeechSynthesis Module XVoice.dll 4.0.4.2512 / DirectSpeechRecognition Module Xlisten.dll 4.0.4.2512 remote buffer overflow exploit/ xp sp2 version both dlls are vulnerable, this is the poc for the first one...
IE6 / Provideo Camimage (ISSCamControl.dll 1.0.1.5) Remote BoF Exploit
No description provided by source. !-- IE6 / Provideo Camimage class ISSCamControl.dll 1.0.1.5 remote seh overwrite exploit / win2k sp4 tried the SD-222VPRO camera series,you can reach an online demo here: http://www.provideo.com.tw/security%20live%20demo.htm rgod -- HTML...
Hidden administrator account the three minutes to get-vulnerability warning-the black bar safety net
On the regedit. exe everyone is familiar with, but not to the registry key set permissions, regedt32. exe the biggest advantages is the ability to the registry key set permissions. nt/2 0 0 0/xp account information in the registry HKEYLOCALMACHINE\SAM\SAM key, but in addition to the system user...
Dart Communications PowerTCP ZIP Compression Remote BoF Exploit
No description provided by source. !-- IE 6 / Dart Communications PowerTCP ZIP Compression Control DartZip.dll 1.8.5.3 remote buffer overflow exploit / xp sp2 it by rgod site: retrogod.altervista.org software site: www.dart.com -- html object classid='clsid:42BA826E-F8D8-4D8D-8C05-14ABCE99D4DD'...
Authorization
DropAFew before 0.2.1 does not require authorization for certain privileged actions, which allows remote attackers to 1 view the logged calorie information of arbitrary users via the id parameter in editlogcal.php, 2 add arbitrary links via links.php, or 3 create arbitrary users via newaccount2.p...
CVE-2006-4580
register.php in The Address Book 1.04e allows remote attackers to bypass the "Allow User Self-Registration" setting and create arbitrary users by setting the mode parameter to "confirm"...
CVE-2006-4580
register.php in The Address Book 1.04e allows remote attackers to bypass the "Allow User Self-Registration" setting and create arbitrary users by setting the mode parameter to "confirm"...
CVE-2006-6773
pages/register/register.php in Fishyshoop 0.930 beta allows remote attackers to create arbitrary administrative users by setting the isadmin HTTP POST parameter to 1...
CVE-2006-6773
CVE-2006-6773 affects Fishyshoop 0.930 beta, where pages/register/register.php allows remote attackers to create arbitrary administrative users by sending is_admin=1 via HTTP POST. The vulnerability enables elevation of privileges (admin account creation) through a parameter-based bypass in the r...
linux/x86 add root user r00t with no password to /etc/passwd 69 bytes
Exploit for linux/x86 platform in category shellcode ===================================================================== linux/x86 add root user r00t with no password to /etc/passwd 69 bytes ===================================================================== / By Kris Katterjohn 11/14/2006 69...
zipcentral.txt
ZipCentral 4.01 Exploit by bratax http://www.bratax.be/ Soooooo many thanks to BuzzDee and c0rrupt for helping me with all the problems I encountered : Wouldn't have finished this without you guys! Greetz to everyone I like... no, that doesn't include you turb00! Some technical info: -...
ZipCentral 4.01 - .ZIP File Handling Local Buffer Overflow
ZipCentral 4.01 - .ZIP File Handling Local Buffer Overflow / ZipCentral 4.01 Exploit by bratax http://www.bratax.be/ Soooooo many thanks to BuzzDee and c0rrupt for helping me with all the problems I encountered : Wouldn't have finished this without you guys! Greetz to everyone I like... no, that...
Sql injection in Mambo & Joomla
Hi, There are several sql injections in Mambo 4.6 RC2 & Joomla 1.0.10 and maybe other versions : The codes are from Mambo 4.6 RC2 & some may be different in Joomla When a user edits a content, the "id" parameter is not checked properly in /components/comcontent/content.php, which can cause 2 sql...
mambo -- multiple SQL injection vulnerabilities
James Bercegay reports: Mambo is vulnerable to an Authentication Bypass issue that is due to an SQL Injection in the login function. The SQL Injection is possible because the $passwd variable is only sanitized when it is not passed as an argument to the function. Omid reports: There are several s...
mybibi_pl.txt
!/usr/bin/perl Tue Jun 13 12:37:12 CEST 2006 [email protected] Exploit HOWTO - read this before flood my Inbox you bitch! - First you need to create the special user to do this use: ./mybibi.pl --host=http://www.example.com --dir=/mybb -1 this step needs a graphic confirmation so the exploit writ...
MyBulletinBoard (MyBB) < 1.1.3 Remote Code Execution Exploit
Exploit for unknown platform in category web applications ============================================================ MyBulletinBoard MyBB 1.1.3 Remote Code Execution Exploit ============================================================ !/usr/bin/perl Tue Jun 13 12:37:12 CEST 2006 email protected...
MyBulletinBoard (MyBB) 1.1.3 - Remote Code Execution
MyBulletinBoard MyBB 1.1.3 - Remote Code Execution !/usr/bin/perl Tue Jun 13 12:37:12 CEST 2006 [email protected] Exploit HOWTO - read this before flood my Inbox you bitch! - First you need to create the special user to do this use: ./mybibi.pl --host=http://www.example.com --dir=/mybb -1 this st...
MyBulletinBoard (MyBB) < 1.1.3 Remote Code Execution Exploit
No description provided by source. !/usr/bin/perl Tue Jun 13 12:37:12 CEST 2006 [email protected] Exploit HOWTO - read this before flood my Inbox you bitch! - First you need to create the special user to do this use: ./mybibi.pl --host=http://www.example.com --dir=/mybb -1 this step needs a graph...