FORMfields Upload Vulnability

Exploit for php platform in category web applications Date: 12.03.2011 Author: PretoriaN Vendor or Software Link: Version: app version Category:: Exploit Google dork: inurl:/forms/FORMfields/ Tested on: PHP Exploit:/examples/allFields/ffceallfields.phpupload Step 1: in Text Field: type any name...

mySeatXT 0.164 Local File Inclusion

------------------------------------------------------------------------ Software................mySeatXT 0.164 Vulnerability...........Local File Inclusion Download................http://sourceforge.net/projects/coursems Release Date............2/16/2011 Tested On...............Windows Vista +...

CVE-2011-0538

Wireshark 1.2.0 through 1.2.14, 1.4.0 through 1.4.3, and 1.5.0 frees an uninitialized pointer during processing of a .pcap file in the pcap-ng format, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a malformed file...

CVE-2010-4541

Stack-based buffer overflow in the loadit function in plug-ins/common/sphere-designer.c in the SPHERE DESIGNER plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long "Number of lights" field in a...

QuickPHP Web Server 1.9.1 - Directory Traversal

QuickPHP Web Server 1.9.1 - Directory Traversal ------------------------------------------------------------------------ Software................QuickPHP Web Server 1.9.1 Vulnerability...........Directory Traversal Download................http://www.zachsaw.co.cc/?pg=quickphpphptesterdebugger...

Traidnt Up 3.0 CSRF Vulnerability

Exploit for php platform in category web applications Title : TRAIDNT UP Version 3.0 - CSRF Add Admin Script : TRAIDNT UP Version 3.0 Language : Php Download : http://www.traidnt.net http://www.traidnt.net/vb/attachment.php?attachmentid=519880&d=1285278011 Date : 2010/12/25 Version : 3.0 Dork :...

Linux kernel exploit

Hi all, I've included here a proof-of-concept local privilege escalation exploit for Linux. Please read the header for an explanation of what's going on. Without further ado, I present full-nelson.c: Happy hacking, Dan --snip-- / Linux Kernel = 2.6.37 local privilege escalation by Dan Rosenberg...

eFront version 3.6.6 Mullti Vulnerability

Exploit for php platform in category web applications ========================================= eFront version 3.6.6 Mullti Vulnerability ========================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 3 3 3 3 7 /' \ /'\ /'\ /\ \ /\ /\ \ 7 1 /,...

osTicket Local File Inclusion

---------------------------------------------------------------------------------------------------------------------- osTicket - Open Source Support Ticket System module=osTicket&file= Local File Inclusion http://osticket.com...

Xerox 4595 Denial of Service Vulnerability

Exploit for hardware platform in category dos / poc ========================================== Xerox 4595 Denial of Service Vulnerability ========================================== !/usr/bin/perl Xerox 4595 Remote Dos November 1, 2010 By chap0 - The tongue has the power of life and death...

yPlay 2.4.5 Denial Of Service

Exploit Title : yPlay Denial of Service Vulnerability Software : yPlay Software link : http://www.spacejock.m6.net/files/yPlayFull.exe Autor : ABDI MOHAMED Email : [email protected] greetz: netown3r , sadhacker , net-decrypt3r , xa7m3d , the commander , mr.fearfactor and all tunisian hackers...

Flex Timesheet - Authentication Bypass

Flex Timesheet - Authentication Bypass =================================================== Flex Timesheet - Authentication Bypass Vulnerability =================================================== My + Author : KnocKout Contact : [email protected] + Greatz : h4x0reSEC / Inj3ct0r Team / Exploit-DB...

Microsoft MPEG Layer-3 Audio Decoder - Division By Zero

Microsoft MPEG Layer-3 Audio Decoder - Division By Zero ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-24-microsoft-mpeg-layer-3-audio-decoder-division-by-zero/...

Ecshop2.7.2持久型XSS（可获得管理员帐号）

简要描述： 个人资料修改时，Javascript代码过滤不够严格，XSS代码直接进入数据库 详细说明： 密码保护问题这一项，没有使用正则过滤，其他的的都有正则过滤。我们可以在密码保护问题里输入XSS，但是后台查看会员资料是不显示密码保护问题的，所以这里必须要网站后台添加了新的 “会员注册项”时，后台查看资料就会显示了，此处填入一段引入外部js的代码:" 外部test.js文件内容如下 Ajax.call'privilege.php?act=update','id=1&username=heihei&[email protected]','',"POST","JSON"; 漏洞证明：...

DJ Studio Pro 8.1.3.2.1 SEH Overwrite

DJ Studio Pro Version 8.1.3.2.1 SEH 0 day Author Abhishek Lyall - abhilyallatgmaildotcom, infoataslitsecuritydotcom Web - http://www.aslitsecurity.com/ Blog - http://www.aslitsecurity.blogspot.com/ Download Vulnerable application from http://www.e-soft.co.uk/DJSP.htm Vulnerable version DJ Studio...

eNdonesia 8.4 - SQL Injection

======================================================================/ eNdonesia 8.4 Print Module SQL Injection Vulnerability Download : http://sourceforge.net/projects/endonesia/files/eNdonesia Version : 8.4 or lower maybe also affected Dork : mod.php?mod=publisher&op=printarticle&artid=...

QQPlayer 2.3.696.400p1 - '.wav' Denial of Service

!/usr/bin/python Exploit Title: QQPlayer 2.3.696.400p1.wav Denial of Service Vulnerability Date: 07-09-2010 Author: Hadji Samir , s-Dzathotmaildotfr Software Link: www.qq.com Version: QQPlayer 2.3.696.400p1 Tested on: Windows XP sp2 CVE : Notes: Working with filetype Mahboul-3lik.wav...

X Zero Community Classifieds 5.2 SQL Injection / Cross Site Scripting

======================================================= X·Zero Community Classifieds 5.2 XSS SQL Vulnerability ======================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ ...

EZ-Oscommerce 3.1 Changer Login and Pass CSRF Vulnerability

Exploit for php platform in category web applications =========================================================== EZ-Oscommerce 3.1 Changer Login and Pass CSRF Vulnerability ===========================================================...

hobcms / hertzCMS 1.1.9.19 File include Vulnerability

Exploit for php platform in category web applications ===================================================== hobcms / hertzCMS 1.1.9.19 File include Vulnerability ===================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /'...