Disk Pulse 9.7.26 - Add Directory Local Buffer Overflow Exploit

Exploit for windows platform in category local exploits !/usr/bin/python Exploit Title: Disk Pulse v9.7.26 - Add Directory Local Buffer Overflow Date: 12-06-2017 Exploit Author: abatchy17 -- @abatchy17 Vulnerable Software: Disk Pulse v9.7.26 Freeware, Pro, Ultimate Vendor Homepage:...

Disk Pulse 9.7.26 - 'Add Directory' Local Buffer Overflow

!/usr/bin/python Exploit Title: Disk Pulse v9.7.26 - Add Directory Local Buffer Overflow Date: 12-06-2017 Exploit Author: abatchy17 -- @abatchy17 Vulnerable Software: Disk Pulse v9.7.26 Freeware, Pro, Ultimate Vendor Homepage: http://www.diskpulse.com/ Version: 9.7.14 Software Link:...

Mikrotik RouterOS 6.28 FTP Buffer Overflow

import time import socket from ftplib import FTP import struct mikrotik RouterOS v6.28 FTp CWD command Buffer Overflow sultan albalawi win7 from subprocess import host='192.168.88.1' port=21 u = ""username p = ""password def myB: myB=...

VMWare Horizon 5.4 DLL Hijacking

Exploit Title: vmware horizon client 5.4 - DLL Hijacking Date: date Discoverer: Owais Mehtab, Tayeeb Rana Vendor Homepage: https://vmware.com Software Link: https://my.vmware.com/web/vmware/details?productId=331&downloadGroup=VIEWCLIENTSWIN64540 Version: 5.4 5.4.0.2007 Tested on: Win7 Sp1 VMWare...

Windows x32 / Windows x64 - cmd.exe Shellcode (718 bytes)

;Full tutorial: https://www.zinzloun.info Windows CMD shellcode ;COMPILE: ;nasm.exe -f win32 dynamic.asm -o dynamic.obj ;SKIP -f win32 to create the .obj file to extract eventually the hex code ;then execute: python bin2hex.py dynamic.obj to get the hex code:...

MobaXtrem 10.2 Remote Code Execution Exploit

Exploit for windows platform in category remote exploits ''' Exploit Title: MobaXtrem 10.2 telnet Server Remote Code Execution Date: 15/5/2017 Exploit Author: Sultan Albalawi Software Link: http://download.mobatek.net/10220170312132617/MobaXtermPortablev10.2.zip Version: 10.2 Tested on: win7 CVE ...

The magic of Content-Type to: all versions of the IE browser there is a 0day vulnerability-vulnerability warning-the black bar safety net

We believe that this loophole one day in the future will certainly give you great help. Note that this vulnerability will affect all versions of IE in Win7, And Win8. 1 and Win10 on a test, but MicrosoftEdge not affected by this vulnerability. ! Vulnerability overview The server sends the respons...

MS15-051 Win32k ClientCopyImage Elevation of Privilege Vulnerability (CVE-2015-1701)

No description provided by source. This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'msf/core/post/windows/reflectivedllinjection' require 'rex' class MetasploitModule 'Windows ClientCopyImage...

MS17-010 Exploit-vulnerability warning-the black bar safety net

From the equation the organization of the tool kit inside to pull out. （If it is this useful?） Tested 32-bit XP and 64-bit Win7 successfully. ! Yes. As you can see, this exp is a key getshell it. You can also replace the directory luan32. dll or luan64. dll to achieve the level of function, the...

NSA Eternalblue SMB vulnerability analysis-vulnerability warning-the black bar safety net

Environment TROJAN: Eternalblue-2.2.0.exe TARGET: win7 sp1 32bits srv.sys 6.1.7601.17514 srvnet.sys 6.1.7601.17514 PATCH: MS17-010 The vulnerability principle srv. sys in the processing SrvOs2FeaListSizeToNt when logic is incorrect resulting in cross-border copy. We first look at the vulnerabilit...

MyClassifiedScript 5.1 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Classified Portal Software 5.1 - SQL Injection Google Dork: N/A Date: 11.04.2017 Vendor Homepage: http://www.myclassifiedscript.com/ Software: http://www.myclassifiedscript.com/demo.html Demo: http://www.clpage.com/ Version: 5.1...

Social Directory Script 2.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Social Directory Script 2.0 - SQL Injection Google Dork: N/A Date: 11.04.2017 Vendor Homepage: http://www.phponly.com/ Software: http://www.phponly.com/Social-Directory.html Demo: http://www.phponly.com/demo/link/ Version: 2.0...

Lcnt Team Shell Upload Vulnerability

Exploit for php platform in category web applications xBADGIRL21 N3W PUBLIC 3XPL0IT , 0day T == -- /-' // x21 Exploit Title : Lcnt Team Shell Upload Vulnerability Exploit Author : xBADGIRL21 Dork : CopyRight 2006-2017 温州龙诚互联科技有限公司 Lcnt Team Vendor : http://icnt.net Tested on: WIN7 MyBlog :...

MyClassifiedScript 5.1 - SQL Injection

Exploit Title: Classified Portal Software 5.1 - SQL Injection Google Dork: N/A Date: 11.04.2017 Vendor Homepage: http://www.myclassifiedscript.com/ Software: http://www.myclassifiedscript.com/demo.html Demo: http://www.clpage.com/ Version: 5.1 Tested on: Win7 x64, Kali Linux x64 Exploit Author:...

FAQ Script 3.1.3 - category_id SQL Injection

FAQ Script 3.1.3 - categoryid SQL Injection Exploit Title: FAQ Script 3.1.3 - SQL Injection Google Dork: N/A Date: 11.04.2017 Vendor Homepage: http://www.phponly.com/ Software: http://www.phponly.com/faq.html Demo: http://www.phponly.com/demo/faq/ Version: 3.1.3 Tested on: Win7 x64, Kali Linux x6...

MyClassifiedScript 5.1 - SQL Injection

MyClassifiedScript 5.1 - SQL Injection Exploit Title: Classified Portal Software 5.1 - SQL Injection Google Dork: N/A Date: 11.04.2017 Vendor Homepage: http://www.myclassifiedscript.com/ Software: http://www.myclassifiedscript.com/demo.html Demo: http://www.clpage.com/ Version: 5.1 Tested on: Win...

Calendar Template 2.0 - 'editid1' SQL Injection

Exploit Title: Calendar v2.0 for ASPRunnerPro/PHPRunner/ASPRunner.NET. - SQL Injection Google Dork: N/A Date: 07.04.2017 Vendor Homepage: https://xlinesoft.com/ Software: https://xlinesoft.com/templates/calendar/index.htm Demo: https://xlinesoft.com/livedemo/calendar/ Version: 2.0 Tested on: Win7...

Shopping Cart Template - item Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Shopping Cart Template v1.0 for ASPRunnerPro/PHPRunner. - SQL Injection Google Dork: N/A Date: 07.04.2017 Vendor Homepage: https://xlinesoft.com/ Software: https://xlinesoft.com/templates/shoppingcart/index.htm Demo:...

Calendar Template 2.0 - editid1 SQL Injection

Calendar Template 2.0 - editid1 SQL Injection Exploit Title: Calendar v2.0 for ASPRunnerPro/PHPRunner/ASPRunner.NET. - SQL Injection Google Dork: N/A Date: 07.04.2017 Vendor Homepage: https://xlinesoft.com/ Software: https://xlinesoft.com/templates/calendar/index.htm Demo:...

Invoice Template - hash SQL Injection

Invoice Template - hash SQL Injection Exploit Title: Invoice Template v1.0 for PHPRunner/ASPRunnerPro/ASPRunner.NET. - SQL Injection Google Dork: N/A Date: 07.04.2017 Vendor Homepage: https://xlinesoft.com/ Software: https://xlinesoft.com/invoice Demo:...