MS13-055 Microsoft Internet Explorer CAnchorElement Use-After-Free

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "MS13-055 Microsof...

CommonMan SQL Injection

Exploit Title : CommonMan Sql injection Vulnerabilites Software link : http://www.cmiti.com Exploit Author : Ashiyane Digital Security Team Tested on: Windows 7 , Linux Google Dork : intext:"Site Powered by CommonMan Technologies" Date: 2013/09/07...

Internet Explorer CFlatMarkupPointer Object Handling Use-after-free Vulnerability

Added: 09/05/2013 CVE: CVE-2013-3184 BID: 61668 OSVDB: 96182 Background Internet Explorer is an HTML web browser which comes by default on Microsoft operating systems. Problem A user-after-free vulnerability when handling the InsertImage command identifier of CFlatMarkupPointer objects in a web...

Webtimizer SQL Injection

/ | / | / | / | $$$$$$$$/ $$ | $$/ $$ | $$ | / \ / | / \ $$ | / \ / |/ $$ | $$ | $$ /$$/ /$$$$$$ |$$ |/$$$$$$ |$$ |$$$$$$/ $$$$$/ $$ $$ $$ | $$ |$$ |$$ | $$ |$$ | $$ | $$ | /$$$$ \ $$ |$$ |$$ |$$ $$ |$$ | $$ |/ | $$ |/$$/ $$ |$$ $$/ $$ |$$ $$/ $$ | $$ $$/ $$$$$$$$/ $$/ $$/ $$$$$$$/ $$/ $$$$$$/...

Oracle Java lookUpByteBI - Heap Buffer Overflow

Oracle Java lookUpByteBI - Heap Buffer Overflow Exploit Title: Oracle Java lookupByteBI function heap buffer overflow Google Dork: Date: 2013-09-03 Exploit Author: GuHe Vendor Homepage: http://www.oracle.com/ Software Link: http://www.oracle.com/technetwork/java/javase/downloads/index.html Versio...

PK-CMS SQL Injection

Exploit Title : PK-CMS Sql injection vulnerability + Software link : www.passoft-webdev.nl + Exploit Author : Ashiyane Digital Security Team + Tested on: Windows 7 , Linux + Google Dork : intext:"Powered by PK-CMS" + Date: 2013/09/01...

Oracle Java lookUpByteBI - Heap Buffer Overflow

Exploit Title: Oracle Java lookupByteBI function heap buffer overflow Google Dork: Date: 2013-09-03 Exploit Author: GuHe Vendor Homepage: http://www.oracle.com/ Software Link: http://www.oracle.com/technetwork/java/javase/downloads/index.html Version: 7u21 and eariler Tested on: Windows 7 CVE :...

Oracle Java lookUpByteBI - Heap Buffer Overflow Vulnerability

Exploit for windows platform in category dos / poc Exploit Title: Oracle Java lookupByteBI function heap buffer overflow Google Dork: Date: 2013-09-03 Exploit Author: GuHe Vendor Homepage: http://www.oracle.com/ Software Link: http://www.oracle.com/technetwork/java/javase/downloads/index.html...

dBlog CMS SQL Injection

Exploit Title : dBlog CMS Sql injection vulnerability + Software link : www.dblog.it + Exploit Author : Ashiyane Digital Security Team + Tested on: Windows 7 , Linux + Google Dork : intext:"powered by dBlog CMS" + Date: 2013/09/01...

Rnet eShop Cross Site Scripting

\ \ / / / | / | \ V / | | alert1; http://www.glamourtopz.com/adminlogin.asp?e=&n= "/alert1; http://www.smart-alarm.no/adminlogin.asp?e=&n= "/alert1; http://www.testselv.no/adminlogin.asp?e=&n="/alert1; http://www.urmaker-ronning.no/adminlogin.asp?e=&n= "/alert1;...

Flo CMS SQL Injection

Exploit Title : Flo cms Sql injection vulnerability + Software link : http://www.flocms.ie + Designer link : http://www.flowebdesign.ie + Exploit Author : Ashiyane Digital Security Team + Tested on: Windows 7 , Linux + Google Dork : intext:"Design by Flo Web Design & powered by Flo CMS" + Date:...

10Ninety SQL Injection

Exploit Title : 10Ninety Sql injection vulnerability Software link : www.10ninety.co.uk Exploit Author : Ashiyane Digital Security Team Tested on: Windows 7 , Linux Google Dork : intext:"Powered By 10Ninety" Date: 2013/08/30 -------------------------------------------------------------------- -...

InnovNET Cross Site Scripting

Exploit Title : InnovNET Cross site scripting vulnerability Software link : http://www.innovnet.fr Exploit Author : Ashiyane Digital Security Team Tested on: Windows 7 , Linux Google Dork : intext:"Powered by InnovNET" Date: 2013/08/30...

NetOrange SQL Injection

Exploit Title : NetOrange - Sititalia.it Sql injection vulnerability Powered by : http://www.netorange.it & http://www.sititalia.it Exploit Author : Ashiyane Digital Security Team Tested on: Windows 7 , Linux Google Dork : intext:"Powered by NetOrange - Sititalia.it" Date: 2013/08/30...

HP LoadRunner lrFileIOService ActiveX Remote Code Execution

This Metasploit module exploits a vulnerability on the lrFileIOService ActiveX, as installed with HP LoadRunner 11.50. The vulnerability exists in the WriteFileBinary method where user provided data is used as a memory pointer. This Metasploit module has been tested successfully on IE6-IE9 on...

HP LoadRunner lrFileIOService ActiveX Remote Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 HttpClients::IE,...

CyberBizia Cross Site Scripting / SQL Injection

Exploit Title : CyberBizia Multiple Vulnerabilites Software link : http://www.cyberbizia.com Exploit Author : Ashiyane Digital Security Team Tested on: Windows 7 , Linux Google Dork : intext:"Powered by CyberBizia" Date: 2013/08/30...

WordPress silverOrchid Cross Site Scripting

Exploit Title : wordpress silverOrchid theme Cross site scripting Exploit Author : Ashiyane Digital Security Team Tested on: Windows 7 , Linux Google Dork : intext:"Powered by WordPress and theme by gazpo.com" Date: 2013/08/27 --------------------------------------------------------------------...

Musicbox 2.3.8 - Multiple Vulnerabilities

Musicbox version 2.3.8 suffers from cross site scripting, remote shell upload, and remote SQL injection vulnerabilities. Exploit Title : Musicbox 2.3.8 Multiple Vulnerabilities Author : DevilScreaM Date : 25/08/2013 Category : Web Applications Vendor : http://www.musicboxv2.com/ Version : 1.0 -...

MusicBox 2.3.8 - Multiple Vulnerabilities

MusicBox 2.3.8 - Multiple Vulnerabilities Exploit Title : Musicbox 2.3.8 Multiple Vulnerabilities Author : DevilScreaM Date : 25/08/2013 Category : Web Applications Vendor : http://www.musicboxv2.com/ Version : 1.0 - 2.3.8 Dork intext:Musicbox Version intext:Musicbox Version 2.3.8 © 2008...