Joomla Sadnews Local File Inclusion

Joomla Component comsadnews LFI Vulnerability x Author : thecybernuxbie x Home : www.thecybernuxbie.com x E-mail : [email protected] x Found : 24 January 2012. x Tested : Windows 7 Ultimate. x Dork : inurl:"/index.php?option=comsadnews" x Vuln Exploit Report:...

Vastal Rapid Script SQL Injection

Exploit Title: Vastal Rapid Script SqL Injection Vulnerability Date: 22/01/2012 Author: Lazmania61 | Bug Researchers Demo : http://www.vastal.com/rapid/ Tested on: Windows 7 http://www.vastal.com/rapid/viewnews.php?id=2 http://www.vastal.com/rapid/viewnews.php?id=2’a...

Joomla Component com_sanpham SQL Injection Vulnerability

Exploit for php platform in category web applications Joomla Component comsanpham SQL Injection Vulnerability Author : thecybernuxbie Home : www.thecybernuxbie.com E-mail : email protected Found : 20 January 2012 - 07:45 PM. Tested On : Windows 7 Ultimate. Google Dork :...

Joomla Component com_car SQL Injection Vulnerability

Exploit for php platform in category web applications Joomla Component comcar SQL Injection Vulnerability 0day Author : thecybernuxbie Home : www.thecybernuxbie.com E-mail : email protected Found : 20 January 2012 - 07:45 PM. Tested On : Windows 7 Ultimate. Google Dork :...

GreenBrowser iframe content Double Free Vulnerability

GreenBrowser searchbar iframe content Double Free Vulnerability ------------------------------------------------------------------ I. Summary All versions of GreenBrowser is prone to a vulnerability which leads to arbitrary code execution. A Double Free of iframe object is triggered by its shortc...

VLC (libtaglib_plugin.dll) divide by zero DOS

No description provided by source. import binascii print '\n\n' print '' print ' VLC libtaglibplugin.dll divide by zero DOS ' print ' Tested on : Windows 7 and XP sp3 ' print ' VLC verion : 1.2.0 and 1.1.11 possibly lower ' print ' Author : nomnom ' print ' Date : 1/19/2012 ' print ' - shouts to...

Joomla Boss Local File Inclusion

Joomla Component comboss LFI Vulnerability 0day Author : thecybernuxbie Home : www.thecybernuxbie.com E-mail : [email protected] Found : 20 January 2012 - 07:45 PM. Tested On : Windows 7 Ultimate. Google Dork : inurl:"/index.php?option=comboss" x exploits: 0day no more...

Joomla Some Local File Inclusion

Joomla Component comsome LFI Vulnerability 0day Author : thecybernuxbie Home : www.thecybernuxbie.com E-mail : [email protected] Found : 20 January 2012 - 07:45 PM. Tested On : Windows 7 Ultimate. Google Dork : inurl:"/index.php?option=comsome" x exploits: 0day no more...

Joomla KP Local File Inclusion

Joomla Component comkp LFI Vulnerability Author : thecybernuxbie Home : www.thecybernuxbie.com E-mail : [email protected] Found : 20 January 2012 - 07:45 PM. Tested On : Windows 7 Ultimate. Google Dork : inurl:"/index.php?option=comkp" x exploits:...

VideoLAN VLC Media Player 1.2.0 - 'libtaglib_pluggin.dll' Denial of Service

import binascii print '\n\n' print '' print ' VLC libtaglibplugin.dll divide by zero DOS ' print ' Tested on : Windows 7 and XP sp3 ' print ' VLC verion : 1.2.0 and 1.1.11 possibly lower ' print ' Author : nomnom ' print ' Date : 1/19/2012 ' print ' - shouts to disable, jtm, welder and the csg '...

VLC 1.2.0 Divide By Zero Denial of Service

import binascii print '\n\n' print '' print ' VLC libtaglibplugin.dll divide by zero DOS ' print ' Tested on : Windows 7 and XP sp3 ' print ' VLC verion : 1.2.0 and 1.1.11 possibly lower ' print ' Author : nomnom ' print ' Date : 1/19/2012 ' print ' - shouts to disable, jtm, welder and the csg '...

VLC 1.2.0 (libtaglib_pluggin.dll) DoS

Exploit for windows platform in category dos / poc import binascii print '\n\n' print '' print ' VLC libtaglibplugin.dll divide by zero DOS ' print ' Tested on : Windows 7 and XP sp3 ' print ' VLC verion : 1.2.0 and 1.1.11 possibly lower ' print ' Author : nomnom ' print ' Date : 1/19/2012 ' prin...

PostNuke Module pnAddressbook SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: PostNuke Module pnAddressbook SQL Injection Vulnerability Date: 1/18/2012 Author: Robert Cooper Robert.Cooper at areyousecure.net Tested on: Linux/Windows 7 Vulnerable parameter: id= PoC:...

PostNuke pnAddressbook SQL Injection

Exploit Title: PostNuke Module pnAddressbook SQL Injection Vulnerability Date: 1/18/2012 Author: Robert Cooper Robert.Cooper at areyousecure.net Tested on: Linux/Windows 7 Vulnerable parameter: id= PoC:...

Elevating Privileges Via Windows Installers

There’s an odd bit of behavior that some Windows systems will exhibit when certain kinds of installers are launched, automatically elevating the privileges of the installer process to system-level privileges. In theory, the issue shouldn’t be exploitable because at one point in the process the...

Vastal Freelance SQL Injection

Exploit Title: Vastal Freelance SqL Injection Vulnerability Date: 17/01/2012 Author: Lazmania61 | Bug Researchers Demo : http://www.vastal.com/freelance/ Tested on: Windows 7 http://www.vastal.com/freelance/showcode.php?codeid=8 http://www.vastal.com/freelance/showcode.php?codeid=8’a...

Vastal Games SQL Injection

Exploit Title: Vastal Games SqL Injection Vulnerability Date: 17/01/2012 Author: Lazmania61 | Bug Researchers Demo : http://www.vastal.com/games/ Tested on: Windows 7 http://www.vastal.com/games/viewnews.php?newsid=7 http://www.vastal.com/games/viewnews.php?newsid=7’a...

Vastal EzineShop SQL Injection

Exploit Title: Vastal EzineShop SqL Injection Vulnerability Date: 17/01/2012 Author: Lazmania61 | Bug Researchers Demo : http://www.vastal.com/mag/ Tested on: Windows 7 http://www.vastal.com/mag/viewmags.php?catid=4 http://www.vastal.com/mag/viewmags.php?catid=4’a...

Azp Design SQL Injection

Exploit Title: Azp Design SQL Injection Vulnerability Date: 18/01/2012 - 04.27 Author: 3spi0n Software Website: http://azpdesigns.com/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: image.php $ Demo Sites: www.nowydomarizona.com/image.php?id=2" SQL Injection Dar bi Korido...

Vastal United SQL Injection

Exploit Title: Vastal United SqL Injection Vulnerability Date: 14/01/2012 Author: Lazmania61 | Bug Researchers Demo : http://www.vastal.com/united/ Tested on: Windows 7 http://www.vastal.com/united/showseriesink.php?id=1 http://www.vastal.com/united/showseriesink.php?id=1’a...