HP Power Manager 'formExportDataLogs' Buffer Overflow

Exploit for cgi platform in category remote exploits $Id: hppowermanagerfilename.rb 14016 2011-10-20 17:40:21Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information...

CMSmini 0.2.2 Local File Inclusion

Exploit for php platform in category web applications Exploit Title: CMSmini 0.2.2 Local File Inclusion Date: 2011.10.20 Author: I2Sec5-BSK Software Link: http://sourceforge.net/projects/cmsmini/ Version: CMSmini 0.2.2 Tested on: Windows XP --------------------------------------------------...

AdminStudio LaunchHelp.dll ActiveX Arbitrary Code Execution

This module exploits a vulnerability in AdminStudio LaunchHelp.dll ActiveX control. The LaunchProcess function found in LaunchHelp.HelpLauncher.1 allows remote attackers to run arbitrary commands on the victim machine. This module has been successfully tested with the ActiveX installed with...

Opera <= 11.52 PoC Denial of Service

Exploit for windows platform in category dos / poc -' -' -' -.OO .- OO.- OO .-/ | '-' | | | | | | | | |'-| |'| |\ -' / --' --' -----' --' --' --' --' -----' ------' ---'' October 19, 2011 Opera Denial of Service PoC Stack Overflow Testsystem: WinXP SP3, Win764 bit Opera version: 11.? //!CDATA...

Opera <= 11.52 Stack Overflow

Exploit for windows platform in category dos / poc -' pigtail23 -' -' www.remoteshell.de -.OO .- OO.- OO .-/ | '-' | | | | | | | | |'-| |'| |\ -' / --' --' -----' --' --' --' --' -----' ------' ---'' October 20, 2011 Number two, tomorrow may the next!? 0o The second Opera Denial of Service PoC...

Cyclope Internet Filtering Proxy 4.0 - Stored XSS Vuln

Exploit for php platform in category web applications !/usr/bin/python Title: Cyclope Internet Filtering Proxy 4.0 - Stored XSS Vuln. From: The eh?-Team || The Great White Fuzz we're not sure yet Found by: loneferret Software link: http://www.cyclope-series.com/download/index.aspx?p=2 Date Found:...

Northern Racing SQL Injection

========================================================================== Exploit Title: Northern Racing SQL Injection Vulnerability Date: 18.10.2011 Author: poach3r Software Link: http://www.northernracing.co.uk/ Tested on: Windows XP SP3 Google Dork: intext:Northern Racing Ltd...

Tap In Solutions Blind SQL Injection

========================================================================== Exploit Title: Tap In Solutions Blind SQL Injection Vulnerability Date: 17.10.2011 Author: poach3r Software Link: http://www.tapinsolutionsinc.com/ Tested on: Windows XP SP3 Google Dork: inurl:event.php?eventid= powered by...

Climeweb Remote SQL Injection

========================================================================== Exploit Title: Climeweb Blind SQL Injection Vulnerability Date: 11.10.2011 Author: poach3r Software Link: http://www.climeweb.com/ Tested on: Windows XP SP3 Google Dork: "Powered by Climeweb" inurl:"indux.php"...

iSchoolSite SQL Injection

========================================================================== Exploit Title: iSchoolSite SQL Injection Vulnerability Date: 16.10.2011 Author: poach3r Software Link: http://www.ischoolsite.com/ Tested on: Windows XP SP3 Google Dork: "Powered by iSchoolSite" inurl:.php Price: $5000...

Microsoft Forefront Unified Access Gateway Java Applet Signed Code Execution

Added: 10/17/2011 CVE: CVE-2011-1969 BID: 49983 OSVDB: 76236 Background Microsoft Forefront Unified Access Gateway UAG is a reverse proxy and VPN solution. Problem End users of UAG must install a signed Java applet via MicrosoftClient.jar. This applet loads unsigned Java classes, which may allow ...

Real Networks Netzip Classic 7.5.1 86 Buffer Overflow

$Id: realnetworksnetzipbof.rb 13952 2011-10-16 15:47:04Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Microsoft Forefront Unified Access Gateway Java Applet Signed Code Execution

Added: 10/17/2011 CVE: CVE-2011-1969 BID: 49983 OSVDB: 76236 Background Microsoft Forefront Unified Access Gateway UAG is a reverse proxy and VPN solution. Problem End users of UAG must install a signed Java applet via MicrosoftClient.jar. This applet loads unsigned Java classes, which may allow ...

Dominant Creature BBG/RPG Browser Game Persistent XSS

Exploit for php platform in category web applications =================================================================================== Dominant Creature BBG/RPG browser game XSS vulnerabilities =================================================================================== Exploit Title:...

BlueZone Desktop Denial Of Service

Exploit Title: BlueZone Desktop Malformed .zap file Local Denial of Service Date: 10-15-11 Author: Silent Dream Software Link: http://www.rocketsoftware.com/bluezone/downloads/desktop-free-trial Version: Latest Tested on: Windows XP SP3 To trigger: Run this script, double click file to open with...

Real Networks Netzip Classic 7.5.1 86 - File Parsing Buffer Overflow (Metasploit)

$Id: realnetworksnetzipbof.rb 13952 2011-10-16 15:47:04Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

BlueZone Desktop - .zap file Local Denial of Service

BlueZone Desktop - .zap file Local Denial of Service Exploit Title: BlueZone Desktop Malformed .zap file Local Denial of Service Date: 10-15-11 Author: Silent Dream Software Link: http://www.rocketsoftware.com/bluezone/downloads/desktop-free-trial Version: Latest Tested on: Windows XP SP3 To...

Real Networks Netzip Classic 7.5.1 86 File Parsing Buffer Overflow

Exploit for windows platform in category local exploits $Id: realnetworksnetzipbof.rb 13952 2011-10-16 15:47:04Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information...

BlueZone Desktop - '.zap' file Local Denial of Service

Exploit Title: BlueZone Desktop Malformed .zap file Local Denial of Service Date: 10-15-11 Author: Silent Dream Software Link: http://www.rocketsoftware.com/bluezone/downloads/desktop-free-trial Version: Latest Tested on: Windows XP SP3 To trigger: Run this script, double click file to open with...

BlueZone Desktop .zap file Local Denial of Service Vulnerability

Exploit for windows platform in category dos / poc Exploit Title: BlueZone Desktop Malformed .zap file Local Denial of Service Date: 10-15-11 Author: Silent Dream Software Link: http://www.rocketsoftware.com/bluezone/downloads/desktop-free-trial Version: Latest Tested on: Windows XP SP3 To trigge...