CDPI Software SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x Official Website: http://www.1337day.com 0 1 x...

Joomla Component com_x-shop (iadd) <= SQLi Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Joomla Xcomp Local File Inclusion

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Webgrind 1.0 Cross Site Scripting

webgrind 1.0 dataFile Remote Reflected XSS Vulnerability Vendor: Joakim Nygard and Jacob Oettinger Product web page: http://code.google.com/p/webgrind Affected version: 1.0 Summary: Webgrind is an Xdebug profiling web frontend in PHP5. Desc: webgrind suffers from a XSS vulnerability when parsing...

Joomla XVS Local File Inclusion

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

SQL Buddy 1.3.3 Cross Site Scripting

SQL Buddy 1.3.3 GET/POST Multiple Remote Cross-Site Scripting Vulnerabilities function xssdocument.forms"xss".submit; function xss2document.forms"xss2".submit; alert1' / input t...

RadhikaGB Local File Inclusion

Exploit Title: RadhikaGB final version Local File Inclusion Date: 16/02/2012 Author: T0x!c Software Link: http://softacme.com/radhikagb/download/ Version: RadhikaGB final version Tested on: Windows XP ::::::::::::::::::::::::: =================Exploit================= -= vuln c0de =-...

Microsoft Windows Kernel &quot;Win32k.sys&quot;键盘布局本地权限提升漏洞(MS12-008)

BUGTRAQ ID: 51920 CVE ID: CVE-2012-0154 Microsoft Windows是流行的计算机操作系统。 Windows Kernel Win32k.sys在验证用户模式传输到GDI内核组件的输入时存在本地权限提升漏洞，本地攻击者可利用此漏洞以内核权限执行任意代码，造成完全控制受影响计算机。 0 Microsoft Windows XP Microsoft Windows Server 2008 Microsoft Windows 7 厂商补丁： Microsoft ---------...

Fork CMS v.3.2.4 - Multiple Vulnerabilities ( LFI - XSS )

Exploit for php platform in category web applications Exploit Title: Fork CMS v.3.2.4 - Multiple Vulnerabilities Script Page : http://www.fork-cms.com Date: 11-02-2012 Author : RandomStorm - http://www.randomstorm.com Avram Marius Gabriel d3v1l Tested on: Windows XP & Vista Reflected Cross-Site...

Windows Kernel-Mode Drivers Remote Code Execution Vulnerabilities (2660465)

This host is missing a critical security update according to Microsoft Bulletin MS12-008. OpenVAS Vulnerability Test $Id: secpodms12-008.nasl 8724 2018-02-08 15:02:56Z cfischer $ Windows Kernel-Mode Drivers Remote Code Execution Vulnerabilities 2660465 Authors: Sooraj KS Copyright: Copyright c 20...

Privilege escalation

afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 on 64-bit platforms does not properly validate user-mode input passed to kernel mode, which allows local users to...

Skype 5.x 聊天日志本地信息泄露漏洞

BUGTRAQ ID: 51988 Skype是免费的全球语音沟通软件。 Skype在实现上存在本地信息泄露漏洞，即使用户启用了“Keep history for”设置中的“no history”选项，或者手动地用“Clear history”按钮删除，本地攻击者依然可利用此漏洞获取敏感信息。 0 Skype 5.x 厂商补丁： Skype ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.skype.com/ 在Windows XP中, 转到"C:\Documents and...

Microsoft Windows Ancillary Function Driver CVE-2012-0148 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of affected computers. Technologies Affected Avaya Aura...

win32/xp sp2 ARABIC (ar) backconnect + acceptconnection 376 bytes

-------- Title : windows xp sp2 ARABIC backconnect + acceptconnection shellcode =376 bytes Author : TrOoN E-mail : www.facebook.com/fysl.fyslm Home : city 617 logt Draria algeria | Web Site : www.1337day.com platform :windows xp arabic sp2 | Type : local root / exploit / shellcode / etc download...

PT-2012-2354 · Microsoft · Windows Server 2003 +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 and SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista version SP2 Microsoft Windows Server 2008 versions SP2, R2, and R2 SP1 Microsoft Windows 7 versions Gold and SP1 Description: The issu...

MS12-009: Vulnerabilities in Ancillary Function driver could allow elevation of privilege: February 14, 2012

None None...

MS12-008: Vulnerabilities in Windows Kernel-Mode drivers could allow remote code execution: February 14, 2012

None None...

MS12-014: Vulnerability in Indeo Codec Could Allow Remote Code Execution (2661637)

The remote Windows XP host contains a version of the Indeo codec that is affected by an insecure library loading vulnerability. A remote attacker could exploit this by tricking a user into opening a legitimate file e.g., an .avi file located in the same directory as a maliciously crafted dynamic...

Razor CMS 1.2 File Disclosure

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

PBBoard 2.1.4 Cross Site Request Forgery / Shell Upload

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...