Joomla extensions <=1.6.0 SQL Injection Exploit

Exploit for php platform in category web applications Title : Joomla extensions in ../extensions/languages/ : http://localhost/path/index.php/using-joomla/extensions/languages/email protectedAAAAA,&limit=3&limitstart=4 /2- in ../extensions/templates/ :...

Microsoft WordPad Text Converter (CVE-2011-0028) Remote Code Execution Vulnerability

Description Microsoft WordPad is prone to a remote code-execution vulnerability. An attacker could exploit this issue to execute arbitrary code with the privileges of the currently logged-in user. Failed exploit attempts may result in denial-of-service conditions. Technologies Affected Avaya...

Joomla component com_phocadownload Blind SQL Injection

Exploit for php platform in category web applications Title : Joomla component comphocadownload Blind SQL Injection Author : KedAns-Dz E-mail : email protected | email protected Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : php Impact : Blind SQL...

Joomla Virtuemart Latestprod Remote File Inclusion

Title : Joomla Module Virtuemart Latestprod RFI Vulnerability Author : KedAns-Dz E-mail : [email protected] | [email protected] Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : php Impact : Remote File Include Tested on : Windows XP sp3 FR Note :...

Vallen Zipper V2.30 .ZIP File Heap Overflow

Exploit for windows platform in category dos / poc !/usr/bin/perl +Exploit Title: Vallen Zipper V2.30 .ZIP File Heap Overflow +Date: 11\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.vallen.de/freeware/vzsetup.exe +Version: 2.30 +Tested On: WIN-XP SP3 Brazil Portuguese +CVE: N/A use...

Microsoft Windows Messenger ActiveX Control Remote Code Execution Vulnerability

Description Microsoft Windows Messenger ActiveX control 'msgsc.dll' is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Successful exploits will allow the attacker to execute arbitrary code...

Wordtrainer 3.0 - '.ord' Local Buffer Overflow

!/usr/bin/python +Exploit Title: Wordtrainer V3.0 .ORD File Buffer Overflow Vulnerability +Date: 12\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.wordtrainer.net/software/files/wt307shwexe/wt307shw.exe +Version: 3.0 +Tested On: WIN-XP SP3 Brazilian Portuguese +CVE: N/A from struct impo...

Microsoft HTML Help 6.1 - Local Stack Overflow

Source: http://aluigi.org/adv/chm1-adv.txt Luigi Auriemma Application: Microsoft HTML Help http://www.microsoft.com Versions: = 6.1 Platforms: Windows any version included the latest Windows 7 Bug: stack overflow Date: 12 Apr 2011 found 20 Feb 2011 Author: Luigi Auriemma e-mail:...

Winamp 5.6.1 - '.m3u8' Remote Buffer Overflow

source: https://www.securityfocus.com/bid/47333/info Winamp is prone to a remote buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. Attackers can execute arbitrary code in the context of the affecte...

Wordtrainer 3.0 - .ord Local Buffer Overflow

Wordtrainer 3.0 - .ord Local Buffer Overflow !/usr/bin/python +Exploit Title: Wordtrainer V3.0 .ORD File Buffer Overflow Vulnerability +Date: 12\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.wordtrainer.net/software/files/wt307shwexe/wt307shw.exe +Version: 3.0 +Tested On: WIN-XP SP3...

Vallen Zipper 2.30 - .zip Heap Overflow

Vallen Zipper 2.30 - .zip Heap Overflow !/usr/bin/perl +Exploit Title: Vallen Zipper V2.30 .ZIP File Heap Overflow +Date: 11\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.vallen.de/freeware/vzsetup.exe +Version: 2.30 +Tested On: WIN-XP SP3 Brazil Portuguese +CVE: N/A use strict; use...

Vallen Zipper 2.30 ZIP Heap Overflow

!/usr/bin/perl +Exploit Title: Vallen Zipper V2.30 .ZIP File Heap Overflow +Date: 11\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.vallen.de/freeware/vzsetup.exe +Version: 2.30 +Tested On: WIN-XP SP3 Brazil Portuguese +CVE: N/A use strict; use warnings; my $filename = "Exploit.zip";...

Vallen Zipper 2.30 - '.zip' Heap Overflow

!/usr/bin/perl +Exploit Title: Vallen Zipper V2.30 .ZIP File Heap Overflow +Date: 11\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.vallen.de/freeware/vzsetup.exe +Version: 2.30 +Tested On: WIN-XP SP3 Brazil Portuguese +CVE: N/A use strict; use warnings; my $filename = "Exploit.zip";...

Joomla Extensions 1.6.0 SQL Injection

Title : Joomla extensions in ../extensions/languages/ : http://localhost/path/index.php/using-joomla/extensions/languages/?filterorder=AAAAAAAAAAAAAAAAA.ked-h@exploit-id.com.AAAAAAAAAAAAAAAA,&limit=3&limitstart=4 /2- in ../extensions/templates/ :...

VeryTools Video Spirit Pro

This module exploits a stack buffer overflow in Video Spirit use exploit/windows/fileformat/videospirit/visprj msf undefinedvisprj show actions ...actions... msf undefinedvisprj set ACTION msf undefinedvisprj show options ...show and set options... msf undefinedvisprj run This module requires...

Joomla Gcalendar Remote File Inclusion

Title : Joomla component comgcalendar Remote File Inclusion Vulnerability Author : KedAns-Dz E-mail : [email protected] | [email protected] Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : php Impact : Remote File Inclusion Vulnerability Tested o...

VeryTools Video Spirit Pro 1.70 Buffer Overflow

$Id: videospiritvisprj.rb 12304 2011-04-11 23:24:12Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

IrfanView 4.28 - ICO Without Transparent Colour DoS & RDoS

Exploit for windows platform in category dos / poc done by BraniX www.hackers.org.pl found: 2011.04.07 published: 2011.04.10 tested on: Windows XP SP3 Home Edition tested on: Windows XP SP3 Professional App: IrfanView 4.28 App Url: http://www.irfanview.com iview32.exe MD5:...

IrfanView 4.28 - ICO With Transparent Colour DoS & RDoS

Exploit for windows platform in category dos / poc done by BraniX www.hackers.org.pl found: 2011.04.07 published: 2011.04.10 tested on: Windows XP SP3 Home Edition tested on: Windows XP SP3 Professional App: IrfanView 4.28 App Url: http://www.irfanview.com iview32.exe MD5:...

VeryTools VideoSpirit Pro 1.70 - '.visprj' Local Buffer Overflow (Metasploit)

$Id: videospiritvisprj.rb 12305 2011-04-11 23:32:41Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...