exploit the possibilities

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 51 - 75 of 379

Files

Microsoft IIS ISAPI FrontPage fp30reg.dll Chunked Overflow

Posted Jul 26, 2010

Authored by H D Moore | Site metasploit.com

This is an exploit for the chunked encoding buffer overflow described in MS03-051 and originally reported by Brett Moore. This particular modules works against versions of Windows 2000 between SP0 and SP3. Service Pack 4 fixes the issue.

tags | exploit, overflow

systems | windows

advisories | CVE-2003-0822

SHA-256 | db54b7c9894b5bd5fa70fd5fb0cfa3771711f595d035ff5f695b79fe36ab615c

Download | Favorite | View

Microsoft IIS ISAPI nsiislog.dll ISAPI POST Overflow

Posted Jul 26, 2010

Authored by H D Moore | Site metasploit.com

This exploits a buffer overflow found in the nsiislog.dll ISAPI filter that comes with Windows Media Server. This Metasploit module will also work against the 'patched' MS03-019 version. This vulnerability was addressed by MS03-022.

tags | exploit, overflow

systems | windows

advisories | CVE-2003-0349

SHA-256 | c72f76f8a8253daffa9c80e5fc0eabf4bd5c86b37e4f1d22740423ea314f5177

Download | Favorite | View

Lucid Lynx FTP Client 0.17-19build1 ACCT Buffer Overflow

Posted Jul 24, 2010

Authored by d0lc3

Ubuntu 10.04 LTS - Lucid Lynx FTP Client version 0.17-19build1 suffers from a buffer overflow vulnerability related to the ACCT command.

tags | exploit, overflow

systems | linux, ubuntu

SHA-256 | 341217c0bff6f4911a3e62a1d7946542d7bb2f999d35c11489dff3d445148875

Download | Favorite | View

PhotoPost PHP 4.6.5 SQL Injection

Posted Jul 24, 2010

Authored by CoBRa_21

PhotoPost PHP version 4.6.5 suffers from a remote SQL injection vulnerability.

tags | exploit, remote, php, sql injection

SHA-256 | a96aa68e221cea2a65ed4e5063336c06f766031670c89fa9262043f3a6553d3e

Download | Favorite | View

Easy FTP Server 1.7.0.11 LIST Buffer Overflow

Posted Jul 24, 2010

Authored by Karn Ganeshan, MFR | Site metasploit.com

This Metasploit module exploits a stack-based buffer overflow in EasyFTP Server version 1.7.0.11.

tags | exploit, overflow

SHA-256 | 0d72610d0ac16b31fb8727e3ef83e5893a389ba62b70a097278b509ee8bd882a

Download | Favorite | View

Firefox 3.6.7 / SeaMonkey 2.0.6 Clickjacking

Posted Jul 24, 2010

Authored by Pouya Daneshmand

Firefox version 3.6.7 / SeaMonkey version 2.0.6 clickjacking proof of concept exploits.

tags | exploit, proof of concept

SHA-256 | 8ac8b458548c4b133b6d9c32e2eda14ae488227da9b79765f8eca5349c291dc5

Download | Favorite | View

Joomla GolfCourseGuide SQL Injection

Posted Jul 23, 2010

Authored by Valentin Hoebel

Joomla GolfCourseGuide component versions 0.9.6.0 Beta and 1 Beta suffer from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection

SHA-256 | c3d20cf389cff928da4dbb4ad7fd832d03fccb5ab9c000e761ebb0bc5f5bae5f

Download | Favorite | View

PhotoPost PHP 4.0 - 4.6 SQL Injection

Posted Jul 23, 2010

Authored by Cyber-sec

PhotoPost PHP versions 4.0 through 4.6 suffer from a remote SQL injection vulnerability.

tags | exploit, remote, php, sql injection

SHA-256 | 1d139e534cdcf0c4e65c6bba0c76664268345d077ff81b076e223d7dc2fad601

Download | Favorite | View

ZeeMatri 3x Shell Upload

Posted Jul 23, 2010

Authored by SONiC

ZeeMatri version 3x suffers from a shell upload vulnerability.

tags | exploit, shell

SHA-256 | 7ae764dcd3f9cfe94ffc925e298693155de1b8ed74f05a92be3a8f82ab14465c

Download | Favorite | View

SAP Netweaver 6.4 - 7.0 Cross Site Scripting

Posted Jul 23, 2010

Authored by Sh2kerr | Site dsecrg.com

SAP Netweaver versions 6.4 through 7.0 suffer from a cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | 3a33cbd84a9db933f995cbae70e001e3a89be10e4fa30b160c720ca941a9066e

Download | Favorite | View

AIX 5l FTPd Hash Disclosure

Posted Jul 23, 2010

Authored by Kingcope

AIX 5l with FTP server remote root hash disclosure exploit. Creates a coredump including the root user hash from /etc/security/passwd. This is the second version that was written to be more portable between hosts.

tags | exploit, remote, root

systems | aix

SHA-256 | 3cbe3f2d71c1a259294434762694c1239444ee2fd3f2d2dc144601f1fe0a5675

Download | Favorite | View

ZeeNetworking 1x Shell Upload

Posted Jul 23, 2010

Authored by SONiC

ZeeNetworking 1x suffers from a shell upload vulnerability.

tags | exploit, shell

SHA-256 | 48a1e0a10c033ad783e42cba65397d88ed108418e7798d8eec913f84ab073ca5

Download | Favorite | View

LILDBI 1.2 Shell Upload

Posted Jul 23, 2010

Authored by EraGoN

LILDBI version 1.2 suffers from a shell upload vulnerability.

tags | exploit, shell

SHA-256 | 864cfbbdebc134ab41dcdfddef5df0bf4d519b4dcf637250720ceda162dcb908

Download | Favorite | View

ZeeAdBox 2x SQL Injection

Posted Jul 23, 2010

Authored by SONiC

ZeeAdBox version 2x suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection

SHA-256 | 1022f5f1735c187463f38136fbe414f41f51aa9ed28d88a575fef3ea1b4257c3

Download | Favorite | View

PHPBB MOD 2.0.19 SQL Injection

Posted Jul 23, 2010

Authored by Silic0n

PHPBB version 2.0.19 with MOD version 1.0.9 suffers from a passcode bypass vulnerability via SQL injection.

tags | exploit, sql injection, bypass

SHA-256 | a05093f24f4366b2b8d1876c4de84dbebc07c8915da5df02941986aaa5a7a066

Download | Favorite | View

vBulletin 3.8.6 Credential Disclosure

Posted Jul 23, 2010

Authored by MaXe

vBulletin version 3.8.6 suffers from a database credential disclosure vulnerability.

tags | exploit, info disclosure

SHA-256 | 80c5d688535f6bef2f95fb6daea4f7847dadaa708d6921883fcba8d498ec8b9d

Download | Favorite | View

phpBazar Administrative Disclosure

Posted Jul 23, 2010

Authored by Net_Spy

phpBazar suffers form an administrative information disclosure vulnerability.

tags | exploit, info disclosure

SHA-256 | 284ce5d76893ce714303b0b145d2122ed9aebe953587df8e84a29781158cbf82

Download | Favorite | View

mw-werbung Local File Inclusion

Posted Jul 23, 2010

Authored by Destan

mw-werbung suffers from a local file inclusion vulnerability.

tags | exploit, local, file inclusion

SHA-256 | 539510c358a8f109ec59ae03f81d22f69157c25da1f80a7dd0fd99ca91779052

Download | Favorite | View

Spitfire 1.0.336 Cross Site Scripting

Posted Jul 23, 2010

Authored by High-Tech Bridge SA | Site htbridge.com

Spitfire versions 1.0.336 and below suffer from multiple cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss

SHA-256 | b80f7fc2c2eb64e04275356f27046d6ace56c03015931299f289649f0b84f0a1

Download | Favorite | View

Joomla Jomtube SQL Injection

Posted Jul 23, 2010

Authored by SixP4ck3r

The Joomla Jomtube component suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection

SHA-256 | 1c07a5bbcc187983092a801b6b2964e6daa7ebf9fee6533b910ebbb48d32c4a3

Download | Favorite | View

AJ HYIP MERIDIAN SQL Injection

Posted Jul 23, 2010

Authored by JosS

AJ HYIP MERIDIAN suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection

SHA-256 | 9f1451e49843fddb0b692ea726cbe2c10ddc31196a455c56652b2db9b7c3410e

Download | Favorite | View

Free PHP Photo Gallery Script Command Execution

Posted Jul 23, 2010

Authored by ViRuS Qalaa

Free PHP Photo Gallery Script suffers from a remote command execution vulnerability.

tags | exploit, remote, php

SHA-256 | 3c98174abcc36787897313583267e4618b3fce8c331e862723872e7adafb017c

Download | Favorite | View

Free PHP Photo Gallery Script Remote File Inclusion

Posted Jul 23, 2010

Authored by ViRuS Qalaa

Free PHP Photo Gallery Script suffers from a remote file inclusion vulnerability.

tags | exploit, remote, php, code execution, file inclusion

SHA-256 | 54e8a7f8cc78ea8ee4c875525609a8683700a355eba20a3cfe1cb930653e6bbd

Download | Favorite | View

WordPress Plugin myLDlinker SQL Injection

Posted Jul 23, 2010

Authored by H-SK33PY

The myLDlinker plugin version 2.9.2 for WordPress suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection

SHA-256 | fec183e93163a80059c49b737d58107eeb30acfd6d4522fae78ddce2ebd1623f

Download | Favorite | View

coWiki 0.3.4 SQL Injection

Posted Jul 22, 2010

Authored by MustLive

coWiki versions 0.3.4 and below suffer from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection

SHA-256 | c9d51e1abda92629bec518aa2b18143d37b63bea8e78f7e93fefc1aa3d61047c

Download | Favorite | View