Section: .. / Last 50 Exploit Files /
| /// File Name: | revsense-sql.txt | Description:
| RevSense suffers from a remote SQL injection vulnerability that allows for authentication bypass. | | Author: | d3b4g | | File Size: | 830 | | Last Modified: | Nov 19 18:45:36 2008 | | MD5 Checksum: | 6aa053d65dd314b32171368e6bf84ae6 |
|
| /// File Name: | maurycms-upload.txt | Description:
| MauryCMS versions 0.53.2 and below remote shell upload exploit. | | Author: | StAkeR | | File Size: | 2246 | | Last Modified: | Nov 19 18:31:00 2008 | | MD5 Checksum: | 63cc458d0d8e69152b1c8c27b36a2bf7 |
|
| /// File Name: | linksautomation-sql.txt | Description:
| LinksAutomation Script suffers from a remote SQL injection vulnerability. | | Author: | d3v1l | | File Size: | 1679 | | Last Modified: | Nov 19 18:29:13 2008 | | MD5 Checksum: | 0ff9ea758f37cbf93c812e824cb8af98 |
|
| /// File Name: | linksxs-sql.txt | Description:
| Linksxs Script suffers from a remote SQL injection vulnerability. | | Author: | d3v1l | | File Size: | 1685 | | Last Modified: | Nov 19 18:28:32 2008 | | MD5 Checksum: | 165976435e2cf54668de8896135ccc8e |
|
| /// File Name: | ethiclinks-sql.txt | Description:
| Ethiclinks suffers from a remote SQL injection vulnerability. | | Author: | d3v1l | | File Size: | 1883 | | Last Modified: | Nov 19 18:27:15 2008 | | MD5 Checksum: | 840182c3b5760545c2554f36f44507c5 |
|
| /// File Name: | easyeditcms-sql.txt | Description:
| Easyedit CMS suffers from multiple remote SQL injection vulnerabilities. | | Author: | d3v1l | | File Size: | 705 | | Last Modified: | Nov 19 18:25:43 2008 | | MD5 Checksum: | ddd126108668940b95b0c3f58edc0366 |
|
| /// File Name: | msvista-overflow.txt | Description:
| The Microsoft Device IO Control wrapped by the iphlpapi.dll API shipping with Windows Vista 32 bit and 64 bit contains a possibly exploitable, buffer overflow corrupting kernel memory. Proof of concept test code included. | | Author: | Carson Hounshell,Marius Wachtler,Michael Burgbacher,Michael Craggs,Thomas Unterleitner | | Homepage: | http://www.phion.com/ | | File Size: | 10901 | | Last Modified: | Nov 19 18:22:36 2008 | | MD5 Checksum: | 8d9062372b98a602f3a22fe236506963 |
|
| /// File Name: | mytopix-sql.txt | Description:
| MyTopix versions 1.3.0 and below remote SQL injection exploit. | | Author: | cOndemned | | Homepage: | http://condemned.r00t.la/ | | File Size: | 4746 | | Last Modified: | Nov 19 18:19:35 2008 | | MD5 Checksum: | 8e0559a875dc85728184e0a26a62eb96 |
|
| /// File Name: | punbb-lfi.txt | Description:
| PunBB (Private Messaging System versions 1.2.x) multiple local file inclusion exploit. | | Author: | StAkeR | | File Size: | 7837 | | Last Modified: | Nov 19 18:18:10 2008 | | MD5 Checksum: | 4e17d4daf83b92da03922224ce17aa79 |
|
| /// File Name: | PR07-40.txt | Description:
| The 3Com AP 8760 suffers from authentication bypass, password leakage, and SNMP injection vulnerabilities. Details provided. | | Author: | Adrian Pastor | | Homepage: | http://www.procheckup.com/ | | File Size: | 4569 | | Last Modified: | Nov 19 18:08:39 2008 | | MD5 Checksum: | de90de2dfb7bb15c9207cdcfb1dc6b7e |
|
| /// File Name: | PR07-11.txt | Description:
| Sun Java System Identity suffers from a cross site request forgery vulnerability. Proof of concept code included. | | Author: | Adrian Pastor,Jan Fry | | Homepage: | http://www.procheckup.com/ | | File Size: | 3836 | | Last Modified: | Nov 19 18:07:07 2008 | | MD5 Checksum: | 8a27d91e43fbb3bc2fb530f8741b2c77 |
|
| /// File Name: | alexarticle-upload.txt | Description:
| Alex Article-Engine version 1.3.0 suffers from a remote arbitrary file upload vulnerability. | | Author: | Batter | | File Size: | 1168 | | Last Modified: | Nov 19 17:04:26 2008 | | MD5 Checksum: | 8fa701b438aefcdc974a713bbb55d89a |
|
| /// File Name: | alexnews-upload.txt | Description:
| Alex News-Engine version 1.5.1 suffers from a remote arbitrary file upload vulnerability. | | Author: | Batter | | File Size: | 1151 | | Last Modified: | Nov 19 17:02:53 2008 | | MD5 Checksum: | 71f4fe9cb8a232d39997f21b36f87ebf |
|
| /// File Name: | DSECRG-08-039.txt | Description:
| Pluck CMS version 4.5.3 suffers from a local file inclusion vulnerability in data/inc/lib/pcltar.lib.php. | | Author: | Digital Security Research Group | | Homepage: | http://www.dsec.ru/ | | File Size: | 2103 | | Last Modified: | Nov 18 20:09:35 2008 | | MD5 Checksum: | 75fd4e17221c2d6c784ac7ab1a410e8b |
|
| /// File Name: | directory-rfi.txt | Description:
| Free Directory Script version 1.1.1 suffers from a remote file inclusion vulnerability.vulnerability. | | Author: | Ghost Hacker | | Homepage: | http://www.real-hack.net/ | | File Size: | 2225 | | Last Modified: | Nov 18 19:41:44 2008 | | MD5 Checksum: | 7f8bed2e75d5eaeb1c1b72536868bae2 |
|
| /// File Name: | cups-dos.txt | Description:
| CUPS version 1.3.7 cross site request forgery remote crash exploit that makes use of the add rss subscription functionality. | | Author: | Adrian Pastor | | File Size: | 437 | | Last Modified: | Nov 18 19:28:06 2008 | | MD5 Checksum: | 1ef452ec2c616d611a578d9e2fb24e5e |
|
| /// File Name: | etopbizlinkback-insecure.txt | Description:
| E-topbiz Link Back Checker 1 suffers from an insecure cookie handling vulnerability that allows for administrative take-over. | | Author: | X0r | | File Size: | 466 | | Last Modified: | Nov 18 19:23:41 2008 | | MD5 Checksum: | 3d645ee9d2340964a69cb6cb2555b35a |
|
| /// File Name: | musicbox238-sql.txt | Description:
| Musicbox versions 2.3.8 and below suffer from a remote SQL injection vulnerability. This was discovered in the last version and the vendor still has not fixed it. | | Author: | Snakespc | | Homepage: | http://www.snakespc.com/sc | | Related Exploit: | musicbox-sql.txt | | File Size: | 3041 | | Last Modified: | Nov 18 19:10:56 2008 | | MD5 Checksum: | 0cfd65ddce5aa54f6ea1a290f20efd38 |
|
| /// File Name: | noIPwn3r.c | Description:
| No-IP DUC versions 2.1.7 and below remote code execution exploit with reverse shell functionality. | | Author: | XenoMuta | | Homepage: | http://xenomuta.blogspot.com/ | | File Size: | 8103 | | Last Modified: | Nov 18 19:05:55 2008 | | MD5 Checksum: | 94f7539a2f526191e3041ebd0c0eaa10 |
|
| /// File Name: | videoscript-password.txt | Description:
| VideoScript versions 4.0.1.50 and below administrative password changing exploit. | | Author: | G4N0K | | File Size: | 7648 | | Last Modified: | Nov 18 00:40:33 2008 | | MD5 Checksum: | 120245d21bb302fad23e901c4a649add |
|
| /// File Name: | chilkat-create.txt | Description:
| Chilkat Socket Active-X control (ChilkatSocket.DLL) version 2.3.1.1 remote arbitrary file creation exploit. | | Author: | Underz0ne Crew | | Homepage: | http://www.underz0ne.net/ | | File Size: | 925 | | Last Modified: | Nov 18 00:23:01 2008 | | MD5 Checksum: | 1f4383764c48b7133cf0de514e038cc2 |
|
| /// File Name: | jobsiteinet-sql.txt | Description:
| Job Site Script Design by i-netsolution suffers from a remote SQL injection vulnerability. | | Author: | d3b4g | | File Size: | 1549 | | Last Modified: | Nov 18 00:19:24 2008 | | MD5 Checksum: | 24995a6391c630e455b40312c95dda7f |
|
| /// File Name: | jadugalaxies-sql.txt | Description:
| Jadu Galaxies suffers from a blind SQL injection vulnerability. | | Author: | ZoRLu | | File Size: | 1010 | | Last Modified: | Nov 18 00:17:58 2008 | | MD5 Checksum: | 09c80a4bae33498859e6e1fd0f8bed3c |
|
| /// File Name: | cnn-xss.txt | Description:
| CNN.com suffers from cross site scripting and content modification vulnerabilities. | | Author: | Anonymous | | File Size: | 3913 | | Last Modified: | Nov 17 23:06:16 2008 | | MD5 Checksum: | 92c84de2d5d9b7b3c25913b34e95cdef |
|
| /// File Name: | exodeus-injection.txt | Description:
| Exodus version 0.10 suffers from an URI handler arbitrary parameter injection vulnerability. | | Author: | Nine:Situations:Group | | Homepage: | http://retrogod.altervista.org/ | | File Size: | 1887 | | Last Modified: | Nov 17 23:03:47 2008 | | MD5 Checksum: | ead5dbe29e5823ea4e19a07a001a5800 |
|
| /// File Name: | simplecustomer12-sql.txt | Description:
| Simple Customer version 1.2 suffers a SQL injection vulnerability that allows for authentication bypass. | | Author: | d3b4g | | File Size: | 737 | | Last Modified: | Nov 17 23:01:46 2008 | | MD5 Checksum: | 0cb715cd07f5414f57f34f266f13d6d2 |
|
| /// File Name: | opera962-overflow.txt | Description:
| Opera version 9.62 local heap overflow exploit that makes use of file://. | | Author: | k'sOSe | | Homepage: | http://www.pornosecurity.org/ | | File Size: | 1188 | | Last Modified: | Nov 17 23:00:28 2008 | | MD5 Checksum: | 80f8e7302996a3a72243d95efb5201c1 |
|
| /// File Name: | phpfan-rfi.txt | Description:
| phpfan version 3.3.4 suffers from a remote file inclusion vulnerability in init.php. | | Author: | ahmadbady | | File Size: | 924 | | Last Modified: | Nov 17 22:59:13 2008 | | MD5 Checksum: | f88cadb8524969ddedc732306f19b19c |
|
| /// File Name: | saturncms-sql.txt | Description:
| SaturnCMS suffers from a blind SQL injection vulnerability. | | Author: | Hussin X | | Homepage: | http://www.tryag.cc/ | | File Size: | 1156 | | Last Modified: | Nov 17 21:11:45 2008 | | MD5 Checksum: | de9fc0673b993786fe3b287fc5ab7334 |
|
| /// File Name: | qshop-sqlxss.txt | Description:
| Q-Shop version 3.0 suffers from cross site scripting and remote SQL injection vulnerabilities. | | Author: | Bl@ckbe@rd | | File Size: | 3247 | | Last Modified: | Nov 17 21:10:03 2008 | | MD5 Checksum: | b65ee8bf3b67d192ba02b0b7effeee69 |
|
| /// File Name: | ultrastats-sql.txt | Description:
| Ultrastats versions 0.3.11 and 0.2.144 suffer from a remote SQL injection vulnerability. | | Author: | EEK | | File Size: | 3350 | | Last Modified: | Nov 17 21:05:32 2008 | | MD5 Checksum: | 40e45fb4ccd942e795867ab21af1fefa |
|
| /// File Name: | etopbizadmanager-sql.txt | Description:
| E-topbiz AdManager version 4 suffers from a blind SQL injection vulnerability. | | Author: | Hussin X | | Homepage: | http://www.tryag.cc/ | | File Size: | 901 | | Last Modified: | Nov 17 21:02:21 2008 | | MD5 Checksum: | f3d7862cdc63ef260c436809c3b0034a |
|
| /// File Name: | openasp-sql.txt | Description:
| OpenASP versions 3.0 and below suffer from a blind SQL injection vulnerability. | | Author: | StAkeR | | File Size: | 487 | | Last Modified: | Nov 17 20:05:00 2008 | | MD5 Checksum: | 687f8eab55264d06f66e60db27204a1d |
|
| /// File Name: | mxcamarchive-download.txt | Description:
| mxCamArchive version 2.2 suffers from a configuration bypass download vulnerability. | | Author: | ahmadbady | | File Size: | 1068 | | Last Modified: | Nov 17 20:03:57 2008 | | MD5 Checksum: | 3fe2d1033df81e3874550376a7d31c7a |
|
| /// File Name: | wholesale-sql.txt | Description:
| phpstore Wholesale suffers from a remote SQL injection vulnerability in track.php. | | Author: | Hussin X | | Homepage: | http://www.tryag.cc/ | | File Size: | 1139 | | Last Modified: | Nov 17 02:49:54 2008 | | MD5 Checksum: | 0af0942f525084a5e667204b5b3e5d75 |
|
| /// File Name: | flosites-sql.txt | Description:
| FloSites Blog suffers from multiple remote SQL injection vulnerabilities. | | Author: | Vrs-hCk | | File Size: | 1246 | | Last Modified: | Nov 16 19:27:15 2008 | | MD5 Checksum: | 19c55fb85eeb952842a989a8dcbc9b48 |
|
| /// File Name: | phpstoreyahoo-sql.txt | Description:
| The PHPStore Yahoo! Answers functionality suffers from a remote SQL injection vulnerability. | | Author: | Snakespc | | Homepage: | http://www.snakespc.com/sc | | File Size: | 3172 | | Last Modified: | Nov 16 19:20:00 2008 | | MD5 Checksum: | 4c7fe32558c6cdd638e91187056abb4a |
|
| /// File Name: | minigal-disclose.txt | Description:
| MiniGal b13 remote file disclosure exploit that leverages index.php. | | Author: | Alfons Luja | | File Size: | 1662 | | Last Modified: | Nov 16 19:17:48 2008 | | MD5 Checksum: | 04113ba88926e89f7273e8c1659f4424 |
|
| /// File Name: | boutikone-xss.txt | Description:
| BoutikOne CMS suffers from a cross site scripting vulnerability. | | Author: | d3v1l | | File Size: | 333 | | Last Modified: | Nov 16 19:12:37 2008 | | MD5 Checksum: | 13d680d9ff76ce4009f866643488a7e1 |
|
| /// File Name: | gsrealestate-sql.txt | Description:
| GS Real Estate Portal suffers from multiple SQL injection vulnerabilities. | | Author: | InjEctOrS | | File Size: | 2353 | | Last Modified: | Nov 16 19:09:15 2008 | | MD5 Checksum: | 5ec0caf232a540900bac31f8a9d1774a |
|
| /// File Name: | x7chat-sql.txt | Description:
| X7 Chat version 2.0.5 suffers a SQL injection vulnerability that allows for authentication bypass. | | Author: | ZoRLu | | File Size: | 830 | | Last Modified: | Nov 16 18:30:16 2008 | | MD5 Checksum: | fcb9d1bf73a86b5ec0ba4607031f99b6 |
|
| /// File Name: | textlinksales-sqlxss.txt | Description:
| turnkeyforms Text Link Sales suffers from cross site scripting and SQL injection vulnerabilities. | | Author: | ZoRLu | | File Size: | 1047 | | Last Modified: | Nov 16 18:28:26 2008 | | MD5 Checksum: | 0f9b4ce0f51dca6431c191145636a653 |
|
| /// File Name: | sudo-local.txt | Description:
| sudo versions 1.6.9p18 and below local privilege escalation exploit. | | Author: | Kingcope | | File Size: | 1552 | | Last Modified: | Nov 16 18:25:45 2008 | | MD5 Checksum: | 26ffab57d0b621d877b892fec2020d3f |
|
| /// File Name: | verypdf-activex.txt | Description:
| VeryPDF PDFView OCX Active-X related OpenPDF heap overflow proof of concept exploit. | | Author: | r0ut3r | | File Size: | 815 | | Last Modified: | Nov 16 18:20:48 2008 | | MD5 Checksum: | 991d153bf1c0a388e1c4ed9f8cf0b515 |
|
| /// File Name: | discuz-exec.txt | Description:
| Discuz! versions 6.x and 7.x remote code execution exploit. | | Author: | 80vul | | Homepage: | http://www.80vul.com/ | | File Size: | 2359 | | Last Modified: | Nov 14 15:39:17 2008 | | MD5 Checksum: | e8d963d20334b2c8a9ef79cbdba000d8 |
|
|
|
|
|