.:[ packet storm ]:.
                               
global security disclosure
global security disclosure

 Section:  .. / Last 50 Exploit Files /

 ///  File Name:revsense-sql.txt
Description:
RevSense suffers from a remote SQL injection vulnerability that allows for authentication bypass.
Author:d3b4g
File Size:830
Last Modified:Nov 19 18:45:36 2008
MD5 Checksum:6aa053d65dd314b32171368e6bf84ae6

 ///  File Name:maurycms-upload.txt
Description:
MauryCMS versions 0.53.2 and below remote shell upload exploit.
Author:StAkeR
File Size:2246
Last Modified:Nov 19 18:31:00 2008
MD5 Checksum:63cc458d0d8e69152b1c8c27b36a2bf7

 ///  File Name:linksautomation-sql.txt
Description:
LinksAutomation Script suffers from a remote SQL injection vulnerability.
Author:d3v1l
File Size:1679
Last Modified:Nov 19 18:29:13 2008
MD5 Checksum:0ff9ea758f37cbf93c812e824cb8af98

 ///  File Name:linksxs-sql.txt
Description:
Linksxs Script suffers from a remote SQL injection vulnerability.
Author:d3v1l
File Size:1685
Last Modified:Nov 19 18:28:32 2008
MD5 Checksum:165976435e2cf54668de8896135ccc8e

 ///  File Name:ethiclinks-sql.txt
Description:
Ethiclinks suffers from a remote SQL injection vulnerability.
Author:d3v1l
File Size:1883
Last Modified:Nov 19 18:27:15 2008
MD5 Checksum:840182c3b5760545c2554f36f44507c5

 ///  File Name:easyeditcms-sql.txt
Description:
Easyedit CMS suffers from multiple remote SQL injection vulnerabilities.
Author:d3v1l
File Size:705
Last Modified:Nov 19 18:25:43 2008
MD5 Checksum:ddd126108668940b95b0c3f58edc0366

 ///  File Name:msvista-overflow.txt
Description:
The Microsoft Device IO Control wrapped by the iphlpapi.dll API shipping with Windows Vista 32 bit and 64 bit contains a possibly exploitable, buffer overflow corrupting kernel memory. Proof of concept test code included.
Author:Carson Hounshell,Marius Wachtler,Michael Burgbacher,Michael Craggs,Thomas Unterleitner
Homepage:http://www.phion.com/
File Size:10901
Last Modified:Nov 19 18:22:36 2008
MD5 Checksum:8d9062372b98a602f3a22fe236506963

 ///  File Name:mytopix-sql.txt
Description:
MyTopix versions 1.3.0 and below remote SQL injection exploit.
Author:cOndemned
Homepage:http://condemned.r00t.la/
File Size:4746
Last Modified:Nov 19 18:19:35 2008
MD5 Checksum:8e0559a875dc85728184e0a26a62eb96

 ///  File Name:punbb-lfi.txt
Description:
PunBB (Private Messaging System versions 1.2.x) multiple local file inclusion exploit.
Author:StAkeR
File Size:7837
Last Modified:Nov 19 18:18:10 2008
MD5 Checksum:4e17d4daf83b92da03922224ce17aa79

 ///  File Name:PR07-40.txt
Description:
The 3Com AP 8760 suffers from authentication bypass, password leakage, and SNMP injection vulnerabilities. Details provided.
Author:Adrian Pastor
Homepage:http://www.procheckup.com/
File Size:4569
Last Modified:Nov 19 18:08:39 2008
MD5 Checksum:de90de2dfb7bb15c9207cdcfb1dc6b7e

 ///  File Name:PR07-11.txt
Description:
Sun Java System Identity suffers from a cross site request forgery vulnerability. Proof of concept code included.
Author:Adrian Pastor,Jan Fry
Homepage:http://www.procheckup.com/
File Size:3836
Last Modified:Nov 19 18:07:07 2008
MD5 Checksum:8a27d91e43fbb3bc2fb530f8741b2c77

 ///  File Name:alexarticle-upload.txt
Description:
Alex Article-Engine version 1.3.0 suffers from a remote arbitrary file upload vulnerability.
Author:Batter
File Size:1168
Last Modified:Nov 19 17:04:26 2008
MD5 Checksum:8fa701b438aefcdc974a713bbb55d89a

 ///  File Name:alexnews-upload.txt
Description:
Alex News-Engine version 1.5.1 suffers from a remote arbitrary file upload vulnerability.
Author:Batter
File Size:1151
Last Modified:Nov 19 17:02:53 2008
MD5 Checksum:71f4fe9cb8a232d39997f21b36f87ebf

 ///  File Name:DSECRG-08-039.txt
Description:
Pluck CMS version 4.5.3 suffers from a local file inclusion vulnerability in data/inc/lib/pcltar.lib.php.
Author:Digital Security Research Group
Homepage:http://www.dsec.ru/
File Size:2103
Last Modified:Nov 18 20:09:35 2008
MD5 Checksum:75fd4e17221c2d6c784ac7ab1a410e8b

 ///  File Name:directory-rfi.txt
Description:
Free Directory Script version 1.1.1 suffers from a remote file inclusion vulnerability.vulnerability.
Author:Ghost Hacker
Homepage:http://www.real-hack.net/
File Size:2225
Last Modified:Nov 18 19:41:44 2008
MD5 Checksum:7f8bed2e75d5eaeb1c1b72536868bae2

 ///  File Name:cups-dos.txt
Description:
CUPS version 1.3.7 cross site request forgery remote crash exploit that makes use of the add rss subscription functionality.
Author:Adrian Pastor
File Size:437
Last Modified:Nov 18 19:28:06 2008
MD5 Checksum:1ef452ec2c616d611a578d9e2fb24e5e

 ///  File Name:etopbizlinkback-insecure.txt
Description:
E-topbiz Link Back Checker 1 suffers from an insecure cookie handling vulnerability that allows for administrative take-over.
Author:X0r
File Size:466
Last Modified:Nov 18 19:23:41 2008
MD5 Checksum:3d645ee9d2340964a69cb6cb2555b35a

 ///  File Name:musicbox238-sql.txt
Description:
Musicbox versions 2.3.8 and below suffer from a remote SQL injection vulnerability. This was discovered in the last version and the vendor still has not fixed it.
Author:Snakespc
Homepage:http://www.snakespc.com/sc
Related Exploit:musicbox-sql.txt
File Size:3041
Last Modified:Nov 18 19:10:56 2008
MD5 Checksum:0cfd65ddce5aa54f6ea1a290f20efd38

 ///  File Name:noIPwn3r.c
Description:
No-IP DUC versions 2.1.7 and below remote code execution exploit with reverse shell functionality.
Author:XenoMuta
Homepage:http://xenomuta.blogspot.com/
File Size:8103
Last Modified:Nov 18 19:05:55 2008
MD5 Checksum:94f7539a2f526191e3041ebd0c0eaa10

 ///  File Name:videoscript-password.txt
Description:
VideoScript versions 4.0.1.50 and below administrative password changing exploit.
Author:G4N0K
File Size:7648
Last Modified:Nov 18 00:40:33 2008
MD5 Checksum:120245d21bb302fad23e901c4a649add

 ///  File Name:chilkat-create.txt
Description:
Chilkat Socket Active-X control (ChilkatSocket.DLL) version 2.3.1.1 remote arbitrary file creation exploit.
Author:Underz0ne Crew
Homepage:http://www.underz0ne.net/
File Size:925
Last Modified:Nov 18 00:23:01 2008
MD5 Checksum:1f4383764c48b7133cf0de514e038cc2

 ///  File Name:jobsiteinet-sql.txt
Description:
Job Site Script Design by i-netsolution suffers from a remote SQL injection vulnerability.
Author:d3b4g
File Size:1549
Last Modified:Nov 18 00:19:24 2008
MD5 Checksum:24995a6391c630e455b40312c95dda7f

 ///  File Name:jadugalaxies-sql.txt
Description:
Jadu Galaxies suffers from a blind SQL injection vulnerability.
Author:ZoRLu
File Size:1010
Last Modified:Nov 18 00:17:58 2008
MD5 Checksum:09c80a4bae33498859e6e1fd0f8bed3c

 ///  File Name:cnn-xss.txt
Description:
CNN.com suffers from cross site scripting and content modification vulnerabilities.
Author:Anonymous
File Size:3913
Last Modified:Nov 17 23:06:16 2008
MD5 Checksum:92c84de2d5d9b7b3c25913b34e95cdef

 ///  File Name:exodeus-injection.txt
Description:
Exodus version 0.10 suffers from an URI handler arbitrary parameter injection vulnerability.
Author:Nine:Situations:Group
Homepage:http://retrogod.altervista.org/
File Size:1887
Last Modified:Nov 17 23:03:47 2008
MD5 Checksum:ead5dbe29e5823ea4e19a07a001a5800

 ///  File Name:simplecustomer12-sql.txt
Description:
Simple Customer version 1.2 suffers a SQL injection vulnerability that allows for authentication bypass.
Author:d3b4g
File Size:737
Last Modified:Nov 17 23:01:46 2008
MD5 Checksum:0cb715cd07f5414f57f34f266f13d6d2

 ///  File Name:opera962-overflow.txt
Description:
Opera version 9.62 local heap overflow exploit that makes use of file://.
Author:k'sOSe
Homepage:http://www.pornosecurity.org/
File Size:1188
Last Modified:Nov 17 23:00:28 2008
MD5 Checksum:80f8e7302996a3a72243d95efb5201c1

 ///  File Name:phpfan-rfi.txt
Description:
phpfan version 3.3.4 suffers from a remote file inclusion vulnerability in init.php.
Author:ahmadbady
File Size:924
Last Modified:Nov 17 22:59:13 2008
MD5 Checksum:f88cadb8524969ddedc732306f19b19c

 ///  File Name:waraxe-2008-SA068.txt
Description:
vBulletin version 3.7.3pl1 suffers from a remote SQL injection vulnerability.
Author:Janek Vind aka waraxe
Homepage:http://www.waraxe.us/
File Size:4419
Last Modified:Nov 17 21:12:34 2008
MD5 Checksum:a32d3fba6edf5eb6c77c2efe86bac6b6

 ///  File Name:saturncms-sql.txt
Description:
SaturnCMS suffers from a blind SQL injection vulnerability.
Author:Hussin X
Homepage:http://www.tryag.cc/
File Size:1156
Last Modified:Nov 17 21:11:45 2008
MD5 Checksum:de9fc0673b993786fe3b287fc5ab7334

 ///  File Name:qshop-sqlxss.txt
Description:
Q-Shop version 3.0 suffers from cross site scripting and remote SQL injection vulnerabilities.
Author:Bl@ckbe@rd
File Size:3247
Last Modified:Nov 17 21:10:03 2008
MD5 Checksum:b65ee8bf3b67d192ba02b0b7effeee69

 ///  File Name:waraxe-2008-SA069.txt
Description:
vBulletin version 3.7.4 suffers from multiple remote SQL injection vulnerabilities.
Author:Janek Vind aka waraxe
Homepage:http://www.waraxe.us/
File Size:3906
Last Modified:Nov 17 21:08:50 2008
MD5 Checksum:6a6a6537f95023581440583556df8516

 ///  File Name:ultrastats-sql.txt
Description:
Ultrastats versions 0.3.11 and 0.2.144 suffer from a remote SQL injection vulnerability.
Author:EEK
File Size:3350
Last Modified:Nov 17 21:05:32 2008
MD5 Checksum:40e45fb4ccd942e795867ab21af1fefa

 ///  File Name:freezegreetings-password.txt
Description:
FREEze Greetings version 1.0 remote password retrieval exploit.
Author:cOndemned
Homepage:http://condemned.r00t.la/
File Size:746
Last Modified:Nov 17 21:04:07 2008
MD5 Checksum:3b737fa72a1c2641246ee52f5e258dbb

 ///  File Name:etopbizadmanager-sql.txt
Description:
E-topbiz AdManager version 4 suffers from a blind SQL injection vulnerability.
Author:Hussin X
Homepage:http://www.tryag.cc/
File Size:901
Last Modified:Nov 17 21:02:21 2008
MD5 Checksum:f3d7862cdc63ef260c436809c3b0034a

 ///  File Name:openasp-sql.txt
Description:
OpenASP versions 3.0 and below suffer from a blind SQL injection vulnerability.
Author:StAkeR
File Size:487
Last Modified:Nov 17 20:05:00 2008
MD5 Checksum:687f8eab55264d06f66e60db27204a1d

 ///  File Name:mxcamarchive-download.txt
Description:
mxCamArchive version 2.2 suffers from a configuration bypass download vulnerability.
Author:ahmadbady
File Size:1068
Last Modified:Nov 17 20:03:57 2008
MD5 Checksum:3fe2d1033df81e3874550376a7d31c7a

 ///  File Name:wholesale-sql.txt
Description:
phpstore Wholesale suffers from a remote SQL injection vulnerability in track.php.
Author:Hussin X
Homepage:http://www.tryag.cc/
File Size:1139
Last Modified:Nov 17 02:49:54 2008
MD5 Checksum:0af0942f525084a5e667204b5b3e5d75

 ///  File Name:flosites-sql.txt
Description:
FloSites Blog suffers from multiple remote SQL injection vulnerabilities.
Author:Vrs-hCk
File Size:1246
Last Modified:Nov 16 19:27:15 2008
MD5 Checksum:19c55fb85eeb952842a989a8dcbc9b48

 ///  File Name:phpstoreyahoo-sql.txt
Description:
The PHPStore Yahoo! Answers functionality suffers from a remote SQL injection vulnerability.
Author:Snakespc
Homepage:http://www.snakespc.com/sc
File Size:3172
Last Modified:Nov 16 19:20:00 2008
MD5 Checksum:4c7fe32558c6cdd638e91187056abb4a

 ///  File Name:minigal-disclose.txt
Description:
MiniGal b13 remote file disclosure exploit that leverages index.php.
Author:Alfons Luja
File Size:1662
Last Modified:Nov 16 19:17:48 2008
MD5 Checksum:04113ba88926e89f7273e8c1659f4424

 ///  File Name:clipsharepro-sql.txt
Description:
ClipShare Pro 2006 - 2007 suffers from a remote SQL injection vulnerability.
Author:Snakespc
Homepage:http://www.snakespc.com/sc
File Size:3191
Last Modified:Nov 16 19:14:34 2008
MD5 Checksum:e9e11cada955197c7c1a04b29a203223

 ///  File Name:boutikone-xss.txt
Description:
BoutikOne CMS suffers from a cross site scripting vulnerability.
Author:d3v1l
File Size:333
Last Modified:Nov 16 19:12:37 2008
MD5 Checksum:13d680d9ff76ce4009f866643488a7e1

 ///  File Name:gsrealestate-sql.txt
Description:
GS Real Estate Portal suffers from multiple SQL injection vulnerabilities.
Author:InjEctOrS
File Size:2353
Last Modified:Nov 16 19:09:15 2008
MD5 Checksum:5ec0caf232a540900bac31f8a9d1774a

 ///  File Name:x7chat-sql.txt
Description:
X7 Chat version 2.0.5 suffers a SQL injection vulnerability that allows for authentication bypass.
Author:ZoRLu
File Size:830
Last Modified:Nov 16 18:30:16 2008
MD5 Checksum:fcb9d1bf73a86b5ec0ba4607031f99b6

 ///  File Name:textlinksales-sqlxss.txt
Description:
turnkeyforms Text Link Sales suffers from cross site scripting and SQL injection vulnerabilities.
Author:ZoRLu
File Size:1047
Last Modified:Nov 16 18:28:26 2008
MD5 Checksum:0f9b4ce0f51dca6431c191145636a653

 ///  File Name:sudo-local.txt
Description:
sudo versions 1.6.9p18 and below local privilege escalation exploit.
Author:Kingcope
File Size:1552
Last Modified:Nov 16 18:25:45 2008
MD5 Checksum:26ffab57d0b621d877b892fec2020d3f

 ///  File Name:ms08067-2k2k3.txt
Description:
Microsoft Windows Server Service code execution exploit that takes advantage of the vulnerability listed in MS08-067.
Author:Debasis Mohanty
Homepage:http://hackingspirits.com/
Related Exploit:ms08-067.zip
File Size:7059
Last Modified:Nov 16 18:23:06 2008
MD5 Checksum:38ad68544d42009d2d60dec19915df7a

 ///  File Name:verypdf-activex.txt
Description:
VeryPDF PDFView OCX Active-X related OpenPDF heap overflow proof of concept exploit.
Author:r0ut3r
File Size:815
Last Modified:Nov 16 18:20:48 2008
MD5 Checksum:991d153bf1c0a388e1c4ed9f8cf0b515

 ///  File Name:discuz-exec.txt
Description:
Discuz! versions 6.x and 7.x remote code execution exploit.
Author:80vul
Homepage:http://www.80vul.com/
File Size:2359
Last Modified:Nov 14 15:39:17 2008
MD5 Checksum:e8d963d20334b2c8a9ef79cbdba000d8