Section: .. / 0601-exploits /
| /// File Name: |
2005-23-12-brainsquad-team-cms.txt |
Description:
|
The CMS system from brainsquad-team suffers from a cross site scripting vulnerability in the user profile section and also may be susceptible to SQL injection attacks.
| | Author: | yorn | | File Size: | 1353 | | Last Modified: | Jan 9 19:27:12 2006 |
| MD5 Checksum: | b304061cc1e355228534d3d9cd8b9988 |
|
| /// File Name: |
ms05-055.c |
Description:
|
Microsoft Windows Kernel APC Data-Free local privilege escalation vulnerability exploit.
| | Author: | SoBeIt | | File Size: | 10589 | | Last Modified: | Jan 8 19:57:55 2006 |
| MD5 Checksum: | 3364bf57dfbfff5b82e1c2917e44cfc5 |
|
| /// File Name: |
ihs_winrar.c |
Description:
|
WinRAR local buffer overflow exploit for versions 3.3.0 and below.
| | Author: | c0d3r | | File Size: | 5207 | | Last Modified: | Jan 8 19:53:22 2006 |
| MD5 Checksum: | 68a94ebfd48c42c061dfb8437d23f021 |
|
| /// File Name: |
EV0019.txt |
Description:
|
NavBoard BBcode version 16 Stable (2.6.0) is susceptible to cross site scripting attacks. Exploitation details provided.
| | Author: | Aliaksandr Hartsuyeu | | File Size: | 1387 | | Last Modified: | Jan 8 19:28:12 2006 |
| MD5 Checksum: | 795dcec7a4b3981f729c758dd838b026 |
|
| /// File Name: |
CAN-2005-4085_exploit.pl.txt |
Description:
|
Remote exploit that makes use of a buffer overflow vulnerability in the Host: string sent to Blue Coat Systems Inc.'s WinProxy. Successful exploitation binds a shell on tcp port 4444.
| | Author: | FistFuXXer | | Related File: | 01.05.06-2.txt | | File Size: | 2917 | | Related CVE(s): | CAN-2005-4085 | | Last Modified: | Jan 8 06:55:47 2006 |
| MD5 Checksum: | f4d52f7a8622879b4bfb2f3b61a9c7a3 |
|
| /// File Name: |
CAN-2005-3187_exploit.pl.txt |
Description:
|
Simple denial of service exploit for Blue Coat Systems Inc.'s WinProxy that will cause the server to crash when sent 32,768 bytes.
| | Author: | FistFuXXer | | Related File: | 01.05.06-1.txt | | File Size: | 729 | | Related CVE(s): | CAN-2005-3187 | | Last Modified: | Jan 8 06:52:13 2006 |
| MD5 Checksum: | d3e9e76887d418de63793cc25b3632db |
|
| /// File Name: |
EV0017.txt |
Description:
|
TheWebForum version 1.2.1 is susceptible to cross site scripting and SQL injection attacks. Exploitation details provided.
| | Author: | Aliaksandr Hartsuyeu | | File Size: | 1693 | | Last Modified: | Jan 8 06:35:14 2006 |
| MD5 Checksum: | bae4e106cc7612ff061fa6c458a550d0 |
|
| /// File Name: |
EV0016.txt |
Description:
|
Proyecto Domus version 2.10 is susceptible to a cross site scripting vulnerability. Exploitation details provided.
| | Author: | Aliaksandr Hartsuyeu | | File Size: | 1127 | | Last Modified: | Jan 8 06:30:18 2006 |
| MD5 Checksum: | afec9a648f52c5327ffda04fcbe5ce4e |
|
| /// File Name: |
EV0015.txt |
Description:
|
ADNForum version 1.0b is susceptible to SQL injection and cross site scripting vulnerabilities. Exploitation details provided.
| | Author: | Aliaksandr Hartsuyeu | | File Size: | 1427 | | Last Modified: | Jan 8 06:15:20 2006 |
| MD5 Checksum: | f56b32e64169be4a853e63ddc387ecdb |
|
| /// File Name: |
cybershopSQL.txt |
Description:
|
CyberShop is susceptible to SQL injection attacks via the login sequence.
| | Author: | Night_Warrior | | File Size: | 290 | | Last Modified: | Jan 8 06:04:34 2006 |
| MD5 Checksum: | 9709be0980f44d10901219d6ed7e7225 |
|
| /// File Name: |
EV0014.txt |
Description:
|
TinyPHPForum versions 3.6 and below suffer from directory traversal, cross site scripting, and information disclosure flaws. Exploitation details provided.
| | Author: | Aliaksandr Hartsuyeu | | File Size: | 1337 | | Last Modified: | Jan 8 03:24:34 2006 |
| MD5 Checksum: | 90693ed76e197a01401b1c05b494c36b |
|
| /// File Name: |
webftpInclude.txt |
Description:
|
A file inclusion vulnerability exists in WebFTP version 1.2.6 in webftp.php.
| | Author: | Thomas Henlich | | File Size: | 1260 | | Last Modified: | Jan 8 03:01:11 2006 |
| MD5 Checksum: | 28b26f75d55cc9d465dd46388dec480d |
|
| /// File Name: |
phpflaw.php.zip |
Description:
|
PHP 4.3.10 and 4.4.0 Windows remote stack overflow exploit which works on certain systems by overflowing the mysql_connect function. Includes an advisory and workaround information.
| | Author: | mercenary | | File Size: | 2548 | | Last Modified: | Jan 6 10:47:06 2006 |
| MD5 Checksum: | 77f826297bb36e8891bdac9ce5515e63 |
|
| /// File Name: |
MS05-055Exp.rar |
Description:
|
MS05-055 local privilege escalation exploit tested on Windows2000 pro sp4 with and without rollup 1 - Chinese and English versions. Takes advantage of a vulnerability in the Windows Kernel APC Data-Free. Includes C source.
| | Author: | SoBeIt | | File Size: | 54187 | | Last Modified: | Jan 6 10:32:10 2006 |
| MD5 Checksum: | 81029bdb3889e6fc2d3cd1307e150698 |
|
| /// File Name: |
20051228.ie_xp_pfv_metafile.pm |
Description:
|
Perl module which exploits the WMF SetAbortProc in the Windows Picture and Fax Viewer found in Windows XP and 2003. This vulnerability uses a corrupt Windows Metafile to execute arbitrary code and was reported to the Bugtraq mailing list after being discovered in the wild at the following URL: http://unionseek[DOT]com/d/t1/wmf_exp.htm. Unofficial patch here.
| | Author: | H D Moore | | Homepage: | http://www.metasploit.com | | File Size: | 50586 | | Last Modified: | Jan 4 20:50:37 2006 |
| MD5 Checksum: | 3260de4f252b0eff3a96c08dcbf37c99 |
|
| /// File Name: |
20051231.ie_xp_pfv_metafile.pm |
Description:
|
Microsoft Windows Metafile (WMF) SetAbortProc remote code execution exploit which takes advantage of a vulnerability in the GDI library by using the 'Escape' metafile function to execute arbitrary code through the SetAbortProc procedure. Tested against Windows XP and 2003.
| | Author: | H D Moore, San, O600KO78RUS | | Homepage: | http://www.metasploit.com | | Related File: | WMFHotfix-1.4.msi | | File Size: | 6170 | | Last Modified: | Jan 4 20:35:47 2006 |
| MD5 Checksum: | d3193306031cf79a65054de5ec58c6f7 |
|
| /// File Name: |
winrar330.c |
Description:
|
WinRAR version 3.30 suffers from a buffer overflow vulnerability when processing a long file name. Proof of concept exploit provided.
| | Author: | Alpha_Programmer | | File Size: | 1597 | | Last Modified: | Jan 4 06:19:13 2006 |
| MD5 Checksum: | 6febae945f6edab57176fea3e2651d71 |
|
| /// File Name: |
cijfer-vsczpl.pl.txt |
Description:
|
Valdersoft Shopping Cart versions 3.0 and below remote command execution exploit.
| | Author: | cijfer | | File Size: | 3120 | | Last Modified: | Jan 4 06:14:35 2006 |
| MD5 Checksum: | 1334d876f1f971b86d5eeb002c43ead9 |
|
| /// File Name: |
termsh.c |
Description:
|
SCO Openserver 5.0.7 termsh local privilege escalation exploit.
| | Author: | RoD hEDoR | | File Size: | 1270 | | Related CVE(s): | CAN-2005-0351 | | Last Modified: | Jan 4 06:12:52 2006 |
| MD5 Checksum: | 7eb534c3390752e4d676fd49101944ba |
|
| /// File Name: |
EV0011.txt |
Description:
|
ScozBook version BETA 1.1 is susceptible to SQL injection attacks. Exploitation details provided.
| | Author: | Aliaksandr Hartsuyeu | | File Size: | 1154 | | Last Modified: | Jan 4 06:09:45 2006 |
| MD5 Checksum: | b44ed22d773155b59a9f51328ccdc751 |
|
| /// File Name: |
EV0010.txt |
Description:
|
B-net Software version 1.0 is susceptible to cross site scripting attacks. Exploitation details provided.
| | Author: | Aliaksandr Hartsuyeu | | File Size: | 1185 | | Last Modified: | Jan 4 06:09:07 2006 |
| MD5 Checksum: | 8e8f514602094834d3eb15a736e18fff |
|
| /// File Name: |
EV0009.txt |
Description:
|
PHPjournaler version 1.0 is susceptible to SQL injection attacks via index.php. Exploitation details provided.
| | Author: | Aliaksandr Hartsuyeu | | File Size: | 1021 | | Last Modified: | Jan 4 05:41:21 2006 |
| MD5 Checksum: | ba8cd3f4d615b26d13a8ea614dcca1e6 |
|
| /// File Name: |
EV0008.txt |
Description:
|
inTouch 0.5.1 Alpha is susceptible to SQL injection attacks via the login page. Exploitation details provided.
| | Author: | Aliaksandr Hartsuyeu | | File Size: | 975 | | Last Modified: | Jan 4 05:40:41 2006 |
| MD5 Checksum: | 06bfd3cd16d5efa0cf2668fa307934a2 |
|
| /// File Name: |
EV0007.txt |
Description:
|
Chimera Web Portal System version 0.2 is susceptible to SQL injection and cross site scripting attacks. Exploitation details provided.
| | Author: | Aliaksandr Hartsuyeu | | File Size: | 1505 | | Last Modified: | Jan 4 05:40:01 2006 |
| MD5 Checksum: | d1b0ac8378f55aebcccf71d22f4738a1 |
|
|
|
|
|