Section: .. / 0801-exploits /
| /// File Name: |
irfanview-corrupt.txt |
Description:
|
IrfanView version 4.10 .FPX file memory corruption exploit that launches calc.exe.
| | Author: | Marsu | | File Size: | 434615 | | Last Modified: | Jan 29 21:36:54 2008 |
| MD5 Checksum: | 94b9718f865909a6ee2110608582a70b |
|
| /// File Name: |
alice_gate2_pluswifi_PoC.zip |
Description:
|
The Alice Gate 2 Plus Wifi ADSL modem suffers from a cross site request forgery vulnerability.
| | Author: | WarGame | | File Size: | 95117 | | Last Modified: | Jan 21 20:31:08 2008 |
| MD5 Checksum: | 19ab322520d8a42e1d57051cb6a45c8c |
|
| /// File Name: |
gswsshit.zip |
Description:
|
Proof of concept code that demonstrates format string and buffer overflow vulnerabilities in Georgia SoftWorks SSH2 Server versions 7.01.0003 and below.
| | Author: | Luigi Auriemma | | Homepage: | http://aluigi.org/ | | Related File: | gswsshit.txt | | File Size: | 77423 | | Last Modified: | Jan 2 17:53:39 2008 |
| MD5 Checksum: | f2be8cdd38695547a1d1d65bead4ef59 |
|
| /// File Name: |
quicktimebof.zip |
Description:
|
The Apple Quicktime Player versions 7.3.1.70 and below HTTP error message buffer overflow exploit.
| | Author: | Luigi Auriemma | | Homepage: | http://aluigi.org/ | | File Size: | 23540 | | Last Modified: | Jan 16 00:49:57 2008 |
| MD5 Checksum: | 582c598cb520c2e8aa051f3efe9ae9de |
|
| /// File Name: |
yabb155-exec.txt |
Description:
|
YaBB SE versions 1.5.5 and below remote command execution exploit.
| | Author: | 1dt.w0lf | | Homepage: | http://rst.void.ru | | File Size: | 13975 | | Last Modified: | Jan 23 23:38:51 2008 |
| MD5 Checksum: | 0bea1890ef10aeb966c41f458f9a8145 |
|
| /// File Name: |
igal207-sql.txt |
Description:
|
Invision Gallery versions 2.0.7 and below remote SQL injection exploit.
| | Author: | 1dt.w0lf | | Homepage: | http://rst.void.ru | | File Size: | 12516 | | Last Modified: | Jan 23 23:44:12 2008 |
| MD5 Checksum: | 15d3847c56e4c60f5e8342582426e143 |
|
| /// File Name: |
vuln-summary.txt |
Description:
|
A digest of vulnerabilities listing specific findings for WordPress, AwesomeTemplateEngine, PRO-Search, RotaBanner Local, and ExpressionEngine.
| | Homepage: | http://websecurity.com.ua/ | | File Size: | 11787 | | Last Modified: | Jan 3 18:17:14 2008 |
| MD5 Checksum: | 9ebad34bd61e45aea07adcfe9fdbabcf |
|
| /// File Name: |
mswinqueue-overflow.txt |
Description:
|
Microsoft Windows Message Queueing Server RPC buffer overflow exploit that relates to MS07-065.
| | Author: | Marcin Kozlowski | | File Size: | 11774 | | Last Modified: | Jan 18 04:50:57 2008 |
| MD5 Checksum: | 2d7ee74e959b003854de19078715c9c8 |
|
| /// File Name: |
ruttorrent.zip |
Description:
|
Proof of concept exploit for BitTorrent versions 6.0 and below and uTorrent versions 1.7.5 and below which suffer from a buffer overflow vulnerability.
| | Author: | Luigi Auriemma | | Homepage: | http://aluigi.org/ | | Related File: | ruttorrent.txt | | File Size: | 11606 | | Last Modified: | Jan 17 00:41:24 2008 |
| MD5 Checksum: | 6ebba00cba1adb2be314da7800f7f2af |
|
| /// File Name: |
runcmsnewbb-sql.txt |
Description:
|
RunCMS Newbb_plus versions 0.92 and below client IP remote SQL injection exploit.
| | Author: | Eugene Minaev | | Homepage: | http://itdefence.ru/ | | File Size: | 9162 | | Last Modified: | Jan 6 19:50:32 2008 |
| MD5 Checksum: | 181ae0b31f2b5ff64f1c2620448c6bad |
|
| /// File Name: |
sapone.zip |
Description:
|
Remote exploit for SAP MaxDB versions 7.6.03 build 007 and below which suffer from a pre-authentication remote code execution vulnerability. Launches cmd.exe.
| | Author: | Luigi Auriemma | | Homepage: | http://aluigi.org/ | | Related File: | sapone.txt | | File Size: | 8941 | | Last Modified: | Jan 9 13:21:31 2008 |
| MD5 Checksum: | aaac074fd56fd46ab2c8f96970e4fa1c |
|
| /// File Name: |
domphp-admin.txt |
Description:
|
DomPHP versions 0.81 and below remote add administrator exploit.
| | Author: | j0j0 | | File Size: | 8488 | | Last Modified: | Jan 10 03:36:36 2008 |
| MD5 Checksum: | 50034623ab2708b9b329d6da333fcc8e |
|
| /// File Name: |
crystal-dos.txt |
Description:
|
Crystal Reports XI Release 2 suffers from an ActiveX buffer overflow denial of service condition.
| | Author: | shinnai | | Homepage: | http://shinnai.altervista.org/ | | File Size: | 8179 | | Last Modified: | Jan 18 04:27:18 2008 |
| MD5 Checksum: | 09647ec0a169af8b5521bca79986a57b |
|
| /// File Name: |
urlevasion.txt |
Description:
|
URL filtering bypass proof of concept exploit that demonstrates Fortinet's filtering vulnerability.
| | Author: | Danux | | File Size: | 8138 | | Last Modified: | Jan 4 19:21:02 2008 |
| MD5 Checksum: | b79df8379509e8f6001d8c846497cd62 |
|
| /// File Name: |
CORE-2007-1219.txt |
Description:
|
Core Security Technologies Advisory - The Firebird database manager contains an integer overflow in the processing of certain tags on the XDR protocol used for communication with the server. Version vulnerable include Firebird SQL 1.0.3 and before, 1.5.5 and before, 2.0.3 and before, and 2.1.0 Beta 2 and before.
| | Author: | Damian Frizza, Alfredo Ortega | | Homepage: | http://www.coresecurity.com/corelabs/ | | File Size: | 8027 | | Related CVE(s): | CVE-2008-0387 | | Last Modified: | Jan 28 13:51:20 2008 |
| MD5 Checksum: | ac209dad40c1355525544bb9deffc4b0 |
|
| /// File Name: |
mysqlo.zip |
Description:
|
MySQL versions 6.0.3 and below pre-auth buffer overflow exploit that makes use of a vulnerability in yaSSL versions 1.7.5 and below.
| | Author: | Luigi Auriemma | | Homepage: | http://aluigi.org/ | | Related File: | yasslick.txt | | File Size: | 7903 | | Last Modified: | Jan 4 20:26:12 2008 |
| MD5 Checksum: | 62f25e67c23e48895b17ef6e46434908 |
|
| /// File Name: |
cpg1414-sql.txt |
Description:
|
Coppermine Photo Gallery versions 1.4.14 and below remote SQL injection exploit.
| | Author: | RST/GHC | | Homepage: | http://rst.void.ru | | File Size: | 7869 | | Last Modified: | Jan 23 23:18:21 2008 |
| MD5 Checksum: | be067643f7a5d5516f37c3536f5e999f |
|
|
|
|
|
![.:[ packet storm ]:.](/images/ps-ani.gif)
