Section: .. / 0701-exploits /
| /// File Name: |
makit-sql.txt |
Description:
|
makit news/blog poster versions 3 and below suffer from a remote SQL injection vulnerability in news_page.asp.
| | Author: | ajann | | File Size: | 635 | | Last Modified: | Jan 26 22:24:53 2007 |
| MD5 Checksum: | 8e70a155264cec17ec06d28f1d885477 |
|
| /// File Name: |
aspedge12b-sql.txt |
Description:
|
ASP EDGE versions 1.2b and below suffer from a remote SQL injection vulnerability in user.asp.
| | Author: | ajann | | File Size: | 695 | | Last Modified: | Jan 26 22:24:09 2007 |
| MD5 Checksum: | 4b88ee9cef640c3a96c691623ec2b85d |
|
| /// File Name: |
aspnews3-sql.txt |
Description:
|
ASP NEWS version 3 suffers from a remote SQL injection vulnerability in news_detail.asp.
| | Author: | ajann | | File Size: | 606 | | Last Modified: | Jan 26 22:23:27 2007 |
| MD5 Checksum: | 347e116bf84c101508f8a4fc47d454c5 |
|
| /// File Name: |
gps12-sql.txt |
Description:
|
GPS version 1.2 suffers from a remote SQL injection vulnerability in print.asp.
| | Author: | ajann | | File Size: | 791 | | Last Modified: | Jan 26 22:22:44 2007 |
| MD5 Checksum: | b5d43c741acbe643beecef36350fafc0 |
|
| /// File Name: |
xero-rfi.txt |
Description:
|
Xero Portal version 1.2 local file inclusion exploit.
| | Author: | XORON | | File Size: | 2204 | | Last Modified: | Jan 26 22:19:32 2007 |
| MD5 Checksum: | 756c7e0650eeb11ea0d4ba52e3936bf9 |
|
| /// File Name: |
PR06-14.txt |
Description:
|
IP Phones based on the Centrality Communications/Aredfox PA168 chipset suffer from a weak session management vulnerability. Exploit included.
| | Author: | Adrian Pastor | | File Size: | 5708 | | Last Modified: | Jan 26 20:59:10 2007 |
| MD5 Checksum: | e8e6296bf1fa46c2daa609be5b7276e3 |
|
| /// File Name: |
adv62-y3dips-2007.txt |
Description:
|
Upload Service version 1.0 suffers from a remote file inclusion flaw.
| | Author: | y3dips | | Homepage: | http://echo.or.id/ | | File Size: | 1787 | | Last Modified: | Jan 24 01:42:09 2007 |
| MD5 Checksum: | 6d3348f6b4f7cb170691af62ef746048 |
|
| /// File Name: |
bitweaver-xss.txt |
Description:
|
Bitweaver version 1.3.1 is susceptible to cross site scripting attacks.
| | Author: | CorryL | | Homepage: | http://www.x0n3-h4ck.org | | File Size: | 2255 | | Last Modified: | Jan 24 01:00:32 2007 |
| MD5 Checksum: | 31e2f77c874db26053b7f2fcac26e80a |
|
| /// File Name: |
mssploit.txt |
Description:
|
Microsoft Visual C++ 6.0 is prone to a stack based memory corruption vulnerability during the processing of .RC resource files. Exploit included.
| | Author: | porkythepig | | File Size: | 8997 | | Last Modified: | Jan 24 00:56:36 2007 |
| MD5 Checksum: | 9f277dc650b5010dbe226aa45d3de9cd |
|
| /// File Name: |
checkpoint-bypass.txt |
Description:
|
Check Point Connectra End Point is susceptible to a bypass flaw.
| | Author: | Roni Bachar, Nir Goldshlager | | File Size: | 3462 | | Last Modified: | Jan 24 00:48:43 2007 |
| MD5 Checksum: | b40c5ea6144c7d9a9583cbe7dcb2ad48 |
|
| /// File Name: |
fishcart-sql.txt |
Description:
|
Fish Cart is susceptible to SQL injection attacks.
| | Author: | laurent gaffie | | Homepage: | http://s-a-p.ca/ | | File Size: | 292 | | Last Modified: | Jan 24 00:38:33 2007 |
| MD5 Checksum: | b0db478fb1b5e24d29831a79f47dfc60 |
|
| /// File Name: |
MOAB-23-01-2007.pct |
Description:
|
Month of Apple Bugs - A vulnerability exists in the handling of ARGB records (Alpha RGB) within PICT images, that leads to an exploitable memory corruption condition. This is the proof of concept exploit in .pct format that demonstrates this vulnerability.
| | Author: | LMH | | Homepage: | http://projects.info-pull.com/moab/ | | File Size: | 814 | | Related CVE(s): | CVE-2007-0462 | | Last Modified: | Jan 24 00:26:41 2007 |
| MD5 Checksum: | fcae7cb4702799a0830019747e1aba01 |
|
| /// File Name: |
MOAB-22-01-2007.rb.txt |
Description:
|
Month of Apple Bugs - InputManager provided by the user. Code within the input manager will run under wheel privileges. In combination with diskutil and a wheel-writable setuid binary, this allows unprivileged users to gain root privileges. This is the proof of concept exploit that demonstrates this vulnerability.
| | Author: | LMH,Kevin Finisterre | | Homepage: | http://projects.info-pull.com/moab/ | | File Size: | 1510 | | Related CVE(s): | CVE-2007-0023 | | Last Modified: | Jan 24 00:24:54 2007 |
| MD5 Checksum: | 0822f8f385381a6dada4f24b194e032f |
|
| /// File Name: |
MOAB-21-01-2007.rb.txt |
Description:
|
Month of Apple Bugs - The preference panes setuid helper, writeconfig, makes use of a shell script which lacks of PATH sanitization, allowing users to execute arbitrary binaries under root privileges. This is the proof of concept exploit that demonstrates this vulnerability.
| | Author: | LMH,Kevin Finisterre | | Homepage: | http://projects.info-pull.com/moab/ | | File Size: | 1034 | | Related CVE(s): | CVE-2007-0022 | | Last Modified: | Jan 24 00:23:36 2007 |
| MD5 Checksum: | c16f4b258d9bb1185318cdd04d6a3967 |
|
| /// File Name: |
MOAB-20-01-2007.tgz |
Description:
|
Month of Apple Bugs - Apple iChat AIM URI scheme (referred as the 'url handler') handling is affected by a classic format string vulnerability, allowing remote users to cause a denial of service condition or arbitrary code execution. This is the proof of concept exploit that demonstrates this vulnerability.
| | Author: | LMH,Kevin Finisterre | | Homepage: | http://projects.info-pull.com/moab/ | | File Size: | 407 | | Related CVE(s): | CVE-2007-0021 | | Last Modified: | Jan 24 00:22:31 2007 |
| MD5 Checksum: | 63c02efdb8962b52b3440ecb316ff35b |
|
| /// File Name: |
MOAB-19-01-2007.tgz |
Description:
|
Month of Apple Bugs - Transmit does not allocate enough space when dealing with the string passed on via the ftps:// URL handler, leading to an exploitable heap-based buffer overflow condition. This is the proof of concept exploit.
| | Author: | LMH,Kevin Finisterre | | Homepage: | http://projects.info-pull.com/moab/ | | File Size: | 585 | | Related CVE(s): | CVE-2007-0020 | | Last Modified: | Jan 24 00:19:49 2007 |
| MD5 Checksum: | 7370fba31d7c89633f6e4ad90a5ccc4a |
|
| /// File Name: |
oracle10g-3.txt |
Description:
|
Oracle 10g SYS.DBMS_CDC_IMPDP.BUMP_SEQUENCE PL SQL injection exploit.
| | Author: | Joxean Koret | | File Size: | 783 | | Last Modified: | Jan 24 00:15:39 2007 |
| MD5 Checksum: | cdfc10dc1336a499c185b532bc08da26 |
|
| /// File Name: |
oracle10g-2.txt |
Description:
|
Oracle 10g SYS.KUPW$WORKER.MAIN PL SQL injection exploit.
| | Author: | Joxean Koret | | File Size: | 629 | | Last Modified: | Jan 24 00:14:52 2007 |
| MD5 Checksum: | 2806eef20abda4f9f473aeef06537bf7 |
|
| /// File Name: |
oracle10g-1.txt |
Description:
|
Oracle 10g SYS.KUPV$FT.ATTACH_JOB PL SQL injection exploit.
| | Author: | Joxean Koret | | File Size: | 653 | | Last Modified: | Jan 24 00:13:30 2007 |
| MD5 Checksum: | e171f4cf083bf77791913273a9874716 |
|
| /// File Name: |
votepro40-exec.txt |
Description:
|
Vote-Pro version 4.0 remote code execution exploit that makes use of poll_frame.php.
| | Author: | r0ut3r | | File Size: | 2932 | | Last Modified: | Jan 24 00:11:50 2007 |
| MD5 Checksum: | 77fd1fc711a31cbbaf61d993e5dae923 |
|
| /// File Name: |
bbclone-rfi.txt |
Description:
|
BBClone version 0.31 suffers from a remote file inclusion vulnerability in selectlang.php.
| | Author: | Dr Max Virus | | File Size: | 1115 | | Last Modified: | Jan 24 00:10:43 2007 |
| MD5 Checksum: | 31741c2736b05fd8e448bbebe0919141 |
|
| /// File Name: |
phpxd03-rfi.txt |
Description:
|
phpXD versions 0.3 and below remote file inclusion exploit.
| | Author: | Dr Max Virus | | File Size: | 1714 | | Last Modified: | Jan 24 00:09:45 2007 |
| MD5 Checksum: | 72fb1eb373124bdab06b785a4cf82561 |
|
| /// File Name: |
sami-dos.txt |
Description:
|
Sami HTTP Server version 2.0.1 remote denial of service exploit.
| | Author: | shinnai | | Homepage: | http://shinnai.altervista.org/ | | File Size: | 1165 | | Last Modified: | Jan 24 00:08:36 2007 |
| MD5 Checksum: | 2d6c62525975eb3ba152376a50f73523 |
|
| /// File Name: |
JvmGifVulPoc.java.txt |
Description:
|
Sun Microsystems Java GIF file parsing memory corruption vulnerability proof of concept exploit.
| | Author: | luoluo | | File Size: | 43107 | | Last Modified: | Jan 24 00:07:17 2007 |
| MD5 Checksum: | 412821d74eeff2204657e555982ab394 |
|
| /// File Name: |
freeforum090-rfi.txt |
Description:
|
FreeForum version 0.9.0 suffers from a remote file inclusion vulnerability in index.php.
| | Author: | BorN To K!LL | | File Size: | 806 | | Last Modified: | Jan 24 00:05:41 2007 |
| MD5 Checksum: | 789b2ca3e8f51c521f3cdd365cb45810 |
|
|
|
|
|