Section: .. / 0701-exploits /
| /// File Name: |
galeria-lfi.txt |
Description:
|
Local file inclusion exploit for zd_numer.php in Galeria Zdjec versions 3.0 and below.
| | Author: | ajann | | File Size: | 3259 | | Last Modified: | Jan 30 23:16:04 2007 |
| MD5 Checksum: | ed0e666593ebe110ce6d291e86dd7173 |
|
| /// File Name: |
phpfootball16-disclose.txt |
Description:
|
PHPFootball version 1.6 suffers from a remote database disclosure flaw in show.php.
| | Author: | ajann | | File Size: | 733 | | Last Modified: | Jan 30 23:14:30 2007 |
| MD5 Checksum: | 96487c2eea99217b0f2ffc08d5e59b1f |
|
| /// File Name: |
cascadianfaq-sql.txt |
Description:
|
CascadianFAQ versions 4.1 and below suffer from a remote SQL injection vulnerability in index.php.
| | Author: | ajann | | File Size: | 1040 | | Last Modified: | Jan 30 23:13:15 2007 |
| MD5 Checksum: | b1e7140613128993a9d09d391615c462 |
|
| /// File Name: |
mynews-rfi.txt |
Description:
|
MyNews versions 4.2.2 and below suffer from a remote file inclusion vulnerability.
| | Author: | GolD_M | | File Size: | 1163 | | Last Modified: | Jan 30 23:12:09 2007 |
| MD5 Checksum: | 46cde9b29df8c857c2a41d7ae5ae08e6 |
|
| /// File Name: |
phpbb2-rfi.txt |
Description:
|
phpBB2 MODificat versions 0.2.0 and below suffer from a remote file inclusion vulnerability.
| | Author: | XORON | | File Size: | 865 | | Last Modified: | Jan 30 23:10:47 2007 |
| MD5 Checksum: | 20df6be9bc350ee80a75ca9bee5b1aa6 |
|
| /// File Name: |
devc4992.py.txt |
Description:
|
Dev-C++ version 4.9.9.2 CPP file parsing local stack overflow proof of concept exploit.
| | Author: | shinnai | | Homepage: | http://shinnai.altervista.org/ | | File Size: | 1983 | | Last Modified: | Jan 30 23:09:05 2007 |
| MD5 Checksum: | 3b200e9a5cfbe00a7c1ee6305f3aab23 |
|
| /// File Name: |
MOAB-29-01-2007.rb.txt |
Description:
|
Month of Apple Bugs - Apple iChat Bonjour functionality is affected by several remotely exploitable denial of service flaws which can be triggered via advertising presence services over multicast DNS. This is the denial of service proof of concept exploit.
| | Author: | LMH | | Homepage: | http://projects.info-pull.com/moab/ | | File Size: | 3488 | | Last Modified: | Jan 30 23:07:42 2007 |
| MD5 Checksum: | 3c46cb42934dba072146951e4a6e1324 |
|
| /// File Name: |
phpgenlib-rfi.txt |
Description:
|
Generic PHP remote file inclusion exploit framework.
| | Author: | X-Turk | | File Size: | 2945 | | Last Modified: | Jan 30 22:54:18 2007 |
| MD5 Checksum: | ba3e49e8bcc3b517ab2b46f3ec2a4cb1 |
|
| /// File Name: |
rblasp-sql.txt |
Description:
|
RBL ASP suffers from a SQL injection vulnerability in its login/password fields.
| | Author: | sn0oPy | | File Size: | 371 | | Last Modified: | Jan 30 22:50:56 2007 |
| MD5 Checksum: | 9b073e4919e53d41e8b63eca597b6f77 |
|
| /// File Name: |
Universal_printer_provider_exploit...> |
Description:
|
Universal exploit for vulnerable EnumPrintersW() calls related to the spooler service. Allows code execution with SYSTEM privileges. Affected includes DiskAccess NFS Client (dapcnfsd.dll version 0.6.4.0), Citrix Metaframe - cpprov.dll, and Novell - nwspool.dll.
| | Author: | Andres Tarasco | | Homepage: | http://www.514.es/ | | File Size: | 17700 | | Related CVE(s): | CVE-2006-5854 | | Last Modified: | Jan 29 20:58:34 2007 |
| MD5 Checksum: | 7772176447738b443f1b8706a46460e0 |
|
| /// File Name: |
mdpro-sql.txt |
Description:
|
MDPro version 1.0.76 suffers from multiple SQL injection vulnerabilities.
| | Author: | adexior | | File Size: | 239 | | Last Modified: | Jan 29 20:40:10 2007 |
| MD5 Checksum: | e894e03ee3be6b21b1b86f63a4c38d29 |
|
| /// File Name: |
MOAB-28-01-2007.rb.txt |
Description:
|
Month of Apple Bugs - crashdump follows symlinks within the /Library/Logs/CrashReporter/ directory, allowing admin-group users to execute arbitrary code and overwrite files with elevated privileges. In couple with a specially crafted Mach-O binary, this can be used to write a malicious crontab entry, which will run with root privileges. This ruby code demonstrates this vulnerability.
| | Author: | LMH,Kevin Finisterre | | Homepage: | http://projects.info-pull.com/moab/ | | File Size: | 1848 | | Related CVE(s): | CVE-2007-0467 | | Last Modified: | Jan 29 11:59:01 2007 |
| MD5 Checksum: | d2a1cdd08b0f39cc9d815a3572650b30 |
|
| /// File Name: |
MOAB-27-01-2007.tgz |
Description:
|
Month of Apple Bugs - Flip4Mac fails to properly handle WMV files with a crafted ASF_File_Properties_Object size field, leading to an exploitable memory corruption condition, which can be abused remotely for arbitrary code execution. This tgz holds a malicious .wmv file that demonstrates this vulnerability.
| | Author: | LMH,Kevin Finisterre | | Homepage: | http://projects.info-pull.com/moab/ | | File Size: | 150157 | | Related CVE(s): | CVE-2007-0466 | | Last Modified: | Jan 29 11:57:21 2007 |
| MD5 Checksum: | 251f0955c2ec6f2f9ea3ea7160b05822 |
|
| /// File Name: |
MsgEng.py.txt |
Description:
|
Heap overflow exploit for msgeng.exe in Computer Associates BrightStor ARCserve Backup.
| | Author: | Winny Thomas | | Related File: | LS-20060313.pdf | | File Size: | 3279 | | Last Modified: | Jan 29 11:35:08 2007 |
| MD5 Checksum: | 007fb8db9780785af6cfbae92d4c03d4 |
|
| /// File Name: |
lcs11-rfi.txt |
Description:
|
Local Calendar System version 1.1 suffers from a remote file inclusion flaw.
| | Author: | Tr_ZiNDaN | | File Size: | 1796 | | Last Modified: | Jan 29 11:29:32 2007 |
| MD5 Checksum: | c1397db7851ddeaef4bb0baff9e654ad |
|
| /// File Name: |
admentor-sql.txt |
Description:
|
AdMentor suffers from a SQL injection vulnerability that allows for login bypass.
| | Author: | sn0oPy | | File Size: | 436 | | Last Modified: | Jan 29 11:27:52 2007 |
| MD5 Checksum: | 255ca22fc52604dc52d49c8054b99032 |
|
| /// File Name: |
MOAB-25-01-2007.rb.txt |
Description:
|
Month of Apple Bugs - Ruby exploit that demonstrates how CFNetwork fails to handle certain HTTP responses properly, causing the _CFNetConnectionWillEnqueueRequests() function to dereference a NULL pointer, leading to a denial of service condition.
| | Author: | LMH | | Homepage: | http://projects.info-pull.com/moab/ | | File Size: | 690 | | Related CVE(s): | CVE-2007-0464 | | Last Modified: | Jan 26 23:28:46 2007 |
| MD5 Checksum: | d7a1cfb7ab5a8a173db599dc81d957de |
|
| /// File Name: |
MOAB-25-01-2007.c |
Description:
|
Month of Apple Bugs - C exploit that demonstrates how CFNetwork fails to handle certain HTTP responses properly, causing the _CFNetConnectionWillEnqueueRequests() function to dereference a NULL pointer, leading to a denial of service condition.
| | Author: | LMH | | Homepage: | http://projects.info-pull.com/moab/ | | File Size: | 618 | | Related CVE(s): | CVE-2007-0464 | | Last Modified: | Jan 26 23:28:11 2007 |
| MD5 Checksum: | ac9a8250d37eaab982f149693cdcbca0 |
|
| /// File Name: |
intel-dos.txt |
Description:
|
The Intel wireless mini-pci driver provided with Intel 2200BG cards is vulnerable to a remote memory corruption flaw. Malformed disassociation packets can be used to corrupt internal kernel structures, causing a denial of service (BSOD). Proof of concept exploit included.
| | Author: | Breno Silva Pinto | | File Size: | 7187 | | Last Modified: | Jan 26 23:21:50 2007 |
| MD5 Checksum: | 3d71353fc88cf43b77b3b6cf44f6cb52 |
|
| /// File Name: |
aztek41-sploit.txt |
Description:
|
Aztek Forum version 4.1 exploit that demonstrates multiple vulnerabilities including SQL injection and filter bypas flaws.
| | Author: | DarkFig | | File Size: | 8607 | | Last Modified: | Jan 26 22:29:21 2007 |
| MD5 Checksum: | bd590478d05ad6c99ce470ad94c2ffb4 |
|
| /// File Name: |
siteman-pass.txt |
Description:
|
Siteman version 2.0.x2 suffers from a remote password disclosure flaw.
| | Author: | CorryL | | Homepage: | http://www.x0n3-h4ck.org | | File Size: | 1150 | | Last Modified: | Jan 26 22:27:10 2007 |
| MD5 Checksum: | 5a31a127acf8c785249d78f747c33195 |
|
| /// File Name: |
uniforum4-sql.txt |
Description:
|
uniForum versions 4 and below suffer from a remote SQL injection vulnerability in wbsearch.aspx.
| | Author: | ajann | | File Size: | 743 | | Last Modified: | Jan 26 22:26:09 2007 |
| MD5 Checksum: | 1dcdf1f915724c9910e127ed1693b232 |
|
|
|
|
|