Section: .. / 0803-exploits /
| /// File Name: |
registrypro-insecure.txt |
Description:
|
Registry Pro remote insecure method exploit that makes use of epRegPro.ocx.
| | Author: | t0pp8uzz | | File Size: | 2403 | | Last Modified: | Mar 18 21:47:57 2008 |
| MD5 Checksum: | c543a5ebea7f1582ab2d767e57de8152 |
|
| /// File Name: |
remotelynowhere.tgz |
Description:
|
Remote Anywhere Server and Workstation versions 8.0.668 and below suffer from a null pointer vulnerability.
| | Author: | Luigi Auriemma | | Homepage: | http://aluigi.org/ | | File Size: | 1359 | | Last Modified: | Mar 12 23:04:59 2008 |
| MD5 Checksum: | b91f6740f21520efe632db41c4908fc5 |
|
| /// File Name: |
rosoft-dos.txt |
Description:
|
Rosoft Media Player version 4.1.8 suffers from a RML stack based buffer overflow vulnerability.
| | Author: | Wiktor Sierocinski | | File Size: | 479 | | Last Modified: | Mar 15 16:43:33 2008 |
| MD5 Checksum: | 474fb3ba760fcec11340d6c5a9f35233 |
|
| /// File Name: |
rsa-xss.txt |
Description:
|
RSA WebID version 5.3 suffers from a cross site scripting vulnerability. Full details provided.
| | Author: | Quentin Berdugo | | File Size: | 3030 | | Last Modified: | Mar 17 15:43:19 2008 |
| MD5 Checksum: | 3e62edfdc6a92506f0c95fe86bfe7a03 |
|
| /// File Name: |
runcmsphoto-sql.txt |
Description:
|
The RunCMS Photo module version 3.02 suffers from a remote SQL injection vulnerability.
| | Author: | S@BUN | | Homepage: | http://www.hackturkiye.com/ | | File Size: | 1105 | | Last Modified: | Mar 21 17:29:01 2008 |
| MD5 Checksum: | 7e63c6cdc4bf0f27776c25d96788b80e |
|
| /// File Name: |
safariphone-dos.txt |
Description:
|
Apple Safari remote denial of service exploit for the iPhone / OSX / Windows.
| | Author: | Georgi Guninski | | File Size: | 884 | | Last Modified: | Mar 17 14:43:43 2008 |
| MD5 Checksum: | f64f318f0d76219661e097309073221b |
|
| /// File Name: |
sitekiosk-pwn.txt |
Description:
|
Proviso SiteKiosk suffers from a bypass flaw that allows for file downloads.
| | Author: | katharsis | | Homepage: | http://www.katharsis.x2.to/ | | File Size: | 2548 | | Last Modified: | Mar 31 21:54:35 2008 |
| MD5 Checksum: | cf2a25f38f9ef36c4c13d1f1ad97bc6a |
|
| /// File Name: |
smoothflash-sql.txt |
Description:
|
Smoothflash suffers from a SQL injection vulnerability in admin_view_image.php.
| | Author: | S@BUN | | Homepage: | http://www.hackturkiye.com/ | | File Size: | 951 | | Last Modified: | Mar 31 16:53:00 2008 |
| MD5 Checksum: | c2809e62a6c6e87890ab1a80ba045813 |
|
| /// File Name: |
snewscmsrus-xss.txt |
Description:
|
SnewsCMS Rus version 2.3 suffers from a cross site scripting vulnerability.
| | Homepage: | http://www.medprostuda.ru/ | | File Size: | 812 | | Last Modified: | Mar 17 15:38:11 2008 |
| MD5 Checksum: | 3b919694791c341b17043381cd5848f9 |
|
| /// File Name: |
solaris-memleak.txt |
Description:
|
Exploit that demonstrates how an integer signedness error in FIFO filesystems (named pipes) on Sun Solaris 8 through 10 allows local users to read the contents of unspecified memory locations via a negative value to the I_PEEK ioctl.
| | Author: | Marco Ivaldi | | File Size: | 3984 | | Related CVE(s): | CVE-2007-5225 | | Last Modified: | Mar 12 20:11:08 2008 |
| MD5 Checksum: | 8d609ea4015453829d85d3f773acd6a3 |
|
| /// File Name: |
soliduro.zip |
Description:
|
Demonstration exploit code for IBM solidDB versions 6.00.1018 and below which suffer from format string, crash, NULL pointer, and server termination vulnerabilities.
| | Author: | Luigi Auriemma | | Homepage: | http://aluigi.org/ | | Related File: | soliduro.txt | | File Size: | 7582 | | Last Modified: | Mar 26 18:19:42 2008 |
| MD5 Checksum: | 8d76275f73d80dc5ec96a9080080b81c |
|
| /// File Name: |
starteamz.zip |
Description:
|
Proof of concept exploit for Borland StarTeam server 2008 versions 10.0.0.57 and below which suffer from multiple integer overflow vulnerabilities.
| | Author: | Luigi Auriemma | | Homepage: | http://aluigi.org/ | | Related File: | starteamz.txt | | File Size: | 12766 | | Last Modified: | Mar 3 17:55:54 2008 |
| MD5 Checksum: | 6815a2764f68ec83603e65807f84410f |
|
| /// File Name: |
sunrpc-dos.txt |
Description:
|
SunOS 5.10 Sun Cluster rpc.metad denial of service proof of concept exploit.
| | Author: | kcope | | File Size: | 2052 | | Last Modified: | Mar 15 16:42:09 2008 |
| MD5 Checksum: | f12751586205c06cf444b949ffcaa55c |
|
| /// File Name: |
taskmgr_dos.c.txt |
Description:
|
Exploit that demonstrates how the manipulation of a registry key in Microsoft Windows XP SP2 can disable the taskmanager.
| | Author: | SkyOut | | Homepage: | http://www.core-security.net/ | | File Size: | 3715 | | Last Modified: | Mar 14 19:06:33 2008 |
| MD5 Checksum: | fb618742f578d7ebf1dd4271ff7f856f |
|
| /// File Name: |
tftpx.zip |
Description:
|
Proof of concept exploit for Argon Client Management Services versions 1.31 and below which suffer from a directory traversal vulnerability. Example use of this would be tftpx SERVER ../../windows/win.ini none or tftpx SERVER ..\boot.ini none.
| | Author: | Luigi Auriemma | | Homepage: | http://aluigi.org/ | | Related File: | tftpx.txt | | File Size: | 12240 | | Last Modified: | Mar 12 23:03:10 2008 |
| MD5 Checksum: | 06a2d2ed65471289db737ab86db4e121 |
|
| /// File Name: |
timbuto.zip |
Description:
|
Proof of concept exploit for Timbuktu Pro Remote Control Software version 8.6.5 and below which suffer from denial of service and limited upload directory traversal vulnerabilities.
| | Author: | Luigi Auriemma | | Homepage: | http://aluigi.org/ | | Related File: | timbuto.txt | | File Size: | 8093 | | Last Modified: | Mar 12 23:17:23 2008 |
| MD5 Checksum: | f2021eab5c3ffe7fe8d3e24e84f91f9a |
|
| /// File Name: |
timesheets-multi.txt |
Description:
|
Multiple Timesheets versions 5.0 and below suffer from directory traversal, cross site scripting, and cookie manipulation vulnerabilities.
| | Author: | JosS | | Homepage: | http://www.spanish-hackers.com/ | | File Size: | 1667 | | Last Modified: | Mar 17 14:26:25 2008 |
| MD5 Checksum: | af013e802dad164ec455a96f329afe79 |
|
| /// File Name: |
toppermod10-lfi.txt |
Description:
|
TopperMod version 1.0 suffers from a local file inclusion vulnerability.
| | Author: | __GiReX__ | | Homepage: | http://girex.altervista.org/ | | File Size: | 1268 | | Last Modified: | Mar 26 16:24:18 2008 |
| MD5 Checksum: | 8ba4316c7036aa822a776a34507aef74 |
|
| /// File Name: |
toppermod20-sql.txt |
Description:
|
TopperMod version 2.0 suffers from a remote SQL injection vulnerability.
| | Author: | __GiReX__ | | Homepage: | http://girex.altervista.org/ | | File Size: | 1562 | | Last Modified: | Mar 26 16:23:49 2008 |
| MD5 Checksum: | bf61270524ae430d495c375bf5ab8b07 |
|
| /// File Name: |
torrenttrader-xss.txt |
Description:
|
TorrentTrader Classic version 1.08 suffers from cross site scripting and cross site request forgery vulnerabilities.
| | Author: | Valery Marchuk | | Homepage: | http://www.securitylab.ru/ | | File Size: | 1002 | | Last Modified: | Mar 3 17:43:31 2008 |
| MD5 Checksum: | 090b15158b951ada7afba97a912a5f0e |
|
| /// File Name: |
travelsized-lfi.txt |
Description:
|
Travelsized CMS version 0.4.1 suffers from multiple local file inclusion vulnerabilities.
| | Author: | muuratsalo | | File Size: | 385 | | Last Modified: | Mar 13 01:31:30 2008 |
| MD5 Checksum: | 36f7578f8a207e5e681cadff1f38f640 |
|
|
|
|
|
![.:[ packet storm ]:.](/images/ps-ani.gif)
