security without boundaries

Register | Login

FilesNewsUsersAuthors

Home Files News About Contact Add New

Showing 1 - 25 of 25,964

Exploit Files

D-Link DSL-2640B Authentication Bypass

Posted Feb 23, 2012

Authored by Ivano Binetti

The D-Link DSL-2640B ADSL router suffers from a simple authentication bypass vulnerability by spoofing the MAC address of a logged in administrator.

tags | exploit, spoof, bypass

MD5 | 3851cd4f4e001875aa05cb0f9955a4d4

Download | Favorite | Comments (0)

AlegroCart 1.2.7 Command Execution

Posted Feb 23, 2012

Authored by T0xic

AlegroCart versions 1.2.7 and below suffer from a remote command execution vulnerability.

tags | exploit, remote

MD5 | ff36a9c481655e3e71f4262115e0c0f2

Download | Favorite | Comments (0)

Snop IP Phone Privilege Escalation

Posted Feb 23, 2012

Authored by Nathaniel Carew | Site senseofsecurity.com.au

All versions of Snop IP Phone prior to 8.4.35 suffer from a privilege escalation vulnerability.

tags | exploit

MD5 | e42919d9432a000bf5f16e7ccf3c9bd0

Download | Favorite | Comments (0)

Joomla Dtregister SQL Injection

Posted Feb 23, 2012

Authored by the_cyber_nuxbie

The Joomla Dtregister component suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection

MD5 | 730b4f55080f3c37c856385cf0fbeb76

Download | Favorite | Comments (0)

Interspire Shopping Cart Insecure Permissions

Posted Feb 23, 2012

Authored by Jan van Niekerk

Interspire Shopping Cart forces poor permissions on config.php by design and by doing so leaks information like the database login and password to any local user.

tags | exploit, local, php

MD5 | b3bd0bb7f1cad6b42498db7c4b3e5d61

Download | Favorite | Comments (0)

Sagem F@ST 2604 Cross Site Request Forgery

Posted Feb 23, 2012

Authored by KinG Of PiraTeS

Sagem F@ST 2604 suffers from a cross site request forgery vulnerability.

tags | exploit, csrf

MD5 | 66af4a69ab36a6f2e6ea1ac40a212cd8

Download | Favorite | Comments (0)

BRIM SQL Injection

Posted Feb 23, 2012

Authored by ifnull

BRIM versions prior to 2.0.0 suffer from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection

MD5 | 3c783afd74dd1536e28b68e09e2d8bed

Download | Favorite | Comments (0)

WordPress Magn WP Drag And Drop Shell Upload

Posted Feb 23, 2012

Authored by JingoBD

WordPress Magn WP Drag and Drop suffers from a shell upload vulnerability.

tags | exploit, shell

MD5 | d5c5501535cb0ce6fd79855584335af3

Download | Favorite | Comments (0)

DFLabs PTK 1.0.5 Cross Site Request Forgery

Posted Feb 23, 2012

Authored by Ivano Binetti

DFLabs PTK versions 1.0.5 and below suffer from a cross site request forgery vulnerability.

tags | exploit, csrf

MD5 | c6feebc11667693b7609b3a53083ae11

Download | Favorite | Comments (0)

Philip Abbey Cross Site Scripting

Posted Feb 23, 2012

Authored by Am!r | Site irist.ir

Philip Abbey suffers from a cross site scripting vulnerability.

tags | exploit, xss

MD5 | 5c88e7dc983188ddac5a349ef40897d7

Download | Favorite | Comments (0)

Limesurvey Blind SQL Injection

Posted Feb 23, 2012

Authored by TorTukiTu

Limesurvey version 1.91+ build 11804 suffers from a remote blind SQL injection vulnerability.

tags | exploit, remote, sql injection

MD5 | 6317dc72d42ebeff7d90905dbe2a250a

Download | Favorite | Comments (0)

D-Link DCS Series Cross Site Request Forgery

Posted Feb 23, 2012

Authored by rigan

D-Link DCS Series cross site request forgery proof of concept exploit that changes the administrative password.

tags | exploit, proof of concept, csrf

MD5 | 462336720342a33c37db14e736a20f89

Download | Favorite | Comments (0)

OneForum SQL Injection

Posted Feb 23, 2012

Authored by Red Security TEAM

OneForum suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection

MD5 | 2e508cd5cf4163649cf1377bb5ce18c9

Download | Favorite | Comments (0)

WebcamXP / Webcam7 Directory Traversal

Posted Feb 23, 2012

Authored by Silent Dream

WebcamXP and Webcam7 suffer from a directory traversal vulnerability.

tags | exploit, file inclusion

MD5 | 01e71e309458623f0fcc3510540188f4

Download | Favorite | Comments (0)

Chyrp 2.5b1 Cross Site Scripting

Posted Feb 23, 2012

Authored by High-Tech Bridge SA | Site htbridge.ch

Chyrp version 2.5b1 suffers from a cross site scripting vulnerability.

tags | exploit, xss

advisories | CVE-2012-1001

MD5 | ddf9db15da9e05b00c24a65107a9bcb0

Download | Favorite | Comments (0)

Unity 3D Web Player 3.2.0.61061 Heap Corruption

Posted Feb 23, 2012

Authored by Luigi Auriemma | Site aluigi.org

Unity 3D Web Player versions 3.2.0.61061 and below suffer from a heap corruption vulnerability. Proof of concept code included.

tags | exploit, web, proof of concept

systems | linux

MD5 | 78995a7cc67979968e3cc82724006b6b

Download | Favorite | Comments (0)

Buzz Build 1458 Overflows / Memory Corruption

Posted Feb 23, 2012

Authored by Luigi Auriemma | Site aluigi.org

Buzz build versions 1458 and below suffer from memory corruption and various overflows. Proof of concept included.

tags | exploit, overflow, proof of concept

systems | linux

MD5 | 271426f3be4cf6bb6c2ad3431207e2e4

Download | Favorite | Comments (0)

DAMN Hash Calculator 1.5.1 Heap Overflow

Posted Feb 23, 2012

Authored by Julien Ahrens

DAMN Hash Calculator version 1.5.1 local heap overflow proof of concept exploit.

tags | exploit, overflow, local, proof of concept

MD5 | f55e391a79cdbbd769fede54fe6e6a68

Download | Favorite | Comments (0)

LiveHelpNow Chat Cross Site Scripting

Posted Feb 22, 2012

Authored by Sony

LiveHelpNow Chat suffers from a cross site scripting vulnerability.

tags | exploit, xss

MD5 | f0d6435b432b147e5d01bb51278ddf1d

Download | Favorite | Comments (0)

ForkCMS 3.2.5 Cross Site Request Forgery / Cross Site Scripting

Posted Feb 22, 2012

Authored by Ivano Binetti

ForkCMS version 3.2.5 suffers from cross site request forgery and cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss, csrf

MD5 | f95ba16fde46ce9beeb3d2eafc1cb7b1

Download | Favorite | Comments (0)

WordPress SB Uploader Shell Upload

Posted Feb 22, 2012

Authored by JingoBD

WordPress SB Uploader suffers from a shell upload vulnerability.

tags | exploit, shell

MD5 | 3eb9558eb53ca8ad398ddb62e1589a2b

Download | Favorite | Comments (0)

Oxwall 1.1.1 Cross Site Scripting

Posted Feb 22, 2012

Authored by Ariko-Security

Oxwall version 1.1.1 suffers from a cross site scripting vulnerability.

tags | exploit, xss

advisories | CVE-2012-0872

MD5 | 2833359cc8b5690bd689eb2e7d7a6ff3

Download | Favorite | Comments (0)

Mercurycom MR804 Router Denial Of Service

Posted Feb 22, 2012

Authored by demonalex

Mercurycom MR804 Router version 3.8.1 Build 101220 Rel.53006nB suffers from a denial of service vulnerability when fed multiple HTTP headers.

tags | exploit, web, denial of service

MD5 | ccff62db643c371d665060ad46a55c72

Download | Favorite | Comments (0)

SocialCMS Cross Site Scripting / SQL Injection

Posted Feb 22, 2012

Authored by Eyup CELIK

SocialCMS suffers from cross site scripting and remote SQL injection vulnerabilities.

tags | exploit, remote, vulnerability, xss, sql injection

MD5 | 2bf5eb850e7a2948ca20c89039bf1801

Download | Favorite | Comments (0)

CMS Wizard Cross Site Scripting

Posted Feb 22, 2012

Authored by XaDaL

CMS Wizard suffers from a cross site scripting vulnerability.

tags | exploit, xss

MD5 | a2fe2694ae0368ca2afcbeead1b7dc7c

Download | Favorite | Comments (0)