The Exploit Database - CXSecurity.com

nginx v1.3.9-1.4.0 DOS Proof of Concept

Mert SARICA — 2013-05-18 10:05:09 CET

Topic: nginx v1.3.9-1.4.0 DOS Proof of Concept Risk: Medium Text:# Exploit Title: nginx v1.3.9-1.4.0 DOS POC (CVE-2013-2070) # Google Dork: CVE-2013-2070 # Date: 16.05.2013 # Exploit Author...

Moa Gallery 1.2.6 Multiple Vulnerabilities

Slotleet — 2013-05-18 10:03:10 CET

Topic: Moa Gallery 1.2.6 Multiple Vulnerabilities Risk: High Text:#!/usr/bin/php # Exploit Title : Moa Gallery 1.2.6 Multiple Vulnerabilities # Date : 5/17/2013 # Author: Slotleet # Slotlee...

Mutiny 5 Arbitrary File Upload

Juan vazquez — 2013-05-17 07:14:24 CET

Topic: Mutiny 5 Arbitrary File Upload Risk: High Text:## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions. Please...

SSH User Code Execution

Spencer McIntyre — 2013-05-16 19:26:14 CET

Topic: SSH User Code Execution Risk: High Text:## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions. Please...

Quick Search 1.1.0.189 Buffer Overflow

ariarat — 2013-05-16 06:54:44 CET

Topic: Quick Search 1.1.0.189 Buffer Overflow Risk: High Text:# Exploit Title: Quick Search Version 1.1.0.189 Buffer Overflow vulnerability(SEH) # Date: 14-05-2013 # Exploit Author: ariar...

Adobe ColdFusion 9 / 10 Remote Root

HTP — 2013-05-08 07:03:45 CET

Topic: Adobe ColdFusion 9 / 10 Remote Root Risk: High Text:#!/usr/bin/env python # -*- coding: utf-8 -*- intro=""" _ _ _______ _____ _ _ _______ Cold ,'...

Linux Kernel PERF_EVENTS Local Root Exploit

hacky0u — 2013-05-14 08:14:09 CET

Topic: Linux Kernel PERF_EVENTS Local Root Exploit Risk: High Text:/* * linux 2.6.37-3.x.x x86_64, ~100 LOC * gcc-4.6 -O2 semtex.c && ./a.out * 2010 sd@fucksheep.org, salut! * * update...

Linux Kernel open-time Capability file_ns_capable() Privilege Escalation

Andrew Lutomirski — 2013-05-14 22:23:44 CET

Topic: Linux Kernel open-time Capability file_ns_capable() Privilege Escalation Risk: High Text:/* userns_root_sploit.c by */ /* Copyright (c) 2013 Andrew Lutomirski. All rights reserved. */ /* You may use, modify, and r...

No-IP Dynamic Update Client 2.1.9 Stack Overflow

Alberto Ortega — 2013-05-14 07:50:31 CET

Topic: No-IP Dynamic Update Client 2.1.9 Stack Overflow Risk: Medium Text:#!/usr/bin/env python # Title: No-IP Dynamic Update Client (DUC) 2.1.9 local IPaddress stack overflow # Author: Alberto Or...

Ajax Availability Calendar 3.X.X Multiple Vulnerabilties

AtT4CKxT3rR0r1ST — 2013-05-12 23:00:26 CET

Topic: Ajax Availability Calendar 3.X.X Multiple Vulnerabilties Risk: Medium Text:Ajax Availability Calendar 3.X.X Multiple Vulnerabilties == ## .:. Author ...

SAP SOAP RFC SXPG_CALL_SYSTEM Remote Command Execution

Juan vazquez — 2013-05-11 00:26:45 CET

Topic: SAP SOAP RFC SXPG_CALL_SYSTEM Remote Command Execution Risk: High Text:## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions. Please...

SAP SOAP RFC SXPG_COMMAND_EXECUTE Remote Command Execution

Juan vazquez — 2013-05-11 00:24:56 CET

Topic: SAP SOAP RFC SXPG_COMMAND_EXECUTE Remote Command Execution Risk: High Text:## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions. Please...

ERS Viewer 2011 ERS File Handling Buffer Overflow

Juan vazquez — 2013-05-09 07:02:59 CET

Topic: ERS Viewer 2011 ERS File Handling Buffer Overflow Risk: High Text:## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions. Please...

Flightgear 2.0 / 2.4 Format String

Kurono — 2013-05-09 07:02:15 CET

Topic: Flightgear 2.0 / 2.4 Format String Risk: High Text:/* # Exploit Title: Flightgear remote format string # Date: 21/04/2013 # Exploit Author: Kurono # email: andresgomezram7@gm...

Multiple Linux setuid output redirection vulnerabilities

Alyssa Milburn — 2013-04-29 06:55:38 CET

Topic: Multiple Linux setuid output redirection vulnerabilities Risk: High Text:Some of the recent -stable patches are (surprise!) security fixes. These were disclosed on the distros list last week. CVE-...

Linux Kernel Capability file_ns_capable() Privilege Escalation Vulnerability

Andrew Lutomirski — 2013-05-08 18:25:27 CET

Topic: Linux Kernel Capability file_ns_capable() Privilege Escalation Vulnerability Risk: High Text:#define _GNU_SOURCE #include #include #include #include #include

MoinMelt Arbitrary Command Execution

HTP — 2013-05-08 07:05:16 CET

Topic: MoinMelt Arbitrary Command Execution Risk: High Text:#!/usr/bin/env python # -*- coding: utf-8 -*- ascii = '\x1b[1;31m' ## ascii +=' ...

Hloun support management system 3.0 Authentication Bypass and SQL Injection

Faris , aka (i-Hmx) — 2013-05-07 22:04:26 CET

Topic: Hloun support management system 3.0 Authentication Bypass and SQL Injection Risk: High Text:

DVD X Player 5.5.3.7 Pro & Standard (SEH) Buffer Overflow

metacom — 2013-05-04 10:27:46 CET

Topic: DVD X Player 5.5.3.7 Pro & Standard (SEH) Buffer Overflow Risk: High Text:#!/usr/bin/env ruby # Exploit Title:DVD X Player 5.5.3.7 Pro & Standard (SEH) Buffer Overflow # Download link :http://www.av...

AudioCoder .M3U Buffer Overflow

Juan vazquez — 2013-05-04 10:26:59 CET

Topic: AudioCoder .M3U Buffer Overflow Risk: High Text:## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions. Please...

Winarchiver 3.2 Buffer Overflow

Josep Pi Rodriguez — 2013-05-04 10:26:04 CET

Topic: Winarchiver 3.2 Buffer Overflow Risk: High Text:#/usr/bin/python # Exploit Title: Winarchiver V 3.2 SEH Overflow # Date: April 24, 2013 # Exploit Author: Josep Pi Rodriguez...

FuzeZip 1.0.0.131625 Buffer Overflow

Josep Pi Rodriguez — 2013-05-04 10:25:33 CET

Topic: FuzeZip 1.0.0.131625 Buffer Overflow Risk: High Text:#!/usr/bin/python # Exploit Title: SEH BUFFER OVERFLOW IN FUZEZIP V.1.0 # Date: 16.Apr.2013 Vulnerability reported # Exploit...

sudo_debug 1.8.0-1.8.3p1 format string root exploit

aeon — 2013-05-01 19:40:49 CET

Topic: sudo_debug 1.8.0-1.8.3p1 format string root exploit Risk: High Text:/* death-star.c sudo v1.8.0-1.8.3p1 (sudo_debug) format string root exploit + glibc FORTIFY_SOURCE bypass by aeon - http:...

AudioCoder 0.8.18 Buffer Overflow Exploit (SEH)

metacom — 2013-05-01 22:12:40 CET

Topic: AudioCoder 0.8.18 Buffer Overflow Exploit (SEH) Risk: High Text:#!/usr/bin/env ruby # Exploit Title:AudioCoder 0.8.18 Buffer Overflow Exploit (SEH) # Download link :http://www.mediacoderhq....

Wordpress W3 Total Cache 0.9.2.8 PHP Code Execution exploit

Christian Mehlmauer — 2013-05-01 19:36:42 CET

Topic: Wordpress W3 Total Cache 0.9.2.8 PHP Code Execution exploit Risk: High Text:## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions. Please...

phpMyAdmin 3.5.8 Authenticated Remote Code Execution Exploit

Ben Campbell — 2013-04-30 07:29:30 CET

Topic: phpMyAdmin 3.5.8 Authenticated Remote Code Execution Exploit Risk: High Text:## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions. Please...

Memcached Remote Denial Of Service

infodox — 2013-04-30 07:33:04 CET

Topic: Memcached Remote Denial Of Service Risk: Medium Text:#!/usr/bin/python # Author: infodox // @info_dox # Site: insecurety.net # Old bug, still unpatched. Patch nao? import sys ...

D-Link IP Cameras Injection & Bypass

CORE — 2013-04-30 07:32:38 CET

Topic: D-Link IP Cameras Injection & Bypass Risk: High Text:Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ D-Link IP Cameras Multiple Vulnerabilities 1. *Advis...

SAP ConfigServlet Remote Code Execution

Andras Kabai — 2013-04-30 07:31:11 CET

Topic: SAP ConfigServlet Remote Code Execution Risk: High Text:## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions. Please...

Ipswitch IMail 11.01 Cross Site Scripting

DaOne aka Mocking Bird — 2013-04-30 07:28:55 CET

Topic: Ipswitch IMail 11.01 Cross Site Scripting Risk: Low Text:#!/usr/bin/perl # Exploit Title: Ipswitch IMail 11.01 XSS Vulnerability # Date: 26-04-2013 # Author: DaOne aka Mocking Bird...

Elecard MPEG Player 5.8 Buffer Overflow

metacom — 2013-04-29 06:47:43 CET

Topic: Elecard MPEG Player 5.8 Buffer Overflow Risk: High Text:#!/usr/bin/python # Exploit Title:Elecard MPEG Player 5.8 Local PoC # Download link :www.elecard.com/assets/files/distribs/...

Mitsubishi MX Component v3 ActiveX 365+-Day

Dr_IDE — 2013-03-25 18:12:43 CET

Topic: Mitsubishi MX Component v3 ActiveX 365+-Day Risk: High Text: