This exploit is capable of bypassing DEP by using ROP to invoke SetProcessDEPPolicy()
i-Gallery is a complete online photo gallery. Easy to navigate thumbnails with paging. Enlarged views offer print & email buttons. Secured backend features: create/delete folders, upload/delete images, add descriptions, move images, and much more.
This exploit is a local exploit for GSM SIM Utility. It allows for a direct return-oriented programming attack. The code provided in the script is for educational purposes only and should not be used for illegal activities.
Some parameters are not sanitised before being used in SQL queries and in danger PHP's functions. The vulnerabilities are reported in version 2.0.3. Other versions may also be affected. The vulnerabilities include Authentication Bypass, Arbitrary File Upload, Local File Inclusion, and SQL Injection.
This exploit takes advantage of a format string attack vulnerability in the minerCPP 0.4b software. It allows an attacker to calculate the master cookie and get the ESP of the current thread. However, due to the BOF being in another thread, the ESP obtained may not match the required ESP, making the exploit unstable. Code execution worked 10 out of 50 times.
This exploit targets the BS Auction script and allows for SQL injection through the 'id' parameter in the articlesdetails.php file. The exploit is written in Ruby and requires the host, path, and user ID as input. It was discovered by Easy Laster.
This exploit allows for a buffer overflow in the UFO: Alien Invasion game version 2.2.1 on Windows 7. By redirecting the victim's DNS to a specific IP and having them click on the multiplayer lobby, an attacker can execute arbitrary code. The exploit has been tested on Windows 7 Ultimate x64 ENG. There is a possibility that this exploit can work on a different Windows version by changing the last bytes of the exploit code.
The Veritas NetBackup Volume Manager Daemon module is vulnerable to a stack overflow. An attacker can exploit this vulnerability by sending specially crafted data to the daemon, which can lead to remote code execution.
The phpaaCms application is vulnerable to SQL injection through the 'id' parameter in the 'show.php' page. An attacker can inject malicious SQL code through this parameter and potentially gain unauthorized access to the database.
This exploit demonstrates a SEH overwrite vulnerability in Microsoft Windows XP SP3/IE7. It allows an attacker to gain control of the EIP register and execute arbitrary code. The exploit binds a shell to port 4444.
Services By CQR
