header-logo
Suggest Exploit
explore-vulnerabilities

Explore Vulnerabilities

Version
Year

Explore all Exploits:

Apache + mod_mylo remote exploit

This is a remote exploit for Apache + mod_mylo. It allows an attacker to execute shellcode on a vulnerable system. The exploit uses a forking portbind shellcode to establish a shell on port 45295. The shellcode is modified from eSDee's original code to fix an issue with the dup2() syscall numbers. This exploit is specific to Linux and FreeBSD targets.

word-list-compress Local Exploit

This is a local exploit for the word-list-compress program. It takes advantage of a buffer overflow vulnerability to execute arbitrary code. The exploit overflows the exploit buffer with a shellcode and sets the return address to a specific address in memory. It then loads the exploit string into the environment and executes the word-list-compress program with the exploit as an argument.

phpAbook <= 0.8.8b (COOKIE) Local File Inclusion Vulnerability

This exploit targets the phpAbook version 0.8.8b and takes advantage of a local file inclusion vulnerability. By manipulating the 'userInfo' cookie, an attacker can include arbitrary files on the server, potentially accessing sensitive information. The exploit code is provided as a JavaScript snippet that sets the 'userInfo' cookie to include the path to the '/etc/passwd' file.

AyeView v2.20 (invalid bitmap header parsing) DoS Exploit

AyeView v2.20 software does not properly parse values in bmp file header, allowing an attacker to create a special bitmap that can slow down or suspend the entire system. The exploit triggers AyeView to allocate large amounts of memory, causing the system to slow down or crash.

Read/Write bits to buffer

This code snippet contains functions for reading and writing bits to a buffer. It supports up to 32 bits numbers and is not the fastest method. The vulnerability lies in the lack of input validation, which can lead to buffer overflow if the input exceeds the allowed number of bits. The vulnerability can be exploited to execute arbitrary code or crash the program.

Recent Exploits: