This module exploits a vulnerability within the code responsible for parsing client requests. When reading in a request from the network, a 32-bit integer is read in that specifies the number of bytes that follow. This value is not validated, and is then used to read data into a fixed-size stack buffer.
This module exploits a stack based buffer overflow found in Sielco Sistemi Winlog <= 2.07.16. The overflow is triggered during the parsing of a maliciously crafted packet.
This module exploits a stack based buffer overflow found in VIPA Automation WinPLC7 <= 5.0.45.5921. The overflow is triggered when WinPLC7 connects to a remote server and accepts a malicious packet. The first 2 bytes of this packet are read in and used as the size value for a later recv function. If a size value of sufficiently large size is supplied a stack buffer overflow will occur.
This module exploits a stack based buffer overflow found in Z-Scada Net 2.0. The vulnerability is triggered when parsing the response to a Modbus packet.
The vulnerability allows an attacker to inject sql commands by using a crafted username and password. The crafted username is 'or 1=1 or ''=' and the password can be anything.
The vulnerability allows an attacker to inject sql commands. Proof of Concept: http://localhost/[PATH]/index.php?page=news&nid=[SQL] http://localhost/[PATH]/admin User: 'or 1=1 or ''=' Pass: anything Etc..
The vulnerability allows an attacker to inject sql commands into the 'page' and 'pk' parameters of the 'index.php' script.
The vulnerability allows an attacker to inject sql commands into the details.aspx page of the Real Estate Marketplace Site ASP.NET Script 1.1, by appending a malicious SQL query to the end of the URL.
The vulnerability allows an attacker to inject sql commands into the vulnerable parameter 'key' of the 'index.php' page.
The vulnerability allows an attacker to inject sql commands. Proof of Concept: http://localhost/[PATH]/admin User: 'or 1=1 or ''=' Pass: anything http://localhost/[PATH]/admin/viewuserips.php?id=[SQL] http://localhost/[PATH]/admin/editadminuser.php?id=[SQL] Etc..
Services By CQR