[ home ] [ contents ] [ platforms ] [ shellcode ] [ search ] [ cracker ] [ links ] [ rss ] [ archive ]

Author:

Stefan Esser

Homepage:http://hardened-php.net


[ exploits/shellcode ]
-::DATE -::DESCRIPTION -::HITS -::AUTHOR
2007-03-27 PHP 4.4.5 / 4.4.6 session_decode() Double Free Exploit PoC 9887 R D Stefan Esser
2007-03-25 PHP < 4.4.5 / 5.2.1 _SESSION unset() Local Exploit 7595 R D Stefan Esser
2007-03-25 PHP < 4.4.5 / 5.2.1 _SESSION Deserialization Overwrite Exploit 7284 R D Stefan Esser
2007-03-23 PHP 5.2.1 unserialize() Local Information Leak Exploit 6782 R D Stefan Esser
2007-03-20 PHP <= 4.4.6 / 5.2.1 ext/gd Already Freed Resources Usage Exploit 6876 R D Stefan Esser
2007-03-20 PHP <= 5.2.1 hash_update_file() Freed Resource Usage Exploit 7988 R D Stefan Esser
2007-03-19 PHP 5.2.0 header() Space Trimming Buffer Underflow Exploit (MacOSX) 7799 R D Stefan Esser
2007-03-16 PHP <= 4.4.6 / 5.2.1 array_user_key_compare() ZVAL dtor Local Exploit 7642 R D Stefan Esser
2007-03-14 PHP <= 5.2.1 session_regenerate_id() Double Free Exploit 5786 R D Stefan Esser
2007-03-14 PHP 5.2.0/5.2.1 Rejected Session ID Double Free Exploit 7889 R D Stefan Esser
2007-03-12 PHP 5.2.0 ext/filter Space Trimming Buffer Underflow Exploit (MacOSX) 6587 R D Stefan Esser
2007-03-10 PHP <= 5.2.0 ext/filter FDF Post Filter Bypass Exploit 9379 R D Stefan Esser
2007-03-09 PHP 5.2.0 / PHP with PECL ZIP <= 1.8.3 zip:// URL Wrapper BoF Exploit 7745 R D Stefan Esser
2007-03-07 PHP <= 5.2.1 substr_compare() Information Leak Exploit 6217 R D Stefan Esser
2007-03-07 mod_security <= 2.1.0 (ASCIIZ byte) POST Rules Bypass Vulnerability 6249 R D Stefan Esser
2007-03-07 PHP < 4.4.5 / 5.2.1 (shmop Functions) Local Code Execution Exploit 6648 R D Stefan Esser
2007-03-07 PHP < 4.4.5 / 5.2.1 (shmop) SSL RSA Private-Key Disclosure Exploit 6878 R D Stefan Esser
2007-03-04 PHP wddx_deserialize() String Append Crash Exploit 4527 R D Stefan Esser
2007-03-04 PHP 4.4.3 - 4.4.6 phpinfo() Remote XSS Vulnerability 15498 R D Stefan Esser
2007-03-04 PHP < 4.4.5 / 5.2.1 php_binary Session Deserialization Information Leak 6856 R D Stefan Esser
2007-03-04 PHP < 4.4.5 / 5.2.1 WDDX Session Deserialization Information Leak 5995 R D Stefan Esser
2007-03-02 PHP <= 4.4.4 unserialize() ZVAL Reference Counter Overflow Exploit PoC 6582 R D Stefan Esser
2007-03-01 PHP 4 Userland ZVAL Reference Counter Overflow Exploit PoC 5828 R D Stefan Esser
2007-01-07 Wordpress 2.0.5 Trackback UTF-7 Remote SQL Injection Exploit 24244 R D Stefan Esser
2005-04-11 PunBB 1.2.4 (change_email) SQL Injection Exploit 12023 R D Stefan Esser



send all submissions to submit[at]milw0rm.com [gpg]
Copyright © 2004-2009 milw0rm