milw0rm - Stefan Esser - Old Hackers Team

Author:

Stefan Esser

Homepage:

[ exploits/shellcode ]

-::DATE	-::DESCRIPTION	-::HITS			-::AUTHOR
2007-03-27	PHP 4.4.5 / 4.4.6 session_decode() Double Free Exploit PoC	10194	R	D	Stefan Esser
2007-03-25	PHP < 4.4.5 / 5.2.1 _SESSION unset() Local Exploit	7903	R	D	Stefan Esser
2007-03-25	PHP < 4.4.5 / 5.2.1 _SESSION Deserialization Overwrite Exploit	7564	R	D	Stefan Esser
2007-03-23	PHP 5.2.1 unserialize() Local Information Leak Exploit	7087	R	D	Stefan Esser
2007-03-20	PHP <= 4.4.6 / 5.2.1 ext/gd Already Freed Resources Usage Exploit	7197	R	D	Stefan Esser
2007-03-20	PHP <= 5.2.1 hash_update_file() Freed Resource Usage Exploit	8348	R	D	Stefan Esser
2007-03-19	PHP 5.2.0 header() Space Trimming Buffer Underflow Exploit (MacOSX)	8209	R	D	Stefan Esser
2007-03-16	PHP <= 4.4.6 / 5.2.1 array_user_key_compare() ZVAL dtor Local Exploit	7931	R	D	Stefan Esser
2007-03-14	PHP <= 5.2.1 session_regenerate_id() Double Free Exploit	6060	R	D	Stefan Esser
2007-03-14	PHP 5.2.0/5.2.1 Rejected Session ID Double Free Exploit	8234	R	D	Stefan Esser
2007-03-12	PHP 5.2.0 ext/filter Space Trimming Buffer Underflow Exploit (MacOSX)	6878	R	D	Stefan Esser
2007-03-10	PHP <= 5.2.0 ext/filter FDF Post Filter Bypass Exploit	9702	R	D	Stefan Esser
2007-03-09	PHP 5.2.0 / PHP with PECL ZIP <= 1.8.3 zip:// URL Wrapper BoF Exploit	8057	R	D	Stefan Esser
2007-03-07	PHP <= 5.2.1 substr_compare() Information Leak Exploit	6557	R	D	Stefan Esser
2007-03-07	mod_security <= 2.1.0 (ASCIIZ byte) POST Rules Bypass Vulnerability	6502	R	D	Stefan Esser
2007-03-07	PHP < 4.4.5 / 5.2.1 (shmop Functions) Local Code Execution Exploit	6983	R	D	Stefan Esser
2007-03-07	PHP < 4.4.5 / 5.2.1 (shmop) SSL RSA Private-Key Disclosure Exploit	7240	R	D	Stefan Esser
2007-03-04	PHP wddx_deserialize() String Append Crash Exploit	4786	R	D	Stefan Esser
2007-03-04	PHP 4.4.3 - 4.4.6 phpinfo() Remote XSS Vulnerability	15852	R	D	Stefan Esser
2007-03-04	PHP < 4.4.5 / 5.2.1 php_binary Session Deserialization Information Leak	7185	R	D	Stefan Esser
2007-03-04	PHP < 4.4.5 / 5.2.1 WDDX Session Deserialization Information Leak	6251	R	D	Stefan Esser
2007-03-02	PHP <= 4.4.4 unserialize() ZVAL Reference Counter Overflow Exploit PoC	6836	R	D	Stefan Esser
2007-03-01	PHP 4 Userland ZVAL Reference Counter Overflow Exploit PoC	6109	R	D	Stefan Esser
2007-01-07	Wordpress 2.0.5 Trackback UTF-7 Remote SQL Injection Exploit	25053	R	D	Stefan Esser
2005-04-11	PunBB 1.2.4 (change_email) SQL Injection Exploit	12233	R	D	Stefan Esser