papers

What this paper is This paper details a Local File Inclusion (LFI) vulnerability found in DNET Live-Stats version 0.8 rc8. The vulnerability allows an attacker to include arbitrary files from the server's filesystem into

What this paper is This paper, published on Exploit-DB in 2010, presents a small piece of x86 assembly shellcode designed to add a new local administrator user to a Windows system. The shellcode is encoded and uses dynam

What this paper is This paper presents a small, 113-byte shellcode for Windows XP Professional SP3 (English version). Its primary function is to add a new local administrator user to the system. The shellcode achieves th

What this paper is This paper details a security vulnerability in SnackAmp version 3.1.3 Beta. It describes a buffer overflow flaw that can be triggered by a specially crafted file. The exploit leverages Structured Excep

What this paper is This paper details a SQL injection vulnerability found in FAQMasterFlex version 1.2. The author, cyb3r.anbu, discovered that the script does not properly sanitize user input for the parameter, allowing

What this paper is This paper details a Python script that exploits a vulnerability in Cilem Haber v1.4.4 (Turkish version). The vulnerability allows an attacker to disclose the application's database file ( ). The scrip