CVE-2015-1577

This exploit demonstrates an arbitrary file deletion vulnerability in u5CMS 3.9.3 via the 'deletefile.php' script. The 'f' parameter is not properly sanitized, allowing directory traversal or absolute path manipulation to delete files with web server permissions.

This Python script exploits a buffer overflow vulnerability in Achat 0.150 beta7 by sending a crafted UDP packet with a malicious payload to trigger remote code execution (calc.exe). The payload is generated using msfvenom and includes a unicode-mixed encoder to bypass bad characters.