LS simple guestbook (v1) Remote Code Execution Vulnerability

Special Greetings To - Timq,Warpboy,The-Maggot File: index.php Affects: LS simple guestbook v1 Date: 15th April 2007 Issue Description: =========================================================================== LS simple guestbook fails to sanitize user input that it writes to the posts.txt file...

ProFTPD 1.3.0/1.3.0a (mod_ctrls) Local Overflow Exploit (exec-shield)

No description provided by source. ProFTPD 1.3.0/1.3.0a modctrls Local Overflow Exploit exec-shield http://www.milw0rm.com/sploits/04132007-pr0ftpdmodctrls.tgz...

ProFTPD 1.3.0/1.3.0a (mod_ctrls) Local Overflow Exploit (exec-shield)

Exploit for linux platform in category local exploits ===================================================================== ProFTPD 1.3.0/1.3.0a modctrls Local Overflow Exploit exec-shield ===================================================================== back:...

ProFTPd 1.3.0/1.3.0a - 'mod_ctrls' exec-shield Local Overflow

ProFTPD 1.3.0/1.3.0a modctrls Local Overflow Exploit exec-shield https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/3730.tgz 04132007-pr0ftpdmodctrls.tgz milw0rm.com 2007-04-13...

ProFTPd 1.3.01.3.0a - mod_ctrls exec-shield Local Overflow

ProFTPd 1.3.01.3.0a - modctrls exec-shield Local Overflow ProFTPD 1.3.0/1.3.0a modctrls Local Overflow Exploit exec-shield https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/3730.tgz 04132007-pr0ftpdmodctrls.tgz milw0rm.com 2007-04-13...

Immunity Canvas: DFBLOG4_EXEC

Name| dfblog4exec ---|--- CVE| CVE-2007-1525 Exploit Pack| CANVAS Description| Dayfox Blog4 exec Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: Ninja Designs CVE Url: https://vulners.com/cve/CVE-2007-1525 CVE Name: CVE-2007-1525...

Php-Stats <= 0.1.9.1b (php-stats-options.php) admin 2 exec() eExploit

No description provided by source. ?php printr' --------------------------------------------------------------------------- Php-Stats = 0.1.9.1b admin 2 exec exploit by rgod mail: retrog at alice dot it site: http://retrogod.altervista.org dork example: inurl:php-stats.js.php...

Php-Stats <= 0.1.9.1b (php-stats-options.php) admin 2 exec() eExploit

Exploit for unknown platform in category web applications ===================================================================== Php-Stats = 0.1.9.1b php-stats-options.php admin 2 exec eExploit ===================================================================== ?php printr'...

NewsReactor 20070220 Article Grabbing Remote BoF Exploit (1)

Exploit for unknown platform in category remote exploits ============================================================ NewsReactor 20070220 Article Grabbing Remote BoF Exploit 1 ============================================================ / NewsReactor 20070220 Article Grabbing Remote Buffer...

Code injection

index.php in WebMplayer before 0.6.1-Alpha allows remote attackers to execute arbitrary code via shell metacharacters in an exec function call. NOTE: some sources have referred to this as eval injection in the param parameter, but CVE source inspection suggests that this is erroneous...

Veritas Backup Exec Windows Remote File Access

This module abuses a logic flaw in the Backup Exec Windows Agent to download arbitrary files from the system. This flaw was found by someone who wishes to remain anonymous and affects all known versions of the Backup Exec Windows Agent. The output file is in 'MTF' format, which can be extracted b...

Download & Exec polymorphed shellcode Engine

Exploit for generator platform in category shellcode ============================================ Download & Exec polymorphed shellcode Engine ============================================ Download & Exec polymorphed shellcode engine POC This downloading and execution code is not detectable by...

ThWboard 3.0b2.84-php5 - SQL Injection / Code Execution

?php printr' ----------------------------------------------------------------------------- ThWboard =3.0 beta 2.84-php5 boardstyleid sql injection / cmd exec exploit by rgod dork: "powered by ThWboard" version specific: "powered by ThWboard 3 Beta 2.84-php5" "by Baecher & Gonschorek" mail: retrog...

sNews <= 1.5.30 Remote Reset Admin Pass / Command Exec Exploit

Exploit for unknown platform in category web applications ============================================================== sNews = 1.5.30 Remote Reset Admin Pass / Command Exec Exploit ============================================================== ?php printr'...

Symantec Backup Exec System Recovery Manager 7.0 - FileUpload Class Unauthorized File Upload

Symantec Backup Exec System Recovery Manager 7.0 - FileUpload Class Unauthorized File Upload source: https://www.securityfocus.com/bid/27487/info Symantec Backup Exec System Recovery Manager is prone to a vulnerability that allows arbitrary unauthorized files to be uploaded to any location on the...

Symantec Backup Exec System Recovery Manager 7.0 - FileUpload Class Unauthorized File Upload

source: https://www.securityfocus.com/bid/27487/info Symantec Backup Exec System Recovery Manager is prone to a vulnerability that allows arbitrary unauthorized files to be uploaded to any location on the affected server. This issue resides in the Symantec LiveState Apache Tomcat server. Attacker...

PHP-Update 2.7 - Multiple Vulnerabilities

= 4.1 allowing subs / if $argc 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" "...

Symantec Backup Exec多个堆溢出漏洞

Symantec Backup Exec Remote Agent是一款备份解决方案。 Netware Servers版本下的Symantec Backup Exec不正确验证和过滤用户输入，远程攻击者可以利用漏洞进行堆破坏攻击，可导致拒绝服务或执行任意指令。 Backup Exec 9.1 and 9.2 for Netware Servers Remote Agent for Windows Servers存在这些漏洞，根据报告Backup Exec for Windows Servers, Backup Exec Continuous Protection Server CPS...

TorrentFlux 2.2 (maketorrent.php) Remote Command Execution Exploit

Exploit for unknown platform in category web applications ================================================================== TorrentFlux 2.2 maketorrent.php Remote Command Execution Exploit ================================================================== The variable announce in maketorrent.php...

TorrentFlux 2.2 - maketorrent.php Remote Command Execution

TorrentFlux 2.2 - maketorrent.php Remote Command Execution The variable announce in maketorrent.php is not sanitised before being used. The announce variable goes through various stages throughout the script, then it is passed as a into an exec function. This occurs in the middle of the string...