TUTOS 1.3 (cmd.php) Remote Command Execution Vulnerability

Exploit for unknown platform in category web applications ========================================================== TUTOS 1.3 cmd.php Remote Command Execution Vulnerability ========================================================== AUTHOR : H-T TeaM HouSSaMix ToXiC350 HOME : http://no-hack.net...

Wordpress Plugin Wp-FileManager 1.2 Remote Upload Vulnerability

No description provided by source. AUTHOR : H-T TeaM HouSSaMix ToXiC350 HOME : http://no-hack.net Script : Wordpress Plugin Wp-FileManager Download : http://downloads.wordpress.org/plugin/wp-filemanager.1.2.zip...

TUTOS 1.3 - cmd.php Remote Command Execution

TUTOS 1.3 - cmd.php Remote Command Execution AUTHOR : H-T TeaM HouSSaMix ToXiC350 HOME : http://no-hack.net Script : TUTOS Tested in version 1.3 other versions may also be affected. Download : http://www.tutos.org/homepage/index.html BUG : Command Execution Vulnerability | 3xpl0it4t10n -1- :...

Joomla Component PU Arcade Remote <= 2.1.3 SQL Injection Vuln

No description provided by source. Joomla Component PU Arcade Remote SQL Injection Exploit AUTHOR : HouSSamix of H-T TeaM We are HouSSamix ToXiC350 CoNaN HOME : http://no-hack.net Script : PU Arcade Joomla Component Tested in version 2.0.3 & 2.1.3 Beta Download : http://www.pragmaticutopia.com/...

AGENCY4NET WEBFTP 1 - 'download2.php' File Disclosure

AGENCY4NET WEBFTP 1 download2.php Remote File Disclosure Vulnerability http://sourceforge.net/project/platformdownload.php?groupid=206982 POC : /Script/download2.php?file=../../../../../../../../../../../etc/passwd D0rk : : TrYaG-TeaM Tryag.com/cc, H-T Team , RoMaNcYxHaCkEr , Asb-May's Team...

CVE-2002-2379: Undefined Security Weakness

Cisco AS5350 IOS 12.211T with access control lists ACLs applied and possibly with ssh running allows remote attackers to cause a denial of service crash via a port scan, possibly due to an ssh bug. NOTE: this issue could not be reproduced by the vendor...

CVE-2002-2340: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in read.php in Phorum 3.3.2a allows remote attackers to inject arbitrary web script or HTML via 1 the t parameter or 2 the body of an email response...

CVE-2007-5588: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in mnoGoSearch before 3.2.43 allows remote attackers to inject arbitrary web script or HTML via the t parameter in search.cgi, as reachable from search.htm-dist...

CVE-2007-5452: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in php-stats.recjs.php in Php-Stats 0.1.9.2 allow remote attackers to execute arbitrary SQL commands via the 1 ip or 2 t parameter...

xKiosk 3.0.1i (xkurl.php PEARPATH) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ====================================================================== xKiosk 3.0.1i xkurl.php PEARPATH Remote File Inclusion Vulnerability ====================================================================== xKiosk WEB GoLdM = 4ever...

Unfixed XSS vulnerability at www.xentek.co.uk

Security researcher T-Ping, has submitted on 20/09/2007 a cross-site-scripting XSS vulnerability affecting www.xentek.co.uk, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/09/2007. It is currently...

pwssondages-sql.txt

PwsPHP sondages Module Remote SQL Injection Exploit + Author: d3hydr8 + Original Post: http://darkcode.h1x.com/forum/ + Description: The sql injection for KwsPHP put out by "H-T Team" also works for PwsPHP. + Site: http://pwsphp.com + Dork: Réalisé avec Pwsphp Dork: inurl:/pwsphp/index.php + Sql:...

Unfixed XSS vulnerability at www.maildesktop.org

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting www.maildesktop.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is currently...

Unfixed XSS vulnerability at www.flinkymail.de

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting www.flinkymail.de, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is currently...

Unfixed XSS vulnerability at www.maxsoft.ir

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting www.maxsoft.ir, which at the time of submission ranked 3699424 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is currentl...

Unfixed XSS vulnerability at www.loopmail.de

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting www.loopmail.de, which at the time of submission ranked 8864695 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is current...

Unfixed XSS vulnerability at mail.diabetes-kids.de

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting mail.diabetes-kids.de, which at the time of submission ranked 1869789 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is...

Unfixed XSS vulnerability at www.giga4u.eu

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting www.giga4u.eu, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/09/2007. It is currently...

Unfixed XSS vulnerability at www.servicepoints.de

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting www.servicepoints.de, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/09/2007. It is currentl...

Unfixed XSS vulnerability at www.csl-freemail.de

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting www.csl-freemail.de, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is currently...