My Kazaam Notes Management System - Multiple Vulnerabilities

Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: My Kazaam Notes Management System Multiple Vulnerability Vendor url:http://www.mykazaam.com Version:1 Published: 2010-07-11 Greetz to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic Bluehat, Sai, KD, M4n0j. Special Greetz:...

Joomla! Component IXXO Cart - SQL Injection

1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : IXXO Cart for Joomla SQLi Vulnerability Date : july 9,2010 Critical Level : HIGH vendor URL :http://www.php-shop-system.com/ Author : Sid3^effects aKa HaRi specia...

Joomla! Component Minify4Joomla! - Arbitrary File Upload / Persistent Cross-Site Scripting

======================================================= Minify4Joomla Upload and Persistent XSS Vulnerability ======================================================= Name : Minify4Joomla Upload and Persistent XSS Vulnerability Date : july 9,2010 Critical Level : HIGH vendor URL...

Saeculum 2009 Multiple SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================== Saeculum 2009 Multiple SQL Injection Vulnerability ================================================== + Author: TeaM MosTa + Software Link:http://www.saeculum.tv/ + Tested on Win Xp Sp2/Sp3...

Joomla Component Music Manager LFI Vulnerability

Exploit for php platform in category web applications ================================================ Joomla Component Music Manager LFI Vulnerability ================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\...

HoloCMS 9.0.47 - 'news.php' SQL Injection

+Title: HoloCMS 9.0.47 news.php SQL Injection Vulnerability + About : Author : GlaDiaT0R Contact: thegl4di4t0rAThotmailDOTcom or berrahal.ryadhATgmailDOTcom Team : Tunisian Power Team Greetz : ALLAH ! , Boomrangvictim, MarwenNeo, Alphanix, Zigma & my friends Software Link:...

Ubuntu PAM MOTD File Tampering (Privilege Escalation)

Exploit for linux platform in category local exploits ===================================================== Ubuntu PAM MOTD File Tampering Privilege Escalation ===================================================== !/bin/sh Exploit Title: Ubuntu PAM MOTD file tampering privilege escalation Date:...

GCards <= 1.46 SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================== GCards = 1.46 SQL Injection Vulnerability ========================================== =-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-=-==- NAME SCRIPT :GCARDS Version: 1.46...

Security Advisories from TEHTRI-Security at HITB Europe

Gents, TEHTRI-Security was invited to give a talk called "Web In The Middle, Attacking Clients", at the first Hack In The Box Europe, Amsterdam http://conference.hackinthebox.org/hitbsecconf2010ams/ . During our talk, we released multiple advisories and we explained many issues related to some...

Opera Exploit v10.60 Denial of Service

Exploit for windows platform in category dos / poc ====================================== Opera Exploit v10.60 Denial of Service ====================================== Author: PoisonCode Download Exploit Code Download Vulnerable app Title:OperaRemote Dos Software Link:http://www.opera.com Version...

SasCam 2.7 ActiveX Head Buffer Overflow

Exploit for windows platform in category local exploits ======================================= SasCam 2.7 ActiveX Head Buffer Overflow ======================================= Exploit Title: SasCam 2.7 ActiveX Head Buffer Overflow Author: Blake Software Link:...

Joomla com_ninjamonials Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================= Joomla comninjamonials Blind SQL Injection Vulnerability ========================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-...

iLister Listing Software - Local File Inclusion

1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : iLister listing script LFi Vulnerability Date : july 4,2010 Critical Level : HIGH vendor URL :http://www.worksforweb.com/ Author : Sid3^effects aKa HaRi special...

Eurosito (pages.php) SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================ Eurosito pages.php SQL Injection Vulnerability ================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0...

DXL dev Image Hosting => upload shell

Exploit for php platform in category web applications ===================================== DXL dev Image Hosting = upload shell ===================================== + Date: 02/07/2010 + Author: MeGo + Tested ON :windows xP + MY Team : Team Hacker Egypt + CategorY : Webapps/0day TYPE: PHP + Emai...

HP OpenView NNM getnnmdata.exe CGI Invalid ICount Code Execution

Exploit for windows platform in category remote exploits ======================================================================= HP OpenView NNM getnnmdata.exe CGI Invalid ICount Remote Code Execution ======================================================================= Exploit Title: HP OpenVi...

HP OpenView NNM getnnmdata.exe CGI Invalid Hostname Code Execution

Exploit for windows platform in category remote exploits ================================================================== HP OpenView NNM getnnmdata.exe CGI Invalid Hostname Code Execution ================================================================== Exploit Title: HP OpenView NNM...

Iphone Pointter Social Network - Local File Inclusion

1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Iphone pointter Social network LFI Vulnerablility Date : july, 2 2010 Critical Level : HIGH Vendor Url : http://www.pointter.com/ Author : Sid3^effects aKa HaRi...

Your Photo Store Shell Upload

======================================== Photo Store === upload shell ======================================== + Date: 30/06/2010 + Author: MeGo + Tested ON :windows xP + MY Team : Team Hacker Egypt + Email: [email protected] + CategorY : Webapps/0day TYPE: PHP ×Dork "Copyright 2007 Your Photo Store...

Ubiquity Nanostation5 (Air OS) 0day Remote Command Execution

Exploit for hardware platform in category web applications ============================================================ Ubiquity Nanostation5 Air OS 0day Remote Command Execution ============================================================ Exploit Title: Ubiquity Nanostation5 Air OS 0day Remote...