9356 matches found
E-topbiz Dating 3 PHP Script (mail_id) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ========================================================================= E-topbiz Dating 3 PHP Script mailid Remote SQL Injection Vulnerability =========================================================================...
Default configuration
The default configuration of su in /etc/pam.d/su in GNU coreutils 5.2.1 allows local users to gain the privileges of a 1 locked or 2 expired account by entering the account name on the command line, related to improper use of the pamsucceedif.so module...
Greatclone GC Auction Platinum - category.php SQL Injection
Greatclone GC Auction Platinum - category.php SQL Injection source: https://www.securityfocus.com/bid/30389/info GC Auction Platinum is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...
phpfootball-sql.txt
Viva IslaM Viva IslaM Remote SQL injection Vulnerability PHPFootball 1.6 show.php dbtable AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM && WwW.AtsDp.CoM/f Email : [email protected] SYRIAN Arab HACkErS -: Exploite :-...
smartppc-sql.txt
+---------------------------------------+ | Blind SQL Injection Vulnerability | | in Pay Per Click Script | | found by Hamtaro aka CorVu5 | |there must be 50 ways to learn to hover| +---------------------------------------+ gdork: "Pay Per Click Script powered by SmartPPC.com." vuln:...
Maxtrade AIO 1.3.23 (categori) Remote SQL Injection Vulnerability
No description provided by source. Remote SQL Injection Maxtrade AIO 1.3.23 ... HaCkerEgy Contact : [email protected] Home : pal-hacker.com & atsdp.com =============================================== Script : Maxtrade Version : 1.3.23 Download : http://softdivision.com...
Maxtrade AIO 1.3.23 (categori) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================= Maxtrade AIO 1.3.23 categori Remote SQL Injection Vulnerability ================================================================= Remote SQL Injection Maxtrade AIO 1.3.23...
DCFM Blog 0.9.4 (comments) Remote SQL Injection Vulnerability
No description provided by source. / | || | | | | | | | | /| | | | | || ||| ||||| || C. H. R. O. O. T. SECURITY GROUP - -- ----- --- -- -- ---- --- -- - http://www.chroot.org Hacks In Taiwan | || | | | | | | | Conference 2008 | | ...
The decomposition of the back door to check the heart-to build antivirus PASS Backdoor-vulnerability warning-the black bar safety net
In the security concept of growing today, want to get a station of their own chickens is easy, if say because the administrator found himself left in the broiler on the back door account and lead to broiler missing words, that is the world the most painful thing, I believe everyone will not want...
Code injection
admin/userform.php in RoomPHPlanning 1.5 does not require administrative credentials, which allows remote authenticated users to create new admin accounts...
CVE-2008-2488
admin/userform.php in RoomPHPlanning 1.5 does not require administrative credentials, which allows remote authenticated users to create new admin accounts...
CVE-2008-2488
admin/userform.php in RoomPHPlanning 1.5 does not require administrative credentials, which allows remote authenticated users to create new admin accounts...
CVE-2008-2488
CVE-2008-2488 affects RoomPHPlanning 1.5. The issue is in admin/userform.php, where no administrative credentials are required, allowing remote authenticated users to create new admin accounts. This is the root cause and directly leads to privilege escalation within the application. The available...
CVE-2008-2348
The CVE-2008-2348 entry describes a vulnerability in MeltingIce File System 1.0 where remote attackers can bypass authentication and perform administrative actions (create new user accounts and exceed application quotas) via a direct request to admin/adduser.php. The associated data indicate netw...
Debian OpenSSL Predictable PRNG Bruteforce SSH Exploit (ruby)
No description provided by source. !/usr/bin/ruby Debian SSH Key Tester L4teral l4teral at gmail com This tool helps to find user accounts with weak SSH keys that should be regenerated with an unaffected version of openssl. You will need the precalculated keys provided by HD Moore...
OpenSSL 0.9.8c-1 < 0.9.8g-9 (Debian and Derivatives) - Predictable PRNG Brute Force SSH (Ruby)
!/usr/bin/ruby Debian SSH Key Tester L4teral This tool helps to find user accounts with weak SSH keys that should be regenerated with an unaffected version of openssl. You will need the precalculated keys provided by HD Moore See http://metasploit.com/users/hdm/tools/debian-openssl/ for further...
Debian OpenSSL Predictable PRNG Bruteforce SSH Exploit (ruby)
Exploit for multiple platform in category remote exploits ============================================================= Debian OpenSSL Predictable PRNG Bruteforce SSH Exploit ruby ============================================================= !/usr/bin/ruby Debian SSH Key Tester L4teral This tool...
CVE-2008-2134
The Journal module in Tru-Zone Nuke ET 3.x allows remote attackers to obtain access to arbitrary user accounts, and alter or delete data, via a modified username in an unspecified cookie...
Code injection
The Journal module in Tru-Zone Nuke ET 3.x allows remote attackers to obtain access to arbitrary user accounts, and alter or delete data, via a modified username in an unspecified cookie...
CVE-2008-2134
CVE-2008-2134 affects the Journal module in Tru-Zone Nuke ET 3.x. An attacker can remotely obtain access to arbitrary user accounts and modify or delete data by supplying a modified username in an unspecified cookie. The vulnerability is documented in multiple sources (NVD entry CVE-2008-2134). T...