ABUS TVIP 11550/21550 Multiple vulnerabilities (and possibly other ABUS cams)

Title : ABUS TVIP 11550/21550 Multiple vulnerabilities and possibly other ABUS cams Author : Marco van Berkum - Summary - Arbitrary file read - Arbitrary file upload - Arbitrary command excution input validation bug - How it's totally compromised including ssh root login. - Summary The ABUS 11550...

Ayco Resim Galeri SQL Injection

Exploit Title: Ayco Resim Galeri Open Source SQL Injection Vulnerability Google Dork: n/a Date: 18.09.2011 Author: m3rciL3Ss Software Link:http://www.ay-computer.com.tr/aycoresimgaleriveaycookul.asp Version: Tested on:http://resimgaleri.ay-computer.de/ Exploit:...

Novatek SQL Injection

================================================= Novatek sezioni.php SQL Injection Vulnerability ================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' ...

V5shop injection vulnerability-vulnerability warning-the black bar safety net

Vulnerability to harm: the high-risk A vulnerability file: cart. aspx Search keywords: inurl:scoreindex. aspx exp: the /cart. aspx? act=buy&id=1 and Select Top 1 char1 2 4%2BisNullcastName as varchar8 0 0 0,char3 2%2Bchar1 2 4%2BisNullcastPass as varchar8 0 0 0,char3 2%2Bchar1 2 4 From Select Top...

Alahliclub SQL Injection

|=----=----=----=----=----=--------=| | | | /\ /\ \ /\ /\ \ | | //\ /\ \ \L\ \ \ \ \ Turki$ hackers | | \ \ \ \ \ '\ \ \ | | \ \ \ \ \ \L\ \ \ \ \ \ | | \ \ \ / \ \ \ | | // // //// | | | | | |=----=----=----=----=----=--------=|...

MyBB MyTabs Plugin - SQL Injection

MyBB MyTabs Plugin - SQL Injection ===================================================================== MyBB 0day \ MyTabs plugin SQL injection vulnerability ===================================================================== Exploit title : MyBB 0day \ MyTabs plugin SQL injection vulnerabilit...

http-axis2-dir-traversal NSE Script

Exploits a directory traversal vulnerability in Apache Axis2 version 1.4.1 by sending a specially crafted request to the parameter xsd BID 40343. By default it will try to retrieve the configuration file of the Axis2 service '/conf/axis2.xml' using the path '/axis2/services/' to return the userna...

phpcms v2.4 SQL injection exploit

No description provided by source. 1.vbs ------------------------------------------------------------------- on error resume next Set objArgs = WScript.Arguments dim myhttp dim mypath dim fjhgx printr if objArgs.length = 0 then quitprint End if if objArgs0 = null then quitprint Else myhttp =...

JaManaGe enterprise built Station system v2. 0 injection vulnerability-vulnerability warning-the black bar safety net

By:Mr. DzY date:2011/06/11 aManaGe the enterprise built Station system with perfect enterprise website background management functions, can through the background simple operation to achieve a large amount of information updated. Finished Good system, products, news, talent, and customer service...

Web Application SQL Injection Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Joomla 1.6.0 SQL Injection

Requirements require 'msf/core' Class declaration class Metasploit3 'Joomla 1.6.0 // SQL Injection Exploit', 'Description' = %q A vulnerability was discovered by Aung Khant that allows for exploitable SQL Injection attacks against a Joomla 1.6.0 install. This exploit attempts to leverage the SQL...

Smsgwadapter Server Admin Credentials Revealed !

Smsgwadapter Server Admin Credentials Revealed ! A Indian hacker, hack into the one of the SMS Server Smsgwadapter at 122.165.52.84 IP address. According to the hacker, This is the most unsecured Server got owned by a simple password guessing. In screenshot you can see the desktop of same server...

Joomla 1.6.0 SQL Injection / PHP Execution

Requirements require 'msf/core' Class declaration class Metasploit3 'Joomla 1.6.0 // SQL Injection - PHP Execution', 'Description' = %q A vulnerability was discovered by Aung Khant that allows for exploitable SQL Injection attacks against a Joomla 1.6.0 install. This exploit attempts to leverage...

iwebshop0. 7. 7 injection 0day-vulnerability warning-the black bar safety net

Use method: 1, the first casual look at a product,and then access the 2, the use of cookies by the browser, you will find inside will be more similar to"iwebhisgoods2 2this number is your access to the product id=1 2 8 2 2 8 2 7 6 2"Project 3, the first in the"2 2"rear add a single quotes, so tha...

Persistent Cross Site Scripting Vulnerability In JAF-CMS ver 4.0_RC_2

Exploit Title: Persistent Cross Site Scripting Vulnerability In JAF-CMS ver 4.0RC2 Google Dork: Site engine powered by JAF-CMS Date: 9 January 2011 Author: Akastep Software Link: http://jaf-cms.sourceforge.net/ Version: JAF-CMS ver 4.0RC2 may be vuln exist in older versions too Tested on: FreeBSD...

JAF-CMS 4.0_RC_2 Cross Site Scripting

Exploit Title: Persistent Cross Site Scripting Vulnerability In JAF-CMS ver 4.0RC2 Google Dork: Site engine powered by JAF-CMS Date: 9 January 2011 Author: Akastep Software Link: http://jaf-cms.sourceforge.net/ Version: JAF-CMS ver 4.0RC2 may be vuln exist in older versions too Tested on: FreeBSD...

Skadate Multiple Persistent Cross Site Scripting Vulnerabilities (Undisclosed New Vulnerability)

Exploit Title: Skadate Persistent Cross Site Scripting Vulnerability Google Dork: Powered by SkaDate dating Date: 2 January 2011 Author: Akastep Software Link: http://www.skadate.com Version: SkaDate dating software Tested on: nginx/0.7.62 php version: PHP/5.2.14 ----- Exploit: Persistent Cross...

Skadate Cross Site Scripting

Exploit Title: Skadate Persistent Cross Site Scripting Vulnerability Google Dork: Powered by SkaDate dating Date: 2 January 2011 Author: Akastep Software Link: http://www.skadate.com Version: SkaDate dating software Tested on: nginx/0.7.62 php version: PHP/5.2.14 ----- Exploit: Persistent Cross...

DGNews 2.1 - SQL Injection

DGNews 2.1 - SQL Injection Remote SQL Injection Vulnerability name : DGNews v 2.1 Author : kalashnikov dork : inurl:news.php?go=fullnews&newsid admincp : admin/login.php // the user is "admin"===========MYSQL INJ======= http://localhost/pach/news.php?go=fullnews&newsid=1'...

AJ Matrix DNA - SQL Injection

!/usr/bin/perl |------------------------------------------------------------------------------------------------------------------ | -Info: | -Name: AJ Matrix DNA | -Site: http://www.ajsquare.com/ajhome.php | -Bug: Sql Injection | -Found: by Br0ly | -BRAZIL D | -Contact: br0lydotCodeatgmaildotcom...