ASPThai.Net Guestbook 5.5 - Authentication Bypass

!/usr/bin/perl SQL Injection Exploit for ASPThai.Net Guestbook new or die; $cookiejar = HTTP::Cookies-new; $xpl-agent'g00ns'; $xpl-cookiejar$cookiejar; $res = $xpl-post $Server.'checkuser.asp', Content = 'txtUserName' = '' or '%67%30%30%6e%73'='%67%30%30%6e%73', 'txtUserPass' = '' or...

dbmanDefault.txt

Tunis the 31/jan/2006 bug found by Fireboy [email protected] Product affected:DBMan for Windows and Unix Product vendor: http://www.gossamer-threads.com the problem with DBman is default passwords these are default pass : admin/admin,author/author,guest/guest if the admin not change the pas...

[KAPDA::#18] - WebWiz Products SQL Injection

KAPDA::18 - WebWiz Products SQL Injection Happy new year ! : KAPDA New advisory Vulnerable products : webwiz site news access2000 : vesion 3.06 and prior versions webwiz journal access2000 : version 1.0 webwiz weekly poll access2000 : version 3.06 and prior versions database login access2000 :...

Battle Carry <= .005 Socket Termination Denial of Service Exploit

Exploit for unknown platform in category dos / poc ================================================================= Battle Carry include include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h...

Microsoft IIS - SA WebAgent 5.25.3 Redirect Overflow (Metasploit)

Microsoft IIS - SA WebAgent 5.25.3 Redirect Overflow Metasploit This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core...

Microsoft Windows XP/2000/2003 - Keyboard Event Privilege Escalation

// source: https://www.securityfocus.com/bid/14743/info Microsoft Windows is prone to a privilege escalation weakness. This issue is due to a design error when desktop applications handle keyboard events sent through the keybdevent function. The specific issue is that programs may send keyboard...

Forum Russian Board 4.2 Full Command Execution Exploit

No description provided by source. !/usr/bin/perl Forum Russian Board 4.2 Full FRB http://www.carline.ru , http://frb.ru command execution exploit by RST/GHC http://rst.void.ru , http://ghc.ru bugs found by foster & 1dt.w0lf , xpl coded by 1dt.w0lf RST/GHC - http://rst.void.ru , http://ghc.ru use...

CVE-2003-1151

Cross-site scripting XSS vulnerability in Fastream NETFile Server 6.0.3.588 allows remote attackers to inject arbitrary web script or HTML via the URL, which is displayed on a "404 Not Found" error page...

CVE-2005-0093

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

Cyrus imapd 2.2.4 - 2.2.8 (imapmagicplus) Remote Exploit

Exploit for linux platform in category remote exploits ======================================================== Cyrus imapd 2.2.4 - 2.2.8 imapmagicplus Remote Exploit ======================================================== / Cyrus imapd v 2.2.4 - 2.2.8 imapmagicplus Remote Exploit By crash-x /...

Cyrus imapd 2.2.4 - 2.2.8 (imapmagicplus) Remote Exploit

No description provided by source. / Cyrus imapd v 2.2.4 - 2.2.8 imapmagicplus Remote Exploit By crash-x / unl0ck Bug found by Stefan Esser www.unl0ck.org / www.coredumped.info [email protected] / [email protected] Greets to: all GOTFault ex-member, unl0ck, scozar, eos-india, xesio and all my...

phpWebSite-0.10.0 эксплоит

oooo...oooo.oooooooo8.ooooooooooo .8888o..88.888........88..888..88 .88.888o88..888oooooo.....888 .88...8888.........888....888 o88o....88.o88oooo888....o888o Network security team nst.e-nex.com Title: phpWebSite = v0.10.0 Bug found by: nst Date: 24.02.2005 Web: phpwebsite.appstate.edu...

CVE-2004-0410

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

1. Exploit for Cutenews 1.3 1.3.1 1.3.2, AND Bug in Cutenews v1.3.6

Cutenews v1.3 v1.3.1 v1.3.2 Shell exploit 2. bug-traq :: Cutenews 1.3.6 Shell Network security team nst.e-nex.com Title: shell in Cutenews 1.3.6 Bug found by: тёмыч Date: 7.09.2004 web: http://cutephp.com/ Бага работает толька в v1.3.6 Все ваши дальнейшие скрипты должны быть на хостинге каторый...

New XSS vulnerabilities in paFileDB 3.1 final

Another XSS Vulnerability has been found in paFileDB! paFileDB is designed to allow webmasters have a database of files for download on their site. Vulnerable: Software: email & category & file paFileDB modules Just Tested on: paFileDB 3.1 Final , but likely works on another versions. Exploit:...

CVE-2002-1497

Cross-site scripting XSS vulnerability in Null HTTP Server 0.5.0 and earlier allows remote attackers to insert arbitrary HTML into a "404 Not Found" response...

CVE-2002-1497

Technical details about this CVE are not provided in the connected documents. The initial description notes an XSS in Null HTTP Server 0.5.0 and earlier, allowing arbitrary HTML in 404 responses. Monitor for updates.

RhinoSoft Serv-U FTPd Server 3.x4.x5.x - MDTM Remote Overflow

RhinoSoft Serv-U FTPd Server 3.x4.x5.x - MDTM Remote Overflow / exservu.c - Serv-U FTPD 3.x/4.x/5.x "MDTM" Command remote overflow exploit Copyright c SST 2004 All rights reserved. Public version BUG find by bkbll [email protected], cool! :ppPPppPPPpp :D code by Sam and 2004/01/07 Revise History...

Multiple Product Vulnerabilities Found by PROTOS SIP Test Suite

...

Apache 1.3.26

I recently did a very brief and non-exhaustive security audit of Apache 1.3.26, and noticed some small potential bugs in some of the helper programs that come with the distribution. Apache maintainers have been notified, and the most serious of these bugs have been fixed in 1.3.27. I'm sending th...