AIX5l with FTP-Server - Hash Disclosure

AIXCOREDUMP.PL --- --== AIX5l w/ FTP-SERVER REMOTE ROOT HASH DISCLOSURE EXPLOIT =-- CREATES COREDUMP INCLUDING THE ROOT USER HASH FROM /etc/security/passwd THE RESULT FILE IS SCRAMBLED - SEEK FOR DES LOOKING CRYPTO KEYS SUCCESSFULLY TESTED ON IBM AIX 5.1 DISCOVERED & EXPLOITED BY KINGCOPE JULY 20...

pPIM 1.0 Multiple Remote Vulnerabilities

No description provided by source. - -= pPIM Multiple Vulnerabilities =- Version Tested: pPIM 1.0 Vendor notified Full details can also be found at http://www.lampsecurity.org/node/18 Author: Justin C. Klein Keane [email protected] Description pPIM...

pPIM 1.0 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ======================================== pPIM 1.0 Multiple Remote Vulnerabilities ======================================== - -= pPIM Multiple Vulnerabilities =- Version Tested: pPIM 1.0 Vendor notified Author: Justin C. Klein Keane...

PHPFootball <= 1.6 (filter.php) Remote Hash Disclosure Exploit

Exploit for unknown platform in category web applications ============================================================== PHPFootball \n"; exit; else $head .= "GET /$path/filter.php?dbtable=Accounts&dbfield=Password HTTP/1.1\r\n"; $head .= "Host: $host\r\n"; $head .= "Connection: close\r\n\r\n";...

PHPFootball 1.6 - Remote Hash Disclosure

\n"; exit; else $head .= "GET /$path/filter.php?dbtable=Accounts&dbfield=Password HTTP/1.1\r\n"; $head .= "Host: $host\r\n"; $head .= "Connection: close\r\n\r\n"; $fsock = fsockopen $host,80; fputs $fsock,$head; while !feof$fsock $cont .= fgets$fsock; fclose$fsock; if pregmatchall"/.+?/",$cont,$i...

Retrospect Backup Server < 7.6 Authentication Module Password Hash Disclosure (ESA-08-009)

Binary data 4607.prm...

lightneasy-hash.txt

Author: GiReX mySite: girex.altervista.org Date: 10/04/08 CMS: LightNEasy 1.2 no database Site: lightneasy.org Bug: Hash Disclosure Exploit: Remote Hash Retrieve Bug Explanation: LightNEasy/lightneasy.php if$GET'do'!="login" && $GET'do'!="sitemap" && $SESSION$set'password' != "1" unset$GET'do';...

LightNEasy 1.2 (no database) Remote Hash Retrieve Exploit

Exploit for unknown platform in category web applications ========================================================= LightNEasy 1.2 no database Remote Hash Retrieve Exploit ========================================================= Author: GiReX Date: 10/04/08 CMS: LightNEasy 1.2 no database Site:...

LightNEasy 1.2 - no database Remote Hash Retrieve

LightNEasy 1.2 - no database Remote Hash Retrieve Author: GiReX mySite: girex.altervista.org Date: 10/04/08 CMS: LightNEasy 1.2 no database Site: lightneasy.org Bug: Hash Disclosure Exploit: Remote Hash Retrieve Bug Explanation: LightNEasy/lightneasy.php if$GET'do'!="login" && $GET'do'!="sitemap"...

LightNEasy 1.2 - no database Remote Hash Retrieve

Author: GiReX mySite: girex.altervista.org Date: 10/04/08 CMS: LightNEasy 1.2 no database Site: lightneasy.org Bug: Hash Disclosure Exploit: Remote Hash Retrieve Bug Explanation: LightNEasy/lightneasy.php if$GET'do'!="login" && $GET'do'!="sitemap" && $SESSION$set'password' != "1" unset$GET'do';...

xcms-rfilfi.txt

| ' \ / \ / / \ ' \ | | | | / / | | | || ||//\|| || XCMS = 1.82 LFI & RCE Xpl Nexen rocked this one ; LFIs http://127.0.0.1/xcms/index.php?pg=admin&s=../../../../../etc/passwd\0 http://127.0.0.1/xcms/index.php?mod=existing module&pg=../../../../../etc/passwd\0 Hash disclosure...

XCMS &lt;= 1.82 Remote Local File Inclusion Vulnerability

No description provided by source. | ' \ / \ / / \ ' \ | | | | / / | | | || ||//\|| || XCMS = 1.82 LFI & RCE Xpl Nexen rocked this one ; LFIs http://127.0.0.1/xcms/index.php?pg=admin&s=../../../../../etc/passwd\0 http://127.0.0.1/xcms/index.php?mod=existing module&pg=../../../../../etc/passwd\0...

XCMS <= 1.82 Remote Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ====================================================== XCMS / | | | || ||//\|| || XCMS = 1.82 LFI & RCE Xpl Nexen rocked this one ; LFIs http://127.0.0.1/xcms/index.php?pg=admin&s=../../../../../etc/passwd\0...

XCMS 1.82 - LocalRemote File Inclusion

XCMS 1.82 - LocalRemote File Inclusion | ' \ / \ / / \ ' \ | | | | / / | | | || ||//\|| || XCMS = 1.82 LFI & RCE Xpl Nexen rocked this one ; LFIs http://127.0.0.1/xcms/index.php?pg=admin&s=../../../../../etc/passwd\0 http://127.0.0.1/xcms/index.php?mod=existing...

XCMS 1.82 - Local/Remote File Inclusion

| ' \ / \ / / \ ' \ | | | | / / | | | || ||//\|| || XCMS = 1.82 LFI & RCE Xpl Nexen rocked this one ; LFIs http://127.0.0.1/xcms/index.php?pg=admin&s=../../../../../etc/passwd\0 http://127.0.0.1/xcms/index.php?mod=existing module&pg=../../../../../etc/passwd\0 Hash disclosure...

[Trick] VigileCMS All Versions DataMining Remote Hash Disclosure

--------------------------------------------------------------- / | | / | / |/ | | |/ | | / | | | | | |/ | | // | || | ||| /| / / | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...

flip30-pass.txt

!/usr/bin/perl use strict; use IO::Socket; my $app = "Flip = 0; $data = substr$data, $index1+4; $index1 = 0; printf "%-20s %-32s\n", "username", "md5 hash"; while$index1 = index$data, "\n" = 0 my $hash = substr$data, 0, 32; my $index2 = index$data, ""; my $index3 = index$data, "", $index2+2; my...

CVE-2007-3022

Symantec Reporting Server (versions affected: 1.0.197.0 up to 1.0.224.0), used with Symantec Client Security 3.1 and SAV CE 10.1, discloses the password hash for a user after a failed login. This plaintext-like disclosure enables brute-force attempts and could let an attacker gain access to the R...

siteman1111-disclose.txt

-=--------------------ADVISORY-------------------=- Siteman 1.1.11 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: Siteman -=+ Version: 1.1.11 -=+ Vendor's URL: http://home.no.net/siteman/ -=+ Platform: Windows\Linux\Unix -=+ Bug type: Remote...

siteman-pass.txt

-=--------------------ADVISORY-------------------=- Siteman 2.0.x2 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: Siteman 2.0.x2 -=+ Version: 2.0.x2 -=+ Vendor's URL: http://home.no.net/siteman/ -=+ Platform: Windows\Linux\Unix -=+ Bug type:...