Apple iTunes 8.1.1 - 'ITMS' Multiple Protocol Handler Buffer Overflow (Metasploit)

$Id: $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ require 'msf/core' class Metasploit3...

Apache mod_dav / svn Remote Denial of Service Exploit

Exploit for multiple platform in category dos / poc ===================================================== Apache moddav / svn Remote Denial of Service Exploit ===================================================== furoffyourcat.pl Apache moddav / svn Remote Denial of Service Exploit by kcope / Jun...

CVE-2009-1752

exJune Office Message System 1 does not properly restrict access to 1 configure.asp and 2 addmessage2.asp, which allows remote attackers to gain privileges a direct request. NOTE: some of these details are obtained from third party information...

FreeBSD 7.07.1 - ktimer Local Privilege Escalation

FreeBSD 7.07.1 - ktimer Local Privilege Escalation / bsd-ktimer.c Copyright c 2008 by FreeBSD = 7.0 local kernel root exploit by christer/mu-b - Mon 2 June 2008 - Tested on: FreeBSD 7.0 FreeBSD 7.1 - Private Source Code -DO NOT DISTRIBUTE - http://www.bsdcitizen.org/ -- BSDCITIZEN 2008!@$! / defi...

WebBlizzard CMS 'index.php' SQL注入漏洞

BUGTRAQ ID: 30074 CNCAN ID：CNCAN-2008070701 WebBlizzard CMS是一款基于PHP的WEB应用程序。 WebBlizzard CMS不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于'index.php'脚本对用户提交给WEB参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 WebBlizzard CMS 目前没有解决方案提供： http://www.webblizzard.de/ /usr/bin/perl |+| Vendor...

CMS WebBlizzard (index.php page) Blind SQL Injection Exploit

No description provided by source. /usr/bin/perl |+| Vendor Not Notified |+| Author: Bl@ckbe@rD |+| Discovered On: 10 june 2008 |+| greetz: InjEctOrs , underz0ne crew --//-- -- CMS webBlizzard Blind SQL Injection Exploit -- --//-- Exploit : use strict; use LWP::Simple; print...

CMS WebBlizzard - 'index.php' Blind SQL Injection

/usr/bin/perl |+| Vendor Not Notified |+| Author: Bl@ckbe@rD |+| Discovered On: 10 june 2008 |+| greetz: InjEctOrs , underz0ne crew --//-- -- CMS webBlizzard Blind SQL Injection Exploit -- --//-- Exploit : use strict; use LWP::Simple; print...

AShop Deluxe 4.x (catalogue.php cat) Remote SQL Injection Exploit

No description provided by source. usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; use Getopt::Long; use URI::Escape; -------------------------------------------------------------------------------------------------------------------------------------------------------- x AShop Deluxe 4.x...

AShop Deluxe 4.x (catalogue.php cat) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================= AShop Deluxe 4.x catalogue.php cat Remote SQL Injection Exploit ================================================================= usr/bin/perl use LWP::UserAgent; use...

Keller Web Admin CMS 0.94 Pro Local File Inclusion Vulnerability

No description provided by source. =========================================================== Keller Web Admin CMS Local File Inclusion Vulnerability =========================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground...

Webdevindo-CMS 0.1 (index.php hal) Remote SQL Injection Vulnerability

No description provided by source. ========================================================================= Webdevindo-CMS 0.1 index.php hal Remote SQL Injection Vulnerability ========================================================================= ,--^----------,--------,-----,-------^--, |...

polypager 1.0rc2 - SQL Injection / Cross-Site Scripting

================================================================= PolyPager = 1.0rc2 SQL/XSS Multiple Remote Vulnerabilities ================================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

theratcms-sqlxss.txt

========================================================== The Rat CMS SQL/XSS Multiple Remote Vulnerabilities ========================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

polypager 1.0rc2 - SQL Injection Cross-Site Scripting

polypager 1.0rc2 - SQL Injection Cross-Site Scripting ================================================================= PolyPager = 1.0rc2 SQL/XSS Multiple Remote Vulnerabilities ================================================================= ,--^----------,--------,-----,-------^--, | ||||||||...

kellerwebadmin-lfi.txt

=========================================================== Keller Web Admin CMS Local File Inclusion Vulnerability =========================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

Webdevindo-CMS 0.1 - 'hal' SQL Injection

========================================================================= Webdevindo-CMS 0.1 index.php hal Remote SQL Injection Vulnerability ========================================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...

pagemanagercms-upload.txt

================================================================ Page Manager CMS Remote Arbitrary File Upload Vulnerability ================================================================ ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

Webdevindo-CMS 0.1 - hal SQL Injection

Webdevindo-CMS 0.1 - hal SQL Injection ========================================================================= Webdevindo-CMS 0.1 index.php hal Remote SQL Injection Vulnerability ========================================================================= ,--^----------,--------,-----,-------^--, ...

adv99-K-159-2008.txt

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV99$2008 ----------------------------------------------------------------------------------------- ECHOADV99$2008 Relative Real Estate Systems = 3.0 listingid Sql Injection Vulnerability...

cmsmini-lfi.txt

===================================================== CMS Mini 0.2.2 Local File Inclusion Vulnerability ===================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...