1086 matches found
arctic-sql.txt
!/usr/bin/perl use IO::Socket; print q ----------------------------------------------- Arctic Issue Tracker v2.0.0 exploit by ldma SubCode use: arctic.pl server dir sample: $perl arctic.pl localhost /arctic/ ----------------------------------------------- ; $webpage = $ARGV0; $directory = $ARGV1;...
MojoJobs - Blind SQL Injection
MojoJobs - Blind SQL Injection !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " Viva IslaMe Viva IslaMe \n"; print " MojoJobs Blind SQL Injection Exploit \n"; print " mojoJobs.cgi mojo \n"; print " Author: Mr.SQL \n"; print " EMAIL : [email protected] \n"; print "...
EasyPublish 3.0 - read Multiple SQL Injections Cross-Site Scripting
EasyPublish 3.0 - read Multiple SQL Injections Cross-Site Scripting source: https://www.securityfocus.com/bid/30307/info EasyPublish is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data. The issues include SQL-injection and cross-site...
Asterisk 1.6 IAX - 'POKE' Requests Remote Denial of Service
source: https://www.securityfocus.com/bid/30321/info Asterisk is prone to a remote denial-of-service vulnerability because it fails to handle multiple 'POKE' requests in quick succession. Attackers can exploit this issue by sending a persistent stream of 'POKE' requests that will consume processo...
JVN#49704543 WebProxy from LunarNight Laboratory vulnerable to cross-site scripting
WebProxy is a perl script for web proxy provided by LunarNight Laboratory. WebProxy contains a cross-site scripting vulnerability. Impact An arbitrary script could be executed on the user's web browser. Solution Update the Software Apply the latest update provided by the developer. Products...
Alstrasoft Article Manager Pro 1.6 - Blind SQL Injection
Alstrasoft Article Manager Pro 1.6 - Blind SQL Injection /usr/bin/perl |+| Author: GoLdM --//-- -- AlstraSoft Article Manager Pro Blind SQL Injection Exploit -- --//-- Exploit : use strict; use LWP::Simple; print "-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-++-\n"; print "-...
joomlanforms-sql.txt
!/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " \n"; print " Mambot Component n-forms Blind SQL Injection Exploit \n"; print " Author:The Moorish :D \n"; print " Greetz:Team-dz,His0k4,x.CJP.x,Kader11000,c02,piRAte DIgitAL\n"; print " sites:www.h4cnc.com...
GTChat <= 0.95 Alpha (adduser) Remote Denial of Service Exploit
No description provided by source. Use a high user for best results. /str0ke !/usr/bin/perl codez0red by VTECin5th Feel free to modify/break this script Crappy code is more effective = I accept no responsibility for misuse or abuse Usage: xxx.pl www.server.com /directorytochat/ ofuserstocreate...
Emulive Server4 7560 Remote Denial of Service Exploit
No description provided by source. !/usr/bin/perl EmuLive Server4 Commerce Edition Build 7560 Remote crash proof of conecpt code. When the machine running Server4 recieves a malformed request on TCP port 66 it crashes very hard! GulfTech Security http://www.gulftech.org use IO::Socket; unless...
BareNuked CMS 1.1.0 Arbitrary Add Admin Exploit
No description provided by source. !/usr/bin/perl ============================================ BareNuked CMS Arbitrary Add Admin Exploit ============================================ ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...
uTorrent / BitTorrent WebIU HTTP 1.7.7/6.0.1 Range header DoS Exploit
No description provided by source. !/usr/bin/perl uTorrent / BitTorrent WebIU HTTP 1.7.7/6.0.1 Range header Denial of Service exploit according to the following advisory: http://secunia.com/advisories/30605 usage: WebUI-dos.pl url port user:pass Exploit written by Exodus...
TOKOKITA - 'produk_id' SQL Injection
!/usr/bin/perl k1tk4t Public Security Advisory //////////////////////////////////////////////////////////// TOKOKITA Multiple Remote SQL Injection Demosite : http://www.tokokita.net/toko/ Vendor : http://www.tokokita.com/ Kutu : 1. catlist.php?catid=Blind SQLi 2. catlistdetail.php?catid=Blind SQL...
BlogPHP 2.0 - Privilege Escalation SQL Injection
BlogPHP 2.0 - Privilege Escalation SQL Injection !/usr/bin/perl BlogPHP 2.0 Remote Privilege Escalation Exploit Author : Cod3rZ Site : http://cod3rz.helloweb.eu Site : http://devilsnight.altervista.org Cuz We Back Rude This Time Privilege Escalation Send a request to...
BlogPHP 2.0 - Privilege Escalation / SQL Injection
!/usr/bin/perl BlogPHP 2.0 Remote Privilege Escalation Exploit Author : Cod3rZ Site : http://cod3rz.helloweb.eu Site : http://devilsnight.altervista.org Cuz We Back Rude This Time Privilege Escalation Send a request to http://127.0.0.1/BlogPHPv2/index.php?act=register2 with:...
blogphp-escalate.txt
!/usr/bin/perl BlogPHP 2.0 Remote Privilege Escalation Exploit Author : Cod3rZ Site : http://cod3rz.helloweb.eu Site : http://devilsnight.altervista.org Cuz We Back Rude This Time Privilege Escalation Send a request to http://127.0.0.1/BlogPHPv2/index.php?act=register2 with:...
emuCMS 0.3 (fckeditor) Arbitrary File Upload Exploit
Exploit for unknown platform in category web applications ==================================================== emuCMS 0.3 fckeditor Arbitrary File Upload Exploit ==================================================== !/usr/bin/perl use strict; use warnings; use LWP::UserAgent; use...
LaserNet CMS <= 1.5 Arbitrary File Upload Exploit
No description provided by source. !/usr/bin/perl use strict; use warnings; use LWP::UserAgent; use HTTP::Request::Common; print INTRO; +++++++++++++++++++++++++++++++++++++++++++++++++++++ + LaserNet CMS = 1.5 Arbitrary File Upload Exploit + + + + Discovered && Coded By: t0pP8uZz + + Discovered...
Comparison Engine Power 1.0 - Blind SQL Injection
!/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " VIVA ISLAME VIVA ISLAME \n"; print " VIVA ISLAME VIVA ISLAME \n"; print " \n"; print " Comparison Engine Power 1.0 Blind SQL Injection Exploit \n"; print " \n"; print " Author: Mr.SQL \n"; print " EMAIL :...
Galatolo Web Manager 1.0 - SQL Injection
!/usr/bin/perl -w Portal : Galatolo WebManager 1.0 exploit aported password crypted exploit tatjibe password mcrypté :d mgharba :d:d:d:d Founded & Exploited by : Stack Contact: Ev!L = see down Greetz : Houssamix & Djekmani & Jadi & Simo64 & iuoisn & All muslims HaCkeRs :...
PlaySMS <= 0.7 SQL Injection Exploit
No description provided by source. !/usr/bin/perl PlaySMS version 0.7 and prior SQL Injection PoC Written by Noam Rathaus of Beyond Security Ltd. use IO::Socket; use strict; my $host = $ARGV0; my $remote = IO::Socket::INET-new Proto = "tcp", PeerAddr = $host, PeerPort = "80" ; unless $remote die...