1120 matches found
CHETCPASSWD 1.12 Shadow File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6472/info CHETCPASSWD is prone to a vulnerability that may potentially cause the tail end of the local shadow file to be disclosed to a remote attacker. It is possible to exploit this issue by sending an overly long strin...
Cacti <= 0.8.6d Remote Command Execution Exploit
No description provided by source. Note: This exploit contains backdoor shell code that is not located on this server. /str0ke !/usr/bin/perl Remote Command Execution Exploit for Cacti = 0.8.6d This exploit open a remote shell on the targets that uses Cacti TARGET HOST MUST BE A GNU/LINUX SERVER,...
CoolPlayer+ Portable 2.19.4 - Local Buffer Overflow
No description provided by source. !/usr/bin/perl Exploit Title: CoolPlayer+ Portable v2.19.4 - Local Buffer Overflow Date: 11-15-2013 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software: CoolPlayer+ Portable v2.19.4 Software Link:...
phpBB <= 2.0.15 Register Multiple Users Denial of Service (perl code)
No description provided by source. !/usr/bin/perl Name: NsT-phpBBDoS Perl Version Copyright: Neo Security Team Author: HaCkZaTaN Ported: g30rg3x Date: 20/06/05 Description: NsT-phpBB DoS By HackZatan Ported tu perl By g30rg3x A Simple phpBB Registration And Search DoS Flooder...
Sports Clubs Web Panel 0.0.1 - Remote Game Delete Exploit
No description provided by source. !/usr/bin/perl -W Sports Clubs Web Panel 0.0.1 Remote Game Delete Exploit File affected: include/draw-delete.php id Vuln Code: 06: $did = $GET'id'; 08: mysqlqueryDELETE FROM draw WHERE did='$did'; by ka0x ka0x01 at gmail dot com D.O.M Labs - Security Researchers...
WorkforceROI Xpede 4.1/7.0 Weak Password Encryption Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4344/info An issue has been reported in Xpede, which could lead to a compromise of user authentication information. Reportedly, Xpede cookies containing username and password data is stored using a weak encryption method...
Annuaire 1Two 2.2 - Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Affected.scr..: Annuaire 1Two 2.2 Poc.ID........: 09060902.txt Type..........: SQL Injection without quote Risk.level....: Medium Vendor.Status.: Unpatched Src.download..: http://www.1two.org/ Poc.link......: acid-root.new.fr/poc/09060902.txt...
xmlrpc.php Library <= 1.3.0 - Remote Command Execute Exploit (3)
No description provided by source. !/usr/bin/perl -w XML-RPC Remote Command Execution Exploit By Mike Rifone This works on da phpxmlrpc, and da PEAR XMLRPC too! All you need is to put the url to the server and u get shell Dis is my first exploit but hey it works :D Mike@Rifone use LWP::UserAgent;...
vBulletin DoS - all version
No description provided by source. DOS Vbulletin 92% Works ; Tested on all versions! and can DOS the server Perl Script use Socket; if @ARGV 2 &usage $rand=rand10; $host = $ARGV0; $dir = $ARGV1; $host = s/http:////eg; for $i=0; $i10; $i-- $user=vb.$rand.$i; $data = s= ; $len = length $data; $foo...
Daniel Beckham The Finger Server 0.82 BETA Pipe Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/974/info 'The Finger Server' is a perl script for providing .plan-like functionality through a website. Due to insufficient input checking it is possible for remote unauthenticated users to execute shell commands on the...
WFTPD Explorer Pro 1.0 - Remote Heap Overflow Exploit
No description provided by source. !/usr/bin/perl WFTPD Explorer Pro 1.0 Remote Heap Overflow Exploit --------------------------------------------------- Exploit by SkD [email protected] This is a remote heap overflow exploit for WFTPD Explorer Pro 1.0 by Texas Imperial Software. Vendors website...
Community Link Pro Login.CGI File Parameter Remote Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14097/info Community Link Pro is prone to a remote arbitrary command execution vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data. Due to this, an attacker can prefix arbitrar...
Crux Gallery <= 1.32 Insecure Cookie Handling Vulnerability
No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Crux Gallery = 1.32 / Insecure Cookie Handling Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Program: Crux Gallery Version: = 1,32 File affected: admin/ Download:...
Terminal Server Client .rdp Denial of Service
No description provided by source. !/usr/bin/perl Exploit Title: Terminal Server Client .rdp Dos Date: 2011-02-01 Author: D3V!L FUCKER Software Link: sudo apt-get install tsclient ^^ Version: All Version Tested on: ubuntu 10.10 press to open then chois the T-T34M.rdp file then connect ^^ C0d3d By...
Multiple BSD Distributions 'gdtoa/misc.c' Memory Corruption Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/35510/info Multiple BSD distributions are prone to a memory-corruption vulnerability because the software fails to properly bounds-check data used as an array index. Attackers may exploit this issue to execute arbitrary...
Eznet 3.5.0 - Remote Stack Overflow and Denial of Service Exploit
No description provided by source. !/usr/bin/perl -w Stack Overflow in eZnet.exe - Remote Exploit Will download a trojan from any address which you provide on the target system, then will execute the trojan. For this exploit I have tried several strategies to increase reliability and performance:...
ClipShare 2.6 - Remote User Password Change Exploit
No description provided by source. !/usr/bin/perl -w priv8 Pr0metheuS Exploit Name: Clipshare Remote User Password Change Exploit Version Script: Clipshare 2.6 Dork: Powered by Clipshare EnjoY print -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-; print \nClipshare 2.6 Remote User Passord Change...
Generation Terrorists Designs & Concepts Sojourn 2.0 File Access Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1052/info Any file that the webserver has read access to can be read on a server running the Sojourn search engine. The Sojourn software includes the ability to organize a website into categories. These categories can the...
Oracle 9i/10g DBMS_METADATA.GET_DDL - SQL Injection Exploit (2)
No description provided by source. !/usr/bin/perl Remote Oracle DBMSMETADATA.GETDDL exploit 9i/10g - Version 2 - New evil cursor injection tip! - No create procedure privileg needed! - See: http://www.databasesecurity.com/ Cursor Injection Grant or revoke dba permission to unprivileged user Teste...
SturGeoN Upload Arbitrary File Upload Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18764/info SturGeoN Upload is prone to an arbitrary file-upload vulnerability. An attacker can exploit this vulnerability to upload arbitrary code and execute it in the context of the webserver process. This may facilitat...