Drupal 7.0 < 7.31 - 'Drupalgeddon' SQL Injection (Admin Session)

//· include 'common.inc'; include 'password.inc'; // set values $username = 'admin'; $url = isset$argv1?$argv1:''; $userid = isset$argv2?intval$argv2:1; if $url == '-h' echo "usage:\n"; echo $argv0.' $url $userid'."\n"; die; if empty$url || strpos$url,'https' === False echo "please state the cook...

drupal: pre-auth sql injection

Drupal 7 includes a database abstraction API to ensure that queries executed against the database are sanitized to prevent SQL injection attacks. A vulnerability in this API allows an attacker to send specially crafted requests resulting in arbitrary SQL execution. Depending on the content of the...

Novell NetIQ Privileged User Manager 2.3.1 ldapagnt.dll ldapagnt_eval() Perl Code Evaluation RCE

No description provided by source. Novell NetIQ Privileged User Manager 2.3.1 ldapagnt.dll ldapagnteval Perl Code Evaluation RCE pre auth/SYSTEM Tested against: Microsoft Windows 2003 r2 sp2 download url: http://download.novell.com/index.jsp search Privileged User Manager file tested:...

If-CMS 2.07 Pre-Auth Local File Inclusion Exploit

No description provided by source. !/usr/bin/python INFORMATION Exploit Title: If-CMS 2.07 Pre-Auth Local File Inclusion 0day Exploit Author: TecR0c Date: 13/3/2011 Software link: http://bit.ly/hh9ZB4 Tested on: Linux bt Version: 2.07 PHP.ini Settings: gpcmagicquotes = Off import...

N`CMS 1.1E Pre-Auth Local File Inclusion Remote Code Exploit

No description provided by source. !/usr/bin/python INFORMATION Exploit Title: NCMS 1.1E Pre-Auth Local File Inclusion Remote Code Exploit Date: 11/3/2011 Software link: http://bit.ly/eJAyw5 Tested on: Linux bt Version: 1.1E PHP.ini Settings: gpcmagicquotes = Off Note: The web application was luc...

WebCalendar 1.2.4 Pre-Auth Remote Code Injection

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

amoeba cms 1.01 - Multiple Vulnerabilities

No description provided by source. !/usr/bin/python Amoeba CMS v1.01 multiple remote vulnerabilities: Vendor: http://www.amoebacms.com/ Found by: mrme Contact date: 20/12/2010 2:37pm EST SQL Injection: ============= There is quite a few instances of pre/post auth SQL Injection in the web...

FileCOPA FTP Server <= 1.01 (USER) Remote Pre-Auth DoS

No description provided by source. FILECOPA DOS www.filecopa.com Found Jan 19 2006, Tested again on the new release 6 April 2006 BY Bigeazer http://blacksecurity.org They are selling this software for $39.95... oh well.. maybe they shoud fix it first? It appears that FileCopa does not handle alot...

OpenEMR 4.1.1 (ofc_upload_image.php) Arbitrary File Upload Vulnerability

No description provided by source. ??php / OpenEMR 4.1.1 ofcuploadimage.php Arbitrary File Upload Vulnerability Vendor: OpenEMR Product web page: http://www.open-emr.org Affected version: 4.1.1 Summary: OpenEMR is a Free and Open Source electronic health records and medical practice management...

Open&Compact Ftp Server 1.2 Universal Pre-Auth Denial of Service

No description provided by source. !/usr/bin/python Open&Compact Ftp Server 1.2 Universal Pre-Auth Denial of Service Coded By: DrIDE Found By: Ma3sTr0-Dz Date: May 24, 2010 Download: http://sourceforge.net/projects/open-ftpd/ Tested: Windows 7 import random, socket, sys host = sys.argv1 buff = A:...

Avaya WinPDM UniteHostRouter <= 3.8.2 - Remote Pre-Auth Command Execute

No description provided by source. Abysssec Public Exploit more info www.abysssec.com Avaya WinPDM UniteHostRouter = 3.8.2 Remote Pre-Auth Command Execute A boundary error in the Unite Host Router service UniteHostRouter.exe when processing certain requests can be exploited to cause a stack-based...

oclHashcat v1.2 - GPGPU-based Multi-hash Cracker

oclHashcat is a GPGPU-based multi-hash cracker using a brute-force attack implemented as mask attack, combinator attack, dictionary attack, hybrid attack, mask attack, and rule-based attack. This GPU cracker is a fusioned version of oclHashcat-plus and oclHashcat-lite. GPU Driver requirements: NV...

OpenEMR 4.1.1 Shell Upload

?php / OpenEMR 4.1.1 ofcuploadimage.php Arbitrary File Upload Vulnerability Vendor: OpenEMR Product web page: http://www.open-emr.org Affected version: 4.1.1 Summary: OpenEMR is a Free and Open Source electronic health records and medical practice management application that can run on Windows,...

Novell NCP - Remote Command Execution

In the interest of full-disclosure, here is a remote exploit for the vulnerability found by David Klein: Demonstration Novell NCP Pre-Auth Remote Stack Buffer Overflow Connecting to host 127.0.0.1... Connected! Sending message 1 23 bytes 74 4e 63 50 00 00 00 10 33 33 00 0a 00 00 00 00 Response 1 ...

Aoop CMS 0.3.6 Multiple Vulnerabilities

Exploit for php platform in category web applications 1. ADVISORY INFORMATION ----------------------- Product: Aoop CMS Vendor URL: www.annonyme.de Type: Cross-site Scripting CWE-79, SQL-Injection CWE-89 Date found: 2012-04-07 Date published: 2012-08-24 CVSSv2 Score: 7,5 AV:N/AC:L/Au:N/C:P/I:P/A:...

WebCalendar 1.2.4 - Remote Code Injection (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "WebCalendar 1.2.4...

WebCalendar 1.2.4 Pre-Auth Remote Code Injection

This module exploits a vulnerability found in k5n.us WebCalendar, version 1.2.4 or less. If not removed, the settings.php script meant for installation can be update by an attacker, and then inject code in it. This allows arbitrary code execution as www-data. This module requires Metasploit:...

Citrix 11.6.1 - Licensing Administration Console Denial of Service

Citrix 11.6.1 - Licensing Administration Console Denial of Service source: https://www.securityfocus.com/bid/52522/info Citrix Licensing is prone to a denial-of-service vulnerability. A remote attacker can leverage this issue to crash the affected application, denying service to legitimate users...

Sysax 5.53 SSH Username Buffer Overflow Exploit

No description provided by source. !/usr/bin/python Title: Sysax = 5.53 SSH Username BoF Pre Auth RCE Egghunter Author: Craig Freyman @cd1zz OS Tested: XP SP3 32bit, 2003 Server SP2 No DEP Software Versions Tested: 5.53, 5.52, 5.50 Date Discovered: Febrary 22, 2012 Vendor Contacted: Febrary 23,...

Avaya WinPDM UniteHostRouter 3.8.2 - Remote Command Execution

Avaya WinPDM UniteHostRouter 3.8.2 - Remote Command Execution Abysssec Public Exploit more info www.abysssec.com Avaya WinPDM UniteHostRouter = v2 || v4 = v3 + 1, v5 = strpbrkv3 + 1, ":/? \n\r", v5 v2 result = 0; else v6 = v5 - v4; memcpya2, v4, v6; // vulnerable memcpy BYTE a2 + v6 = 0; result =...