668 matches found
Rockwell Automation Allen-Bradley MicroLogix PLC authentication and authorization vulnerabilities
Overview Rockwell Automation Allen-Bradley MicroLogix programmable logic controllers PLCs do not adequately authenticate or authorize remote connections or commands. An attacker with network access can obtain the management password or issue commands that bypass the authentication mechanism...
Sql injection
The NETTCPLISTEN function in net.c in Zabbix Agent before 1.6.7, when running on FreeBSD or Solaris, allows remote attackers to bypass the EnableRemoteCommands setting and execute arbitrary commands via shell metacharacters in the argument to net.tcp.listen. NOTE: this attack is limited to attack...
Pirch IRC 98 Client (response) Remote BOF Exploit (SEH)
Exploit for windows platform in category remote exploits ======================================================= Pirch IRC 98 Client response Remote BOF Exploit SEH ======================================================= !/usr/bin/python Usage : python pirch.py | || | / \ | | | | | | | | | - | | ...
Family Connections <= 1.8.2 Remote Shell Upload Exploit
Exploit for unknown platform in category web applications ======================================================= Family Connections include include include include include include include int socketconnectchar server, int port int fd; struct sockaddrin sock; struct hostent host; memset&sock, 0,...
Family Connections 1.8.2 - Arbitrary File Upload
Family Connections 1.8.2 - Arbitrary File Upload / Family Connections include include include include include include include int socketconnectchar server, int port int fd; struct sockaddrin sock; struct hostent host; memset&sock, 0, sizeofsock; iffd = socketAFINET, SOCKSTREAM, 0 haddr;...
Wili-CMS 0.4.0 Multiple Vulnerabilities (Remote/Local File Inclusion - Authentication Bypass)
Salvatore "drosophila" Fresta + Application: Wili-CMS + Version: 0.4.0 + Website: http://wili-cms.sourceforge.net/ + Bugs: A Multiple Remote/Local File Inclusion B Authentication Bypass + Exploitation: Remote + Date: 06 Mar 2009 + Discovered by: Salvatore "drosophila" Fresta + Author: Salvatore...
blindblog 1.3.1 - SQL Injection / Authentication Bypass / Local File Inclusion
Salvatore "drosophila" Fresta + Application: BlindBlog + Version: 1.3.1 + Website: http://sourceforge.net/projects/cbblog/ + Bugs: A SQL Injection B Authentication Bypass C Local File Inclusion + Exploitation: Remote + Date: 03 Mar 2009 + Discovered by: Salvatore "drosophila" Fresta + Author:...
fuzzylime cms 3.01 (polladd.php poll) Remote Code Execution Exploit (pl)
Exploit for unknown platform in category web applications ======================================================================== fuzzylime cms 3.01 polladd.php poll Remote Code Execution Exploit pl ======================================================================== !/usr/bin/perl...
Debian Security Advisory DSA 002-1 (fsh)
The remote host is missing an update to fsh announced via advisory DSA 002-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GuppY <= 4.5.16 Remote Commands Execution Exploit
Exploit for unknown platform in category web applications ================================================= GuppY 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" "...
SendCard <= 3.4.0 Unauthorized Administrative Access Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "SendCard = 3.4.0 unauthorized administrative access / remote commands\n"; echo "execution exploit\n"; echo "by rgod [email protected]\n"; echo "site: http://retrogod.altervista.org\n"; echo "dork: "Powered by sendcard...
PT-2006-6711 · Dragon · Dragon Calendar / Events Listing
Name of the Vulnerable Software and Affected Versions: Dragon Calendar / Events Listing versions 2.x Description: The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the username or password parameter to the "admin login.asp" API endpoint, the ID paramete...
Flatnuke 2.5.8 - file() Privilege Escalation Code Execution
Flatnuke 2.5.8 - file Privilege Escalation Code Execution !/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexo...
Flatnuke <= 2.5.8 file() Priv Escalation / Code Execution Exploit
Exploit for unknown platform in category web applications ================================================================= Flatnuke 126...
SendCard 3.4.0 - Unauthorized Administrative Access
SendCard 3.4.0 - Unauthorized Administrative Access !/usr/bin/php -q -d shortopentag=on php injection\n"; echo " works against magicquotesgpc=Off\n"; echo " 2 - arbitrary remote inclusion\n"; echo " works against allowurlfopen=On\n"; echo " 3 - arbitrary local inclusion\n"; echo " works regardles...
ToendaCMS 1.0.0 - 'FCKeditor' Arbitrary File Upload
!/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; return $exa."\r\n".$result; $proxyregex =...
X7 Chat <= 2.0 (help_file) Remote Commands Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "X7 Chat =2.0 "helpfile" arbitrary local inclusion\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n"; echo "- works regardless of magicquotesgpc settings\r\n"; echo " if avatar...
phpWebSite <= 0.10.2 (hub_dir) Remote Commands Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "PHPWebSite = 0.10.2 remote cmmnds xctn\r\n"; echo "- arbitrary local inclusion, works with magicquotesgpc = Off\r\n"; echo "by rgod, mail: [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n\r\n"; i...
PHP121 Instant Messenger 1.4 - Remote Code Execution
PHP121 Instant Messenger 1.4 - Remote Code Execution !/usr/bin/php -q -d shortopentag=on works with magicquotesgpc = Off\r\n\r\n"; echo "a dork: inurl:php121login.php | inurl:php121im.php | intitle:"PHP121 - PLEASE"\r\n\r\n"; if $argc4 echo "Usage: php ".$argv0." host path cmd OPTIONS\r\n"; echo...
Simplog <= 0.9.2 (s) Remote Commands Execution Exploit
Exploit for unknown platform in category web applications ====================================================== Simplog \r\n"; die; / software site: http://www.simplog.or...