3103 matches found
Linux x86 chmod 666 /etc/passwd & /etc/shadow - 57 bytes
No description provided by source. / Title: Linux x86 chmod 666 /etc/passwd & /etc/shadow - 57 bytes Author: Jean Pascal Pereira [email protected] Web: http://0xffe4.org Disassembly of section .text: 08048060 start: 8048060: 31 c0 xor %eax,%eax 8048062: 66 b9 b6 01 mov $0x1b6,%cx 8048066: 50 push...
McGallery 1.0/1.1/2.2 index.php language Parameter Traversal Local File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/15845/info mcGallery PRO is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabiliti...
PHP <= 4.4.6 / 5.2.1 array_user_key_compare() ZVAL dtor Local Exploit
No description provided by source. ?php //////////////////////////////////////////////////////////////////////// // // // | || | | | | | | | || || \ // // | |/ || '|/ |/ -| ' \ / -/ |||| /| || / // // ||||,||| ,|||||||,| || |||||| // // // // Proof of concept code from the Hardened-PHP...
Sambar Server 4.x/5.0 Insecure Default Password Protection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3095/info Sambar Server is a multi-threaded HTTP server for Microsoft Windows and Unix systems. Sambar Server provides insecure default protection for user passwords. The default password decryption algorithm employs only...
Putty 0.60 Crash PoC
No description provided by source. print \n print ---------------------------------------------------------------- print | putty 0.60 Null Ptr | print | Level Smash the Stack | print ---------------------------------------------------------------- print \n import sys, socket, binascii HOST =...
GNU GNU bash 1.14 Path Embedded Code Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/119/info A vulnerability in bash may allow inadvertently running commands embedded in the path to the currently working directory. If an unsuspecting user enters a directory created by some malicious user with embedded...
2X ThinClientServer 5.0 sp1-r3497 TFTP Service - Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28504/info 2X ThinClientServer is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue allows an attacker to access arbitrary files outside...
Kayako eSupport 3.04.10 - XSS/CSRF Vulnerabilities
No description provided by source. + Exploit Title : kayako xss/xsrf Remote Vulnerabilities + Author : By D3V!L FUCKER + Script Link : http://www.kayako.com/solutions/esupport/ + Version : Kayako eSupport v3.04.10 + Tested on : linux ubuntu 9.10 + Code : +++++++++++++++++++++++++...
Browser Navigation Download Trick
No description provided by source. Another moderately interesting tidbit, I guess... It is an important and little-known property of web browsers that one document can always navigate other, non-same-origin windows to arbitrary URLs. Perhaps more interestingly, you can also navigate third-party...
awzMB <= 4.2 beta 1 Multiple Remote File Inclusion Vulnerabilities
No description provided by source. \|/// \ - - // Xmors Underground Group @ @ ----oOOo---oOOo-------------------------------------------------- Portal : awzMB system Version 4.2 beta 1 Guestbook/Weblog/Contact Download : http://downloads.sourceforge.net/awzmb/awzmb4.2beta1.zip Author : S.W.A.T...
Reserve Logic 1.2 - Booking CMS Multiple Vulnerabilities
No description provided by source...
Job Site 1.0 - Multiple Vulnerabilities
No description provided by source. Jobsite logo - Multiple Vulnerabilties =================================================================== .:. Author : AtT4CKxT3rR0r1ST .:. Contact : [email protected] , [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script :...
Active Photo Gallery 6.2 - (Auth Bypass) Remote SQL Injection
No description provided by source. ? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe: Auth Bypass Remote SQL Injection Vulnerability ? Vendor: www.activewebsoftwares.com ? ? Software: Active Photo Gallery v 6.2 ? ? author: R3d-D3v!L ? ? Date: 17.dec.2009 ?...
Destiny Media Player 1.61 0 (.m3u File) Local Buffer Overflow PoC
No description provided by source. !/usr/bin/perl -w Program : Destiny Media Player Version : 1.61.0 website : http://www.pirateradio.com/downloads/ Download : http://www.pirateradio.com/downloads/destinymp3.exe Type : .m3u File local Stack Overflow PoC EAX 61616161 ECX 00000001 EDX 014377A0 EBX...
blogit! (sql/dd/xss) Multiple Vulnerabilities
No description provided by source. --------------------------------------------------------- Portal Name: BlogIt! Download : http://www.katywhitton.com/downloads/BlogIt!/BlogItDL.zip Author : PouyaServer , [email protected] Vulnerability : SQL/DD/XSS...
dacio's cms 1.08 (xss/sql/dd) Multiple Vulnerabilities
No description provided by source. =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- = = XORON 2009C = = Dacio's PHP scripts CMS v1.08 Remote SQL Injection Vuln. = =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- = =...
Web Service Deluxe News Manager 1.0.1 Deluxe Footer.PHP Local File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/23499/info News Manager Deluxe is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local...
e107 Plugin BLOG Engine 2.2 - Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl e107 Plugin BLOG Engine v2.2 Blind SQL Injection Exploit ..::virangar security team::.. www.virangar.net C0d3d BY:virangar security team hadihadi special tnx to: MR.nosrati,black.shadowes,MR.hesy,Ali007,Zahra & all virangar members & all hackerz m...
cyberBB 0.6 - Multiple Remote SQL Injection Vulnerabilities
No description provided by source. Name : cyberBB v. 0.6 Multiply Remote SQL Injection Vulnerabilities Author : cOndemned Dark-Coders Greetz : Avantura, str0ke, ZaBeaTy, voo|doo, irk4z, and many, many more... Conditions : Magic quotes gpc = On & Off / User must be logged into source of...
Safari 4.0.3 & 4.0.4 Stack Exhaustion
No description provided by source. script //Written by: Fredrik Nordberg Almroth //URL: http://h.ackack.net/ //Affected: Safari 4.0.3 & 4.0.4 - Other versions might be vulnerable aswell. a=scriptvar b=\iframe src='javascript:window.location=\boom'/iframe;while1b=b+b;document.writeb;/scr+ipt;...