NATO Vs Anonymous

NATO Vs Anonymous Oh Anonymous, now you're for it… NATO leaders have been warned that Wikileaks-loving 'hacktivist' collective Anonymous could pose a threat to member states' security, following recent attacks on the US Chamber of Commerce and defence contractor HBGary – and promise to 'persecute...

Symlink bypass Vulnerability

Exploit for php platform in category web applications mail : email protected + Exploit Title: symlink bypass vulnerability + Author : 3H34N + E-mail : email protected + Platform : Tested on: linux symlink bypass with ini method when you symlink /etc/passwd and you can read it but symlink...

Google Hack Database Tool v1.1

Google Hack DB Tool is a database tool with almost 8,000 entries. It allows administrators the ability to check their site for vulnerabilities based on data stored in Google. With this tool you can find out if your website has indexed vulnerabilities in google. This can lead to sensitive...

Windows Gather Apple iOS MobileSync Backup File Collection

This module will collect sensitive files from any on-disk iOS device backups This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'English' class MetasploitModule 'Windows Gather Apple iOS MobileSync Backup File...

BackWPup WordPress Plugin 1.4.0 File Content Disclosure

============================================= - Release date: Feb 28th, 2010 - Discovered by: Danilo Massa - Severity: High ============================================= I. VULNERABILITY ------------------------- BackWPup Wordpress plugin = 1.4.0 File content disclosure II. BACKGROUND...

myDBLite v1.1.10 for iPhone / iPod touch, Directory Traversal

Exploit for hardware platform in category remote exploits Exploit Title : myDBLite v1.1.10 for iPhone / iPod touch, Directory Traversal Date: 02/24/2011 Author: email protected, email protected, email protected, Sunlight, email protected Software Link:...

osTicket Local File Inclusion

---------------------------------------------------------------------------------------------------------------------- osTicket - Open Source Support Ticket System module=osTicket&file= Local File Inclusion http://osticket.com...

eLouai's Force Download Script file Parameter File Disclosure

The version of eLouai's Force Download Script hosted on the remote web server does not sanitize user-supplied input to the 'file' parameter before using it to return the contents of a file. An unauthenticated, remote attacker can exploit this issue to disclose the contents of sensitive files on t...

Ubuntu Drupal Theme - Brown images/layout/gradient.php File Disclosure

The version of the Ubuntu Drupal Theme - Brown installed on the Drupal install on the remote host does not properly sanitize user-supplied input to the 'start' and 'end' parameters of the 'images/layout/gradient.php' script before using it to return the contents of a file. A remote, unauthenticat...

Joomla Component com_ticket LFI vulnerability

Exploit for php platform in category web applications ============================================= Joomla Component comticket LFI vulnerability ============================================= Exploit Title : Joomla Component comticket LFI vulnerability Author : S4n470n Contact : email protected ,...

HP Intelligent Management Center Reporting Information Disclosure

HP 3Com IMC is a modular management system designed to integrate the management of devices, services and users. An information disclosure vulnerability has been reported in HP Intelligent Management Center IMC. The vulnerability is due to an error in the Intelligent Management Center that fails t...

NIBE heat pump LFI Exploit

Exploit for hardware platform in category remote exploits ========================== NIBE heat pump LFI Exploit ========================== !/usr/bin/python import socket,sys,os,base64 NIBE heat pump LFI exploit Written by Jelmer de Hen Published at http://h.ackack.net/?p=302 Special thanks to...

NIBE heat pump - Local File Inclusion

!/usr/bin/python import socket,sys,os,base64 NIBE heat pump LFI exploit Written by Jelmer de Hen Published at http://h.ackack.net/?p=302 Special thanks to Fredrik Nordberg Almroth and Mathias Karlsson for obtaining this information http://h.ackack.net/?p=274 which made me test the heat pumps and...

Firebrand Technologies File Include Vulnerability

Exploit for php platform in category web applications ================================================= Firebrand Technologies File Include Vulnerability ================================================= ============================================================ Author : R3VANBASTARD Dork :...

Acritum Femitter 1.03 - Directory Traversal

Acritum Femitter 1.03 - Directory Traversal Acritum Femitter v1.03 Directory Traversal Exploit Found By: DrIDE Date: Apr. 20, 2010 Tested On: Windows 7 Download: http://acritum.com/fem/download.htm - Description - Acritum Femitter v1.03 is a Windows based HTTP server. This is the latest version o...

MediaInSpot CMS Local File Inclusion

Title : MediaInSpot CMS LFI Vulnerability Author: Amoo Arash Date : 2010-04-10 InformatioN Title : MediaInSpot CMS LFI Vulnerability Author : Amoo Arash ExploiT Vulnerable File : http://127.0.0.1/view/lang/index.php?page=?page=LFI ExploiT : ../../../../../../../etc/passwd Example :...

MediaInSpot CMS - Local File Inclusion (1)

Title : MediaInSpot CMS LFI Vulnerability Author: Amoo Arash Date : 2010-04-10 InformatioN Title : MediaInSpot CMS LFI Vulnerability Author : Amoo Arash ExploiT Vulnerable File : http://127.0.0.1/view/lang/index.php?page=?page=LFI ExploiT : ../../../../../../../etc/passwd Example :...

cfm local include exploit-vulnerability warning-the black bar safety net

1.读取metabase.xml/web.xml /password. properities sensitive files,know the www path,coldfusion,coldfusion backend encrypted password ! 2. Local contains the coldfusion logs,write cfm in a word,get a WEBSHELL...

XMail Insecure Temporary File Creation Vulnerability

XMail creates temporary files in an insecure manner. An attacker with local access could potentially exploit this issue to perform symbolic-link attacks, overwriting arbitrary files in the context of the affected application. Successfully mounting a symlink attack may allow the attacker to delete...

rar. exe at the mention of the right in the magical-vulnerability warning-the black bar safety net

3est rar. exe is? It is the famous winrar comes with a command line unzip program. At the mention of the right in the US is often todownloada variety of sensitive files, such as:SU directory. You think about it, if the su catalog file so much, do you want onedownload is?? This obviously is very...