486 matches found
Drupal 7.0 Shell Execution
!/usr/bin/env php ================ + In any Drupal , detecting the file http://local/Path/scripts/drupal.sh The content file 'drupal.sh' is this PHP CODE for EXECUTING Scripts ================ ------------------------ Check for your PHP interpreter - on Windows you'll probably have to replace lin...
WSN Links SQL Injection Vulnerability
Exploit for php platform in category web applications ===================================== WSN Links SQL Injection Vulnerability ===================================== I. DESCRIPTION --------------------------------------- A vulnerability exists in the search.php code that allows for SQL injectio...
JAF CMS Multiple Remote File Include and Remote Shell Command Execution Vulnerabilities
JAF CMS is prone to an shell-command-execution vulnerability and multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit the remote shell-command-execution issue to execute arbitrary shell commands in the context...
MobPartner Counter - Arbitrary File Upload
MobPartner Counter Remote File Upload Vulnerability + Author : wlhaan hacker + Email : [email protected] + Site : www.sa-hacker.com/vb + team wlhaan Hacker + Dork : "MobPartner Counter" "upload files" The exploit : http://localhost/path/upload.php edit shell shell.php.pgif Get now shell :...
Joomla RSGallery2 Backdoor
Vulnerability: Remote code execution back doors Software: RSGallery2 - Gallery Extension for Joomla! We are currently working on a new website. All files are still available at the JoomlaCode project page. Severity: Not a big deal. Joomla components contain all sorts of obfuscated junk all the...
Dokuwiki 2009-02-14 Remote/Temporary File Inclusion exploit
Exploit for unknown platform in category web applications =========================================================== Dokuwiki 2009-02-14 Remote/Temporary File Inclusion exploit =========================================================== Dokuwiki 2009-02-14 Remote/Temporary File Inclusion exploit...
VirtueMart <= 1.1.2 Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications =================================================== VirtueMart = 1.1.2 Multiple Remote Vulnerabilities =================================================== Author: Janek Vind "waraxe" Date: 24. January 2009 Location: Estonia, Tartu...
SupeV 1.0.1 0DAY-vulnerability warning-the black bar safety net
Source: WEB Security manual Thank '&waste. Delivery Hello everyone, I'm nameless Today released a discuz its products "video podcast SupeV 1.0.1" 0day Vulnerability file: api目录下test.php Looking directly at the code $str=filegetcontents $thumb ;//first the 1 8 line with filegetcontents to read$thu...
Falt4 CMS RC4 (fckeditor) Arbitrary File Upload Exploit
No description provided by source. Falt4 CMS fckeditor Arbitrary File Upload Exploit Bug Discovered By : Sp3shial [email protected] Persian Boys Hacking Team From A Land With A History-Long Background Download CMS :...
1024 CMS 1.4.4 - Remote Command Execution Remote File Inclusion
1024 CMS 1.4.4 - Remote Command Execution Remote File Inclusion !/usr/bin/perl 1024 CMS = 1.4.4 Remote Command Execution with RFI c99 Exploit download: http://www.trebledesigns.com/1024cms.zip Author: JosS mail: sys-projectathotmaildotcom site: http://www.hack0wn.com/ team: Spanish Hackers Team -...
Moodle < 1.9.4 'filter/tex/texed.php' 'pathname' Parameter RCE
Binary data 4788.prm...
FreeBSD Ports: gaim, ja-gaim, ko-gaim, ru-gaim
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Thecus N5200Pro NAS Server Control Panel - Remote File Inclusion
Thecus N5200Pro NAS Server Control Panel Remote File Ä°nclude Author : CrackersChild Mail : [email protected] Bug in : usrgetform.html Exploit : www.site.com:9443/usr/usrgetform.html?name=Shelz? Ä°nfo : http://www.thecus.com/productsover.php?cid=11&pid=8 Greetz: Str0ke milw0rm.com 2008-02-18...
Remote Shell Command Execution in "KB-Bestellsystem" (amensa-soft.de)
"KB-Bestellsystem" is a domain order system written in Perl. The "domain" and "tld" parameters in "kbwhois.cgi" are not filtering shell metacharacters. The following examples will show you the /etc/passwd file:...
ImI image file inclusion in script upload
w2box: web 2.0 File Repository Upload Script Code Source http://labs.beffa.org/w2box/ Dork : "powered by w2box" Discovered by 4ur3v0ir Homepage Four: http://www.security-frog.org http://www.c-group.org http://hslteam.org Greetz To:NINF,frat2005,komtec1,kakalake,AntraX,fr34k And Staff...
zgv $HOME overflow
No description provided by source. / zgv exploit coded by BeastMaster V on June 20, 1997 USAGE: For some strage reason, the filename length of this particular exploit must me one character long, otherwise you will be drop into a normal unpriviledged shell. Go Figure.... $ cp zgvexploit.c n.c $ cc...
netbsd/x86 setreuid0, 0; execve"/bin//sh", ..., NULL; 29 bytes
netbsd/x86 setreuid0, 0; execve"/bin//sh", ..., NULL; 29 bytes. Shellcode exploit for netbsdx86 platform / minervini at neuralnoise dot com c 2005 NetBSD/i386 2.0, setreuid0, 0; execve"/bin//sh", ..., NULL; note: unsafe shellcode, but 29 bytes long; doesn't work if eax & 0x40000000 != 0; / includ...
netbsd/x86 setreuid0, 0; execve"/bin//sh", ..., NULL; 30 bytes
netbsd/x86 setreuid0, 0; execve"/bin//sh", ..., NULL; 30 bytes. Shellcode exploit for netbsdx86 platform / minervini at neuralnoise dot com c 2005 NetBSD/i386 2.0, setreuid0, 0; execve"/bin//sh", ..., NULL; / include include include char scode = "\x31\xc0" // xor %eax,%eax "\x50" // push %eax...
[repost] [slackware-security] Thunderbird email client
New Thunderbird packages are available for Slackware 10.2 and -current to fix a security issue: MFSA 2005-59 Command-line handling on Linux allows shell execution More details about this issue may be found on the Mozilla web site:...
Slackware 10.0 / 10.1 / 10.2 / current : Mozilla/Firefox (SSA:2005-269-01)
New Mozilla and Firefox packages are available for Slackware 10.0, 10.1, 10.2, and -current to fix security issues: MFSA 2005-59 Command-line handling on Linux allows shell execution MFSA 2005-58 Firefox 1.0.7 / Mozilla Suite 1.7.12 Vulnerability Fixes MFSA 2005-57 IDN heap overrun using...