384 matches found
JAF CMS Multiple Remote File Include and Remote Shell Command Execution Vulnerabilities
JAF CMS is prone to an shell-command-execution vulnerability and multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit the remote shell-command-execution issue to execute arbitrary shell commands in the context...
MobPartner Counter - Arbitrary File Upload
MobPartner Counter Remote File Upload Vulnerability + Author : wlhaan hacker + Email : [email protected] + Site : www.sa-hacker.com/vb + team wlhaan Hacker + Dork : "MobPartner Counter" "upload files" The exploit : http://localhost/path/upload.php edit shell shell.php.pgif Get now shell :...
Joomla RSGallery2 Backdoor
Vulnerability: Remote code execution back doors Software: RSGallery2 - Gallery Extension for Joomla! We are currently working on a new website. All files are still available at the JoomlaCode project page. Severity: Not a big deal. Joomla components contain all sorts of obfuscated junk all the...
Dokuwiki 2009-02-14 Remote/Temporary File Inclusion exploit
Exploit for unknown platform in category web applications =========================================================== Dokuwiki 2009-02-14 Remote/Temporary File Inclusion exploit =========================================================== Dokuwiki 2009-02-14 Remote/Temporary File Inclusion exploit...
VirtueMart <= 1.1.2 Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications =================================================== VirtueMart = 1.1.2 Multiple Remote Vulnerabilities =================================================== Author: Janek Vind "waraxe" Date: 24. January 2009 Location: Estonia, Tartu...
SupeV 1.0.1 0DAY-vulnerability warning-the black bar safety net
Source: WEB Security manual Thank '&waste. Delivery Hello everyone, I'm nameless Today released a discuz its products "video podcast SupeV 1.0.1" 0day Vulnerability file: api目录下test.php Looking directly at the code $str=filegetcontents $thumb ;//first the 1 8 line with filegetcontents to read$thu...
Falt4 CMS RC4 (fckeditor) Arbitrary File Upload Exploit
No description provided by source. Falt4 CMS fckeditor Arbitrary File Upload Exploit Bug Discovered By : Sp3shial [email protected] Persian Boys Hacking Team From A Land With A History-Long Background Download CMS :...
1024 CMS 1.4.4 - Remote Command Execution Remote File Inclusion
1024 CMS 1.4.4 - Remote Command Execution Remote File Inclusion !/usr/bin/perl 1024 CMS = 1.4.4 Remote Command Execution with RFI c99 Exploit download: http://www.trebledesigns.com/1024cms.zip Author: JosS mail: sys-projectathotmaildotcom site: http://www.hack0wn.com/ team: Spanish Hackers Team -...
Moodle < 1.9.4 'filter/tex/texed.php' 'pathname' Parameter RCE
Binary data 4788.prm...
FreeBSD Ports: gaim, ja-gaim, ko-gaim, ru-gaim
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Thecus N5200Pro NAS Server Control Panel - Remote File Inclusion
Thecus N5200Pro NAS Server Control Panel Remote File Ä°nclude Author : CrackersChild Mail : [email protected] Bug in : usrgetform.html Exploit : www.site.com:9443/usr/usrgetform.html?name=Shelz? Ä°nfo : http://www.thecus.com/productsover.php?cid=11&pid=8 Greetz: Str0ke milw0rm.com 2008-02-18...
Remote Shell Command Execution in "KB-Bestellsystem" (amensa-soft.de)
"KB-Bestellsystem" is a domain order system written in Perl. The "domain" and "tld" parameters in "kbwhois.cgi" are not filtering shell metacharacters. The following examples will show you the /etc/passwd file:...
ImI image file inclusion in script upload
w2box: web 2.0 File Repository Upload Script Code Source http://labs.beffa.org/w2box/ Dork : "powered by w2box" Discovered by 4ur3v0ir Homepage Four: http://www.security-frog.org http://www.c-group.org http://hslteam.org Greetz To:NINF,frat2005,komtec1,kakalake,AntraX,fr34k And Staff...
zgv $HOME overflow
No description provided by source. / zgv exploit coded by BeastMaster V on June 20, 1997 USAGE: For some strage reason, the filename length of this particular exploit must me one character long, otherwise you will be drop into a normal unpriviledged shell. Go Figure.... $ cp zgvexploit.c n.c $ cc...
netbsd/x86 setreuid0, 0; execve"/bin//sh", ..., NULL; 30 bytes
netbsd/x86 setreuid0, 0; execve"/bin//sh", ..., NULL; 30 bytes. Shellcode exploit for netbsdx86 platform / minervini at neuralnoise dot com c 2005 NetBSD/i386 2.0, setreuid0, 0; execve"/bin//sh", ..., NULL; / include include include char scode = "\x31\xc0" // xor %eax,%eax "\x50" // push %eax...
netbsd/x86 setreuid0, 0; execve"/bin//sh", ..., NULL; 29 bytes
netbsd/x86 setreuid0, 0; execve"/bin//sh", ..., NULL; 29 bytes. Shellcode exploit for netbsdx86 platform / minervini at neuralnoise dot com c 2005 NetBSD/i386 2.0, setreuid0, 0; execve"/bin//sh", ..., NULL; note: unsafe shellcode, but 29 bytes long; doesn't work if eax & 0x40000000 != 0; / includ...
[repost] [slackware-security] Thunderbird email client
New Thunderbird packages are available for Slackware 10.2 and -current to fix a security issue: MFSA 2005-59 Command-line handling on Linux allows shell execution More details about this issue may be found on the Mozilla web site:...
Slackware 10.0 / 10.1 / 10.2 / current : Mozilla/Firefox (SSA:2005-269-01)
New Mozilla and Firefox packages are available for Slackware 10.0, 10.1, 10.2, and -current to fix security issues: MFSA 2005-59 Command-line handling on Linux allows shell execution MFSA 2005-58 Firefox 1.0.7 / Mozilla Suite 1.7.12 Vulnerability Fixes MFSA 2005-57 IDN heap overrun using...
Command-line handling on Linux allows shell execution — Mozilla
URLs passed to Linux versions of Firefox and Thunderbird on the command-line were not correctly protected against interpretation by the shell. As a result a malicious URL can result in the execution of shell commands with the privileges of the user. If Firefox is set as the default handler for we...
Aeon 0.2a Local Linux Exploit (perl code)
Exploit for linux platform in category local exploits ========================================= Aeon 0.2a Local Linux Exploit perl code ========================================= !/usr/bin/perl Aeon-mail relay agent for Linux written by lammat just for practice purposes tested against aeon-0.2a...