Ovidentia absences Module 2.64 - Remote File Inclusion

Title: Ovidentia Module absences 2.64 Remote File Include Vulnerability Author: bd0rk eMail: bd0rkathackermail.com Tested on: Ubuntu-Linux Download: http://www.ovidentia.org/index.php?tg=fileman&sAction=getFile&id=17&gr=Y&path=Downloads%2FAdd-ons%2FModules%2Fabsences&file=absences-2-64.zip&idf=88...

Ovidentia absences 2.64 Remote File Inclusion

Title: Ovidentia Module absences 2.64 Remote File Include Vulnerability Author: bd0rk eMail: bd0rkathackermail.com Tested on: Ubuntu-Linux Download: http://www.ovidentia.org/index.php?tg=fileman&sAction=getFile&id=17&gr=Y&path=Downloads%2FAdd-ons%2FModules%2Fabsences&file=absences-2-64.zip&idf=88...

Ganglia Web Frontend 3.5.1 - PHP Code Execution

Ganglia Web Frontend 3.5.1 - PHP Code Execution...

Ganglia Web Frontend PHP Code Execution

...

Ganglia Web Frontend < 3.5.1 - PHP Code Execution Exploit

Exploit for php platform in category web applications ?php / Author : Andrei Costin andrei theATsign firmware theDOTsign re Desc : CVE-2012-3448 PoC Details : This PoC will create a dummy file in the /tmp folder and will copy /etc/passwd to /tmp. To modify the attack payload, modify the code...

Ganglia Web Frontend < 3.5.1 - PHP Code Execution

...

Ubuntu 10.04 LTS : linux-ec2 vulnerability (USN-2584-1)

A race condition between chown and execve was discovered in the Linux kernel. A local attacker could exploit this race by using chown on a setuid-user-binary to gain administrative privileges. Note that Tenable Network Security has extracted the preceding description block directly from the Ubunt...

SEED experiments: buffer overflow vulnerability lab-vulnerability warning-the black bar safety net

! A, experimental description A buffer overflow refers to a program trying to buffer write exceeds the pre-allocated fixed-length data. This vulnerability may be malicious users use to change program flow control, and even code execution of arbitrary fragments. This vulnerability occurs because t...

BlackBerry Z10 Authentication Bypass

--------------------------------------------------------------------- modzero Security Advisory: BlackBerry Z 10 - Storage and Access File-Exchange Authentication By-Pass MZ-13-04 ---------------------------------------------------------------------...

PHP Server Monitor Stored XSS

No description provided by source. Author: loneferret of Offensive Security Product: PHP Server Monitor Version: 2.0.1 and maybe older versions Google Dork: intext=Powered by PHP Server Monitor v2.0.1 yes people have made this available on the web Software Download:...

CyberCMS Remote SQL Injection Vuln.

No description provided by source. Exploit Title: CyberCMS Remote SQL Injection Vuln. Date: 26/11/2009 Author: hc0de | hc0de.blogspot.comhttp://hc0de.blogspot.com Software Link: http://cyberfusion.ramx.org/cyber-cms Version: app version Tested on: Ubuntu Linux 9.04 CVE : PoC: +Target:...

CF Image Hosting Script 1.3.82 File Disclosure

No description provided by source. !/usr/bin/perl CF Image Hosting Script 1.3.82 File Disclosure Exploit Bugfounder and Exploitcoder: bd0rk Contact: www.sohcrew.school-of-hack.net eMail: bd0rkathackermail.com Affected-Software: CF Image Hosting Script 1.3.82 Vendor: http://www.phpkode.com Downloa...

webid <= 1.0.5 - Directory Traversal

No description provided by source. Author: loneferret of Offensive Security Product: WeBid Version: 1.0.4 & 1.0.5 and maybe older versions Vendor Site: http://www.webidsupport.com Software Download:...

Ghostscript 'CCITTFax' Decoding Filter - Denial of Service Vulnerability

No description provided by source. Ghostscript is prone to a remote denial-of-service vulnerability because it fails to properly validate user-supplied input. Exploiting this issue allows remote attackers to crash the application and possibly to execute code, but this has not been confirmed...

nodesforum 1.059 - Remote File Inclusion Vulnerability

No description provided by source. Exploit Title: nodesforum 1.059 Remote File Inclusion Vulnerability Google Dork: inurl: powered by Nodesforum Date: 6/23/2011 Author: bd0rk bd0rkathackermail.com Software-Download: http://home.nodesforum.com/download?file=nodesforum1.059withbbcode1.004.zip Teste...

vAuthenticate 3.0.1 Authentication Bypass

No description provided by source. ----------------------------------------------------------------------- vAuthenticate 3.0.1 Auth Bypass by Cookie SQL Injection Vulnerability ----------------------------------------------------------------------- Author: bd0rk Contact: bd0rkathackermail.com Dat...

Maian Gallery 2 - Local File Download Vulnerability

No description provided by source. !/usr/bin/python This vulnerability uses filegetcontents so we have some limitations, we cant execute PHP and we cant read files that the web server will interpret such as PHP, conf etc tested on: Ubuntu Linux 2.6.32 with php v5.3.2 registerglobals = Off PRIVATE...

phpMyRecipes 1.2.2 (viewrecipe.php, r_id param) - SQL Injection Vulnerability

No description provided by source. phpMyRecipes 1.2.2 SQL Injection Exploit By cr4wl3r http://bastardlabs.info Script: http://sourceforge.net/projects/php-myrecipes/files/ Demo: http://bastardlabs.info/demo/phpMyRecipes.png Tested: Ubuntu Linux Bugs found in viewrecipe.php $rid = $GET'rid'; if !...

PHP <= 5.3.6 shmop_read() Integer Overflow DoS

No description provided by source. ?php Exploit Title: PHP =5.3.5 Integer Overflow DoS Date: 12-03-11 Author: Jose Carlos Norte - www.rooibo.com Software Link: www.php.net Version: = 5.3.5 Tested on: Ubuntu Linux CVE : CVE-2011-1092 $shmkey = ftokFILE, 't'; $shmid = shmopopen$shmkey, c, 0644, 100...

BOOKSolved 1.2.2 - Remote File Disclosure

No description provided by source. ...BOOKSolved 1.2.2 l Remote File Disclosure Vulnerability ...Discovered by bd0rk ...Contact: bd0rkathackermail.com or follow me on twitter ...Greetz: inj3ct0r-Team, x0r32, Perle, Siber King ...Tested on: Ubuntu-Linux ...MEZ-Time: 08:17 ...Vendor:...