D-Link DSL-2730B Modem - XSS Injection Stored Exploit DnsProxy.cmd Exploit

Exploit for hardware platform in category web applications Exploit Title: D-Link DSL-2730B Modem dnsProxy.cmd Exploit XSS Injection Stored Date: 11-01-2015 Exploit Author: Mauricio Correa Vendor Homepage: www.dlink.com Hardware version: C1 Version: GE 1.01 Tested on: Windows 8 and Linux...

Flat Calendar 1.1 - HTML Injection

!/usr/bin/perl -w Title : Flat Calendar v1.1 HTML Injection Exploit Download : http://www.circulargenius.com/flatcalendar/FlatCalendar-v1.1.zip Author : ZoRLu / [email protected] Website : http://milw00rm.com / its online Twitter : https://twitter.com/milw00rm or @milw00rm Test : Windows7 Ultima...

Flat Calendar 1.1 HTML Injection

!/usr/bin/perl -w Title : Flat Calendar v1.1 HTML Injection Exploit Download : http://www.circulargenius.com/flatcalendar/FlatCalendar-v1.1.zip Author : ZoRLu / [email protected] Website : http://milw00rm.com / its online Twitter : https://twitter.com/milw00rm or @milw00rm Test : Windows7 Ultima...

WordPress Core 4.0 - Denial of Service

$argv2, 'pwd' = strrepeat"A",1000000, 'redirectto' = $argv1 . "/wp-admin/", 'reauth' = 1, 'testcookie' = '1', 'wp-submit' = "Log%20In"; $cookieFiles = "cookie.txt"; curlsetoptarray$ch, array CURLOPTHEADER = 1, CURLOPTUSERAGENT = "Mozilla/5.0 Windows; U; Windows NT 5.1; en-US; rv:1.8.1.6...

Tiny Server 1.1.9 Arbitrary File Disclosure

!/usr/bin/perl -w Title : Tiny Server v1.1.9 Arbitrary File Disclosure Exploit Download : http://tinyserver.sourceforge.net/tinyserverfull.zip Author : ZoRLu / [email protected] Website : http://milw00rm.com / its online Twitter : https://twitter.com/milw00rm or @milw00rm Test : Windows7 Ultimat...

Incredible PBX remote command execution exploit

!/usr/bin/perl Title: Incredible PBX remote command execution exploit Author: Simo Ben youssef Contact: SimoatMorxploitcom Discovered: 1 September 2014 Coded: 21 October 2014 Published: 21 October 2014 MorXploit Research http://www.MorXploit.com Vendor: PBX in a Flash Vendor url:...

Incredible PBX 11 2.0.6.5.0 Remote Command Execution

!/usr/bin/perl Title: Incredible PBX remote command execution exploit Author: Simo Ben youssef Contact: SimoatMorxploitcom Discovered: 1 September 2014 Coded: 21 October 2014 Published: 21 October 2014 MorXploit Research http://www.MorXploit.com Vendor: PBX in a Flash Vendor url:...

Snitz Forums 2000 3.4.07 Database Disclosure

!/usr/bin/perl -w Snitz Forums 2000 v3.4.07 Database Disclosure Exploit Author : indoushka Vondor : http://forum.snitz.com use LWP::Simple; use LWP::UserAgent; system'cls'; system'Snitz Forums 2000 v3.4.07 Database Disclosure Exploit'; system'color a'; if@ARGV new; my $request =...

Toast Forums Database Disclosure

!/usr/bin/perl -w Toast Forums Database Disclosure Exploit Author : indoushka Vondor : ToastForums.com use LWP::Simple; use LWP::UserAgent; system'cls'; system'Toast Forums Database Disclosure Exploit'; system'color a'; if@ARGV new; my $request = $useragent-get$url,":contentfile" = "D:/data.mdb";...

ZyXEL Prestig P-660HNU-T1 ISP Credentials Disclosure

No description provided by source. !/usr/bin/perl Exploit Author: Sebastián Magof Hardware: ZyXEL Prestig P-660HNU-T1 Vulnerable file: wzADSL.asp location: http://gateway/cgi-bin/wzADSL.asp Bug: ISP usr+pwd disclosure Type: Local Date: 22/09/2014 Vendor Homepage: http://www.zyxel.com/ Version:...

Nucom ADSL ADSLR5000UN - ISP Credentials Disclosure

Nucom ADSL ADSLR5000UN - ISP Credentials Disclosure !/usr/bin/perl Exploit Author: Sebastián Magof Hardware: Modem Nucom ADSL R5000UNv2 Software Version: R5TC008 Vulnerable file: guidewan.html location: http://gateway/telecomGUI/guidewan.html Bug: ISP usr+pwd disclosure Type: Local Date: 24/09/20...

Nucom ADSL ADSLR5000UN - ISP Credentials Disclosure

!/usr/bin/perl Exploit Author: Sebastián Magof Hardware: Modem Nucom ADSL R5000UNv2 Software Version: R5TC008 Vulnerable file: guidewan.html location: http://gateway/telecomGUI/guidewan.html Bug: ISP usr+pwd disclosure Type: Local Date: 24/09/2014 Vendor Homepage: http://www.nucom.hk/ Version:...

ZYXEL Prestig P-660HNU-T1 - ISP Credentials Disclosure

!/usr/bin/perl Exploit Author: Sebastián Magof Hardware: ZyXEL Prestig P-660HNU-T1 Vulnerable file: wzADSL.asp location: http://gateway/cgi-bin/wzADSL.asp Bug: ISP usr+pwd disclosure Type: Local Date: 22/09/2014 Vendor Homepage: http://www.zyxel.com/ Version: 2.00AAIJ.1 Tested on: Linux Fedora...

ZYXEL Prestig P-660HNU-T1 - ISP Credentials Disclosure

ZYXEL Prestig P-660HNU-T1 - ISP Credentials Disclosure !/usr/bin/perl Exploit Author: Sebastián Magof Hardware: ZyXEL Prestig P-660HNU-T1 Vulnerable file: wzADSL.asp location: http://gateway/cgi-bin/wzADSL.asp Bug: ISP usr+pwd disclosure Type: Local Date: 22/09/2014 Vendor Homepage:...

vBulletin 4.1.2 SQL Injection

vBulletin 4.0.x = 4.1.2 AUTOMATIC SQL Injection exploit Author: D35m0nd142, Google Dork: inurl:search.php?searchtype=1 Date: 02/09/2014 Vendor Homepage: http://www.vbulletin.com/ Tested on: vBulletin 4.1.2 Usage: perl exploit.pl Tutorial video: https://www.youtube.com/watch?v=jec3nkoYFc IMPORTANT...

vBulletin 4.0.x 4.1.2 - search.php?cat SQL Injection

vBulletin 4.0.x 4.1.2 - search.php?cat SQL Injection vBulletin 4.0.x = 4.1.2 AUTOMATIC SQL Injection exploit Author: D35m0nd142, Google Dork: inurl:search.php?searchtype=1 Date: 02/09/2014 Vendor Homepage: http://www.vbulletin.com/ Tested on: vBulletin 4.1.2 Usage: perl exploit.pl Tutorial video:...

vBulletin 4.0.x < 4.1.2 - 'search.php?cat' SQL Injection

vBulletin 4.0.x = 4.1.2 AUTOMATIC SQL Injection exploit Author: D35m0nd142, Google Dork: inurl:search.php?searchtype=1 Date: 02/09/2014 Vendor Homepage: http://www.vbulletin.com/ Tested on: vBulletin 4.1.2 Usage: perl exploit.pl Tutorial video: https://www.youtube.com/watch?v=jec3nkoYFc...

ShareCenter D-Link DNS-320 Remote reboot/shutdown/reset (DoS)

No description provided by source. !/usr/bin/perl Title: ShareCenter D-Link DNS-320 remote reboot/shutdown/reset DoS. Type: Hardware Remote: yes Author: rigan - imrigan sobachka gmail.com Tested on: Firmware : DNS320-v2.00b06 Security flaws: dskmgr.cgi allows execute reboot via POST request with...

Yerba SACphp <= 6.3 (mod) Local File Inclusion Exploit

No description provided by source. ! /usr/bin/perl -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Yerba SACphp = 6.3 / Local File Inclusion Exploit -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Program: Yerba SACphp Version: = 6.3 File affected: index.php Download:...

ImgSvr <= 0.6.5 (long http post) Denial of Service Exploit

No description provided by source. !/usr/bin/perl Proof of concept. Credit's:to n00b for finding this bug. Afected :ImgSvr.exe Download softwear: http://freshmeat.net/projects/imgsvr/ Crash the server with overly long http post request.. Main site of affected product...