Month Of Abysssec Undisclosed Bugs - Rainbow Portal 2.0

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ ''' abysssec Inc Public Advisory 1 Advisory information Title : Rainbowportal Multiple Remote Vulnerabilities Version : Rainbow 2.0 Production/Stable 2.0.0.1881e VS 2005 | VS...

Spielothek 1.6.9 Joomla Component Multiple Blind SQL Injection

Spielothek 1.6.9 Joomla Component Multiple Blind SQL Injection Name Spielothek Vendor http://www.spielban.de Versions Affected 1.6.9 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-07-31 X. INDEX I. ABOUT THE...

Ubuntu PAM MOTD File Tampering (Privilege Escalation)

No description provided by source. !/bin/sh Exploit Title: Ubuntu PAM MOTD file tampering privilege escalation Date: July 7, 2010 Author: Kristian Erik Hermansen [email protected] Software Link: http://packages.ubuntu.com/ Version: pam-1.1.0 Tested on: Ubuntu 10.04 LTS Lucid Lynx CVE :...

Nakid CMS (fckeditor) Remote Arbitrary File Upload Exploit

?php / ----------------------------------------------------------------- Nakid CMS fckeditor Remote Arbitrary File Upload Exploit ----------------------------------------------------------------- 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' /' / /' 0 0 /, // ,...

Nakid CMS (fckeditor) Remote Arbitrary File Upload Exploit

Exploit for php platform in category web applications ========================================================== Nakid CMS fckeditor Remote Arbitrary File Upload Exploit ========================================================== Exploit database separated by exploit 0 0 // type local, remote, DoS...

LinPHA 1.3.2 - rotate.php Remote Command Execution

LinPHA 1.3.2 - rotate.php Remote Command Execution /'\ /\ \ /'\ /\ /\/\L\ \ \ \ ,/\ /\ \ /\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ /'\ / \ /' \ \ \ /\ /\ \ \ \ /\ \L\ /\ /\ \ \ \ \ \ \ / /\ //\ \L\ /\ /\ /\ \ \ \ \ \\ \ \ /\ \\ \\ /\ \ /\ \ /\ \ \ \ //////\ \ //...

HP OpenView Network Node Manager snmpviewer.exe Buffer Overflow

This module exploits a stack buffer overflow in HP OpenView Network Node Manager 7.53 prior to NNM01203. By making a specially crafted HTTP request to the "snmpviewer.exe" CGI program, an attacker can cause a stack-based buffer overflow and execute arbitrary code. The vulnerable code lies within ...

WeBProdZ CMS - SQL Injection

WeBProdZ CMS - SQL Injection | \ | | | | | |/ / | | | | | // \ \ / / | | | | | | |/ | ' \ | |\ \ /\ V / | | || | || | | | | | | \| / /||,|||/|| || | | | || | | | | |/' || || | | |/ / | ' \ | /| |\ | | | / | | | | | | | \ |/ /./ / /|,|| || || / / $ Exploit Title : WeBProdZ CMS SQL...

Portaneo Portal v2.2.3 Remote Arbitary file upload exploit

Exploit for php platform in category web applications ========================================================== Portaneo Portal v2.2.3 Remote Arbitary file upload exploit ========================================================== Exploit database separated by exploit 0 0 // type local, remote,...

phpegasus 0.1.2 - FCKeditor Arbitrary File Upload

phpegasus 0.1.2 - FCKeditor Arbitrary File Upload Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0 1 1 0 I'm eidelweiss member from Inj3ct0r Team 1 1...

phpegasus (fckeditor) Remote Arbitrary File Upload Exploit

Exploit for php platform in category web applications ========================================================== phpegasus fckeditor Remote Arbitrary File Upload Exploit ========================================================== Exploit database separated by exploit 0 0 // type local, remote, DoS...

In-portal 5.0.3 Arbitrary File Upload

Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0 1 1 0 I'm eidelweiss member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Developers:...

In-portal 5.0.3 Remote Arbitrary File Upload Exploit

Exploit for php platform in category web applications ==================================================== In-portal 5.0.3 Remote Arbitrary File Upload Exploit ==================================================== Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

MicroWorld eScan Antivirus Remote Root Command Execution

!/usr/bin/env python import sys from socket import auther: Mohammed almutairi [email protected] """ MicroWorld eScan Antivirus 1 if $POST'forgot' == "Send Password" $user = $POST"uname"; 2 insecure: vulnerable code in forgotpassword.php and commonfunctions.php in 1 $runasroot =...

PhpMyLogon 2 SQL Injection

Exploit Title: PhpMyLogon SQL Injection Date: March 14, 2010 Author: Blake Software Link: http://sourceforge.net/projects/phpmylogon/files/PhpMyLogon/PhpMyLogon%202/phpmylogon2.zip/download Version: 2 Tested on: Windows XP SP3 Proof of Concept: Enter the following for the username to login as the...

ShortCMS 1.2.0 SQL Injection

Informatique inside ShortCMS : SQL injection Version : 1.2.0 Last Version of 11/02/2010 and ALL version. Author : Thibow Contact : Thibow4tlinformatique-insidedotcom Location : France Website : http://www.informatique-inside.com Solution : Secure your parameters in printView page of News . : :::I...

ShortCMS 1.2.0 - SQL Injection

ShortCMS 1.2.0 - SQL Injection Informatique inside ShortCMS : SQL injection Version : 1.2.0 Last Version of 11/02/2010 and ALL version. Author : Thibow Contact : Thibow4tlinformatique-insidedotcom Location : France Website : http://www.informatique-inside.com Solution : Secure your parameters in...

Wireshark LWRES Dissector getaddrsbyname_request Buffer Overflow

$Id: wiresharklwresgetaddrbyname.rb 8367 2010-02-04 04:56:18Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Wireshark LWRES Dissector getaddrsbyname_request Buffer Overflow

The LWRES dissector in Wireshark version 0.9.15 through 1.0.10 and 1.2.0 through 1.2.5 allows remote attackers to execute arbitrary code due to a stack-based buffer overflow. This bug found and reported by babi. This particular exploit targets the dissectgetaddrsbynamerequest function. Several...

PHP Open Chat 3.0.2 Cross Site Scripting

PHPOPENCHAT 3.0.2 Xss AND/OR Full Path Disclosure 1.- Preview This web APP is Vulnerable to xss in its instalation file but you can misconfigurate all the code with this bug also, you must see to understand... 2.- Vulnerable Code function databasesetup if isset$POST'formdata' $host = string...