1226 matches found
WebSuite Content Management System SQL Injection Vulnerability
Exploit for php platform in category web applications ============================================================== WebSuite Content Management System SQL Injection Vulnerability ============================================================== Exploit Title: WebSuite Content Management System SQL...
http-form-brute NSE Script
Performs brute force password auditing against http form-based authentication. This script uses the unpwdb and brute libraries to perform password guessing. Any successful guesses are stored in the nmap registry, using the creds library, for other scripts to use. The script automatically attempts...
Electronic Book (ebook.php) Blind SQL Injection Vulnerability
Exploit for php platform in category web applications ============================================================= Electronic Book ebook.php Blind SQL Injection Vulnerability ============================================================= @ Exploit Title: Electronic Book ebook.php Blind SQL...
HAVECMS 2.0 Beta <= SQL Injection Vulnerability
Exploit for php platform in category web applications =============================================== HAVECMS 2.0 Beta = SQL Injection Vulnerability =============================================== Author: Aurel 666 Exploit Title: SQL Injection Vendor url:http://havecms.jember.info/ Indonesia...
nginx engine x server <= 0.7.65 stable/0.8.39 (development) source code
Exploit for windows platform in category remote exploits ================================================================================================================= NGINX ENGINE X SERVER http://nginx.org/en/ ref-1 ======TESTED VERSIONS===== Unix versions are not vulnerable it only affects t...
e107 <= 0.7.20 Code Execution Vulnerability
Exploit for multiple platform in category web applications =========================================== e107 agent"Mozilla/5.0"; if $proxy print " Using proxy $proxy \n"; $ua-envproxy'1'; my $req = new HTTP::Request POST = $path; $req-contenttype'application/x-www-form-urlencoded';...
60cycleCMS 2.5.2 - DOCUMENT_ROOT Multiple Local File Inclusions
60cycleCMS 2.5.2 - DOCUMENTROOT Multiple Local File Inclusions fucking the Web Apps attack edition /\ \ /\ \ /\ /\ \ \ \ \L\ \ \ /'\ /\ \ \ ,\ \ \ \ \ /\ /\ \ /'\ \ , /\ \ /' \ /' \ \ \ /\ \ \ /'\ \ \ /\ \ \ /\ /\ \ \\ \ /\ /\ /\ \L\ \ \ \ \ \ \ \ /\ / \ \ \ /\ \\ \ \ \ \...
Facebook App TVShowChat SQL Injection
================================================================= FaceBook's servers was hacked by Inj3ct0r team. Hack of the year! ================================================================= Original: http://inj3ct0r.com/exploits/11638 + English translation Inj3ct0r official website =...
ALPHA CMS v3.2 <= Local File Inclusion Vulnerability
fucking the Web Apps attack edition / / / / L /' / , / / /' , / /' /' / /' / / / / / / L / / / // // // ///////////L // ////// // // Hack0wn! Security Project / /&...
ALPHA CMS - Local File Inclusion
fucking the Web Apps attack edition /\ \ /\ \ /\ /\ \ \ \ \L\ \ \ /'\ /\ \ \ ,\ \ \ \ \ /\ /\ \ /'\ \ , /\ \ /' \ /' \ \ \ /\ \ \ /'\ \ \ /\ \ \ /\ /\ \ \\ \ /\ /\ /\ \L\ \ \ \ \ \ \ \ /\ / \ \ \ /\ \\ \ \ \ \ \ \ \ \ \\ \ \ \ // // // ///////////L\ \ //...
Pepsi CMS (Irmin cms) pepsi-0.6-BETA2 Multiple Local File Vulnerability
No description provided by source. Pepsi CMS Irmin cms pepsi-0.6-BETA2 Multiple Local File Vulnerability fucking the Web Apps LFI 1 - attack edition +Software: Pepsi CMS Irmin CMS +Version: pepsi-0.6-BETA2 +License: GNU/GPL +Source: http://sourceforge.net/projects/pepsicms/files/ +Risk: High +CWE...
"$referer" export lead to the cross-site flaws in all versions of Discuz!
hi; All versions of Discuz! have the cross-site vulnerabilities because of the export value of "$referer". Like: Discuz! 7.X Discuz! 6.X Discuz! 5.X Discuz!NT 3.X and so on. There are some htm pages in all versions of Discuz!, that are: /templates/default/attachpay.htm /templates/default/ecrate.h...
MiTM Attacks Can Help Steal Data from SaaS
Researchers from Indiana University and Microsoft were able to infer sensitive data by analyzing the distinct size and other attributes of each exchange between a user and a website interaction. Using man-in-the-middle attacks, they could glean the information even when transactions were encrypte...
LDAP - Injection
LDAP - Injection + Vurnerebility: LDAP Injection + Category : Implemented Web exploit + Category : Attack Technique + Author : mc2s3lector + dork : X/o" + Contact : www.yogyacarderlink.web.id + date : 4-2-10 + biGthank to : Allah SWT,jasakom,KeDai Computerworks,0n3-d4y n3ro,eplaciano,...
LDAP - Injection
Vurnerebility: LDAP Injection + Category : Implemented Web exploit + Category : Attack Technique + Author : mc2s3lector + dork : X/o" + Contact : www.yogyacarderlink.web.id + date : 4-2-10 + biGthank to : Allah SWT,jasakom,KeDai Computerworks,0n3-d4y n3ro,eplaciano, all.indonesian like a coding,...
Chipmunk NewsLetter - Persistent Cross-Site Scripting
Tested On: Windows Vista Note: For educational purposes only There’s probably a lot more vulnerabilities in their web apps, but I could not even get them to work out of the box.. http://server/newsletter/admin/addlist.php Look no sanitization: 8alert'i could get your cookie'&submit=submit...
ThePortal 2.2 - Arbitrary File Upload
ThePortal 2.2 - Arbitrary File Upload web apps theportal2 v2.2 Auth bypass file upload -------------------- Author: siurek22 -------------------- You need curl to run it -------------------- Code: -------------------- upload.php /textarea '; else for$i=0; $i ------------ â...
[SECURITY] Fedora 8 Update: fedora-ds-admin-1.1.4-1.fc8
Fedora Administration Server is an HTTP agent that provides management feat ures for Fedora Directory Server. It provides some management web apps that can be used through a web browser. It provides the authentication, access cont rol, and CGI utilities used by the console...
Attack Technique: File Download Injection
File Download Injection ======================= Affects most web application platforms, including Java, .NET, PHP, Cold Fusion. This attack involves the use of header injection, particularly the Content-Disposition header, to subvert HTTP responses from trusted domains. Attackers can use this...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...