1485 matches found
zomplog-admin.txt
======================== WEBXAKEP.NET =========================== Name: "Zomplog 3.8.2 Добавляем админа "Add Admin" /-- Титлы блога "Blog Title" Логин "Username" Пароль "Password" Повторяем пароль "Confirm password" -------------------------------------------------------------...
meltingice-user.txt
!/usr/bin/perl use strict; use LWP::UserAgent; NOTE: user a pretty uniqe username, has the script will say successfull if a username aready existed! NOTE: exploit is mainly to get a nice quota, but it can also to be used to add a user primeraly because alot of these sites doesnt allow registratio...
AlkalinePHP <= 0.77.35 (adduser.php) Arbitrary Add-Admin Vuln
Exploit for unknown platform in category web applications ============================================================= AlkalinePHP = 0.77.35 adduser.php Arbitrary Add-Admin Vuln =============================================================...
MeltingIce File System 1.0 - Arbitrary Add User
!/usr/bin/perl use strict; use LWP::UserAgent; NOTE: user a pretty uniqe username, has the script will say successfull if a username aready existed! NOTE: exploit is mainly to get a nice quota, but it can also to be used to add a user primeraly because alot of these sites doesnt allow registratio...
AlkalinePHP 0.77.35 - 'adduser.php' Arbitrary Add Admin
--==+================================================================================+==-- --==+ AlkalinePHP = 0.77.35 adduser.php Arbitrary Add-Admin +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovered On: 17 MAY 200...
Pet Grooming Management System <= 2.0 Arbitrary Add-Admin Exploit
No description provided by source. !/usr/bin/perl use strict; use LWP::UserAgent; print "-+- Pet Grooming Management System = 2.0 Arbitrary Add-Admin Exploit -+-\n"; print "-+- Discovered && Coded By: t0pP8uZz - Discovered On: 15 MAY 2008 -+-\n"; print "-+- Script Download:...
bosnews40-direct.txt
-------------------------------------------------------------------------------------------------------------- ----- H-T Team HouSSaMix + ToXiC350 from MoroCCo ---------------------------------------------------------...
auracms-bypass.txt
!/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ AuraCMS 2.x user.php - Security Code Bypass & Add Administrator Exploit Waktu : Feb 28 2008 08:00PM Software : AuraCMS Versi : 2.0 2.1 2.2.1 http://www.r57shell.in/r57.txt? -----------------------------------...
CVE-2008-0701
ActivationHandler in Magnolia CE 3.5.x before 3.5.4 does not check permissions during importing, which allows remote attackers to have an unknown impact via activation of a new item, possibly involving addition of arbitrary new content...
Security fix for the ALT Linux 5 package samba version 3.0.28-alt1
Dec. 10, 2007 Alexander Bokovoy 3.0.28-alt1 - Fixed: + CVE-2007-6015: == Specifically crafted GETDC mailslot requests == can trigger a boundary error in the domain == controller GETDC mail slot support which == can be remotely exploited to execute arbitrary == code. + fix error path in local...
Skalinks <= 1_5 Cross Site Request Forgery Add Admin
| | | | | | | | | | | || | | | | | | | | |/ |/ | |/ / | ' / | | || ' / | |/ |/ | | | | | | | | | | | | | | | || | | | | | / | |/,||||| ||, | /| ||/|,|| / | |/ | | | Site: www.hackinginside.altervista.org | | Project: Skalinks = 15 Cross Site Request Forgery Add Admin | | Author: Vincy | | Email:...
tomcat host manager xss
Cross-site scripting XSS vulnerability in the Host Manager Servlet for Apache Tomcat 6.0.0 to 6.0.13 and 5.5.0 to 5.5.24 allows remote attackers to inject arbitrary HTML and web script via crafted requests, as demonstrated using the aliases parameter to an html/add action...
CVE-2007-4724
Cross-site request forgery CSRF vulnerability in cal2.jsp in the calendar examples application in Apache Tomcat 4.1.31 allows remote attackers to add events as arbitrary users via the time and description parameters...
cpp, gcc, libf2c, libgcc, libgcj, libgnat, libobjc, libstdc++ security update
CentOS Errata and Security Advisory CESA-2007:0220 Updated gcc packages that fix a security issue and various bugs are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gcc packages include C, C++, Java, Fortran 77, Objective C...
CVE-2007-1047
Unspecified vulnerability in Distributed Checksum Clearinghouse DCC before 1.3.51 allows remote attackers to delete or add hosts in /var/dcc/maps...
CVE-2006-6580
The connected sources confirm a vulnerability in ProNews 1.5 where admin/change.php does not verify that a user is authorized to modify news items. This permits remote attackers to add or delete information within an item and potentially cause other impacts. Root cause: missing access control che...
MiniHTTPServer Web Forum绕过认证添加用户漏洞
Web Forum & File Sharing Server允许用户在Internet上创建自己的论坛。 Web Forum & File Server在处理用户请求时存在输入验证漏洞，远程攻击者可能利用此漏洞非授权操作论坛。 Web Forum & File Server的join.asp文件没有正确验证frmMailBox参数数据的输入，允许攻击者未经授权便以PowerUser的权限添加新的论坛用户。 Mini HTTP Server Web Forum & File Sharing Server 4.0...
MiniHTTPServer Web Forum File Sharing Server 4.0 - Add User
MiniHTTPServer Web Forum File Sharing Server 4.0 - Add User /================================================================ MiniHTTPServer.NET 's Web Forum & File Sharing Server Power Pack 4 latest version available for sale on their website http://www.minihttpserver.net/bbs/index.php has...
linux/x86 Adduser without Password to /etc/passwd 59 bytes
Exploit for linux/x86 platform in category shellcode ========================================================== linux/x86 Adduser without Password to /etc/passwd 59 bytes ========================================================== / linux/x86 adds user 'xtz' without password to /etc/passwd - 59...
CVE-2005-4474
Buffer overflow in the "Add to archive" command in WinRAR 3.51 allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code by tricking the user into adding a file whose filename contains a non-default code page and non-ANSI characters, as demonstrated usi...