VNC Server (Reflective Injection), Reverse All-Port TCP Stager

Inject a VNC Dll via a reflective loader staged. Try to connect back to the attacker, on all possible ports 1-65535, slowly This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 282...

Windows Inject DLL, Reverse All-Port TCP Stager

Inject a custom DLL into the exploited process. Try to connect back to the attacker, on all possible ports 1-65535, slowly This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 282 inclu...

BAnner ROtation System mini - Multiple Remote File Inclusions

BAnner ROtation System mini - Multiple Remote File Inclusions + BAROSmini - BAnner ROtation System mini Multiple Remote File Inclusion Vulnerability + @======================================================================================================@ + Author : EA Ngel + + Location : Manado ...

OpenSiteAdmin 0.9.7b Remote File Inclusion

OpenSiteAdmin 0.9.7 BETA Remote File Include Vulnerability ---------------------------------------------------------- @=====================================================================================================@ + Author : EA Ngel + Location : Republik Rakyat Indonesia RRI + Situs :...

Remote file inclusion

PHP remote file inclusion vulnerability in cphtml2txt.php in All In One Control Panel AIOCP 1.4.001 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

CVE-2009-3220

PHP remote file inclusion vulnerability in cphtml2txt.php in All In One Control Panel AIOCP 1.4.001 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

CVE-2009-3220

PHP remote file inclusion vulnerability in cphtml2txt.php in All In One Control Panel AIOCP 1.4.001 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

CVE-2009-3220

The CVE-2009-3220 entry applies to All In One Control Panel (AIOCP) 1.4.001, where a PHP remote file inclusion vulnerability exists in cp_html2txt.php. An attacker can supply a URL in the page parameter to cause arbitrary PHP code execution on the remote host. The vulnerability is triggered throu...

Moa Gallery 1.2.0 Remote File Inclusion

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% &&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||...

CVE-2008-7069

All Club CMS ACCMS 0.0.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database configuration information, including credentials, via a direct request to accms.dat...

AiO (All into One) Flash Mixer 3 - '.afp' Crash (PoC)

!/usr/bin/perl + Bug : AiO All into One Flash Mixer 3 .afp File Crash Vulnerability Exploit + program Download : http://www.goztun.com/download/AiOFlashMixerSetup.exe + Author : theEdit0r Contact me : the3dit0ratYahoodotcoM + Greetz to all my friends + Tested on: Windows XP Pro SP3 + web site:...

ProjectButler 1.5.0 Remote File Inclusion

projectbutler - 1.5.0 offset RFI Vulnerability Author: cr4wl3r Contact: cr4wl3r4tlinuxmaildotorg Download: http://sourceforge.net/projects/projectbutler/files/projectbutler/1.5.0/ProjectButler.tar.gz Vuln : requireonce$offset."class.project.inc"; PoC :...

iWiccle 1.01 Local File Inclusion / SQL Injection

iWiccle 1.01 LFI/SQL Multiple Remote Vulnerabilities + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Download : http://www.wiccle.com/index.php?module=wiccle&show=download + Local File Inclusion - PoC's...

Mp3-Nator 2.0 - 'ListData.dat' Universal Buffer Overflow (SEH)

!/usr/bin/perl + Bug : Mp3-Nator 2.0 ListData.dat Universal Buffer Overflow Exploit SEH + Author : ThE g0bL!N Greetz to all my friends Download:http://files.brothersoft.com/mp3audio/players/mp3nator.zip Tested on: Windows XP Pro SP2 Fr Ismail: Hadi Wallah Ghir 3la Rabbi : usage: After Clicking On...

Zen Cart 1.3.8 Remote Code Execution Exploit

No description provided by source. !/usr/bin/php ?php ------- Zen Cart 1.3.8 Remote Code Execution http://www.zen-cart.com/ Zen Cart Ecommerce - putting the dream of server rooting within reach of anyone! A new version 1.3.8a is avaible on http://www.zen-cart.com/ BlackH : errorreportingEALL ^...

CVE-2009-2120

Multiple SQL injection vulnerabilities in TekBase All-in-One 3.1 allow remote authenticated users to execute arbitrary SQL commands via the 1 ids parameter to admin.php, the 2 y parameter to members.php, and other unspecified vectors. NOTE: vector 1 requires administrative access...

CVE-2009-2120

CVE-2009-2120 affects TekBase All-in-One 3.1, with multiple SQL injection vulnerabilities that let remote authenticated users execute arbitrary SQL commands. Affected vectors include the (1) ids parameter to admin.php and the (2) y parameter to members.php, among others. At least one vector is no...

PHPortal 1.0 - Insecure Cookie Handling

PHPortal 1.0 - Insecure Cookie Handling PhpPortal v1 Insecure Cookie Handling Vulnerability Author : KnocKout Special Thankz : CW All users Script : http://phportal.mertindualari.com Exploit; javascript:document.cookie="kulladi=Username;path=/"; Enter.. Go To;...

TekBase All-in-One 3.1 Multiple SQL Injection Vulnerabilities

No description provided by source. Author: n3wb0ss Date: 15/06/09 Contact: [email protected] Software: TekBase All-in-One 3.1 Vendor: tekbase.de Example: http://demo.tekbase.de/ Vendor contacted: No Risk: High I found this website on a german board, looking for another script. Looks to me, li...

TekBase All-in-One 3.1 - Multiple SQL Injections

Author: n3wb0ss Date: 15/06/09 Contact: [email protected] Software: TekBase All-in-One 3.1 Vendor: tekbase.de Example: http://demo.tekbase.de/ Vendor contacted: No Risk: High I found this website on a german board, looking for another script. Looks to me, like a...