pHNews Alpha 1 (genbackup.php) Database Disclosure Vulnerability

Exploit for unknown platform in category web applications ================================================================ pHNews Alpha 1 genbackup.php Database Disclosure Vulnerability ================================================================ 0x01 Informations: Name : pHNews Alpha 1...

pHNews Alpha 1 - 'mod' SQL Injection

0x01 Informations: Name : pHNews Alpha 1 Download : http://www.hotscripts.com/listings/jump/download/50111/ Vulnerability : Sql Injection Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged file is /path/header.php Code $mod = $GET"mod"; // If no mod is select...

pHNews Alpha 1 - 'genbackup.php' Database Disclosure

0x01 Informations: Name : pHNews Alpha 1 Download : http://www.hotscripts.com/listings/jump/download/50111/ Vulnerability : Db Discloure Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged file is /path/extra/genbackup.php 0x03 Exploit: Exploit:...

pHNews Alpha 1 - genbackup.php Database Disclosure

pHNews Alpha 1 - genbackup.php Database Disclosure 0x01 Informations: Name : pHNews Alpha 1 Download : http://www.hotscripts.com/listings/jump/download/50111/ Vulnerability : Db Discloure Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged file is...

Amaya Web Browser 11 (bdo tag) Remote Stack Overflow Exploit (vista)

No description provided by source. !/usr/bin/perl Amaya 11 bdo tag stack overflow author: Rob Carter [email protected] targets: windows vista sp1 modified the alpha-numeric shell-code from metasploit since the first 12 bytes didn't fall within the ASCII range of 0x01-0x7f. otherwise my payload...

TxtBlog 1.0 Alpha Remote Command Execution Exploit

Exploit for unknown platform in category web applications ================================================== TxtBlog 1.0 Alpha Remote Command Execution Exploit ================================================== !/usr/bin/perl...

TxtBlog 1.0 Alpha - Remote Command Execution

!/usr/bin/perl ----------------------------------------------------------------------------- INFORMATIONS ----------------------------------------------------------------------------- App = TxtBlog v 1.0 Alpha Downl = http://downloads.sourceforge.net/txtblogcms/txtblogcms-1.0a.zip Remote Command...

The Rat CMS Alpha 2 - Blind SQL Injection

--+++=============================================================+++-- --+++====== The Rat CMS Alpha 2 Blind SQL Injection Exploit ======+++-- --+++=============================================================+++-- !/usr/bin/perl use strict; use warnings; use IO::Socket; sub query my $chr = shif...

Alpha - execve() Shellcode (112 bytes)

Alpha - execve Shellcode 112 bytes. Shellcode exploit for Alpha platform char shellcode= "\x30\x15\xd9\x43" / subq $30,200,$16 / / $16 = $30 - 200 / $16 must have the shellcode address. However, before / / the bsr instruction, $16 can't have the address. / / This instruction just store the...

The Rat CMS Alpha 2 - Authentication Bypass

--------------------------------- The Rat Cms Auth By Pass --------------------------------- Autore: x0r Email: [email protected] -------------------------------- Bug In: \login.php $sql = "SELECT userid FROM tblauthuser WHERE userid = '$userId' AND userpassword = PASSWORD'$password'"; $result...

The Rat CMS Alpha 2 Privilege Escalation

---------------------------- The Rat Cms Alpha 2 Priviledge Escalation ---------------------------- Autore: x0r Email: [email protected] Download: http://downloads.sourceforge.net/the-rat-cms/trcmsprealpha2.zip?modtime=1174590953&bigmirror=0 ---------------------------- Bug In: /admin/.php So...

The Rat Cms Alpha 2 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= The Rat Cms Alpha 2 Auth Bypass SQL Injection Vulnerability ============================================================= --------------------------------- The Rat Cms Auth By...

The Rat Cms Alpha 2 (download.php) Remote Vulnerability

No description provided by source. ---------------------------- The Rat Cms Alpha 2 Priviledge Escalation ---------------------------- Autore: x0r Email: [email protected] Download: http://downloads.sourceforge.net/the-rat-cms/trcmsprealpha2.zip?modtime=1174590953&bigmirror=0...

The Rat Cms Alpha 2 (download.php) Remote Vulnerability

Exploit for unknown platform in category web applications ======================================================= The Rat Cms Alpha 2 download.php Remote Vulnerability ======================================================= ---------------------------- The Rat Cms Alpha 2 Priviledge Escalation...

The Rat CMS Alpha 2 - download.php Priviledge Escalation

The Rat CMS Alpha 2 - download.php Priviledge Escalation ---------------------------- The Rat Cms Alpha 2 Priviledge Escalation ---------------------------- Autore: x0r Email: [email protected] Download:...

ASPired2Poll Database Disclosure

-------------------------------AlpHaNiX---------------------------------- Found By : AlpHaNiX website : www.offensivetrack.org contact : AlpHaATHACKERDOTBZ script : ASPired2poll download : null Demo : http://thenetguys.us/ASPired2/Poll/ Exploits : --=DATABASE DISCLOSURE=--...

Design/Logic Flaw

HP DECnet-Plus 8.3 before ECO03 for OpenVMS on the Alpha platform uses world-writable permissions for the OSIT$NAMES logical name table, which allows local users to bypass intended access restrictions and modify this table via the 1 SYS$CRELNM and 2 SYS$DELLNM system services...

CVE-2008-5417

CVE-2008-5417 affects HP DECnet-Plus 8.3 before ECO03 for OpenVMS on the Alpha platform. The vulnerability arises because the OSIT$NAMES logical name table has world-writable permissions, allowing local users to bypass access restrictions and modify the table via the SYS$CRELNM and SYS$DELLNM sys...

Debian 'login' 本地权限升级漏洞

Debian is prone to a local privilege-escalation vulnerability because of an error in the 'login' program. Local attackers in the UTMP group could exploit this issue to take ownership of arbitrary files on the vulnerable system. This may lead to a complete compromise of the system. Debian Linux 3....

[SECURITY] [DSA 1683-1] New streamripper packages fix potential code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1683-1 [email protected] http://www.debian.org/security/ Florian Weimer December 08, 2008 http://www.debian.org/security/faq -...