8251 matches found
NOCC Webmail <= 1.0 (Local Inclusion) Remote Code Execution Exploit
No description provided by source. ?php ---noccw10inclxpl.php 8.22 23/02/2006 NOCC Webmail = 1.0 remote commands execution exploit through arbitrary local inclusion & attachment filename prediction coded by rgod site: http://retrogod.altervista.org - works regardless of any magicquotesgpc setting...
Microsoft Zero Administration Kit (ZAK) 1.0 and Office97 Backdoor Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/181/info Zero Administration Kit ZAK was designed to allow administrators to among other things lock down the NT environment and restrict the user's access to certain applications and system functions. In an instance wher...
Alpha Networks ADSL2/2+ Wireless Router ASL-26555 Password Disclosure
No description provided by source. - Title: Alpha Networks ADSL2/2+ Wireless Router ASL-26555 Remote Administration Password Disclosure - Author: Alberto Ortega @a0rtega [email protected] - Version: Tested on firmware version v2.0.0.30BES. Laboratory subject:...
ProFTPD 1.3.3c - Compromised Source Remote Root Trojan
No description provided by source. == ProFTPD Compromise Report == On Sunday, the 28th of November 2010 around 20:00 UTC the main distribution server of the ProFTPD project was compromised. The attackers most likely used an unpatched security issue in the FTP daemon to gain access to the server a...
phpBB <= 2.0.20 (Admin/Restore DB/default_lang) Remote Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo PhpBB = v2.0.20 \Admin/Restore Database/defaultlang remote commands execution\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n; echo - you need an admin sid, works regardless of...
Horde 3.3.12 Backdoor Arbitrary PHP Code Execution
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
Quantum vmPRO - Backdoor Command
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'net/ssh' class Metasploit3 Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Auxiliary::CommandShell...
Siemens Simatic S7-300 PLC Remote Memory Viewer
No description provided by source. Exploit Title: Siemens Simatic S7 300 Remote Memory Viewer Backdoor Date: 7-13-2012 Exploit Author: Dillon Beresford Vendor Homepage: http://www.siemens.com/ Tested on: Siemens Simatic S7-1200 PLC CVE : None require 'msf/core' class Metasploit3 Msf::Auxiliary...
myBB 1.6.4 Backdoor Exploit
No description provided by source. $Id: mybbbackdoor.rb 13838 2011-10-09 03:22:07Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Useresponse <= 1.0.2 - Privilege Escalation & RCE Exploit
No description provided by source. !/usr/bin/python -------------------- | abuseresponse.py | -------------------- Useresponse = 1.0.2 privilege escalation & remote code execution exploit vendor: USWebStyle http://www.uswebstyle.com/ software: http://www.useresponse.com/ vulns found by bcoles...
Cacti <= 0.8.6d Remote Command Execution Exploit
No description provided by source. Note: This exploit contains backdoor shell code that is not located on this server. /str0ke !/usr/bin/perl Remote Command Execution Exploit for Cacti = 0.8.6d This exploit open a remote shell on the targets that uses Cacti TARGET HOST MUST BE A GNU/LINUX SERVER,...
Quantum vmPRO 3.1.2 - Privilege Escalation
No description provided by source. ----------- Author: ----------- xistence xistenceat0x90.nl ------------------------- Affected products: ------------------------- Quantum vmPRO 3.1.2 and below ------------------------- Affected vendors: ------------------------- Quantum http://quantum.com/...
Symantec Web Gateway 5.0.3.18 LFI Remote ROOT RCE Exploit
No description provided by source. !/usr/bin/python ''' The original patch for the Symantec Web Gateway 5.0.2 LFI vulnerability removed the /tmp/networkScript file but left the entry in /etc/sudoers, allowing us to simply recreate the file and obtain a root shell using a different LFI...
CPA Site Solutions Remote File Upload Vulnerability
No description provided by source. |REMOTE FILE UPLOAD VULNERABILTY| .:|cpasitesolutions|::. AUTHOR : R3VANBASTARD SITE : www.sux0r.net PROVIDER: http://www.cpasitesolutions.com DORK : intext:Powered by CPA Site Solutions x EXPLOIT:...
PHP Volunteer Management System 1.0.2 - Multiple Vulnerabilities
No description provided by source. Exploit Title: PHP Volunteer Management System v 1.0.2 Multiple Vulnerabilities Date: 05/28/12 Author: Ashoo Mail: [email protected] Software Site: https://sourceforge.net/projects/phpvolunteer/ Version: 1.0.2 Tested on: IIS6.0-Windows 2003 ToC 1.0...
VSFTPD 2.3.4 - Backdoor Command Execution
No description provided by source. $Id: vsftpd234backdoor.rb 13099 2011-07-05 05:20:47Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
v2marketplacescript Upload_images Script (-7777) - Upload Shell Vulnerability
No description provided by source. ====================================================================== Uploadimages Script -7777 Upload Shell Vulnerability ======================================================================...
RuggedCom Devices Backdoor Access
No description provided by source...
GlFtpd 1.17.2 - Remote Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/891/info GlFtpd is a popular alternative to the mainstream unix ftp daemons and is currently in wide use on the internet. There are three known serious vulnerabilities in GlFtpd. The first problem is an account which is...
Borland/Inprise Interbase 4.0/5.0/6.0 Backdoor Password Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2192/info Interbase is an open source relational database offered by Borland Inprise Corporation. Interbase contains a backdoor user account and password called LOCKSMITH. When accessed this account will eliminate all...