129 matches found
Mambo phpShop Component <= 1.2 RC2b File Include Vulnerability
No description provided by source. Affected Application: Mambo phpShop v1.2 RC2b Mambo CMS Component . . : contact : . . . . . . . . . . . . . . . . . . . . . . . . . . . Discoverd/Found by: Charles Nelwan a.k.a Cmaster4 Team: BatamHacker irc.dal.net crew URL: http://www.batamhacker.info/forum...
Nuked-Klan <= 1.7.6 - Multiple Vulnerabilities Exploit
No description provided by source. ?php / Name: Nuked-Klan = 1.7.6 Multiple Vulnerabilities Exploit Credits: Charles real F. charlesfolathotmail.fr URL: http://realn.free.fr/releases/46556 Date: 04-01-08 - Remote Code Execution - Remote File Upload - Admin Hash Extraction Remote Code Exec...
PHP-Nuke Platinium <= 7.6.b.5 - Remote Code Execution Exploit
No description provided by source. ?php PHP Nuke Platinium = 7.6.b.5 Remote Code Execution Exploit Author: Charles real F. charlesfolathotmail.fr Date: 02/07/08 Note I modified a bit phpsploit for this exploit, because PHP Nuke plays with REQUESTURI var ... Requirements registerglobals=On phprete...
Один сервер, Tor и Bitcoin
Всем доброго времени суток. В последнее время достаточно много новостей о Tor и Bitcoin, обе системы в достаточной мере направлены на безопасность и анонимность, однако их преимущества могут одновременно стать и недостатками. Структура Tor не позволяет определять местоположение клиента и сервера,...
Suit Filed Against NSA, Obama Over Surveillance Program
A group of people, including a former federal prosecutor and the parents of a Navy SEAL sniper killed in action, have filed a class-action law suit against the National Security Agency, Verizon and President Obama over the NSA’s collection of cell phone data. The suit says the order that enabled...
Java enabled browsers are highly vulnerable
Oracle has released emergency patches multiple of times in recent months for Java for one after another set of vulnerabilities. About 100 million computers reported to be vulnerable to unauthorized access via different flaw in Java software. Department of Homeland Security's US-CERT already warne...
Accused UGA Hacker committed suicide
A former University of Georgia UGA student under investigation for allegedly hacking into the school's computerized personnel records system committed suicide last month. Stell attended classes at UGA between 2005 and 2007. The Data breach was carried out around two months back near 15th October...
Charles River Web CMS Cross Site Scripting
Exploit Title : Charles-River-Web Cms Cross Site Scripting Vulnerabilitiy Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir & Http://Security7.ir Software Link : http://www.charlesriverweb.com/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server -...
Exposed : HBGary wanted to suppress Stuxnet research !
It is no secret that in recent days, Anonymous Operatives have released a cache of HBGary Federal internal emails to the public. Crowdleaks has discovered that within these communications, Aaron Barr received a copy of Stuxnet a computer worm that targets the types of industrial control systems I...
linux/x86 write(0 Hello core!\n"" 12)
No description provided by source. / writehello-core.c by Charles Stevenson [email protected] I made this as a chunk you can paste in to make modular remote exploits. I use it to see if my dup2loop worked. If you don't get "Hello core!\n" back it's a good indicator your shell won't be functional th...
Fuzzylime 3.01 Remote Code Execution Exploit
Good morning, Name: Fuzzylime 3.01 Remote Code Execution Exploit Credits: Charles "real" F. charlesfolathotmail.fr Conditions: None http://realn.free.fr/releases/89731 RCE with "no conditions" ... Peace, real...
phpnukeplatinum-exec.txt
Date: 02/07/08 Note I modified a bit phpsploit for this exploit, because PHP Nuke plays with REQUESTURI var ... Requirements registerglobals=On phpreter phpreter is really easy to use: You can change mode using "mode=", with = sql, php or cmd If you want to understand how it work ... read the cod...
PHP Nuke Platinium <= 7.6.b.5 Remote Code Execution Exploit
PHP Nuke Platinium = 7.6.b.5 Remote Code Execution Exploit Author: Charles "real" F. charlesfolathotmail.fr Date: 02/07/08 http://realn.free.fr/releases/57150 Thanks, Charles "real" F...
PHP-Nuke Platinium 7.6.b.5 - Remote Code Execution
PHP-Nuke Platinium 7.6.b.5 - Remote Code Execution Date: 02/07/08 Note I modified a bit phpsploit for this exploit, because PHP Nuke plays with REQUESTURI var ... Requirements registerglobals=On phpreter phpreter is really easy to use: You can change mode using "mode=", with = sql, php or cmd If...
PHP-Nuke Platinium <= 7.6.b.5 Remote Code Execution Exploit
Exploit for unknown platform in category web applications =========================================================== PHP-Nuke Platinium ", with = sql, php or cmd If you want to understand how it work ... read the code. You can take look to unchunk function, because I think you were many with thi...
PixelPost 1.7.1 File Disclosure
PixelPost 1.7.1 File Disclosure by Charles "real" F. charlesfolathotmail.fr http://realn.free.fr Requires registerglobals = On magicquotesgpc = Off PROOF OF CONCEPT TARGET URL: http://url/addons/copyfolder.php?...
phpTournois <= G4 Remote File Upload/Code Execution Exploit
Exploit for unknown platform in category web applications =========================================================== phpTournois Remote Code Execution - Remote File Upload When testing if we are admin, phpTournois checks if $grade'a'=='a'. But when we are not loggued in, this var is not defined...
Nuked-Klan <= 1.7.6 Multiple Vulnerabilities Exploit
?php / Name: Nuked-Klan = 1.7.6 Multiple Vulnerabilities Exploit Credits: Charles "real" F. charlesfolathotmail.fr URL: http://realn.free.fr/releases/46556 Date: 04-01-08 - Remote Code Execution - Remote File Upload - Admin Hash Extraction Remote Code Exec vulnerability used in this exploit was...
Nuked-klaN 1.7.6 - Multiple Vulnerabilities
Nuked-klaN 1.7.6 - Multiple Vulnerabilities URL: http://realn.free.fr/releases/46556 Date: 04-01-08 - Remote Code Execution - Remote File Upload - Admin Hash Extraction Remote Code Exec vulnerability used in this exploit was discovered by DarkFig. / print "\n"; print " Nuked-Klan \n\n\n"; if$argc...
Nuked-Klan <= 1.7.6 Multiple Vulnerabilities Exploit
Exploit for unknown platform in category web applications ==================================================== Nuked-Klan Remote Code Execution - Remote File Upload - Admin Hash Extraction Remote Code Exec vulnerability used in this exploit was discovered by DarkFig. / print "\n"; print "...