Archangel Weblog 0.90.02 - 'post_id' SQL Injection

!/usr/bin/perl -w Portal : Archangel Weblog 0.90.02 Download : http://www.archangelmgt.com/ArchangelWeblogv09002.zip exploit aported password crypted mgharba :d:d:d:d Founded & Exploited by : Stack-Terrorist v40 Contact: Ev!L = see down Greetz : Houssamix & Djekmani & Jadi & iuoisn & Str0ke & All...

Archangel Weblog 0.90.02 - post_id SQL Injection

Archangel Weblog 0.90.02 - postid SQL Injection !/usr/bin/perl -w Portal : Archangel Weblog 0.90.02 Download : http://www.archangelmgt.com/ArchangelWeblogv09002.zip exploit aported password crypted mgharba :d:d:d:d Founded & Exploited by : Stack-Terrorist v40 Contact: Ev!L = see down Greetz :...

Advanced Image Hosting (AIH) 2.1 Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w Advanced Image Host Script Powered by: AIH = v2.1 - Remote SQL Inj Exploit dork:Powered by: AIH v2.1 exploit aported password not crypted exploit tatjibe password mdecrypté :d mgharba :d:d:d:d Founded by : Stack-Terrorist v40 Contact: Ev!L Gree...

Advanced Image Hosting (AIH) 2.1 - SQL Injection

Advanced Image Hosting AIH 2.1 - SQL Injection !/usr/bin/perl -w Advanced Image Host Script Powered by: AIH = v2.1 - Remote SQL Inj Exploit dork:Powered by: AIH v2.1 exploit aported password not crypted exploit tatjibe password mdecrypté :d mgharba :d:d:d:d Founded by : Stack-Terrorist v40...

joomlavisites-rfi.txt

/===============================================================================================================================================\ | | | o Joomla Visites 1.1 RC2 Remote File Inclusion Vulnerability | | | | Software : comjoomla-visites version 1.1 RC2 | | Vendor :...

Joomla! Component Joomla-Visites 1.1 RC2 - Remote File Inclusion

/===============================================================================================================================================\ | | | o Joomla Visites 1.1 RC2 Remote File Inclusion Vulnerability | | | | Software : comjoomla-visites version 1.1 RC2 | | Vendor :...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in AMFPHP 1.2 allow remote attackers to inject arbitrary web script or HTML via the 1 class parameter to a methodTable.php, b code.php, and c details.php in browser/; and the 2 location parameter to browser/code.php. NOTE: the provenance of this...

Zune Software - ActiveX Arbitrary File Overwrite

Zune Software - ActiveX Arbitrary File Overwrite Vulnerability class : Arbitrary file overwrite Discovery date : 21 April 2008 Remote : Yes Credits : J. Bachmann & B. Mariani from ilion Research Labs Vulnerable : Zune software: EncProfile2 Class An arbitrary file overwrite as been discovered in a...

HostDirectory Pro Insecure Cookie Handling Vulnerability

No description provided by source. $ Script.......: HostDirectory Pro $ Download.....: http://www.mediafire.com/?71nvkj199n7 null Real Price :Price single license : $79.95 USD $ Author.......: CrackersChild | [email protected] $ Class........: Insecure Cookie Handling $ Demo.........:...

HostDirectory Pro - Insecure Cookie Handling

HostDirectory Pro - Insecure Cookie Handling $ Script.......: HostDirectory Pro $ Download.....: http://www.mediafire.com/?71nvkj199n7 null Real Price :Price single license : $79.95 USD $ Author.......: CrackersChild | [email protected] $ Class........: Insecure Cookie Handling $ Demo............

HostDirectory Pro - Insecure Cookie Handling

$ Script.......: HostDirectory Pro $ Download.....: http://www.mediafire.com/?71nvkj199n7 null Real Price :Price single license : $79.95 USD $ Author.......: CrackersChild | [email protected] $ Class........: Insecure Cookie Handling $ Demo.........:...

Flash plugin DNS rebinding

The Adobe Macromedia Flash 9 plug-in allows remote attackers to cause a victim machine to establish TCP sessions with arbitrary hosts via a Flash SWF movie, related to lack of pinning of a hostname to a single IP address after receiving an allow-access-from element in a cross-domain-policy XML...

CVE-2008-1617

Double free vulnerability in Web TransferCtrl Class 8,2,1,4 iManFile.cab, as used in WorkSite Web 8.2 before SP1 P2, allows remote attackers to execute arbitrary code via JavaScript that sets the Server property to a string, then sets the string to null...

phpblock-rfi.txt

Script Name : PHP Block a8.4 Download : http://sourceforge.net/project/downloading.php?groupid=186381&usemirror=surfnet&filename=a8.4.zip&73507325 Error : includeonce $PATHTOCODE."/script/fonction.php"; Vul Code :...

PhpBlock a8.4 (PATH_TO_CODE) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================ PhpBlock a8.4 PATHTOCODE Remote File Inclusion Vulnerability ================================================================ Script Name : PHP Block a8.4 Error : includeonce...

CA BrightStor ARCserve Backup r11.5 ActiveX Remote BOF Exploit 0day

No description provided by source. HTML !-- CA BrightStor ARCserve Backup r11.5 AddColumn 0day ActiveX Remote Buffer Overflow Exploit Bug discovered by Krystian Kloskowski h07 [email protected] Tested on: - CA BrightStor ARCserve Backup r11.5 ftp://ftp.ca.com/priv/trial/BABr11/BABLDr115/BABLDr115.zi...

PCRE: Buffer overflow

Background PCRE is a Perl-compatible regular expression library. GLib includes a copy of PCRE. Description PCRE contains a buffer overflow vulnerability when processing a character class containing a very large number of characters with codepoints greater than 255. Impact A remote attacker could...

CVE-2008-1307

Heap-based buffer overflow in the KUpdateObj2 Class ActiveX control in UpdateOcx2.dll in Beijing KingSoft Antivirus Online Update Module 2007.12.29.29 allows remote attackers to execute arbitrary code via a long argument to the SetUninstallName method...

CVE-2008-1307

CVE-2008-1307 describes a heap-based buffer overflow in the KUpdateObj2 ActiveX control (UpdateOcx2.dll) of Beijing KingSoft Antivirus Online Update Module 2007.12.29.29. A long argument to the SetUninstallName method allows remote attackers to execute arbitrary code. The vulnerability is documen...

vhcs-root.txt

!/usr/bin/php -q http://acid-root.new.fr/ [email protected] Exploit: + Logged in Administrator + The administrator has 2 resellers / Changing dareseller's password / Trying to connect as dareseller:thatpwnz + Login successful + The reseller has 2 users + Host domaintest.fr is connected /...