1925 matches found
Home FTP Server 1.4.5 - Remote Denial of Service Exploit
No description provided by source. Discovered by 0in from DaRk-CodeRs Programming & Security Group Contact: 0indotemailatgmaildotcom Thats a very funny bug, and nobody understand how it works; When we send a python FTP retrlines function bad command and create a new connection server got DoS... o...
MS Windows 2000 sp1/sp2 isapi - .printer Extension Overflow Exploit (2)
No description provided by source. / IIS 5 remote .printer overflow. jill.c don't ask. by: dark spyrit [email protected] respect to eeye for finding this one - nice work. shouts to halvar, neofight and the beavuh bitchez. this exploit overwrites an exception frame to control eip and get to our...
Dark Age CMS <= 0.2c Beta - (Auth Bypass) SQL Injection Vulnerability
No description provided by source. --+++==================================================================================+++-- --+++====== Dark Age CMS = v0.2c Beta Auth Bypass SQL Injection Vulnerability ======+++--...
PHPnuke 8.2 - Remote Upload File Exploit
Title : PHPnuke 8.2 Remote Upload File Exploit Author : Net.Edit0r Location : Iran Dork : "POWERED BY PHPNUKE.IR" Category : Remote Email : [email protected] [email protected] Special Thanks To :NetQurd For help in finding bugs Email :[email protected] InformatioN 1.Save code html format ...
Internet Download Manager All Versions - Stack Based Buffer Overflow
No description provided by source. !/usr/bin/perl 1 ========================================== 1 0 I'm Dark-Puzzle From Inj3ct0r TEAM 0 0 1 1 dark-puzzleatliveatfr 0 0 ========================================== 1 1 White Hat 1 0 Independant Pentester 0 1 exploit coder/bug researcher 0...
Internet Download Manager All Versions - Memory Corruption Vulnerability
No description provided by source. !/usr/bin/perl 1 ========================================== 1 0 I'm Dark-Puzzle From Inj3ct0r TEAM 0 0 1 1 dark-puzzleatliveatfr 0 0 ========================================== 1 1 White Hat 1 0 Independant Pentester 0 1 exploit coder/bug researcher 0...
phsBlog 0.1.1 - Multiple Remote SQL Injection Vulnerabilities
No description provided by source. Name : phsBlog v0.1.1 Multiple Remote SQL Injection Vulnerabilities Author : cOndemned Dark-Coders member Greetz : ZaBeaTy, GregStar, str0ke, 0in, suN8Hclf, ixos, TBH, Avantura : Proof of Concept : Magic Quotes = On/Off...
Ability Server <= 2.34 Remote APPE Buffer Overflow Exploit
No description provided by source. / TESTED ON WINXP SP0 RUS c by Dark Eagle from unl0ck research team http://unl0ck.void.ru HAPPY NEW YEAR! Greetz go out to: nekd0, antiq, fl0wsec setnf, nuTshell, nosystem CoKi, reflux... / include string.h include stdio.h include winsock2.h include windows.h //...
Exim <= 4.42 Local Root Exploit
No description provided by source. !/bin/sh Local Lame R00T sploit for exim = 4.42 by Dark Eagle My First Coding Release In bash Unl0ck Research Team More Effective than C-code. @env.c content: include stdio.h include string.h int mainint argc, char argv char addrptr; addrptr = getenvargv1;...
AlstraSoft AskMe Pro 2.1 (forum_answer.php?que_id) SQL Injection Vulnerability
No description provided by source. ================================================================== Exploit Title: AlstraSoft AskMe Pro SQL Injection Vulnerability Date: 12/09/2010 Author: Amine92 Email: [email protected] Software Link: http://www.alstrasoft.com/askme.htm Version: All Versio...
PHP-Fusion <= 6.0 106 BBCode IMG Tag Script Injection Exploit
No description provided by source. / ahh I was hoping for some socket code : /str0ke Dark Assassins - http://dark-assassins.com/ Visit us on IRC @ irc.tddirc.net DarkAssassins PHP-Fusion img/img exploit Discovered/Coded by Easyex Using the img /img codes we can get an administrator to do a functi...
Dark Hart Portal (login.php) Remote File Inclusion Vulnerability
No description provided by source. ------------------------------------------------------------------------------------- Dark Portal login.php Remote File Inclusion Vulnerability ------------------------------------------------------------------------------------- Author: CoBRa21 Mail:...
websitebaker add-on concert calendar 2.1.4 - Multiple Vulnerabilities
No description provided by source. Advisory: Websitebaker Add-on 'Concert Calendar 2.1.4' XSS & SQLi vulnerability Advisory ID: SSCHADV2013-001 Author: Stefan Schurtz Affected Software: Successfully tested on Concert Calendar 2.1.4 Vendor URL:...
Grams - First Search Engine for Underground Black Markets
We often talk about Underground communities, illegal websites or black markets, but as they are ‘Underground’ in nature i.e. Hidden websites running under Onion Network, many of us don't know how to reach the one we are searching for and if hopefully found, then its difficult to figure out a...
KCFinder 2.53 Shell Upload
Exploit Title : KCFinder Upload Shell Vulnerability + Google Dork : inurl:/kcfinder/browse.php + Date : 24/04/2014 + Exploit Author : IranianDarkCodersTeam + Home : http://www.idc-team.net + Discovered By : Black.Hack3r + Vendor Homepage : http://kcfinder.sunhater.com/ + Version : 2.51 - 2.53 +...
Underground Marketplace 'Utopia' Seized by Dutch Police, 5 suspects arrested
After Silk Road, another underground online marketplace 'Utopia' has been seized by Dutch National Police, where users could buy illegal drugs and guns for home delivery. The police started their investigation under Codename 'Operation Commodore' in 2013, and finally seized Utopia's Germany-based...
PGP Inventor announced encrypted PrivatOS based #BLACKPHONE against NSA surveillance
Mobile security may not be secure as you think. In September we have reported that the National Security Agency has the ability to access data on iOS, Android and even BlackBerry devices. Everyday a new revelation of NSA Surveillance Program makes Security and Privacy a major concern for all of u...
How Dark Mail Plans to Build an Open, Secure Email Platform
The new Dark Mail Alliance formed this week by Lavabit and Silent Circle will offer an open platform for secure email that will use existing protocols and cloud storage as a way to evade surveillance. The new system, which should be available next year, is in some ways a throwback to the...
'Dark Mail Alliance', Future of surveillance proof email technology
Yesterday I learned about 'Dark Mail Alliance', where Lavabit, reportedly an email provider for NSA leaker Edward Snowden and Silent Circle comes together to create a surveillance-proof email technology. Ladar Levison at Lavabit and Silent Circle CEO Mike Janke, Founders of two e-mail services th...