DD-WRT HTTP v24-SP1 - Command Injection

DD-WRT HTTP v24-SP1 - Command Injection $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...

DD-WRT HTTPd Daemon/Service - Remote Command Execution

This is a remote root vulnerability in DD-WRT's httpd server. The bug exists at the latest 24 sp1 version of the firmware. The problem is due to many bugs and bad software design decisions. Here is part of httpd.c: 859 if containsstringfile, "cgi-bin" 860 861 authfail = 0; 862 if !doauth 863...

DD-WRT (httpd service) Remote Command Execution Vulnerability

Exploit for hardware platform in category remote exploits ============================================================= DD-WRT httpd service Remote Command Execution Vulnerability ============================================================= This is a remote root vulnerability in DD-WRT's httpd...

Linux/mips - execve("/bin/sh",["/bin/sh"],[]); - 60 bytes

No description provided by source. / - MIPS little-endian - linux execve 60 bytes shellcode - execve"/bin/sh","/bin/sh",; - tested on Linksys WRT54G/GL DD-WRT Linux - based on scut paper Writing MIPS/Irix shellcode vaicebine at gmail dot com / include "stdio.h" char shellcode = "\x50\x73\x06\x24"...

Linux/mips - port bind 4919 - 276 bytes

No description provided by source. / - MIPS little-endian - linux port listener 276 bytes shellcode - execve"/bin/sh","/bin/sh",; - port 0x1337 4919 - tested on Linksys WRT54G/GL DD-WRT Linux - based on scut paper Writing MIPS/Irix shellcode vaicebine at gmail dot com / include "stdio.h" char...

Power System Of Article Management (DD/XSS) Vulnerabilities

No description provided by source. --------------------------------------------------------- Portal Name: Power System Of Article Management Version : 3.0 Author : PouyaServer , [email protected] Vulnerability : DD/XSS --------------------------------------------------------- DD:...

psoam-ddxss.txt

--------------------------------------------------------- Portal Name: Power System Of Article Management Version : 3.0 Author : PouyaServer , [email protected] Vulnerability : DD/XSS --------------------------------------------------------- DD:...

Team 1.x (DD/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ================================================= Team 1.x DD/XSS Multiple Remote Vulnerabilities ================================================= --------------------------------------------------------- Portal Name: Team Board Version :...

Power System Of Article Management (DD/XSS) Vulnerabilities

Exploit for unknown platform in category web applications =========================================================== Power System Of Article Management DD/XSS Vulnerabilities =========================================================== ---------------------------------------------------------...

Team 1.x (DD/XSS) Multiple Remote Vulnerabilities

No description provided by source. --------------------------------------------------------- Portal Name: Team Board Version : all version Google Dork : team5 studio all rights reserved site:cn Author : PouyaServer , [email protected] Vulnerability : DD/XSS...

Zarri Blogumsu Database Disclosure

--------------------------------------------------------- Portal Name: Zarri Blogumsu Download : http://aspindir.com/Goster/5570 Author : PouyaServer , [email protected] Vulnerability : DD --------------------------------------------------------- DD:...

RankEm (DD/XSS/CM) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ================================================== RankEm DD/XSS/CM Multiple Remote Vulnerabilities ================================================== --------------------------------------------------------- Portal Name: RankEm Download :...

blogit! - SQL Injection / File Disclosure / Cross-Site Scripting

--------------------------------------------------------- Portal Name: BlogIt! Download : http://www.katywhitton.com/downloads/BlogIt!/BlogItDL.zip Author : PouyaServer , [email protected] Vulnerability : SQL/DD/XSS --------------------------------------------------------- SQL:...

Pre Resume Submitter Database Disclosure

--------------------------------------------------------- Portal Name: PRE RESUME SUBMITTER Vendor : http://preproject.com/submit.asp Author : PouyaServer , [email protected] Vulnerability : DD --------------------------------------------------------- DD:...

CodeAvalanche RateMySite - Database Disclosure

--------------------------------------------------------- Portal Name: CARateMySite Download : http://www.truecontent.info/codeavalanche/asp-rating-script.php Author : PouyaServer , [email protected] Vulnerability : DD --------------------------------------------------------- DD:...

The Net Guys ASPired2Blog (SQL/DD) Multiple Remote Vulnerabilities

No description provided by source. --------------------------------------------------------- Portal Name: ASPIred2Blog Vendor : http://thenetguys.us/Home/Blog.asp Author : PouyaServer , [email protected] Vulnerability : SQL,DD --------------------------------------------------------- DD:...

DD-WRT crossite request forgery

Form redirection is not checked...

Multiple XSRF in DD-WRT (Remote Root Command Execution)

Author: Michael Brooks !!!! I usually don't like posting my leet exploits to bugtraq because it is so unprofessional. You guys usually malform my exploits so they are totally useless, even to someone trying to write a patch! You also tend to get the wrong name! Michael Brooks wrote this! Exploits...

CF SHOPKART 5.2.2 (SQL/DD) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ========================================================== CF SHOPKART 5.2.2 SQL/DD Multiple Remote Vulnerabilities ==========================================================...

ezguestbook Database Disclosure

--------------------------------------------------------- Portal Name: ezguestbook Download : http://www.aspjunction.com/downloads/ezguestbook.zip Author : PouyaServer , [email protected] Vulnerability : DD --------------------------------------------------------- DD:...