Atomic Photo Album 1.1.0pre4 - Cross-Site Scripting SQL Injection

Atomic Photo Album 1.1.0pre4 - Cross-Site Scripting SQL Injection ----------------------------------------------------------------------- Atomic Photo Album 1.1.0pre4 album.php - Multiple Remote Vulnerabilities http://atomicpa.sourceforge.net...

Atomic Photo Album 1.1.0pre4 (XSS/SQL) Remote Vulnerabilities

No description provided by source. ----------------------------------------------------------------------- Atomic Photo Album 1.1.0pre4 album.php - Multiple Remote Vulnerabilities http://atomicpa.sourceforge.net ---------------------------------------------------------- Bug founded by d3v1l Date:...

AJ Auction Pro Platinum Skin #2 (detail.php item_id) SQL Injection Vuln

Exploit for unknown platform in category web applications ======================================================================= AJ Auction Pro Platinum Skin 2 detail.php itemid SQL Injection Vuln ======================================================================= AJ Auction Pro Platinum Ski...

jetik-sql.txt

----------------------------------------------------------- JETIK-WEB Software v1 - SQL Injection Vulnerability http://www.jetik.net ---------------------------------------------------------- Bug founded by d3v1l Date: 22.09.2008 [email protected]...

webcp 0.5.7 - 'filelocation' Remote File Disclosure

webcp 0.5.7 sendfile.php filelocation Remote File Disclosure Vulnerability Script : http://www.web-cp.net/releases/webcp-0.5.7.tar.gz Demo : http://gyrbo.madoka.be/web-cp/ Vuln : if $tf = fopen$filelocation, "r" // Date in the past POC :...

WSN Links 2.222.23 - vote.php SQL Injection

WSN Links 2.222.23 - vote.php SQL Injection WSN Links 2.23 AND 2.22 vote.php - SQL Injection Vulnerability http://scripts.webmastersite.net/wsnlinks/ ---------------------------------------------------------- Bug founded by d3v1l Date: 21.09.2008 [email protected]...

Google Chrome Browser 0.2.149.27 (1583) Remote Silent Crash PoC

No description provided by source. ?php / Google Chrome 0.2.149.27 1583 Silent Crash PoC WHK - elhacker.net / $nombre =...

googlechrome-cleartext.txt

Google Chrome : The perfect password offering Tested on pair.com Webmail, might work on others as well with Google Chrome 0.2.149.27 Chrome stores saves passwords in CLEAR TEXT. 1 Goto webmail.pair.com Pair Webmail provides https and doesn't have any option on its page to save password. 2 Enter...

quickpoll-sql.txt

|| | | Quick Poll code.php id Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | script :http://discountedscripts.com/productinfo.php?productsid=69 | ||...

AlstraSoft Video Share Enterprise 4.5.1 (UID) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================================= AlstraSoft Video Share Enterprise 4.5.1 UID SQL Injection Vulnerability ========================================================================= || | | Video Share...

alstrasoftvideo-sql.txt

|| | | Video Share Enterprise UID Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | | script : http://www.alstrasoft.com/videoshare.htm | | DorK : Powered ...

Alstrasoft Affiliate Network Pro - 'pgm' SQL Injection

|| | |AlstraSoft Affiliate Network Pro pgm Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | | script : http://www.alstrasoft.com/affiliate.htm | | DorK :...

NASA Ames Research Center BigView 1.8 - '.PNM' Stack Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/29517/info NASA Ames Research Center BigView is prone to a remote stack-based buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it to an insufficiently sized memory buffer. An attacker can exploit th...

Joomla! Component Filiale 1.0.4 - 'idFiliale' SQL Injection

Joomla Component Filiale SQL Injection M a f i a C R E W Vulnerability found by: Str0xo Mafia Crew Contact: x02athotmail.de Website: http://www.dz-h4ck3rz.com special tnx to: co2 Greetings: lina-no promises & HIs0k4 ScriptName : 'Joomla' ModuleName : 'Filiale' Version : 1.0.4 DORK 1 :...

[HISPASEC] FireFox 2.0.0.11 and Opera 9.50 beta Remote Memory Information Leak, FireFox 2.0.0.11 Remote Denial of Service

see video link at the bottom ; Name : FireFox 2.0.0.11 and Opera 9.50 beta Remote Memory Information Leak : FireFox 2.0.0.11 Remote Denial of Service Type : Remote Information Disclosure Impact : Medium / High Credits: Gynvael Coldwind / Hispasec / Team Vexillium Special thanks to udevd and porne...

Adult Script <= 1.6 Unauthorized Administrative Access Exploit

Exploit for unknown platform in category web applications ============================================================== Adult Script Adult Script Unauthorized Administrative Access Exploit...

mwopen-sql.txt

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- MWOpen...

MS Internet Explorer 6 Table.Frameset NULL Dereference Vulnerability

No description provided by source. !-- http://browserfun.blogspot.com/ The following bug was tested on the latest version of Internet Explorer 6 on a fully-patched Windows XP SP2 system. This bug was found by Aviv Raff using the DOM-Hanoi fuzzer script. DOM-Hanoi works by building trees of ...

SimplePHPBlog Hacking

How to hack a server with Simple PHP Blog uploading an htacess file from imguploadcgi.php page. Tested on v0.4.9 by Demential http://www.hackish.eu mailto: [email protected] video here: http://hackish.eu/video/phpblog.avi vlc download: http://www.videolan.org/vlc/...

0DAY: QuickTime pwns Firefox

0DAY: QuickTime pwns Firefox published: September 12th, 2007 It seams that QuickTime media formats can hack into Firefox. The result of this vulnerability can lead to full compromise of the browser and maybe even the underlaying operating system. Don’t try this at home. 300 movie trailer Before w...