RunCMS 1.6 Get Admin Cookie Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================== RunCMS 1.6 Get Admin Cookie Remote Blind SQL Injection Exploit ============================================================== // / RUNCMS 1.6 BLIND SQL Injection Exploit get...

RunCMS 1.6 - Get Admin Cookie Blind SQL Injection

RunCMS 1.6 - Get Admin Cookie Blind SQL Injection // / RUNCMS 1.6 BLIND SQL Injection Exploit get Admin Cookie / // / exploit get admin cookie that can be used / / to login by pasting it into browser Opera / / and then get access to Admin session / / and change Admins password / / / // // / teste...

RunCMS 1.6 - Multiple Vulnerabilities

RunCMS 1.6 - Multiple Vulnerabilities Digital Security Research Group Advisory Application: RunCMS Versions Affected: RunCMS 1.6 Vendor URL: http://www.runcms.org Bugs: SQL Injections, XSS, PHP Include, Predictable session id, etc. Exploits: Aviable Reported: 14.12.2007 Vendor response: 15.12.200...

RunCMS 1.6 - Get Admin Cookie Blind SQL Injection

// / RUNCMS 1.6 BLIND SQL Injection Exploit get Admin Cookie / // / exploit get admin cookie that can be used / / to login by pasting it into browser Opera / / and then get access to Admin session / / and change Admins password / / / // // / tested on RUNCMS english version 1.6 / // // / Date of...

Content Injector 1.53 (index.php) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== Content Injector 1.53 index.php Remote SQL Injection Vulnerability ====================================================================...

ci-sql.txt

--==+================================================================================+==-- --==+ Content Injector V1.52 SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: S.W.A.T...

Content Injector 1.52 - index.php?cat SQL Injection

Content Injector 1.52 - index.php?cat SQL Injection --==+================================================================================+==-- --==+ Content Injector V1.52 SQL Injection Vulnerbility +==-- --==+================================================================================+==--...

Content Injector 1.52 - 'index.php?cat' SQL Injection

--==+================================================================================+==-- --==+ Content Injector V1.52 SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: S.W.A.T...

EEYE: BitDefender Online Scanner 8 Double Decode Heap Overflow

BitDefender Online Scanner 8 Double Decode Heap Overflow Release Date: November 20, 2007 Date Reported: October 24, 2007 Severity: High Remote Code Execution Vendor: BitDefender / SOFTWIN - http://www.bitdefender.com Systems Affected: BitDefender Online Scan Users Overview: eEye Digital Security...

Oracle 10g - CTX_DOC.MARKUP SQL Injection

Oracle 10g - CTXDOC.MARKUP SQL Injection // / Oracle 10g CTXDOC.MARKUP SQL Injection Exploit / // / sploit grant DBA to unprivileged user / // / BY Sh2kerR Digital Security / // / tested on oracle 10.1.0.2.0 / // // / Date of Public EXPLOIT: October 23, 2007 / / Written by: Alexandr "Sh2kerr"...

Oracle 10g CTX_DOC.MARKUP SQL Injection Exploit

Exploit for multiple platform in category local exploits =============================================== Oracle 10g CTXDOC.MARKUP SQL Injection Exploit =============================================== // / Oracle 10g CTXDOC.MARKUP SQL Injection Exploit / // / sploit grant DBA to unprivileged user ...

Oracle 10g - 'CTX_DOC.MARKUP' SQL Injection

// / Oracle 10g CTXDOC.MARKUP SQL Injection Exploit / // / sploit grant DBA to unprivileged user / // / BY Sh2kerR Digital Security / // / tested on oracle 10.1.0.2.0 / // // / Date of Public EXPLOIT: October 23, 2007 / / Written by: Alexandr "Sh2kerr" Polyakov / / email: [email protected]...

EEYE: Windows Metafile AttemptWrite Heap Overflow

Windows Metafile AttemptWrite Heap Overflow Release Date: August 14, 2007 Date Reported: March 27, 2007 Severity: High Code Execution Systems Affected: Windows 2000 SP4 Windows XP SP2 Windows Server 2003 SP1 Overview: eEye Digital Security has discovered a heap overflow vulnerability in the way t...

EEYE: VGX.DLL Compressed Content Heap Overflow Vulnerability

VGX.DLL Compressed Content Heap Overflow Vulnerability Release Date: August 14, 2007 Date Reported: October 24, 2006 Severity: High Code Execution Systems Affected: Internet Explorer 6 SP1 - Windows 2000 SP4 Internet Explorer 6 SP1 - Windows XP SP1 Internet Explorer 6 SP2 - Windows XP SP2 Interne...

EEYE: Sun Java WebStart JNLP Stack Buffer Overflow Vulnerability

Sun Java WebStart JNLP Stack Buffer Overflow Vulnerability Release Date: July 5, 2007 Date Reported: Jan 19, 2007 Severity: High Remote Code Execution Vendor: Sun Microsystems Systems Affected: Java Runtime Environment 6 Update 1, and earlier Java Runtime Environment 5 Update 11, and earlier...

EEYE: Yahoo Webcam ActiveX Controls Multiple Buffer Overflows

Yahoo Webcam ActiveX Controls Multiple Buffer Overflows Release Date: June 8, 2007 Date Reported: June 5, 2007 Severity: High Remote Code Execution Vendor: Yahoo!, Inc. Systems Affected: Yahoo Messenger 8 for Windows Overview: eEye Digital Security has discovered two critical vulnerabilities in...

EEYE: Windows Vista CSRSS Dangling Process Pointer Privilege Escalation

Windows Vista CSRSS Dangling Process Pointer Privilege Escalation Release Date: April 10, 2007 Date Reported: January 19, 2007 Severity: Medium Local Privilege Escalation to SYSTEM Vendor: Microsoft Systems Affected: Windows Vista Overview: eEye Digital Security has discovered a local privilege...

Discloser <= 0.0.4 (fileloc) Remote File Include Vulnerabilities

No description provided by source. | | | discloser 0.0.4 Remote File Inclusion Vulnerability | | Download: http://optusnet.dl.sourceforge.net/sourceforge/discloser/discloser-0.0.4.tar.gz | |Contact| | | Discoverd by: Arash RJ | | Team: PersianFox Digital Security Team | | URL:...

snif <= 1.5.2 (index.php) Remote File Inclusion Vulnerability

No description provided by source. snif simple and nice index file Remote File Include Vulnerability Download Site: http://www.bitfolge.de/download/snif152.zip Found & Exploiting By: S.W.A.T. advistory: wWw.Xmors.CoM - wWw.XmorS.NeT POC:...

wisi-sql.txt

By: Jesus Tovar mail: [email protected] Greetz: Dario Struz Vendor: http://www.wsicorporate.com Digital Security Owner Dork: "Created and maintained by WSI" File Bug: /login.asp /admin/login.asp /admin/request.asp Sql Injection : ' or 'x'='x Site Examples: http://host.com/admin/login.asp...