102 matches found
Empire cms backstage to get a shell vulnerability and fix-vulnerability warning-the black bar safety net
The first method: add a custom page 6.0 on experiment success Template management - add custom page - page name casually--file name: xx. asp;. html--the page content--pony copy the contents into it Save the post and then the Admin page Click you can go see your horse, generally in the root...
phpFK <= v7.0.5 Remote Code Execution
Exploit for php platform in category web applications ===================================== phpFK = v7.0.5 Remote Code Execution ===================================== +-------------------------------------------------------------------------------------------------------------------------------+ ...
SLoc-DoS shellcode 55 bytes
55 bytes SLoc-DoS shellcode by Magnefikko. Shellcode exploit for linux platform include include / by Magnefikko 14.04.2010 [email protected] Promhyl Studies :: http://promhyl.oz.pl Subgroup: PRekambr Name: 55 bytes SLoc-DoS shellcode Platform: Linux x86 unlink"/etc/shadow"; execve"poweroff", 0...
TLS / SSLv3 vulnerability explained (New ways to leverage the vulnerability)
Dear List, I updated the whitepaper with a lot of new information, some leveraging the vulnerability in other ways that certainly increase the effectiveness and impact of this vulnerability. A brief warning to those that think they are safe because they don't accept client-side renegotiations...
TLS / SSLv3 vulnerability explained (DRAFT)
Dear List, This paper explains the vulnerability for a broader audience and summarizes the information that is currently available. The document is prone to updates and is believed to be accurate by the time of writing. Post: http://blog.g-sec.lu/2009/11/tls-sslv3-renegotiation-vulnerability.html...
FanUpdate 2.2.1 show-cat.php SQL Injection Vulnerability
No description provided by source. Author : InSecurity Romania Website : https://insecurity.ro Vulnerable script : FanUpdate 2.2.1 - Explanation See show-cat.php file ----------------------------------------------------------------------------------------------- if !isset$listingid exit;...
Phishing the phishers
Security researchers Billy BK Rios and Nitesh Dhanjani infiltrated the phishing ecosystem and learned a great deal about how they operate. In this video, they explain their findings:...
Simple Machines Forum (SMF) 1.1.4 - SQL Injection
Simple Machines Forum SMF 1.1.4 - SQL Injection !/usr/bin/python """ ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | | |||| /| / /...
revokebbrc11-sql.txt
!/usr/bin/python """ ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / ================================================================================================= This is a public Exploit...
PHP-Fusion 6.01.14 - Blind SQL Injection
!/usr/bin/python """ ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / ================================================================================================= This was a priv8 Exploit...
ExBB 0.22 - LocalRemote File Inclusion
ExBB 0.22 - LocalRemote File Inclusion ==================================================================================================== / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / ==================================================================================================== This is a...
myphp30-sql.txt
================================================================================================= / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / ================================================================================================= This is a Public Exploit. Date: 03/01/2008 dd,mm,yyyy...
Dokeos 1.8.4 Bypass Upload Shell From Your Profile Vulnerability
No description provided by source. Name : dokeos-1.8.4 Bypass Upload Shell From Your Profile Your Cpanel Download From : http://www.dokeos.com/download/dokeos-1.8.4.zip Found By : RoMaNcYxHaCkEr Home Page : Not Yet : Google Dork : Platform Dokeos 1.8.4 2007...
Inout Search Engine - Remote Code Execution
!/usr/bin/php -q -d shortopentag=on Thanks to rgod for the php code and Marty for the Love "; if $argc this is not a protection for two reasons: i everyone can make a cookie with false credentials ii there isn't any exit or die function after header'Location: index.php' Now look at create...
Inout Meta Searh engine Remote Code Execution
!/usr/bin/php -q -d shortopentag=on ? echo " Inout Search Engine all version Remote Code Execution Exploit by BlackHawk [email protected] http://itablackhawk.altervista.org Thanks to rgod for the php code and Marty for the Love "; if $argc3 echo "Usage: php ".$argv0." Host Path cmd Host: targe...
AlstraSoft Template Seller Pro <= 3.25 Admin Password Change Exploit
Exploit for unknown platform in category web applications ==================================================================== AlstraSoft Template Seller Pro = 3.25 Admin Password Change Exploit ==================================================================== !/usr/bin/php -q -d shortopentag=...
AlstraSoft Live Support v1.21 Admin Credential Retrieve Exploit
Exploit for unknown platform in category web applications =============================================================== AlstraSoft Live Support v1.21 Admin Credential Retrieve Exploit =============================================================== !/usr/bin/php -q -d shortopentag=on ? echo "...
Kubix <= 0.7 Multiple Remote Vulnerabilities Exploit
Exploit for unknown platform in category web applications ==================================================== Kubix Related: path of the file to include\r\n"; echo " |- Es: php ".$argv0." localhost /kubix/ 1 ../../../../../etc/passwd\r\n\r\n"; echo " 2 - Login Bypass PoC\r\n"; echo " |- Related:...
Joomla <= 1.0.9 (Weblinks) Remote Blind SQL Injection Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "Joomla = 1.0.9 'Weblinks' blind SQL injection / admin credentials\r\n"; echo "disclosure exploit benchmark vesion\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n"; if $argc5...
ICMP-based blind connection-reset attack
Folks, Here's the packet trace and the explanation of an ICMP-based blind connection-reset attack. In our sample scenario, a web-client 10.0.0.1, TCP port 3270 is downloading a file from a web-server 192.168.0.1, TCP port 80. If the TCP/IP implementations of both end-points are vulnerable,you can...