Job2C 4.2 Local File Inclusion

Job2C version 4.2 adtype MulTiple LFi Script: http://www.w2b.ru/download/Job2C.zip ---------------------------------------------------------- Discovered By: ZoRLu Date: 15.04.2009 Home: yildirimordulari.com / dafgamers.com / z0rlu.blogspot.com contact: [email protected] N0T: Herkes Hecker Olmu...

Check Point Firewall-1 PKI Web Service HTTP Header Remote Overflow

No description provided by source. - Check Point Firewall-1 PKI Web Service HTTP Header Remote Overflow - Description The Check Point Firewall-1 PKI Web Service, running by default on TCP port 18264, is vulnerable to a remote overflow in the handling of very long HTTP headers. This was discovered...

RavenNuke avartarlist.php模块PHP代码注入漏洞

BUGTRAQ ID: 33787 RavenNuke是基于PHP和MySQL的自动新闻发布和内容管理系统。 RavenNuke的avatarlist.php模块没有正确地验证对pregreplace调用所传送的patterns和replacements参数，远程攻击者可以通过向服务器提交恶意请求导致注入并执行任意PHP代码。以下是有漏洞的代码段： $patterns0 = '/.gif/'; $patterns1 = '/.png/'; ... $replacements1 = ''; $replacements0 = ''; ... $entryname =...

Nokia Phoenix Service Software ActiveX控件多个缓冲区溢出漏洞

BUGTRAQ ID: 33726 Nokia Phoenix Service Software是用于刷机诺基亚手机的软件。 Nokia Phoenix Service...

EPOLL SYSTEM 3.1 - 'Password.dat' Disclosure

!/usr/bin/python Portal Name: EPOLL SYSTEM Version : All version 'Google Dork : Powered by Egorix Exploit Coded by: PouyaServer Exploit Discovered by: PouyaServer Contact Me : [email protected] Epoll system login page = www.site.com/Path/admin.php import urllib import sys import parser...

PowerNews 2.5.4 (news.php newsid) SQL Injection Vulnerability

No description provided by source. ...:::::powernews 2.5.4 SQL Injection Vulnerability::::.... Virangar Security Team www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Ali007,Zahra & all virangar members & all hackerz greetz:to...

checknew-sql.txt

!/usr/bin/perl -w ===================================================================== Check New 4.52 findoffice.php search Remote SQL Injection Exploit ===================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CW...

nitrotech-rfisql.txt

Name: Nitrotech 0.0.3a Multiple Remote Vulnerabilities Download: http://sourceforge.net/project/downloading.php?groupname=nitrotech&filename=nitrotech003a.zip&usemirror=garr Author: Osirys, thanks to x0r Contact: [email protected] Nitrotech cms is vulnerable to multiple vulnerabilities, like remote...

FTPzik (XSS/LFI) Multiple Remote Vulnerabilities

No description provided by source. ------------------------------------------------------------------------- -- JIKO FroM No-exploit.Com --- ------------------------------------------------------------------------- Author : jiko email : [email protected] Home : www.no-exploit.Com Script : FTPZI...

Minigal b13 (index.php list) Remote File Disclosure Exploit

Exploit for unknown platform in category web applications =========================================================== Minigal b13 index.php list Remote File Disclosure Exploit =========================================================== ?php settimelimit0; function findpass$data $pass =...

E-topbiz Domain Shop v2.0 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= E-topbiz Domain Shop v2.0 Auth Bypass SQL Injection Vulnerabilities -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Script: E-topbiz...

aspWebAlbum 3.2 (Upload/SQL/XSS) Multiple Remote Vulnerabilities

Discovered bay AleminKrali ==== - aspWebAlbum 3.2 - Script Download "http://www.fullrevolution.com" - aspWebAlbum 3.2 Single Site License | $60.00 : - HomePage al3m.blogspot.com - [email protected]...

linux/x86 rm -rf / attempts to block the process from being stopped

Exploit for linux/x86 platform in category shellcode =================================================================== linux/x86 rm -rf / attempts to block the process from being stopped =================================================================== / x86 linux rm -rf / which attempts to...

Discuz! 6.0.1 - 'searchid' SQL Injection

=5 & mysql=4.1 BY james +------------------------------------------------------------------+ "; if$argc4 $host=$argv1; $port=$argv2; $path=$argv3; $uid=$argv4; else echo "Usage: php ".$argv0." host port path uid\n"; echo "host: target server \n"; echo "port: the web port, usually 80\n"; echo "pat...

ATutor 1.6.1-pl1 - 'import.php' Remote File Inclusion

ATutor Course Server Rfi AUTHOR : IRCRASH R3d.W0rm Discovered by : IRCRASH R3d.W0rm Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash - R3d.w0rm Script Download : www.atutor.ca DORK : "Web site engine's code is copyright © 2001-2007 ATutor®" Note : You must login , then use rfi bug ...

Linux Kernel 2.6.x chown() Group Ownership Alteration Exploit

No description provided by source. / $Id: raptorchown.c,v 1.1 2004/12/04 14:44:38 raptor Exp $ raptorchown.c - syschown missing DAC controls on Linux Copyright c 2004 Marco Ivaldi [email protected] Unknown vulnerability in Linux kernel 2.x may allow local users to modify the group ID of file...

Scripteen Free Image Hosting Script 1.2 - cookie Pass Grabber

Scripteen Free Image Hosting Script 1.2 - cookie Pass Grabber Scripteen Free Image Hosting Script V1.2. cookie Admin Password Grabber Exploit Coded By RMx - Liz0ziM Web:www.biyosecurity.com Dork:"Powered by Scripteen Free Image Hosting Script V1.2" TARGET HOST: Example:www.xxxx.com TARGET PATH:...

BP Blog 6.0 (id) Remote Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================= BP Blog 6.0 id Remote Blind SQL Injection Vulnerability ========================================================= + Info: Software: bp blog HomePage: http://blog.betaparticle.com/...

openauto-sql.txt

|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | | |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| Title :: Remote SQL...

joomlaflipping-sql.txt

A L G E R I A S E C U R I T Y C R E W Joomla Component FlippingBook 1.0.4 SQL Injection Vulnerability found by: cO2 Algeria Security Crew Contact: c02athotmail.de Website: http://www.Dz-Secure.com Greetings: to all hackers DZ . . . ScriptName : 'Joomla' ModuleName : 'FlippingBook' Version : 1.0.4...