5622 matches found
CVE-2008-6415
Buffer overflow in YoungZSoft CCProxy 6.5 might allow remote attackers to execute arbitrary code via a CONNECTION request with a long hostname...
Buffer overflow
Buffer overflow in YoungZSoft CCProxy 6.5 might allow remote attackers to execute arbitrary code via a CONNECTION request with a long hostname...
CVE-2008-6415
Buffer overflow in YoungZSoft CCProxy 6.5 might allow remote attackers to execute arbitrary code via a CONNECTION request with a long hostname...
Orbit <= 2.8.4 Long Hostname Remote Buffer Overflow Exploit
No description provided by source. html body Orbit =2.8.4 Long Hostname Buffer Overflow Vulnerability Pocbr / Vulnerability discovered by Secuniabr / Exploit and POC provided by: JavaGurubr / br / Right click on link below then choose download by orbit, CALC.EXE will pop upbr / br / I got a lot o...
Orbit 2.8.4 Buffer Overflow
Orbit Vulnerability discovered by Secunia Exploit and POC provided by: JavaGuru Right click on link below then choose download by orbit, CALC.EXE will pop up I got a lot of problems when trying to execute shellcode, because a lot of chars was forbidden and I was not able to execute shellcode. Aft...
Orbit 2.4 Buffer Overflow
Orbit Vulnerability discovered by Secunia Exploit and POC provided by: JavaGuru Right click on link below then choose download by orbit, CALC.EXE will pop up I got a lot of problems when trying to execute shellcode, because a lot of chars was forbidden and I was not able to execute shellcode. Aft...
Orbit Downloader 2.8.4 - 'Hostname' Remote Buffer Overflow
Orbit Vulnerability discovered by Secunia Exploit and POC provided by: JavaGuru Right click on link below then choose download by orbit, CALC.EXE will pop up I got a lot of problems when trying to execute shellcode, because a lot of chars was forbidden and I was not able to execute shellcode. Aft...
IF-CMS 2.0 - id Blind SQL Injection
IF-CMS 2.0 - id Blind SQL Injection --+++=======================================================+++-- --+++====== IF-CMS 4 return true; else return false; function usage echo "\nIF-CMS ". "\n+ Ex. : php xpl.php localhost /IF-CMS root". "\n\n"; exit ; if $argc != 4 us...
YapBB <= 1.2 (forumID) Blind SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================== YapBB ". "\n? Ex. : perl $0 localhost /YapBB root abcdefghijklmnopqrstuvwxyz". "\n\n"; sub query my $user, $chr, $pos = @; my $query = "123 OR IF ASCIISUBSTRINGSELECT password FROM "...
CMS Mini <= 0.2.2 Remote Command Execution Exploit
Exploit for unknown platform in category web applications ================================================== CMS Mini ". "\n+ Ex. : php xpl.php localhost /CMSmini". "\n\n"; if $argc != 3 usage; $hostname = $argv 1; $path = $argv 2; $fp = fsockopen $hostname, 80; $post = "message="; $request = "PO...
Motorola Wimax modem CPEi300 (FD/XSS) Multiple Vulnerabilities
No description provided by source. Name : Motorola Wimax modem CPEi300 Multiple Vulnerabilities Author : Usman Saeed Company : Xc0re Security Reasearch Group Homepage : http://www.xc0re.net Note: User needs to logged in! Attack type : Remote Patch Status : Unpatched Exploitation : + Directory...
PLE CMS 1.0 Beta 4.2 SQL Injection
--+++==============================================================+++-- --+++====== PLE CMS 1.0 beta 4.2 Blind SQL Injection Exploit ======+++-- --+++==============================================================+++-- ". "\n+ Ex. : php xpl.php localhost /PLECMS root...
PHP-CMS 1 - Username Blind SQL Injection
PHP-CMS 1 - Username Blind SQL Injection --+++===================================================+++-- --+++====== PHP-CMS 1 Blind SQL Injection Exploit ======+++-- --+++===================================================+++-- 4 return true; else return false; function usage echo "\nPHP-CMS 1 Bli...
PHP-CMS 1 (username) Blind SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================ PHP-CMS 1 username Blind SQL Injection Exploit ================================================ --+++===================================================+++-- --+++====== PHP-CMS 1 Blind SQL...
PHP-CMS 1 - 'Username' Blind SQL Injection
--+++===================================================+++-- --+++====== PHP-CMS 1 Blind SQL Injection Exploit ======+++-- --+++===================================================+++-- 4 return true; else return false; function usage echo "\nPHP-CMS 1 Blind SQL Injection Exploit". "\n+ Author :...
ITLPoll 2.7 Stable2 - Blind SQL Injection
". "\n☢ Ex : ./itlpoll.php localhost /itlpoll password". "\n\n"; exit ; function query $func, $chr, $pos //replace 1' with a valid poll number if you have problems. See hostname/path/?Archive for a list of polls. $query = "1' AND ORDMIDSELECT IFNULLCAST$func AS CHAR10000, CHAR32 FROM itlconfig...
Pardal CMS <= 0.2.0 Blind SQL Injection Exploit
No description provided by source. --+++=============================================================+++-- --+++====== Pardal CMS = 0.2.0 Blind SQL Injection Exploit ======+++-- --+++=============================================================+++-- ?php function usage echo "\nPardal CMS = 0.2.0...
DNS Server hostname.bind Map Hostname Disclosure
It is possible to learn the remote host name by querying the remote DNS server for 'hostname.bind' in the CHAOS domain. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid35371; scriptversion"$Revision: 1.11 $"; scriptcvsdate"$Date: 2011/09/14 15:27:29 $";...
Blue Eye CMS 1.0.0 - 'clanek' Blind SQL Injection
--+++===============================================================+++-- --+++====== Blue Eye CMS ". "\n+ Ex. : php xpl.php localhost /BlueEye admin". "\n\n"; exit ; function query $user, $pos, $chr $query = "x' OR ASCIISUBSTRINGSELECT password FROM blueeyeusers WHERE user = '$user',$pos,1=$chr ...
phpMDJ <= 1.0.3 (id_animateur) Blind SQL Injection Exploit
No description provided by source. --+++=========================================================+++-- --+++====== phpMDJ = 1.0.3 Blind SQL Injection Exploit ======+++-- --+++=========================================================+++-- ?php function query $usr, $chr, $pos $query = "x' OR...