984 matches found
QK SMTP <= 3.01 (RCPT TO) Remote Buffer Overflow Exploit (pl)
No description provided by source. !/bin/perl http://www.securityfocus.com/bid/20681 tested on winXp Pro SP0 English/winXp Pro SP2 Italian/win 2k SP4 Italian/English return address is universal bind a remote cmd.exe on target host on 4444 port; based on expanders original exploit credit to Greg...
QK SMTP 3.01 - RCPT TO Remote Buffer Overflow (2)
QK SMTP 3.01 - RCPT TO Remote Buffer Overflow 2 !/bin/perl https://www.securityfocus.com/bid/20681 tested on winXp Pro SP0 English/winXp Pro SP2 Italian/win 2k SP4 Italian/English return address is universal bind a remote cmd.exe on target host on 4444 port; based on expanders original exploit...
Formbankserver 1.9 (Name) Remote Denial of Service Exploit
Exploit for unknown platform in category dos / poc ========================================================== Formbankserver 1.9 Name Remote Denial of Service Exploit ========================================================== !perl Vulnerability found by Bl0od3r visit http://dc3.dl.am to see more...
PHP-Update <= 2.7 (admin/uploads.php) Remote Code Execution Exploit
No description provided by source. !/usr/bin/perl rgod u fucking little piece of shit faggot. way to ruin a private exploit, scumbag use strict; use IO::Socket; use MIME::Base64; use Getopt::Std; my $app = "PHP-Update 2.7"; my $type = "Remote Code Execution"; my $author = "undefined1"; my $date =...
The Classified Ad System 1.0 - 'main' SQL Injection
!/usr/bin/perl Script Name: The Classified Ad System 1.0 main Remote SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.mxmania.net $$ : 29.99 . .. : ajann,Turkey use IO::Socket; if@ARGV : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are...
PHP-Update <= 2.7 (admin/uploads.php) Remote Code Execution Exploit
Exploit for unknown platform in category web applications =================================================================== PHP-Update = 2.7 admin/uploads.php Remote Code Execution Exploit =================================================================== !/usr/bin/perl rgod u fucking little...
The Classified Ad System 1.0 (main) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================================ The Classified Ad System 1.0 main Remote SQL Injection Exploit ================================================================ !/usr/bin/perl Script Name: The Classified Ad...
MTCMS 2.0 - adminadmin_settings.php Remote File Inclusion
MTCMS 2.0 - adminadminsettings.php Remote File Inclusion !/usr/bin/perl +------------------------------------------------------------------------------------------- + MTCMS + Requirements.......: registerglobals = on...
MTCMS 2.0 - '/admin/admin_settings.php' Remote File Inclusion
!/usr/bin/perl +------------------------------------------------------------------------------------------- + MTCMS + Requirements.......: registerglobals = on +------------------------------------------------------------------------------------------- use Getopt::Long; use URI::Escape; use...
File Upload Manager <= 1.0.6 (detail.asp) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ====================================================================== File Upload Manager : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n";...
acFTP FTP Server 1.5 - RESTPBSZ Remote Denial of Service
acFTP FTP Server 1.5 - RESTPBSZ Remote Denial of Service acFTP 1.5 REST/PBSZ Denial of Service author: gbr mail: gabrielquadrosathotmail.com use IO::Socket; if!defined$ARGV0 print "Usage: $0 ip port\n"; exit; my $sock = new IO::Socket::INETPeerAddr = $ARGV0, PeerPort = $ARGV1, Proto = 'tcp' or di...
Enthrallweb ePages (actualpic.asp) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications =============================================================== Enthrallweb ePages actualpic.asp Remote SQL Injection Exploit =============================================================== !/usr/bin/perl Script Name: Enthrallweb ePages...
TorrentFlux 2.2 - 'maketorrent.php' Remote Command Execution
The variable announce in maketorrent.php is not sanitised before being used. The announce variable goes through various stages throughout the script, then it is passed as a into an exec function. This occurs in the middle of the string which is passed to the exec function. Therefore it is possibl...
TorrentFlux 2.2 (maketorrent.php) Remote Command Execution Exploit
Exploit for unknown platform in category web applications ================================================================== TorrentFlux 2.2 maketorrent.php Remote Command Execution Exploit ================================================================== The variable announce in maketorrent.php...
Fantastic News 2.1.4 (news.php) Remote SQL Injection Exploit
No description provided by source. !perl Download:http://fscripts.com/download.php?file=1 use IO::Socket; dc3.dl.am if @ARGV3 else &get; sub get $host=$ARGV0; $path=$ARGV1; $id=$ARGV2; $socket=IO::Socket::INET-newProto="tcp",PeerAddr="$host",PeerPort=80 or die "-Error\n"; print "Connecting!\n";...
TorrentFlux 2.2 (maketorrent.php) Remote Command Execution Exploit
No description provided by source. The variable announce in maketorrent.php is not sanitised before being used. The announce variable goes through various stages throughout the script, then it is passed as a into an exec function. This occurs in the middle of the string which is passed to the exe...
ThinkEdit 1.9.2 (render.php) Remote File Inclusion Vulnerability
No description provided by source. r0ut3r Presents... Another r0ut3r discovery! writ3r at gmail.com ThinkEdit Remote File Inclusion Exploit Software: ThinkEdit 1.9.2 Vendor: http://www.thinkedit.org/ Released: 2006/12/08 Discovered & Exploit By:...
LeighBusinessEnterprisesWebHelpDeskSQL注入漏洞 Exploit
No description provided by source. Noam Rathaus （[email protected]）提供了如下测试方法： !/usr/bin/perl use IO::Socket; use strict; my $host = $ARGV0; my $Path = $ARGV1; my $Email = $ARGV2; my $Password = $ARGV3; if $ARGV+1 4 print "lbehelpdesk.pl host path email password\n"; exit0; my $remote =...
thinkedit-rfi.txt
r0ut3r Presents... Another r0ut3r discovery! writ3r at gmail.com ThinkEdit Remote File Inclusion Exploit Software: ThinkEdit 1.9.2 Vendor: http://www.thinkedit.org/ Released: 2006/12/08 Discovered & Exploit By: r0ut3r writ3r at gmail.com Note: The information provided in this document is for...
AT-TFTP <= 1.9 (Long Filename) Remote Buffer Overflow Exploit
No description provided by source. !/usr/bin/perl -w acaroatjervus.it http://www.securityfocus.com/bid/21320 [email protected] is credited with the discovery of this vulnerability use IO::Socket; if!$ARGV1 print "Uso: atftp-19.pl victim port\n\n"; exit; $victim = IO::Socket::INET-newProto='udp',...