226 matches found
VigileCMS <= 1.8 Stealth Remote Command Execution Exploit
No description provided by source. !/usr/bin/python -- coding: iso-8859-15 -- ''' | || | | | | | ' / -||| ' / | '/ / / \ \ / ||||||| ./,|| ,,/\ || ------------------------------------------------------------------------------------------------ This is a Public Exploit. 22/11/2007...
New Twitter Login Verification System Avoids SMS Codes
Twitter is rolling out an updated login verification system for iPhone and Android that uses a novel cryptographic scheme that is designed to be resilient against attack and ensures that the private key never leaves the user’s device. The system doesn’t rely on SMS to send codes to users for logi...
Micro Login System v 1.0 Read password
Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 蒸...
Unfixed XSS vulnerability at www.transfermarkt.ch
Security researcher Viper.aT, has submitted on 30/06/2010 a cross-site-scripting XSS vulnerability affecting www.transfermarkt.ch, which at the time of submission ranked 239935 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2011. It is...
Logoshows BBS 2.0 (DD/ICH) Multiple Remote Vulnerabilities
No description provided by source. Logoshows BBS 2.0 DD ZoRLu yildirimordulari.com - z0rlu.blogspot.com - turkguvenligi.info ref: http://www.milw0rm.com/exploits/9389 vuln: http://www.logoshows.com/bbs/database/globepersonnel.mdb Logoshows BBS 2.0 ICH yildirimordulari.com - z0rlu.blogspot.com -...
Simple Text-File Login script 1.0.6 (DD/RFI) Multiple Vulnerabilities
No description provided by source. START 0x01 Informations: Script : Simple Text-File Login script 1.0.6 Download : http://www.hotscripts.com/jump.php?listingid=36777&jumptype=1 Vulnerability : Remote File Inclusion / Sensitive Data Disclosure Author : Osirys Contact : osirysatlivedotit Notes :...
Simple Text-File Login script 1.0.6 (DD/RFI) Multiple Vulnerabilities
Exploit for unknown platform in category web applications ===================================================================== Simple Text-File Login script 1.0.6 DD/RFI Multiple Vulnerabilities ===================================================================== START 0x01 Informations: Script...
Simple Document Management System 1.1.4 SQL Injection Auth Bypass
No description provided by source. SDMS Simple Document Management System v1.1.4 SQL Injection Author: Yuri Program: SDMS Simple Document Management System Version: v1.1.4 and probably all older versions as well Website: http://sdms.cafuego.net/ How it works The login system is very insecure, thi...
sdms-sql.txt
SDMS Simple Document Management System v1.1.4 SQL Injection Author: Yuri Program: SDMS Simple Document Management System Version: v1.1.4 and probably all older versions as well Website: http://sdms.cafuego.net/ How it works The login system is very insecure, this is the code we are going to abuse...
Simple Document Management System 1.1.4 - Authentication Bypass
Simple Document Management System 1.1.4 - Authentication Bypass SDMS Simple Document Management System v1.1.4 SQL Injection Author: Yuri Program: SDMS Simple Document Management System Version: v1.1.4 and probably all older versions as well Website: http://sdms.cafuego.net/ How it works The login...
silentum-xss.txt
+===============================================================+ + Silentum LoginSys v1.0.0 XSS Cross-Site Scripting + +===============================================================+ Authors: Maximiliano Soler. Web: www.maximilianosoler.com.ar Product: Silentum LoginSys v1.0.0 Description:...
pubwin Internet cafe Charging System fast crack-vulnerability warning-the black bar safety net
First step: cut away pubwin.exe can be achieved,press the“win” key, select “Search—files or folders” Search “pubwin.exe” the program cut to other places“pubwin.exe”the program itself did not ban the“search”of this one If the“ win” key can't use,you can use input vulnerability to find out...
Shadowed Portal <= 5.7d3 (POST) Remote File Inclusion Vulnerability
No description provided by source. / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / / &n...
VigileCMS <= 1.8 Stealth Remote Command Execution Exploit
Opencosmo Security http://www.opencosmo.com http://www.opencosmo.com/news.php?readmore=15 VigileCMS = 1.8 Stealth Remote Command Execution Exploit Crediti: The:Paradox Applicazione: VigileCMS Versione: 1.8 Impatto: Remote Command Execution Rischio: 3/5 Exploit: !/usr/bin/python -- coding:...
VigileCMS <= 1.8 Stealth Remote Command Execution Exploit
Exploit for unknown platform in category web applications ========================================================= VigileCMS = 1.8 Stealth Remote Command Execution Exploit ========================================================= !/usr/bin/python -- coding: iso-8859-15 -- ''' | || | | | | | ' /...
VigileCMS 1.8 - Stealth Remote Command Execution
!/usr/bin/python -- coding: iso-8859-15 -- ''' | || | | | | | ' / -||| ' / | '/ / / \ \ / ||||||| ./,|| ,,/\ || ------------------------------------------------------------------------------------------------ This is a Public Exploit. 22/11/2007 dd-mm-yyyy...
VigileCMS 1.8 - Stealth Remote Command Execution
VigileCMS 1.8 - Stealth Remote Command Execution !/usr/bin/python -- coding: iso-8859-15 -- ''' | || | | | | | ' / -||| ' / | '/ / / \ \ / ||||||| ./,|| ,,/\ || ------------------------------------------------------------------------------------------------ This is a Public Exploit...
CVE-2007-5787
Micro Login System 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a file containing a password via a direct request for userpwd.txt...
CVE-2007-5787
Micro Login System 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a file containing a password via a direct request for userpwd.txt...
CVE-2007-5787
CVE-2007-5787 affects Micro Login System 1.0. The vulnerability is due to insufficient access control that allows files containing passwords to be accessed from the web root. Specifically, an attacker can download a password file (userpwd.txt) by directly requesting it, enabling unauthorized disc...