DreamBox DM800 1.5rc1 - File Disclosure

!/usr/bin/perl DreamBox DM800 :0:0:root:/home/root:/bin/sh daemon::1:1:daemon:/usr/sbin:/bin/sh bin::2:2:bin:/bin:/bin/sh sys::3:3:sys:/dev:/bin/sh sync::4:65534:sync:/bin:/bin/sync games::5:60:games:/usr/games:/bin/sh man::6:12:man:/var/cache/man:/bin/sh lp::7:7:lp:/var/spool/lpd:/bin/sh...

DreamBox DM800 1.5rc1 Remote Root File Disclosure Exploit

Exploit for hardware platform in category remote exploits !/usr/bin/perl DreamBox DM800 :0:0:root:/home/root:/bin/sh daemon::1:1:daemon:/usr/sbin:/bin/sh bin::2:2:bin:/bin:/bin/sh sys::3:3:sys:/dev:/bin/sh sync::4:65534:sync:/bin:/bin/sync games::5:60:games:/usr/games:/bin/sh...

DreamBox DM800 1.5rc1 Remote File Disclosure

!/usr/bin/perl DreamBox DM800 :0:0:root:/home/root:/bin/sh daemon::1:1:daemon:/usr/sbin:/bin/sh bin::2:2:bin:/bin:/bin/sh sys::3:3:sys:/dev:/bin/sh sync::4:65534:sync:/bin:/bin/sync games::5:60:games:/usr/games:/bin/sh man::6:12:man:/var/cache/man:/bin/sh lp::7:7:lp:/var/spool/lpd:/bin/sh...

Medium: perl-libwww-perl

Issue Overview: The Net::HTTPS module in libwww-perl LWP before 6.00, as used in WWW::Mechanize, LWP::UserAgent, and other products, when running in environments that do not set the If-SSL-Cert-Subject header, does not enable full validation of SSL certificates by default, which allows remote...

CF Image Hosting Script 1.3.82 File Disclosure

!/usr/bin/perl CF Image Hosting Script 1.3.82 File Disclosure Exploit Bugfounder and Exploitcoder: bd0rk Contact: www.sohcrew.school-of-hack.net eMail: bd0rkathackermail.com Affected-Software: CF Image Hosting Script 1.3.82 Vendor: http://www.phpkode.com Download:...

Zazavi 1.2.1 Cross Site Request Forgery / Shell Upload

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

OneFileCMS 1.1.1 Code Execution

!/usr/bin/perl Exploit Title: OneFileCMS v.1.1.1 Remote Code Execution Exploit Date: 22/8/2011 Author: mr.pr0n @pr0n Homepage: http://ghostinthelab.wordpress.com/ - http://s3cure.gr Software Link: http://onefilecms.com/download/onefilecmssitev1.1.1.zip Version: OneFileCMS v.1.1.1 Tested on: Linux...

altuntop uyelik.v1 Database Disclosure Exploit

Exploit for php platform in category web applications !/usr/bin/perl -w altuntop uyelik.V1 Database Disclosure Exploit Found & Coded: indoushka Date: 08/08/2011 Home: http://www.1337day.com/ Dz-Ghost Team ===== Saoucha Star08 Cyber Sec theblind74 XproratiX onurozkan n2n Meher Assel...

am4ss v1.1 Remote Code Execution

Exploit for php platform in category web applications !/usr/bin/perl -w Exploit Title: am4ss v1.1 Remote Code Execution Version: 1.1 Author : Or4nG.M4n & i-Hmx ; for$faris=0;$faris; $exec = $func."'".$execut."';"; $cmd = encodebase64$exec; $ex = $a1 ."\x2F". $a2 ."global.php?fa=". $cmd...

CVE-2011-2685

Stack-based buffer overflow in the Lotus Word Pro import filter in LibreOffice before 3.3.3 allows remote attackers to execute arbitrary code via a crafted .lwp file...

Joomla! Component JE Story Submit - Local File Inclusion

Joomla! Component JE Story Submit - Local File Inclusion ! /usr/bin/perl -w Joomla Component JE Story Submit Local File Inclusion Vulnerability Author : v3n0m Date : July, 21-2011 GMT +7:00 Jakarta, Indonesia Software : JE Story Submit Vendor : http://joomlaextensions.co.in/ License : GPLv2 or...

Joomla JE K2 Story Submit Local File Inclusion

! /usr/bin/perl -w Joomla Component JE Story Submit Local File Inclusion Vulnerability Author : v3n0m Date : July, 21-2011 GMT +7:00 Jakarta, Indonesia Software : JE Story Submit Vendor : http://joomlaextensions.co.in/ License : GPLv2 or later Tested On: Joomla 1.5.x irc.yogyacarderlink.web.id -...

Joomla Component JE K2 Story Submit Local File Inclusion Vulnerability

Exploit for php platform in category web applications ! /usr/bin/perl -w Joomla Component JE Story Submit Local File Inclusion Vulnerability Author : v3n0m Date : July, 21-2011 GMT +7:00 Jakarta, Indonesia Software : JE Story Submit Vendor : http://joomlaextensions.co.in/ License : GPLv2 or later...

OpenOffice memory corruption

Memory corruption on .lwp files import...

[SECURITY] [DSA 2275-1] openoffice.org security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2275-1 [email protected] http://www.debian.org/security/ Nico Golde July 7, 2011 http://www.debian.org/security/faq -...

vBseo（vBSEO remote execution vulnerability-vulnerability warning-the black bar safety net

!/ usr/bin/perl vBseo 3.1.0 vbseo.php vbseourl Remote Command Execution Exploit vendor: http://www.vbseo.com/ Author: Jose Luis Gongora Fernandez a. k. a JosS twitter: @JossGongora mail: joss. xroot0x40gmail0x2ecom site: http://www.hack0wn.com/ This was written for educational purpose. Use it at...

vBseo 3.1.0 Remote Command Execution

!/usr/bin/perl vBseo 3.1.0 vbseo.php vbseourl Remote Command Execution Exploit vendor: http://www.vbseo.com/ Author: Jose Luis Gongora Fernandez a.k.a JosS twitter: @JossGongora mail: joss.xroot0x40gmail0x2ecom site: http://www.hack0wn.com/ This was written for educational purpose. Use it at your...

PHP-Nuke 8.3 - upload.php Arbitrary File Upload (2)

PHP-Nuke 8.3 - upload.php Arbitrary File Upload 2 source: https://www.securityfocus.com/bid/48257/info Phpnuke is prone to an arbitrary-file-upload vulnerability because the application fails to adequately sanitize user-supplied input. An attacker can exploit this issue to upload arbitrary code a...

byTolinet Agencia <= Remote (conexion.php) Disclosure Exploit

Exploit for php platform in category web applications byTolinet Agencia Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail : submitat1337day.com 1 0 0 1 1 0 I'm KnocKout member from Inj3ct0r Team 1 1 0...

PikaCMS - Multiple Local File Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/48068/info PikaCMS is prone to multiple local file-disclosure vulnerabilities because it fails to adequately validate user-supplied input. Exploiting these vulnerabilities may allow an attacker to obtain potentially sensitive information from local files ...