3819 matches found
WordPress Plugin Super CAPTCHA 2.2.4 - SQL Injection
Exploit Title: WordPress Super CAPTCHA plugin Accounts Flagged'; for$i=0;$iusers ." SET spam='1' WHERE ID='". $UIDs$i ."'"; mysqlquery"UPDATE ". $wpdb-users ." SET userstatus='1' WHERE ID='". $UIDs$i ."'"; echo'USER ID: '. $UIDs$i .' marked as spammer.';...
About Dedecms variable coverage exploits-vulnerability warning-the black bar safety net
Someone recently broke the dedecms variable coverage holes,it is also a quite interesting vulnerability, and in some cases dedecms this variable vulnerability to exist for so long in some people are many years,about six months ago I also independently discovered by 本文 [email protected] Write ...
WeBid <= 1.0.2 (converter.php) Remote Code Execution Exploit
Exploit for php platform in category web applications checkmysql$res, $query, LINE, FILE; 157. $itemtitle = mysqlresult$res, 0, 'title'; Input passed through $REQUEST'auctionid' isn't properly sanitised before being used in the SQL query at line 154. - Vulnerable code to SQL injection works with...
Nmap NSE net: http-php-version
Attempts to retrieve the PHP version from a web server. PHP has a number of magic queries that return images or text that can vary with the PHP version. This script uses the following queries: '/?=PHPE9568F36-D428-11d2-A769-00AA001ACF42': gets a GIF logo, which changes on April Fool's Day...
dalYlak Cms SQLInjection Vulnerability
Exploit for php platform in category web applications + Exploit Title: dalYlak Cms SQLInjection Vulnerability + Author : Net.Edit0r + Data : 2011-04-26 + E-mail : email protected + Home : http://security-war.com and Black-hg.com + dork : "Powred by dalYlak.com" + Versian : All Ver + Category : We...
php 5.3.2,5.3.3存在magic_quote sql注射绕过
No description provided by source...
Eircom Netopia Router Backdoor
++++++++++++++++++++ FULL DISCLOSURE OF EIRCOM NETOPIA ROUTER BACKDOOR VULNERABILITY! Yes, failcom suck, and they did it again. DERP! They gave us a nice TELNET shell into their routers, and now we can mess about 'cos it spawns a root shell by magic! and magic is the actual command! They also lef...
'Quick Polls' Local File Inclusion & Deletion Vulnerabilities (CVE-2011-1099)
'Quick Polls' Local File Inclusion & Deletion Vulnerabilities CVE-2011-1099 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- Two vulnerabilities exist in 'Quick Polls' providing local file inclusion & local file deletion due to null-byte attacks...
Quick Polls 1.0.1 Local File Inclusion / Deletion
'Quick Polls' Local File Inclusion & Deletion Vulnerabilities CVE-2011-1099 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- Two vulnerabilities exist in 'Quick Polls' providing local file inclusion & local file deletion due to null-byte attacks...
WordPress Plugin PHP Speedy 0.5.2 - 'admin_container.php' Remote Code Execution
-d OPTIONS host: target server ip/hostname path: directory path to wordpress Options: -pip:port:...
Magic Music Editor Buffer Overflow Exploit
Exploit for windows platform in category local exploits !/usr/bin/perl +Exploi Title: Exploit Buffer Overflow Magic Music Editor +Date: 03\01\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.magic-video-software.com/downloadserver/Magic-Music-Editor.exe +POC Found By:...
Magic Music Editor - Local Buffer Overflow
Magic Music Editor - Local Buffer Overflow !/usr/bin/perl +Exploi Title: Exploit Buffer Overflow Magic Music Editor +Date: 03\01\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.magic-video-software.com/downloadserver/Magic-Music-Editor.exe +POC Found By:...
Magic Music Editor 8.12.2.11 Buffer Overflow
!/usr/bin/perl +Exploi Title: Exploit Buffer Overflow Magic Music Editor +Date: 03\01\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.magic-video-software.com/downloadserver/Magic-Music-Editor.exe +POC Found By: AtT4CKxT3rR0r1SThttp://www.exploit-db.com/exploits/16255/ +Version: 8.12.2.11...
Magic Music Editor - Local Buffer Overflow
!/usr/bin/perl +Exploi Title: Exploit Buffer Overflow Magic Music Editor +Date: 03\01\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.magic-video-software.com/downloadserver/Magic-Music-Editor.exe +POC Found By: AtT4CKxT3rR0r1SThttp://www.exploit-db.com/exploits/16255/ +Version: 8.12.2.11...
Magic Music Editor .cda Denial of Service
Exploit for windows platform in category dos / poc !/usr/bin/perl Exploit Title: Magic Music Editor .cda DOS Version : All Version Author : AtT4CKxT3rR0r1ST email protected Download : http://www.magic-video-software.com/magicmusiceditor/download.html Sp3C!4L Gr34T$ T0 h1ch4m my $file= "DOS.cda"; ...
Magic Music Editor - '.cda' Denial of Service
!/usr/bin/perl Exploit Title: Magic Music Editor .cda DOS Version : All Version Author : AtT4CKxT3rR0r1ST [email protected] Download : http://www.magic-video-software.com/magicmusiceditor/download.html Sp3C!4L Gr34T$ T0 h1ch4m my $file= "DOS.cda"; my $junk = "\x41" x 80000; open$FILE,"$file"; print $FI...
PT-2011-2346 · Tinybb · Tinybb
Name of the Vulnerable Software and Affected Versions: tinyBB version 1.2 Description: The issue allows remote attackers to execute arbitrary SQL commands when magic quotes gpc is disabled. This can be achieved via the id parameter in a profile action to "index.php". Recommendations: For tinyBB...
Lotus CMS Fraise 3.0 - Local File Inclusion / Remote Code Execution
!/usr/bin/python Lotus CMS Fraise v3.0 LFI - Remote Code Execution Exploit greetz Tecr0C :0 Vuln: lines 15-23 in core/lib/router.php ---------- sof //Get page request if any $page = $this-getInputString"page", "index"; //Get plugin request if any $plugin = $this-getInputString"system", "Page"; //...
Joomla! Plugin Captcha 4.5.1 - Local File Disclosure
:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ posdubatgmail.com Joomla Captcha Plugin 0 95 for $i = 0; $i...
Code injection
Cisco IOS before 15.01XA does not properly handle IRC traffic during a specific time period after an initial reload, which allows remote attackers to cause a denial of service device reload via an attempted connection to a certain IRC server, related to a "corrupted magic value," aka Bug ID...