AWStats 6.4 < 6.5 - migrate Remote Command Execution (Metasploit)

$Id: awstatsmigrateexec.rb 9671 2010-07-03 06:21:31Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

bbPress v1.0.2 Cross-Site Request Forgery

No description provided by source. : Software : bbPress v 1.0.2 CSRF : site : www.bbpress.org : Author : saudi0hacker : Date : May 25, 2010 : Type : CSRF : Greetz to : pr.al7rbi : so busy : evil-ksa : Dr.dakota : v4-team.com html body onload=\"document.forms\'Login\'.submit;\" form...

bbPress v1.0.2 Cross-Site Request Forgery

Exploit for php platform in category web applications ========================================= bbPress v1.0.2 Cross-Site Request Forgery ========================================= : Software : bbPress v 1.0.2 CSRF : site : www.bbpress.org : date : 29/6/2010 : Author : saudi0hacker : Date : May 25...

Joomla G2Bridge Local File Inclusion

Exploit Title: Joomla Component comg2bridge LFI vulnerability Date: May 30th, 2010 Author: akatsuchi Explore Crew [email protected] Software Link: http://www.flashyourweb.com/staticpages/index.php?page=g2bridgereadme Platform / Tested on: CentOS release 4.8 Final category: webaps...

linux/x86 cdrom ejecting shellcode 46 bytes

Exploit for linux/x86 platform in category shellcode =========================================== linux/x86 cdrom ejecting shellcode 46 bytes =========================================== / 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...

Linux/x86 - CDRom Ejecting Shellcode (46 bytes)

Linux/x86 - CDRom Ejecting Shellcode 46 bytes. Shellcode exploit for Linuxx86 platform / 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type...

OSCommerce Online Merchant 2.2 Bypass / File Disclosure

-------------------------------------------- Oscommerce Online Merchant v2.2 File Disclosure And Admin ByPass -------------------------------------------- Author : Flyff666 Date : May, 30, 2010 Location : Tangerang, Indonesia Time Zone : GMT +7:00 Software : OsCommerce Online Merchant v2.2 Tested...

Joomla! Component com_quran - SQL Injection

Joomla! Component comquran - SQL Injection ! ===========================================================================! Joomla comquran SQL Injection vulnerability Author : r3m1ck [email protected] Homepage : http://www.indonesiancoder.com , http://r3m1ck.us Date : 31 May, 2010 location :...

CVE-2010-2143

creationtimestamp| type| source ---|---|--- 2010-05-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12809...

Nucleus Plugin Twitter - Remote File Inclusion

Nucleus Plugin Twitter - Remote File Inclusion ============================================================================================================= o Nucleus Plugin Twitter Remote File Inclusion Vulnerability Software : NPTwitter version 0.8 Download :...

fusebox - 'ProductList.cfm?CatDisplay' SQL Injection

----------------------------------------------------------------------------------------- AJSADVISORIES01&2010 fusebox ProductList.cfm?CatDisplay Remote SQL Injection Vulnerability ----------------------------------------------------------------------------------------- Author : Shamus Date : May...

Joomla Reservations Cross Site Scripting

Exploit Title: Joomla Component Reservations XSS Vulnerability Date: 28th May 2010 Author: Valentin Category: webapps/0day Version: unknown Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title = Joomla...

Home FTP Server 1.10.3 (build 144) - Denial of Service

Home FTP Server 1.10.3 build 144 - Denial of Service !/usr/bin/python HomeFTP Server r1.10.3 build 144 Denial of Service Exploit Found By: DrIDE Date: May 28, 2010 Download: http://downstairs.dnsalias.net/products.html Tested: Windows 7 import socket, sys host = sys.argv1 buff = "A" 5000 cmds =...

Realtor Real Estate Agent - idproperty SQL Injection

Realtor Real Estate Agent - idproperty SQL Injection / / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID...

Joomla Component com_mycar Multiple Vulnerabilities

Exploit for php platform in category web applications ================================================ Joomla Component My Car Multiple Vulnerabilities ================================================ :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General...

CVE-2010-0596

creationtimestamp| type| source ---|---|--- 2010-05-27 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-10-147-01...

Easy Address book WebServer 1.2 - Cross-Site Request Forgery

Easy Address book WebServer 1.2 - Cross-Site Request Forgery |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | |...

Easy Address book Webserver 1.2 CSRF

Exploit for php platform in category web applications ==================================== Easy Address book Webserver 1.2 CSRF ==================================== Software : Easy Address Book WebServer 1.2 Author : Markot Date : May 25, 2010 OS : Windows Tested on : XP SP3 En Virtual box Type o...

CommuniCrypt Mail 1.16 SMTP ActiveX Stack Buffer Overflow

$Id: communicryptmailactivex.rb 9363 2010-05-25 02:09:42Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Joomla QPersonel SQL Injection

!/usr/bin/python Joomla comqpersonel SQL Injection Remote Exploit Version 1.0 23th May 2010 public release By Valentin Hoebel [email protected] ASCII FOR BREAKFAST EXPLOIT BASED ON MY COLUMN FUZZER Fuzzer was enhanced so it serves as a Joomla Exploiter template About the Vulnerability:...