Apache Tomcat - WebDAV SSL Remote File Disclosure

!/usr/bin/perl ================================================================ Apache Tomcat Remote File Disclosure Zeroday Xploit - With support for SSL MoDiFiEd version by : h3rcul3s ORiGiNaL Version by : kcdarookie aka eliteb0y / 2007 http://milw0rm.org/exploits/4530 MoDiFiCaTiOn : This code ...

CVE-2007-5224

inc/exif.inc.php in Original Photo Gallery 0.11.2 and earlier allows remote attackers to execute arbitrary programs via the exifprog parameter, which is specified in an exec function call...

Code injection

inc/exif.inc.php in Original Photo Gallery 0.11.2 and earlier allows remote attackers to execute arbitrary programs via the exifprog parameter, which is specified in an exec function call...

CVE-2007-5224

inc/exif.inc.php in Original Photo Gallery 0.11.2 and earlier allows remote attackers to execute arbitrary programs via the exifprog parameter, which is specified in an exec function call...

CVE-2007-5224

The CVE-2007-5224 entry affects Original Photo Gallery 0.11.2 and earlier. Affected file: inc/exif.inc.php; the exif_prog parameter is used inside an exec() call without proper sanitization, allowing remote attackers to execute arbitrary commands on the server. This is described in multiple sourc...

Original Photo Gallery Remote Command Execution

Original Photo Gallery Remote Command Execution Name Original Photo Gallery Remote Command Execution Systems Affected Original 0.11.2 version and below Severity High Vendor http://jimmac.musichall.cz/original.php Advisory http://www.ush.it/team/ascii/hack-original/advisoryupdated.txt...

Original inc/exif.inc.php exif_prog Parameter Arbitrary Command Execution

Original photo gallery, a PHP-based photo gallery, is installed on the remote host. The version of Original photo gallery on the remote host fails to sanitize input to the 'exifprog' parameter of the 'inc/exif.inc.php' script before using it in an 'exec' statement to execute a command. Provided...

Public Media Manager <= 1.3 Remote File Inclusion Vulnerability

f0und bY 0in Contact: [email protected] Download:http://pmm-cms.sourceforge.net/ Greetings to:All Dark-Coders team members:Die-angel,Slim,Umbro and other friends Joker186,Artysta,Kaja,Wojto111,Rade0n BUG: news/newstopicinc.php:2:if !empty$indir includeonce $indir."/newsdb/config.php"; Expl0it:...

Joomla! Component Restaurante - Arbitrary File Upload

Joomla Component Restaurante = Remote File Upload Vulnerability found by : Cold z3ro Homepage : www.hackteach.org , www.xp10.com ================================================================ @@ joomla/index.php?option=comrestaurante&task=upload...

Cross site scripting

Cross-site scripting XSS vulnerability in Microsoft Internet Explorer 6.0 and 7 allows user-assisted remote attackers to inject arbitrary web script or HTML in the local zone via a URI, when the document at the associated URL is saved to a local file, which then contains the URI string along with...

LiveCMS <= 3.4 (categoria.php cid) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl / \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ / \ | | | | || | || | | | \ | | | | / | , |/ /|| ||| |||| / | |/ INFO: Program Title LiveCMS = 3.4 SQL Injection,&nbs...

Zenturi ProgramChecker - ActiveX 'sasatl.dll' Remote Buffer Overflow

------------------------------------------------------------------------ Zenturi ProgramChecker ActiveX sasatl.dll Remote Buffer Overflow PoC url: http://www.programchecker.com/activeintro.aspx original advisory: http://secunia.com/advisories/25473/ Will Dormann, CERT/CC, is credited with the...

Directory traversal

Multiple directory traversal vulnerabilities in Scallywag 2005-04-25 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the skinname parameter to template.php in 1 skin/dark/, 2 skin/gold/, or 3 skin/original/, a different vector than CVE-2007-2900. NOTE: the...

Scallywag - 'template.php?path' Remote File Inclusion

Scallywag = Remote File Inclusion Vulnerability Dork:"Powered by Scallywag" Vuln Code ERROR1:skin/dark/template.php ?php include"$path/source/top.txt"; RFI CODE BUG1:...

Original 0.11 - 'config.inc.php?x[1]' Remote File Inclusion

Original Version 0.11config.inc.php Remote File Inclusion Vulnerability D.Script: http://xanatos.glo.org.mx/bi/original-0.11.tar.bz2 Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.Com/cc Exploit:Path/inc/config.inc.php?x1=Shell Greetz To: Tryag-Team .... milw0rm.com 2007-05-10...

Original 0.11 - config.inc.php?x[1] Remote File Inclusion

Original 0.11 - config.inc.php?x1 Remote File Inclusion Original Version 0.11config.inc.php Remote File Inclusion Vulnerability D.Script: http://xanatos.glo.org.mx/bi/original-0.11.tar.bz2 Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.Com/cc Exploit:Path/inc/config.inc.php?x1=Shell...

I hide the WEB Backdoor of the benzene method-vulnerability warning-the black bar safety net

Why say I is benzene? For a master, this method is simply overdoing it, but for I'm such a layman, the technical knowledge poorly understood, which can also be used as a reference! We usually get to a site's WEBSHELL, in order to facilitate future access, and how much will leave some after Door...

wps1-rfi.txt

+-------------------------------------------------------------------- + + Wap Portal Serve 1. = Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: Wap Portal Server + Venedor ...........: http://www.sakic.net + Class ...............

Design/Logic Flaw

Unspecified vulnerability in the expandstack function in grsecurity PaX allows local users to gain privileges via unspecified vectors. NOTE: the grsecurity developer has disputed this issue, stating that "the function they claim the vulnerability to be in is a trivial function, which can, and has...

loudmouth24.txt

""""""""""""""""""""""""""""""""""""""""""""""" """ :: :: ::::: :::: """ """ :: :: :: : :: """ """ :::: :: :: ::::: ::::: :::: """ """ :: :: ::: ::: :: :: :: :: :: """ """ :: :: :: : : ::::: :: :: :::: """ """ """ """"""""""""""""""""""""""""""""""""""""""""""" Xmor$ DigitaL Hacking TeaM LoudMout...