Nmap NSE net: svn-brute

Performs brute force password auditing against Subversion source code control servers. SYNTAX: brute.firstonly: stop guessing after first password is found default: false brute.unique: make sure that each password is only guessed once default: true brute.retries: the number of times to retry if...

InterPhoto Gallery 2.5.0 File Disclosure

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

India's Railway Email System hacked by Pakistan Cyber Army !

India's Railway Email System hacked by Pakistan Cyber Army ! The Indian Railway Email System is Hacked by Pakistan Cyber Army pca, They have taken complete backup of all important mails and user-pass of all email id's . Have a look to the images below as HACK PROOF and thier statement on this Hac...

SpoonFTP 1.2 Denial Of Service

!/usr/bin/python +Exploit Title: Exploit Denial of Service SpoonFTP 1.2 +Date: 03\18\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.softpedia.com/progDownload/SpoonFTP-Download-49969.html +Version: 1.2 +Tested On: WIN-XP SP3 Portuguese Brazil +CVE: N/A xxx xxx xxxxxxxxxxx xxxxxxxxxxx...

shoutcaststats.v0.5 Changer Login and Pass CSRF Vulnerability

Exploit for php platform in category web applications ============================================================= shoutcaststats.v0.5 Changer Login and Pass CSRF Vulnerability ============================================================= || || | || o,7 || . o7 || 4||| ow, : / /...

Shoutcaststats 0.5 Cross Site Request Forgery

================================= shoutcaststats.v0.5 Changer Login and Pass CSRF Vulnerability ================================= || || | || o,7 || . o7 || 4||| ow, : / / . 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 3 3 3 3 7 /' \ /'\ /'\ /\ \ /\ /\ \ 7 1 /, /\L\ ...

WordPress Plugin Event Registration 5.32 - SQL Injection

WordPress Plugin Event Registration 5.32 - SQL Injection Wordpress Event Registration SQL injection Author: k3m4n9i Homepage: http://alko.web.id/ Date: 13 November, 2010 Software Information + Vendor : http://edgetechweb.com/ + Software Link: http://wordpress.org/extend/plugins/event-registration...

osCommerce 2.2 - Cross-Site Request Forgery

Exploit Title: osCommerce v2.2 Change Admin Pass Date: date Author: daandeveloper33 Software Link: http://oscommerce.com/ Version: v2.2 Tested on: Mac OS X 10.6.4, osCommerce v2.2 RC2A Dutch This is the code that you can execute to change the admin pass: -------crack.php------- Change Admin Pass...

osCommerce 2.2 - Cross-Site Request Forgery

osCommerce 2.2 - Cross-Site Request Forgery Exploit Title: osCommerce v2.2 Change Admin Pass Date: date Author: daandeveloper33 Software Link: http://oscommerce.com/ Version: v2.2 Tested on: Mac OS X 10.6.4, osCommerce v2.2 RC2A Dutch This is the code that you can execute to change the admin pass...

Mobile Chat v2.0.2 by Pass Vulnerability

Exploit for php platform in category web applications ======================================== Mobile Chat v2.0.2 by Pass Vulnerability ======================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ ...

Allpc 2.5 osCommerce by Pass Creat and Download Backup

Exploit for php platform in category web applications ====================================================== Allpc 2.5 osCommerce by Pass Creat and Download Backup ====================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1...

E-Xoopport Samsara 3.1 (eCal Module) - Blind SQL Injection

!/usr/bin/perl 0-Day E-Xoopport - Samsara \r\n"; exit; my $host = $ARGV0; my $usr = $ARGV1; my $pwd = $ARGV2; my $anickde = $ARGV3; my $anick = '0x'.EncHex$anickde; print "! Logging In...\r\n"; my %postdata = uname = "$usr", pass = "$pwd", op = "login" ; my $cookies = HTTP::Cookies-new autosave =...

SMB File Upload Utility

This module uploads a file to a target share and path. The only reason to use this module is if your existing SMB client is not able to support the features of the Metasploit Framework that you need, like pass-the-hash authentication. This module requires Metasploit: https://metasploit.com/downlo...

Microsoft Windows Kerberos - 'Pass The Ticket' Replay Security Bypass

source: https://www.securityfocus.com/bid/42435/info The Microsoft Windows implementation of Kerberos is prone to a security-bypass vulnerability. Successful exploits may allow attackers to gain unauthorized access to affected computers through replay attacks...

Open Cart V0.6.5 + fix by Pass ICH Vulnerability

Exploit for php platform in category web applications ================================================ Open Cart V0.6.5 + fix by Pass ICH Vulnerability ================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\...

osCSS 1.2.1 Changer Login and Pass CSRF Vulnerability

Exploit for php platform in category web applications ===================================================== osCSS 1.2.1 Changer Login and Pass CSRF Vulnerability ===================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /'...

Oscommerce Max v2.0.25 Changer Login and Pass CSRF Vulnerability

Exploit for php platform in category web applications ================================================================ Oscommerce Max v2.0.25 Changer Login and Pass CSRF Vulnerability ================================================================...

Digital Imagery Gets Encrypted Watermarking

A new approach to adding an encrypted watermark to digital images allows the an image to be validated against a pass key, according to research according to research published in the International Journal of Signal and Imaging Systems Engineering. Read the full article. Science Daily...

PHP unpack()函数中断处理信息泄露漏洞

CVE ID: CVE-2010-2191 PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 PHP的unpack函数中存在信息泄露漏洞： char format, input, formatarg, inputarg; int formatlen, formatarglen, inputarglen; int inputpos, inputlen, i; if zendparseparametersZENDNUMARGS TSRMLSCC, "ss", &formatarg, &formatarglen, &inputarg, &inputarglen =...

Infront - SQL Injection

Exploit Title: Infront SQL Injection Vulnerability Date: 12-06-2010 Author: TheMaster Software Link: http://www.infront.com/ Version: N/A Tested on: Windows XP SP3 Author : TheMaster Dork : intext:Powered by Infront Type of attack : SQLi File : breakingnews.php Exploit Code :...