1087 matches found
phusion webserver 1.0 - Directory Traversal vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/4117/info Phusion Webserver is a commercial HTTP server that runs on Microsoft Windows 9x/NT/2000 operating systems. Phusion Webserver is prone to directory traversal attacks. It is possible to break out of wwwroot using...
PlaySMS <= 0.7 - SQL Injection Exploit
No description provided by source. !/usr/bin/perl PlaySMS version 0.7 and prior SQL Injection PoC Written by Noam Rathaus of Beyond Security Ltd. use IO::Socket; use strict; my $host = $ARGV0; my $remote = IO::Socket::INET-new Proto = tcp, PeerAddr = $host, PeerPort = 80 ; unless $remote die cann...
Annuaire 1Two 2.2 - Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Affected.scr..: Annuaire 1Two 2.2 Poc.ID........: 09060902.txt Type..........: SQL Injection without quote Risk.level....: Medium Vendor.Status.: Unpatched Src.download..: http://www.1two.org/ Poc.link......: acid-root.new.fr/poc/09060902.txt...
Novell GroupWise Messenger 2.0 - Client Buffer Overflow Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/29602/info Novell GroupWise Messenger is prone to two buffer-overflow vulnerabilities because it fails to adequately bounds-check user-supplied data before copying it to an insufficiently sized buffer. Attackers can explo...
AT-TFTP <= 1.9 (Long Filename) Remote Buffer Overflow Exploit
No description provided by source. !/usr/bin/perl -w acaroatjervus.it http://www.securityfocus.com/bid/21320 [email protected] is credited with the discovery of this vulnerability use IO::Socket; if!$ARGV1 print Uso: atftp-19.pl victim port\n\n; exit; $victim = IO::Socket::INET-newProto='udp',...
E-Mail Security Virtual Appliance (ESVA) Remote Execution
No description provided by source. Exploit Title: E-Mail Security Virtual Appliance ESVA Remote Execution. Date: 10 Aug 2012 Exploit Author: iJoo Vendor Homepage: http://www.esvacommunity.com/ Software Link: http://sourceforge.net/projects/esva-project/ Version: 2.0.6 ESVA E-Mail Security Virtual...
Lizardware CMS <= 0.6.0 - Blind SQL Injection Exploit
漏洞类型： 输入验证错误 漏洞文件： /administrator/index.php 漏洞成因： 在index.php 中，未对用户输入进行过滤从而导致注入 参考： http://www.securityfocus.com/bid/32898/solution !/usr/bin/perl -w Lizardware CMS = 0.6.0 Blind SQL Injection Exploit by athos - stakerathotmaildotit http://sourceforge.net/projects/lizardwarecms/ use strict; use...
AKoff MIDI Player 1.00 - Buffer Overflow Exploit
No description provided by source. !/usr/bin/perl AKoff MIDI Player 1.00 Buffer Overflow Exploit By cr4wl3r cr4wl3r\x40linuxmail\x2Eorg gr33tz: str0ke, opt!x hacker, xoron, EA ngel, zvtral, Hmei7, mywisdom, cyberlog, irvian, and all my friend thanks: milw0rm, darkc0de, exploit-db, inj3ct0r,...
PunBB <= 1.3.4 & Pun_PM <= 1.2.6 - Remote Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl 0-Day PunBB = 1.3. Package: PunPM = v1.2.6 Remote Blind SQL Injection Exploit Author/s: Dante90, WaRWolFz Crew Created: 2009.07.30 after 0 days the bug was discovered. Crew Members: 4lasthor, Andryxxx, Cod3, Gho5t, HeRtZ, N.o.3.X, RingZero,...
ASPPortal <= 3.1.1 (downloadid) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Original advisory: http://www.nukedx.com/?viewdoc=21 Usage: aspp.pl host path user use IO::Socket; use Math::BigInt; if@ARGV != 3 usage;...
Teamtek Universal FTP Server Multiple Commands Remote Denial of Service Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/21085/info Universal FTP Server is prone to multiple remote denial-of-service vulnerabilities because the application fails to handle exceptional conditions. An attacker can exploit these issues to crash the affected...
P2GChinchilla HTTP Server 1.1.1 - Denial of Service Exploit
No description provided by source. !/usr/bin/perl File Name :P2GChinchillaTM HTTP Server Vuln : Remote Denial Of Service Exploit Auther : Zer0 Thunder Msn : [email protected] ==------ Exploit Title: P2GChinchillaTM HTTP Server 1.1.1 Remote Denial Of Service Exploit Date: 22/01/2010...
QuickPHP Web Server Arbitrary (src .php) File Download
No description provided by source. / / / / / // | / // \ | / / / / / /// / / / / / / / // / / / |/ / // / , / / // / / / / / //// //|///||/,/ / /// Live by the byte |// Members: Pr0T3cT10n -=M.o.B.=- TheLeader Sro Debug Contact: [email protected] -----------------------------------...
AWStats (6.0-6.2) configdir Remote Command Execution Exploit (c code)
No description provided by source. / AwStats exploit by Thunder, [email protected] This exploit makes use of the remote command execution bug discovered in AwStats ver 6.2 and below. The bug resides in the awstats.pl perl script. The script does not sanitise correctly the user input for the...
Battle.net Clan Script <= 1.5.x Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w download script : http://sourceforge.net/project/showfiles.php?groupid=142506&packageid=156487 Battle.net Clan Script = 1.5.x - Remote SQL Inj Exploit Founded by : Stack-Terrorist v40 Contact: Ev!L Greetz : Houssamix & All muslims HaCkeRs : Fuc...
PunBB version <= 1.2.2 - Authentication Bypass Exploit
No description provided by source. !/usr/bin/perl use IO::Socket; PunBB version = 1.2.2 auth bypass exploit ------------------------------------------------- About vuln: lets look file /include/functions.php code start function checkcookie&$punuser ... if isset$COOKIE$cookiename...
Eternal Lines Web Server 1.0 - Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12416/info Eternal Lines Web Server is reported prone to a remote denial of service vulnerability. It is reported that the issue presents itself when the web service handles 70 or more simultaneous connections from a remo...
LPRNG html2ps 1.0 - Remote Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6079/info A vulnerability has been discovered in the html2ps filter which is included in the lprng print system. It has been reported that it is possible for a remote attacker to execute arbitrary commands. The attacker...
AnalogX SimpleServer:WWW <= 1.05 Denial of Service Exploit
No description provided by source. !/usr/bin/perl use IO::Socket; if @ARGV 2 print \n ::: ---------------------------------------------- :::\n; print ::: AnalogX SimpleServer WWW 1.05 Dos Exploit :::\n; print ::: :::\n; print ::: Advisory : http://www.ussrback.com/labs45.html :::\n; print ::: By ...
Joomla Component n-forms 1.01 - Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print \n; print \n; print Mambot Component n-forms Blind SQL Injection Exploit \n; print Author:The Moorish :D \n; print Greetz:Team-dz,His0k4,x.CJP.x,Kader11000,c02,piRAte DIgitAL\n; print...