1087 matches found
Picture Rating 1.0 - Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl -- Picture Rating 1.0 Blind SQL Injection Exploit -- -Info/Instructions- After running this perl script, you will have admin details therefore you will be able to login to the admin area at http://site.com/control/ ok once you have logged in has...
SturGeoN Upload Arbitrary File Upload Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18764/info SturGeoN Upload is prone to an arbitrary file-upload vulnerability. An attacker can exploit this vulnerability to upload arbitrary code and execute it in the context of the webserver process. This may facilitat...
Borland Interbase <= 7.x Remote Exploit
No description provided by source. !/usr/bin/perl Priv8security com remote exploit for Borland Interbase 7.1 SP 2 and lower Public Version!!! Bug found by Aviram Jenik www.securiteam.com unixfocus 5AP0P0UCUO.html wsxz@localhost buffer$ perl priv8ibserverb.pl -h localhost -t 0 -= Priv8security.com...
Hughes Technologies DSL_Vdns 1.0 - Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2700/info It is possible for a remote user to cause a denial of service on a host running DSLVdns. Submitting data to port 6070 and closing the connection before the request is fulfilled, will cause DSLVdns to enter a...
Password Door 8.4 Local Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/33634/info Password Door is prone to a local buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. Attackers may leverage this issue to execute arbitrary code in the...
Endymion MailMan 3.0..x Remote Arbitrary Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2063/info A vulnerability exists in 3.x versions of Endymion MailMan Webmail prior to release 3.0.26. The widely-used Perl script provides a web-email interface. Affected versions make insecure use of the perl open...
Free WMA MP3 Converter 1.1 - (.wav) Local Buffer Overflow
No description provided by source. !/usr/bin/perl Free WMA MP3 Converter v1.1 .wav Local Buffer Overflow seh Vendor: http://www.eusing.com/ Discovered by: KriPpLer http://www.x-sploited.com/ Tested on: Windows XP Pro SP2. Description: FREE WMA MP3 converter v1.1 Local Buffer Overflow Exploit SEH...
RedHat Linux 7.0 Roaring Penguin PPPoE Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2098/info Roaring Penguin Software's PPPoE is a freeware PPP over Ethernet client often used by ADSL subscribers running Linux or NetBSD. PPPoE contains a possibly remotely exploitable denial of service vulnerability in i...
Generation Terrorists Designs & Concepts Sojourn 2.0 File Access Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1052/info Any file that the webserver has read access to can be read on a server running the Sojourn search engine. The Sojourn software includes the ability to organize a website into categories. These categories can the...
Eznet 3.5.0 - Remote Stack Overflow and Denial of Service Exploit
No description provided by source. !/usr/bin/perl -w Stack Overflow in eZnet.exe - Remote Exploit Will download a trojan from any address which you provide on the target system, then will execute the trojan. For this exploit I have tried several strategies to increase reliability and performance:...
AWStats < 6.4 (referer) Remote Command Execution Exploit
No description provided by source. !/usr/bin/perl AWStats 6.4 command execution exploit based on http://www.idefense.com/application/poi/display?id=290&type=vulnerabilities coded by 1dt.w0lf 11.08.2005 RST/GHC http://rst.void.ru http://ghc.ru Note Exploitation will not occur until the stats page...
KTP Computer Customer Database CMS 1.0 - Local File Inclusion Vulnerability
No description provided by source. !/usr/bin/perl -w ====================================== KTPCCD Local File Inclusion Exploit ====================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...
Subdreamer 2.2.1 - SQL Injection / Command Execution Exploit
No description provided by source. !/usr/bin/perl Subdreamer 2.2.1 command exec exploit @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ supported targets: without forum integration with phpBB2 integration with ipb2 integration with vbulletin2 integration...
Mailtraq 2.1 .0.1302 User Password Encoding Weakness
No description provided by source. source: http://www.securityfocus.com/bid/7923/info It has been reported that Mailtraq does not securely store passwords. Because of this, an attacker may have an increased chance at gaining access to clear text passwords. !/usr/bin/perl $Password = $ARGV0; print...
RCblog <= 1.03 (post) Remote Command Execution Exploit
No description provided by source. !/usr/bin/perl $App : RCblog = 1.03 Remote Command Execution Exploit $Bug : http://tinyphp/index.php?post=../afile%00 $IHST: h4ckerz.com / hackerz.ir / coded & discovered By Hessam-x Hessamx -at- Hessamx.net use IO::Socket; use LWP::Simple; print...
cPanel 5.0 Openwebmail Local Privileges Escalation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6885/info It has been reported that cPanels' openwebmail package, distributed as part of the cPanel CGI application, is vulnerable to an external file include vulnerability. Exploitation of this issue may result in local...
Cisco CBOS 2.x Broadband Operating System TCP/IP Stack Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4815/info Cisco Broadband Operating System CBOS is the operating system used on Cisco 600 series routers. When the CBOS TCP/IP stack is forced to process a high number of unusually large packets, it will consume all memor...
Invision Power Board 2.0.0 - 2.0.2 - SQL Injection Exploit
No description provided by source. !/usr/bin/perl use IO::Socket;...
Asterisk 'asterisk-addons' 1.2.7/1.4.3 CDR_ADDON_MYSQL Module SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26095/info Asterisk 'asterisk-addons' package is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...
ActivePerl 5.x,Larry Wall Perl 5.x Duplication Operator Integer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10380/info ActiveState Perl is reported to be prone to an integer overflow vulnerability. It is revealed through testing that other implementations are also vulnerable. The issue is reported to exist due to a lack of...