Luftguitar CMS - Upload Arbitrary File Vulnerability

No description provided by source. ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-13-luftguitar-cms-vulnerability-upload-arbitrary-file/ ''' Abysssec Inc Public Advisory Title : Luftguitar...

Pure-FTPd 1.0.21 (CentOS 6.2 & Ubuntu 8.04) - Crash PoC (Null Pointer Dereference)

No description provided by source. Pure-FTPd Crash PoC Null Pointer Dereference, tested with pure-ftpd v1.0.21 centos 6.2, ubuntu 8.04 latest version v1.0.36 is not affected !! discovered by Kingcope root@ubuntu: grep seg /var/log/syslog Aug 13 13:55:28 ubuntu kernel: 226.791747 pure-ftpd4825:...

CoBaLT 0.1 - Multiple Remote SQL Injection Vulnerabilities

No description provided by source. ---------------------------------------- CoBaLT v1.0 Remote SQL İnjection Vulnerabiltiy Discovered : U238 Mail : [email protected] WebPage : http://ugur238.org The End Script: http://www.aspindir.com/indir.asp?ID=5414 Script Alternativ :...

qwicsite pro (sql/xss) Multiple Vulnerabilities

No description provided by source. By Cr@zyKing a.k.a t4cs1zkr4L Qwicsite Pro SQL/XSS Multiple Vulnerabilities http://localhost/?pageid=-1+union+select+1,2,3,concat0x3a3a,username,0x3a3a,password+from+accounts/ !-- checkpageuser - -1 union select 1,2,3,concat0x3a3a,username,0x3a3a,password from...

phpMyReports <= 3.0.11 (lib_head.php) Remote File Include Vulnerability

No description provided by source. ================================================================= URL.S = http://www.phpmytools.org/pmr3.0.1120050105.tar.gz ! ================================================================= Finded by GolDM = Mahmoodali && Google.Com !...

MiniNuke <= 1.8.2 (news.asp hid) SQL Injection Exploit

No description provided by source. !/usr/bin/perl MiniNuke www.miniex.net Version: = 1.8.2 SQL-injection exploit. This exploit uses the vulnerability discovered by [email protected]. Exploit uses SQl-injection to give you the hash from user with chosen id. DetMyl, 2006 [email protected] use IO::Socket...

phpBB <= 2.0.10 Bot Install (Altavista) (ssh.D.Worm)

No description provided by source. !/usr/bin/perl ------------------------------------------------------------------------ Severino Honorato - /server irc.priv8crew.info Priv8crew - ssh.D.Worm use IO::Socket; use LWP::Simple; my $processo = /usr/local/apache/bin/httpd -DSSL; $SIGINT = IGNORE;...

Clever Database Comparer ActiveX 2.2 - Remote Buffer Overflow PoC

No description provided by source. pre span style=font: 14pt Courier New;p align=centerb2007/05/14/b/p/span codespan style=font: 10pt Courier New;span class=general1-symbol----------------------------------------------------------------------------- bClever Database Comparer ActiveX version 2.2...

Flatnuke <= 2.5.8 file() Privilege Escalation / Code Execution Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? printr' ----------------------------------------------------------------------------- Flatnuke =2.5.8 file/privilege escalation/remote commands xctn exploit by rgod [email protected] site: http://retrogod.altervista.org dor...

PrecisionID Barcode ActiveX 1.3 - Denial of Service Exploit

No description provided by source. pre span style=font: 14pt Courier New;p align=centerb2007/05/12/b/p/span codespan style=font: 10pt Courier New;span class=general1-symbol-------------------------------------------------------------------------------- bPrecisionID Barcode ActiveX...

FreeWPS <= 2.11 (images.php) Remote Code Execution Exploit

No description provided by source. ? errorreportingEERROR; function exploitinit if !extensionloaded'phpcurl' && !extensionloaded'curl' if !dl'curl.so' && !dl'phpcurl.dll' die oo error - cannot load curl extension!; function exploitheader echo...

Fujitsu Chocoa 1.0 beta7R "Topic" Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/573/info The Chocoa IRC client has an unchecked buffer in the code that processes channel topics. If the server returns a topic that overwrites the client's buffer and contains exploit code arbitrary commands can be run o...

XFree86 X11R6 3.3.x Font Server Remote Buffer Overrun Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6241/info A remotely exploitable buffer overrun condition has been reported in the XFS font server, fs.auto used by multiple vendors. This vulnerability may be exploited by remote attackers to execute commands on the targ...

AV Tutorial Script 1.0 - Remote User Pass Change Exploit

No description provided by source. ?php / \|/// \ - - // @ @ ----oOOo---oOOo--------------------------------------------------- Y! Underground Group [email protected] Dj7xpl.2600.ir ----ooooO-----Ooooo-------------------------------------------------- \ / \ /...

iziContents <= RC6 GLOBALS[] Remote Code Execution Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? / vulnerable code = include/rssfunctions.php line 32-40: .... $GLOBALSrootdp = './'; requireonce $GLOBALSrootdp.include/config.php; requireonce $GLOBALSrootdp.include/db.php; requireonce $GLOBALSrootdp.include/session.php;...

PPLive <= 1.9.21 (/LoadModule) URI Handlers Argument Injection Vuln

No description provided by source. -------------------------------------------------------------------------------- PPLive = 1.9.21 uri handlers /LoadModule remote argument injection by Nine:Situations:Group::strawdog -------------------------------------------------------------------------------...

Opera Web Browser 7.x URI Handler Directory Traversal Vulnerability

source: http://www.securityfocus.com/bid/12898/info Maxthon Web Browser is reported prone to an information disclosure vulnerability. This issue may allow an attacker to disclose search bar contents from an affected browser. Information disclosed through the exploitation of this vulnerability may...

Tastydir <= 1.2 (1216) Multiple Vulnerabilities

No description provided by source. Exploit Title: Tastydir = 1216 folder creation vuln Date: Oct 17 2010 Author: R Software Link: http://codecanyon.net/item/tastydir-an-ajax-file-manager-and-dir-listing/117167 Version: 1216 Tested on: Ubuntu 10.10 Information: Tastydir is a cross-platform PHP fil...

Anope IRC Services With bs_fantasy_ext <= 1.2.0-RC1 mIRC script

No description provided by source. ; bsfantasyext = 1.1.16 Exploit by Phil ; Kudos to MattT for pointing this out ; Only seems to work for non-vhosted unresolved IPs ; Code is a little inefficient, sorry. ; Usage: /getip channel nickname bs bot nickname alias getip if $1 != $null && $2 != $null &...

Aj Classifieds - For Sale 3.0 - Remote Shell Upload Vulnerability

No description provided by source. AJClassifieds Merchandise RFu script down: http://www.ajclassifieds.net/demo/ajclassifiedsme/ClassifiedsMerchandise/ ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Date: 16.01.09 Home: z0rlu.blogspot.com...