Woltlab Burning Board Teamsite Hack 3.0 - 'ts_other.php' SQL Injection

----------------------------Information----------------------------------------------------- +Name : Woltlab Burning Board Teamsite Hack V3.0 tsother.php SQL Injection Exploit Python +Autor : Easy Laster +Date : 21.03.2010 +Script : Woltlab Burning Board Teamsite Hack V3.0 +Google Door : Teamsite...

phpAuthent 0.2.1 SQL Injection

phpAuthent 0.2.1 SQL Injection Vulnerability Author : Gamoscu Homepage : http://www.1923turk.com Blog : http://gamoscu.wordpress.com/ Script : phpAuthent http://phpauth.sourceforge.net/ Download : http://phpauth.sourceforge.net/download.php Vulnerable File newsreleases.php?nid= SQL XpL...

Adobe Reader PDF - LibTiff Integer Overflow Code Execution

doc=''' Title: Adobe PDF LibTiff Integer Overflow Code Execution. Product: Adobe Acrobat Reader Version: =8.3.0, =9.3.0 CVE: 2010-0188 Author: villy villys777 at gmail.com Site: http://bugix-security.blogspot.com/ Tested : succesfully tested on Adobe Reader 9.1/9.2/9.3 OS Windows XPSP2,SP3...

iPhone Springboard Malformed Character Crash PoC

Exploit for hardware platform in category dos / poc ================================================ iPhone Springboard Malformed Character Crash PoC ================================================ !/usr/bin/python iPhone Springboard crash PoC by Chase Higgins. Devices tested: iPhone 2G @ OS 3.1...

Joomla Janews Local File Inclusion

Joomla Component comjanews Local File Inclusion ============================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : Joomla Component comjanews .:. Bug Type : Local File Inclusion LFI .:...

Dojo Toolkit 1.4.1 - '/doh/runner.html' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/38739/info Dojo is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Liquid XML Studio 2010 < 8.061970 - 'LtXmlComHelp8.dll OpenFile()' Remote Overflow

!-- |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | | [email protected] | | |...

systemsoftware Community Black - index.php SQL Injection

systemsoftware Community Black - index.php SQL Injection ----------------------------Information------------------------------------------------ +Name : systemsoftware Community Black index.php SQL Injection +Autor : Easy Laster +Date : 13.03.2010 +Script : systemsoftware Community Black +Downloa...

win32/xp sp3 (Ita) calc.exe shellcode 36 bytes

Exploit for win32 platform in category shellcode ============================================== win32/xp sp3 Ita calc.exe shellcode 36 bytes ============================================== / Title: Windows XP Professional SP2 ita calc.exe shellcode 36 bytes Type: Shellcode Author: Stoke Platform:...

Anantasoft Gazelle CMS Cross Site Request Forgery

======================================================================= Anantasoft Gazelle CMS CSRF Vulnerability ======================================================================= by Pratul Agrawal Vulnerability found in- Admin module email [email protected] company aksitservices Credit by...

MiNBank 1.5.0 - Remote Command Execution

!/usr/bin/perl MiNBank 1.5.0 Remote Command Execution Exploit download: http://downloads.sourceforge.net/minbank/ Author: Jose Luis Gongora Fernandez 'aka' JosS mail: sys-projectathotmaildotcom site: http://www.hack0wn.com/ team: Spanish Hackers Team - SHT Hack0wn Security Project!! This was...

osCSS 1.2.1 - Database Backups Disclosure

======================================================================================== | Title : osCSS 1.2.1 Backups Vulnerability | Author : indoushka | email : [email protected] | Home : www.sec-war.com | Dork : Powered by osCSS | Dork : Index of /osCSS/admin/backups | Tested on: windows...

CMS by MyWorks Multiple Vulnerabilities

No description provided by source. CMS by MyWorks SQL/ XSS Vulnerability ======================================================== Author : Palyo34 Home : www.1923Turk.com Script : CMS by MyWorks Script site: http://www.myworks.spb.ru/ === Exploit === http://server/catalog/good.php?goodid= SQL...

Mortal network shopping system V8. 0 Simplified Chinese version of Cookie spoofing exploit-vulnerability warning-the black bar safety net

adchk. asp determine the administrator login state % if Request. Cookies"venshop""adminname"="" or Request. Cookies"venshop""adminpass"="" or Request. Cookies"venshop""adminclass"="" then Response. Cookies"venshop""adminname"="" Response. Cookies"venshop""adminpass"="" Response...

Orbital Viewer 1.04 - .orb File Local Universal Overflow (SEH)

Orbital Viewer 1.04 - .orb File Local Universal Overflow SEH !/usr/bin/python Orbital Viewer v1.04 .orb 0day Local Universal SEH Overflow Exploit Date: 27 Feb 2010 CVE: CVE-2010-0688 Download: http://www.orbitals.com/orb/ov.htm Found & exploited by: mrme http://net-ninja.net Greetz to:...

Softbiz Jobs Cross Site Request Forgery

======================================================================= Softbiz Jobs CSRF Vulnerability ======================================================================= by Pratul Agrawal Vulnerability found in- Admin module email [email protected] company aksitservices Credit by Pratul...

Portrait Software Portrait Campaign Manager 4.6.1.22 - Multiple Cross-Site Scripting Vulnerabilities

Portrait Software Portrait Campaign Manager 4.6.1.22 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/38252/info Portrait Campaign Manager is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied dat...

AIMP 2.8.3 - '.m3u' Remote Stack Buffer Overflow

source: https://www.securityfocus.com/bid/38215/info AIMP is prone to a remote stack-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied input. Attackers may leverage this issue to execute arbitrary code in the context of the...

Internet Explorer Cross Frame Scripting Restriction Bypass (CVE-2004-2383)

Microsoft Internet Explorer, a web browser developed and maintained by Microsoft Corporation, is the most widely used Internet browser. There is a vulnerability in the way Internet Explorer handles interaction between frames within a web page. It is possible for a malicious server to bypass...

Limny 1.01 - Arbitrary File Upload

----------exploit Debut Remote File Upload Vulnerability ----------Script Info Moi : JIKO Site : No-exploit.Com Email : : ----------Script Info Site:http : limny.org ----------exploit Info 13 Action the first setup register if the register active http://server/Path/ the second setup go to edit yo...