phpBB 2.0.13 - 'Calendar Pro' mod Get Hash

!/usr/bin/perl -w use IO::Socket; Example: C:\calphpbb.pl www.site.com /phpBB2/ 2 'Calendar Pro' Mod for phpBB Connecting... + Connected! Sending Data... Data Sent, Waiting for response... + MD5 Hash for user with id=2 is: 81dc9bdb52d04dc20036dbd8313ed055 if @ARGV \n"; print " e.g.: calphpbb.pl...

phpBB 2.0.13 - Calendar Pro mod Get Hash

phpBB 2.0.13 - Calendar Pro mod Get Hash !/usr/bin/perl -w use IO::Socket; Example: C:\calphpbb.pl www.site.com /phpBB2/ 2 'Calendar Pro' Mod for phpBB Connecting... + Connected! Sending Data... Data Sent, Waiting for response... + MD5 Hash for user with id=2 is: 81dc9bdb52d04dc20036dbd8313ed055 ...

phpBB 2.0.13 - 'downloads.php' mod Get Hash

!/usr/bin/perl -w use IO::Socket; Example: C:\phpbb.pl www.site.com /phpBB2/ 2 downloads.php mod in phpBB \n"; print " e.g.: phpbb.pl www.site.com /phpBB2/ 2 \n"; print " - site address\n"; print " - forum folder\n"; print " - user id 2 default for phpBB admin\n"; print "||\n"; print "\n\n"; exit...

betaParticle.txt

BetaParticle bp is a ASP CMS Blog + Gallery . I found 2 vulnerabilities in BetaParticle. http://example.com/bp : is BP path ! 1 BP Database Disclosure For version = 3.0 Database path : http://example.com/Blog.mdb And BP path must be : http://example.com/bp/ you can download it and disclose the...

Microsoft Windows XP - Local Denial of Service

Microsoft Windows XP - Local Denial of Service source: https://www.securityfocus.com/bid/12870/info It is reported that Microsoft Windows XP Service Pack 1 is prone to a local denial of service vulnerability. The issue is reported to manifest when a raw IP over IP socket is created and data is...

[PersianHacker.NET 200503-10]PHP-Fusion v5.01 Html Injection Vulnerability

PersianHacker.NET 200503-10PHP-Fusion v5.01 Html Injection Vulnerability Date: 2005 March Bug Number: 10 PHP-Fusion a light-weight open-source content management system CMS written in PHP. It utilises a mySQL database to store your site content and includes a simple, comprehensive adminstration...

UBBCentral UBB.Threads 6.0 - editpost.php SQL Injection

UBBCentral UBB.Threads 6.0 - editpost.php SQL Injection source: https://www.securityfocus.com/bid/12784/info It is reported that UBB.threads is prone to an SQL injection vulnerability. The SQL injection vulnerability is reported to affect the 'editpost.php' script. UBB.threads 6.0 is reported pro...

Linux Kernel 2.6.x - SYS_EPoll_Wait Local Integer Overflow Local Privilege Escalation (1)

Linux Kernel 2.6.x - SYSEPollWait Local Integer Overflow Local Privilege Escalation 1 / EDB Note: Updated exploit can be found here; https://www.exploit-db.com/exploits/25203/ source: https://www.securityfocus.com/bid/12763/info A Local integer overflow vulnerability affects the Linux kernel. Thi...

OpenBSD 2.0 < 3.6 - TCP Timestamp Remote Denial of Service

define BSDSOURCE include include include include include include include include include include include / edited by /str0ke ! milw0rm.com to compile under linux / ifndef TCPOPTLEN define TCPOPTLEN 12 endif define UMASK 0xffff define TIMESTAMP 0x7b000000 // 123 in hex - change it, this will...

paNews 2.0b4 Remote Admin Creation SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================== paNews 2.0b4 Remote Admin Creation SQL Injection Exploit ======================================================== / paNews v2.0b4 silePNEWSxpl This exploit utilize SQL injection for...

PHP mcNews <= 1.3 (skinfile) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ============================================================== PHP mcNews = 1.3 skinfile Remote File Include Vulnerability ============================================================== Example: if registerglobals=on and allowurlfopen=on:...

MS Windows XP/2003 Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc =================================================== MS Windows XP/2003 Remote Denial of Service Exploit =================================================== / Added Line 1 - BSDSOURCE!!!! /str0ke / define BSDSOURCE include include include include...

CA License Server - 'GETCONFIG' Remote Buffer Overflow

/ Computer-Associates, License Service Stack Overflow Homepage: ca.com Affected version: v1.61 and below in eTrust, Unicenter, BrightStor, etc.. Patched version: hotfix Link: ca.com Date: 04 March 2005 Application Risk: Tsunami Internet Risk: High Dicovery Credits: Barnaby Jack eeye.com Exploit...

auraCMS 1.5 - Multiple Cross-Site Scripting Vulnerabilities

auraCMS 1.5 Multiple Cross-Site Scripting Vulnerabilities. Webapps exploit for php platform source: http://www.securityfocus.com/bid/12708/info auraCMS is affected by multiple cross-site scripting vulnerabilities. These issues exist because the application fails to properly sanitize user-supplied...

eXeem 0.21 Local Password Disclosure Exploit (asm)

Exploit for unknown platform in category local exploits ================================================== eXeem 0.21 Local Password Disclosure Exploit asm ================================================== ;Nothing Special other than the program doesnt encode the proxy info. .386 .model flat,...

phpWebSite-0.10.0_exploit

oooo...oooo.oooooooo8.ooooooooooo .8888o..88.888........88..888..88 .88.888o88..888oooooo.....888 .88...8888.........888....888 o88o....88.o88oooo888....o888o Network security team nst.e-nex.com Title: phpWebSite = v0.10.0 Bug found by: nst Date: 24.02.2005 Web: phpwebsite.appstate.edu...

AWStats 5.7 < 6.2 - Multiple Remote

/ AWStats v5.7 - v6.2 sileAWSxpl This exploit utilize three methods for exploiter the vulnerability found on AWStats software. an user can execute remote code on vulnerable machine, with httpd privileges. References: www.securityfocus.org/bid/12543 coded by: Silentium of Anacron Group Italy date:...

Savant Web Server 3.1 Remote BoF (French Win OS support)

Exploit for unknown platform in category remote exploits ======================================================== Savant Web Server 3.1 Remote BoF French Win OS support ======================================================== Savant web server Buffer Overflow Exploit Discovered by : Mati Aharoni...

GNU a2ps - Anything to PostScript Not SUID Local Overflow

/ Not added to Local Non Poc section /str0ke / include include include // by lizard / lizstyleatgmail.com // greets go to slider/trog for helpin me // not suid by default ; define VULNTHING "/usr/bin/a2ps" define DEFRET 0xbffffffa - strlensc - strlenVULNTHING define xnullbitch 1100 //im not a asm...

Exim 4.43 - 'auth_spa_server()' Remote

/ ecl-eximspa.c Yuri Gushin Howdy : This is pretty straightforward, an exploit for the recently discovered vulnerability in Exim's all versions prior to and including 4.43 SPA authentication code - spabase64tobits will overflow a fixed-size buffer since there's no decent boundary checks before it...