Mambo <= 4.5.2 Globals Overwrite / Remote Command Exection Exploit

No description provided by source. ?php ---mambo452xpl.php 15.19 17/11/2005 Mambo = 4.5.2 Globals overwrite / remote commands execution coded by rgod site: http://rgod.altervista.org usage: launch from Apache, fill in requested fields, then go! Sun-Tzu: Rapidity is the essence of war: take...

Silverstripe <= 2.3.5 - CSRForgery and Open Redirection Vulnerabilities

No description provided by source. Exploit Title: Silverstripe = 2.3.5 Cross Site Request Forgery & Open Redirection. Date: 12/01/10 Author: cp77fk4r | empty0pageSHIFT+2gmail.com | www.DigitalWhisper.co.il Vendor: www.silverstripe.org | Version: 2.0.0 Tested on: PHP Open Redirection: OWASP: An op...

Shadowed Portal <= 5.7d3 Remote Command Execution Exploit

No description provided by source. !/usr/bin/python -- coding: iso-8859-15 -- ''' / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / / ------------------------------------------------------------------------------------------------ This is a Public...

WordPress Allow PHP in Posts and Pages plugin <= 2.0.0.RC1 - SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress Allow PHP in Posts and Pages plugin = 2.0.0.RC1 SQL Injection Vulnerability Date: 2011-08-18 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link:...

Horde 3.3.12 Backdoor Arbitrary PHP Code Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

TinyIdentD <= 2.2 - Remote Buffer Overflow Exploit

No description provided by source. tinyidentd exploit code by thomas . pollet at gmail . com bug by Maarten Boone usage: python exploit.py target import socket,sys jmp into nop sled payload = '\xeb\x20' ident crap payload += ', 28 : USERID : UNIX : ' nop sled payload +='XXXX' jmp %esi payload +=...

PHP Webquest <= 2.5 (id_actividad) Remote SQL Injection Exploit

No description provided by source. / script name : phpwebquest script version : 2.5 script website : http://phpwebquest.org Bug Finder : D4realTeaM 'unkn0wnX','n3t-mapper','ToxiC350'; injected file : webquest/soportederechaw.php Variable : idactividad Contact : n3t-mapp3r At hotmail dot com,is14m...

Agoko CMS <= 0.4 - Remote Command Execution Exploit

No description provided by source. !/usr/bin/perl print q -------------------------------------------------- Agoko CMS = 0.4 remote commands execution exploit by staker mail: stakerathotmaildotit -------------------------------------------------- Usage - perl xpl.pl host path Example - perl agk.p...

BlueShoes Framework <= 4.6 - Remote File Include Vulnerabilities

No description provided by source. $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ BlueShoes Framework 4.6 = Remote File Include Vulnerability $$ Script site: http://www.blueshoes.org/ $$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$ $$ Find by: Kacper...

MyBB Follower User Plugin - SQL Injection

No description provided by source. Exploit Title: Follower User MyBB plugin SQL Injection 0day Google Dork: intext:Users subscribed to inurl:member.php -site:fwcombie.us Date: 13.10.2012 Exploit Author: Zixem Software Link: http://mods.mybb.com/view/suscriber-user Version: 1.5+ Tested on: Linux...

concrete5 CMS 5.6.1.2 - Multiple Vulnerabilities

No description provided by source. ============================================================= \ \ / / | | / \ / | | \ \ V / | | | | | | | | | / \ | ' \ | | | | | | | | | | | | '| | / / . \ | | | | | | || | | | | | | | | | // \ | ./ || / || || |/ || | | || blackpentesters.blogspot.com...

PeerCast <= 0.1216 - Remote Buffer Overflow Exploit (win32) (meta)

No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...

OTSCMS <= 2.1.3 - Multiple Remote File Include Vulnerabilities

No description provided by source. Coding 4 Fun c4f.pl OTSCMS = 2.1.3 by Wrzasq www.otscms.com ; Class = Remote File Inclusion ; Download = http://sourceforge.net/project/showfiles.php?groupid=145557 ; Found by = GregStar gregstaratc4fdotpl ;...

Adobe Acrobat Reader - JBIG2 Local Buffer Overflow PoC (2) (0day)

No description provided by source. !/usr/bin/perl ksOSe 02/22/2009 http://vrt-sourcefire.blogspot.com/2009/02/have-nice-weekend-pdf-love.html my $size = \x40\x00; my $factor = ABCD; my $data = A x 8314; print pdf; sub pdf %PDF-1.5\n . %\xec\xf5\xf2\xe1\xe4\xef\xe3\xf5\xed\xe5\xee\xf4\n . 3 0 \n...

Linux i686 - pacman -R <package> - 59 bytes

No description provided by source. / Title : Linux i686 - pacman -R package - 59 bytes Author : Jonathan Salwan Mail : submit ! shell-storm.org Web : http://www.shell-storm.org Pacman is a software package manager, developed as part of the Arch Linux distribution. With this shellcode you can remo...

Linux x86 - ip6tables -F - 47 bytes

No description provided by source. / Linux x86 - ip6tables -F - 47 bytes Jonathan Salwan submit ! shell-storm.org ! DataBase of Shellcodes and you can share your shellcodes : http://www.shell-storm.org/shellcode/ ! The Gnuser Project Gnu Users Manager = http://www.gnuser.org Disassembly of sectio...

real estate web site 1.0 (sql/xss) Multiple Vulnerabilities

No description provided by source. --==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ Real Estate Web Site 1.0 SQL/XSS Multiple Remote Vulnerabilities +==-- --==+====================================================================================+==...

Open Bulletin Board <= 1.0.5 - SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w OpenBB sql injection tested on Open Bulletin Board 1.0.5 with mysql coded by x97Rang 2005 RST/GHC Gr33tz: blf, 1dt.w0lf use IO::Socket; if @ARGV != 3 print \nUsage: $0 server path id\n; print like $0 forum.mysite.com / 1\n; print If found nothi...

Hotel Booking Portal 0.1 - Multiple Vulnerabilities

No description provided by source. ----------------------------------------------------------- / | | | | | | | | | | | | | | | | | / |/ |/ \ | | || | || | | | | / | ||\,|,||| ----------------------------------------------------------- Hotel Booking Portal v0.1 Multiple Vulnerabilities Google...

BitchX <= 1.1-final do_hook() Remote Denial of Service Exploit

No description provided by source. // BitchX epic =1.1-final | dohook Boundary Check Error Remote DoS ///////////////////////////////////////////////////////////////////////// // Federico L. Bossi Bonin // fbossiatnetcommdotcomdotar // 0 0x080a3fcc in BXdohook which=9999999, format=0x8119077 %s %...