11989 matches found
Joomla JBook Blind SQL Injection
Joomla Component comjbook Blind SQL-injection Vulnerability author : Fl0riX Greetz : BARCOD3 , Septemb0x, Deep-Power,DreamPower,Pyske,F0rtys3v3n,BlackApple Name : comjbook Bug Type : Blind SQL Injection Infection : Admin login bilgileri alýnabilir. Demo Vuln. : TRUE+ »...
TFTP SERVER Buffer Overflow remote exploit
No description provided by source. !/usr/bin/env python This vuln is already owned by Muts , but i want to add the second methode Note: we don't have more space for shellcode or Skape egghunter 23 bytes only after SEH option I used the jumpback because is the best and easiest way for exploiting a...
Multi-Lingual Application Blind SQL Injection Vulnerability
No description provided by source. ? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe: multi Blind SQL Injection Vulnerability Vendor: www.charon.co.uk Software: Multi-lingual Application author: R3d-D3v!L Date: 17.dec.2009 T!ME: 4:20 am ? Home: WwW.xP10.ME...
Active Photo Gallery v 6.2 (Auth Bypass) Remote SQL Injection
No description provided by source. ? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe: Auth Bypass Remote SQL Injection Vulnerability ? Vendor: www.activewebsoftwares.com ? ? Software: Active Photo Gallery v 6.2 ? ? author: R3d-D3v!L ? ? Date: 17.dec.2009 ?...
V-SpacePal SQL Injection
Tybe:Auth Bypass Remote SQL Injection Vulnerability ? Vendor: www.datachecknh.com ? ? Software: V-SpacePal ? Price $29.95 One-time fee ? author: R3d D3v!L ? ? Date: 15.12.2009 ? ? Home: WwW.XP10.ME ? ? contact: [email protected] ???????????????????????DEV!L'5 of SYST3M?????????????????? ? ERR0R...
V-SpacePal SQL Injection Vulnerability
Exploit for unknown platform in category web applications ====================================== V-SpacePal SQL Injection Vulnerability ====================================== Tybe:Auth Bypass Remote SQL Injection Vulnerability ? Vendor: www.datachecknh.com ? ? Software: V-SpacePal ? Price $29.95...
drupal -- multiple cross-site scripting
Drupal Team reports: The Contact module does not correctly handle certain user input when displaying category information. Users privileged to create contact categories can insert arbitrary HTML and script code into the contact module administration page. Such a cross-site scripting attack may le...
Invision Power Board < 3.0.5 Multiple Vulnerabilities
The remote web server hosts a version of Invision Power Board earlier than 3.0.5. Such versions are potentially affected by multiple vulnerabilities : - A local-file include vulnerability affects the 'section' parameter sent to the 'forum/index.php' script. - A SQL injection vulnerability affects...
Linux - chmod(/etc/shadow, 0666) & exit() - 33 bytes
No description provided by source. include stdio.h / linux/x86 ; chmod/etc/shadow, 0666 & exit 33 bytes written by ka0x - ka0x01alt+64gmail.com lun sep 21 17:13:25 CEST 2009 greets: an0de, Piker, xarnuz, NullWave07, Pepelux, JosS, sch3m4, Trancek and others! / int main char shellcode = "\x31\xc0"...
[WS] upload - Arbitrary File Upload
| | WS upload Remote File Upload Vulnerability | | Author : ViRuSMaN | | Contact : [email protected] | | Home : Islam-Attack.CoM , HackTeach.OrG | | Download : http://www.phpshark.dk/download.php?file=phpsharkdk52multiupload.zip&id=52 | | | | Exp : | | 1- Choose number of files 2 upload | | 2- Upload...
Joomla Component com_virtuemart SQL injection vulnerability
Exploit for unknown platform in category web applications ======================================================================== Joomla Component comvirtuemart SQL injection vulnerability productid ======================================================================== / Software Information...
Chipmunk NewsLetter - Cross-Site Request Forgery
Chipmunk NewsLetter - Cross-Site Request Forgery ------------------------------------------------------------------------------------------------- Title: Chipmunk Newsletter CSRF Vulnerabilities Author: Milos Zivanovic Date: 11. December 2009...
ZDI-09-095: Hewlett-Packard OpenView NNM Snmp.exe Oid Variable Buffer Overflow Vulnerability
ZDI-09-095: Hewlett-Packard OpenView NNM Snmp.exe Oid Variable Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-095 December 9, 2009 -- CVE ID: CVE-2009-3849 -- Affected Vendors: Hewlett-Packard -- Affected Products: Hewlett-Packard OpenView Network Node Manager --...
Alqatari group Version 1.0 <== 5.0 (id) Remote SQL Injection Vulnerability
No description provided by source. 1337h4x0rZ //Rd / / / \ \ |/ / /\ | \ /\ || \ /\ | \ | | \ / / / / | / | | / / d0tcom/@\ | O / /+\ ||O| /0O\ | \ | | \ \ \ \ | \ | | / / /||\ | \ /|||| O | /++| ^ \ | | / \ /\ / ||\ ||/ \ /| |/||\ |//| |/\|...
MarieCMS v0.9 LFI, RFI, and XSS Vulnerabilities
Exploit for unknown platform in category web applications =============================================== MarieCMS v0.9 LFI, RFI, and XSS Vulnerabilities =============================================== OVERVIEW MarieCMS v0.9 vulnerable to following issues: ++ Remote File Inclusion ++ Local File...
Elkagroup SQL Injection
Title: elkagroup SQL Injection Vulnerability EDB-ID: 10330 CVE-ID: OSVDB-ID: Author: SadHaCkEr Published: 2009-12-06 Verified: no Download Exploit Code Download N/A view source print? Dork : "powered by: elkagroup" + |SadHaCkEr|\ + ||||\ + ||||""|", + ||||""|"||| + " @''@""""""|@@@...
New Mac OS Proof-of-Concept Attack Revealed
A security researcher has released a proof-of-concept attack that exploits critical vulnerabilities that Apple patched on Thursday; The vulns stem from bugs in the Java runtime environment that allow attackers to remotely execute malicious code. Read the full article. The Register...
Talking about the failure of the word Trojan horse-vulnerability warning-the black bar safety net
Author: FoolishQiang the original address: A lot of friends in the database, or the configuration file inserted into the word, but can't connect. I summed up for three reasons. Reason one: the case of transition Case transition, this is a bit like DZ's that take shell's method, is that you of the...
Quate CMS <= 0.3.5 (RFI/LFI) Multiple Remote Vulnerabilities
No description provided by source. Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg Quate CMS = 0.3.5 RFI/LFI Multiple Remote Vulnerability Download Script : http://quate.net/quatecms Dork : die"lamers attempt"; :P Vuln RFI : ./QuateCMS035/admin/includes/header.php line 27 ?php if $bypassrestrict...
PHP 5.3.1 version before the denial of service attack vulnerability(with test code)-vulnerability warning-the black bar safety net
Code: PHP MultiPart Form-Data Denial of Service proof of concept, 23-10-2009 Bogdan said Calin [email protected] import httplib, urllib, sys, string, threading from string import replace from urlparse import urlparse def usage: print"" print "PHP MultiPart Form-Data Denial of Service proof of...