eCMS 0.4.2 - SQL Injection Security Bypass

eCMS 0.4.2 - SQL Injection Security Bypass ...::::eCMS-v0.4.2 SQL/PB Multiple Remote Vulnerabilities ::::... Virangar Security Team www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all hackerz...

Ajax framework (lang) Local File Inclusion Vulnerability

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.eu Ajax framework by www.zapatec.com Local File Include Vulnerability Script site:...

Zomplog <= 3.8.2 (newuser.php) Arbitrary Add Admin Exploit

No description provided by source. ======================== WEBXAKEP.NET =========================== Name: "Zomplog 3.8.2 = add admin" Version: All Script Download: http://www.zomp.nl/zomplog/ DORK: "powered by zomplog" Discovered By: ArxWolf Discovered On: 16 05 2008 WWW: http://WebXakep.net ICQ...

Archangel Weblog 0.90.02 (post_id) SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================== Archangel Weblog 0.90.02 postid SQL Injection Exploit ======================================================== !/usr/bin/perl -w Portal : Archangel Weblog 0.90.02 Download :...

Debian OpenSSL Predictable PRNG Bruteforce SSH Exploit (ruby)

Exploit for multiple platform in category remote exploits ============================================================= Debian OpenSSL Predictable PRNG Bruteforce SSH Exploit ruby ============================================================= !/usr/bin/ruby Debian SSH Key Tester L4teral This tool...

Lanius CMS 1.2.16 - FCKeditor Arbitrary File Upload

Lanius CMS 1.2.16 - FCKeditor Arbitrary File Upload 0 && !inarray $sExtension, $arAllowed || count$arDenied 0 && inarray $sExtension, $arDenied 63. SendResults '202' ; 64. 65. $sErr...

Joomla! Component xsstream-dm 0.01b - SQL Injection

!/usr/bin/perl -w Joomla Component xsstream-dm 0.01 Beta Remote SQL Injection Founded by : Houssamix From H-T Team H-T Team HouSSaMix + ToXiC350 from MoroCCo Contact: Ev!L Greetz : CoNaN & HaCkeREgY & All friends & All muslims HaCkeRs : ScriptName: "Joomla" ComponentName: "xsstream-dm" 0.01 Beta...

Open Office.org 2.31 swriter Local Code Execution Exploit

Exploit for unknown platform in category local exploits...

Galleristic 1.0 (index.php cat) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================ Galleristic 1.0 index.php cat Remote SQL Injection Exploit ============================================================ /', $request$i, $response; if!empty$response1 return...

phpDirectorySource 1.1 Multiple Remote SQL Injection Vulnerabilities

No description provided by source. |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ \ | | \ \ /\ /\ \ \ \ /\ \L\ /\ /\ \ \ \ \ \ \ / /\ \L\ \ | |...

cplinks-sqlxss.txt

|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | | |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| Title :: cpLinks v1.03...

Kmita Tellfriend 2.0 - 'file' Remote File Inclusion

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV93$2008 ----------------------------------------------------------------------------------------- ECHOADV93$2008 Kmita Tellfriend = 2.0 file Remote File Inclusion Vulnerability...

Power Editor 2.0 Remote File Disclosure / Edit Vulnerability

No description provided by source. ..:::::Power Editor LOCAL FILE INCLUSION Vulnerbility ::::... Virangar Security Team www.virangar.net -------- Discoverd By :Virangar Security Team hadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all iranian hackerz...

phpDirectorySource 1.1 - Multiple SQL Injections

phpDirectorySource 1.1 - Multiple SQL Injections |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...

Akamai Download Manager ActiveX Control < 2.2.3.5 Remote Code Execution

The Windows remote host contains the Download Manager ActiveX control from Akamai, which helps users download content. The version of this ActiveX control on the remote host reportedly allows downloading and automatic execution of arbitrary code. If an attacker can trick a user on the affected ho...

Project Based Calendaring System (PBCS) 0.7.1 Multiple Vulnerabilities

Exploit for unknown platform in category web applications ====================================================================== Project Based Calendaring System PBCS 0.7.1 Multiple Vulnerabilities ====================================================================== Project Based Calendaring...

vlc-format.txt

/ Epibite // bite since 1442 pown meme ta mamie / / Advisory from Luigi Auriemma CVE-2007-6682 / format string in VideoLAN VLC 0.8.6d Description : Format string vulnerability in the httpdFileCallBack function network/httpd.c in VideoLAN VLC 0.8.6d allows remote attackers to execute arbitrary cod...

PostNuke Module pnFlashGames <= 2.5 SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ================================================================= PostNuke Module pnFlashGames 2 version: index.php?module=pnFlashGames&func=display&id=-1+union+select+concatpnuname,char58,pnpass,1,2,3,4,5,6,7,8+from+nukeusers+where+uid=2/...

Crazy Goomba 1.2.1 (id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================== Crazy Goomba 1.2.1 id Remote SQL Injection Vulnerability ========================================================== Crazy Goomba 1.2.1 SQL inj dork: : sory author: ZoRLu Not: msn i...

DivX Player 6.6.0 - '.srt' File Buffer Overflow (SEH)

!/usr/bin/python DivX 6.6 SRT SEH overwrite PoC Tested on XP SP2 Coded by Mati Aharoni, aka muts and Chris Hadnagy, aka loganWHD muts..at..offensive-security...dot..com chris..at..offensive-security...dot..com http://www.offensive-security.com/0day/divx66.py.txt Notes: Unicode buffer - real pita...