12021 matches found
CMS Frogss 0.4 - 'podpis' SQL Injection
?php echo "+"; echo "+\r\n"; echo "- - - DEVIL TEAM THE BEST POLISH TEAM - -\r\n\r\n"; echo "+\r\n"; echo "+"\r\n"; echo "+\r\n\r\n"; echo "- CMS frogss = 0.4 podpis SQL Injection Exploit creat new admin"\r\n"; echo "+"\r\n"; echo "+"\r\n"; echo "+"\r\n"; echo "- Script name: CMS frogss...
Phaos 0.9.2 - basename() Remote Command Execution
Phaos 0.9.2 - basename Remote Command Execution DEVIL TEAM IRC: irc.milw0rm.com:6667 devilteam http://www.rahim.webd.pl/ ======== Contact: [email protected] cod3d by Kacper -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Greetings DragonHeart and all DEVIL TEAM...
PHlyMail Lite 3.4.4 - 'folderprops.php' Remote File Inclusion (2)
--------------------------------------------------------------------------- PHlyMail Lite = 3.4.4 Build 3.04.04 PMpathhandler Remote File Include Vulnerability 2 --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team :...
Shadows Rising RPG 0.0.5b - Remote File Inclusion
Shadows Rising RPG 0.0.5b - Remote File Inclusion / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - Shadows Rising RPG Pre-Alpha = 0.0.5b CONFIGgameroot Remote File Include Vulnerability + + + - Script name: Shadows Rising RPG Pre-Alpha v. 0.0.5b - Script site:...
Shadows Rising RPG <= 0.0.5b Remote File Include Vulnerabilities
No description provided by source. / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - Shadows Rising RPG Pre-Alpha = 0.0.5b CONFIGgameroot Remote File Include Vulnerability + + + - Script name: Shadows Rising RPG Pre-Alpha v. 0.0.5b - Script site: http://sourceforge.net/projects/shadowsrisin...
interact <= 2.2 (CONFIG[BASE_PATH]) Remote File Include Vulnerability
No description provided by source. / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - Cce-interact = 2.2.0 CONFIGBASEPATH Remote File Include Vulnerability + + + - Script name: Interact - Online Learning and Collaboration System v. 2.2.0 - Script site:...
Firewall / Proxy / NAT Dependency
Binary data 3710.prm...
Simple CMS - Administrator Authentication Bypass
Simple CMS Information: The cms from http://www.cms-center.com/ uses no security at all, just a boolean "isloggedin". If you submit "loggedin=1" in the URL of any of the admin pages, you get full controll. Vulnerable code: if $loggedin != "1" header"Location: /login.php?e=1"; / Redirect browser /...
SendCard <= 3.4.0 Unauthorized Administrative Access Exploit
Exploit for unknown platform in category web applications ============================================================ SendCard php injection\n"; echo " works against magicquotesgpc=Off\n"; echo " 2 - arbitrary remote inclusion\n"; echo " works against allowurlfopen=On\n"; echo " 3 - arbitrary...
Apple iOS MobileSafari LibTIFF Buffer Overflow
This module exploits a buffer overflow in the version of libtiff shipped with firmware versions 1.00, 1.01, 1.02, and 1.1.1 of the Apple iPhone. iPhones which have not had the BSD tools installed will need to use a special payload. Module Options msf use exploit/apple/ios/browser/safarilibtiff ms...
Apple Mac OSX 10.4.7 (PPC) - fetchmail Local Privilege Escalation
Apple Mac OSX 10.4.7 PPC - fetchmail Local Privilege Escalation !/usr/bin/perl getpwnedmail.pl http://www.digitalmunition.com written by kf kflistsatdigitalmunitiondotcom This is a canibalized version of "Kansas City POP Daemon Version 0.0" - Copyright c 1999 David Nicol kevin-finisterres-mac-min...
phpprobid524.txt
Phpprobid 5.24 http://www.phpprobid.com -------------------------- Cross Site Scripting XSS -------------------------- http://target.xx/auctionsearch.php?advsrc="alert/EllipsisSecurityTest/ http://target.xx/auctionsearch.php?start=1&advsrc="alert/EllipsisSecurityTest/ ------------- SQL injection...
Etomite CMS 0.6.1 - rfiles.php Remote Command Execution
Etomite CMS 0.6.1 - rfiles.php Remote Command Execution !/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15...
PAC privilege escalation using Function.prototype.call — Mozilla
mozbugra4 reports that a malicious Proxy AutoConfig PAC server could serve a PAC script that can execute code with elevated privileges by setting the required FindProxyForURL function to the eval method on a privileged object that leaked into the PAC sandbox. By redirecting the victim to a...
SubberZ[Lite] - Remote File Include
Chironex Fleckeri SubberZLite - Remote File Include Find by Chironex Fleckeri Mail/MSN: [email protected] http://site/path/user-func.php?myadmindir=Shell...
Sendmail 8.13.5 - Remote Signal Handling (PoC)
Sendmail 8.13.5 - Remote Signal Handling PoC !/usr/bin/env python [email protected] Sendmail 8.13.5 and below Remote Signal Handling exploit usage: rbl4ck-sendmail.py 127.0.0.1 0 25 this exploit was leaked to the PHC Phrack High Council so instead of only letting them have a copy, we figu...
Microsoft Windows - DHCP Client Broadcast (MS06-036)
Microsoft Windows - DHCP Client Broadcast MS06-036 MS Windows DHCP Client Broadcast Attack Exploit MS06-036 https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/2054.tar.gz 07212006-MS06036DHCPClient.tar.gz milw0rm.com 2006-07-21...
Dumb 0.9.3 - 'it_read_envelope' Remote Heap Overflow (PoC)
/ by Luigi Auriemma / include include include include define VER "0.1" define BOF 255 // 25 BOF 256 define INSTRSZ 371 define POCNAME "proof-of-concept" void fwi08FILE fd, int num; void fwi16FILE fd, int num; void fwi32FILE fd, int num; void fwb08FILE fd, int num; void fwb16FILE fd, int num; void...
WinGate directory traversal
Directory traversal with IMAP...
Mambo Component SimpleBoard 1.1.0 - Remote File Inclusion
Mambo Component SimpleBoard 1.1.0 - Remote File Inclusion Bug Found by h4ntu http://h4ntu.com batamhacker crew Another Mambo component remote inclusion vulneribility download : http://mamboxchange.com/frs/download.php/6920/Simpleboard-1.1.0-Stable.zip bug found in file fileupload.php :...