Gawker Local File Inclusion

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Thought I'd share this...found an LFI on gawker which is on the same server as Kotaku and other sites part of their 'network' http://kotaku.com/assets/minify.php?fsid=dfdsf&type=sads&sb=../../.. /../../../../../../../etc/passwd%00 ^ works for gawker a...

Adobe ColdFusion Directory Traversal

Working GET request courtesy of carnal0wnage: http://server/CFIDE/administrator/enter.cfm?locale=../../../../../../../../../../ColdFusion8/lib/password.properties%00en LLsecurity added another admin page filename: "/CFIDE/administrator/enter.cfm" !/usr/bin/python CVE-2010-2861 - Adobe ColdFusion...

Malicious File Upload

The application server accepted a vbscript file, an HTML file containing JavaScript, and the EICAR test virus as allowed attachments. This means that an attacker could submit a malicious file to the backend, where the file might be launched by another internal RIM employee if they click and open...

CVE-2010-2073

authdbconfig.py in Pyftpd 0.8.4 contains hard-coded usernames and passwords for the 1 test, 2 user, and 3 roxon accounts, which allows remote attackers to read arbitrary files from the FTP server...

IISWorks FileMan Remote User Database Disclosure

Exploit Title: IISWorks FileMan fileman.mdb Remote User Database Disclosure Disclosure Date: July 5, 2005 Author: Known Vulnerability Software Link: http://www.scriptdungeon.com/scripts/asp/FileManASP.rar Version: OSVDB: 17824 Security Tracker ID: 1014383 Found exploited in the wild by: Joey Furr...

Ucenter Projekt 2.0 Insecure crossdomain (XSS) Vulnerability

Exploit for php platform in category web applications ============================================================ Ucenter Projekt 2.0 Insecure crossdomain XSS Vulnerability ============================================================...

CVE-2010-1157

CVE-2010-1157 affects Apache Tomcat 5.5.0–5.5.29 and 6.0.0–6.0.26. The vulnerability allows an attacker to disclose the server’s hostname or IP by sending a request for a resource that requires BASIC or DIGEST authentication and then reading the realm field in the WWW-Authenticate header. The pro...

CVE-2010-1425

Summary: CVE-2010-1425 affects F-Secure and related antivirus products, whose scanning engines fail to detect malware in specially crafted 7Z, GZIP, CAB, and RAR archives. The issue enables remote malware delivery by archive content evasion, impacting several F-Secure offerings (including Interne...

RedHat Update for openssl097a RHSA-2010:0164-01

Check for the Version of openssl097a OpenVAS Vulnerability Test RedHat Update for openssl097a RHSA-2010:0164-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

MySQL Server Suspicious Command Detection

Binary data 5409.prm...

Easynet Forum Host SQL Injection

Exploit Title: Easynet Forum Host topic.php SQL Injection Vulnerbility Date: 05/04/2008 Author: Pr0T3cT10n Software Link: http://www.easynet4u.com/forum Version: all Tested on: all CVE: Code: //------------------------------------------------ // Easynet Forum Host SQL Injection Vulnerbility...

Cpanel Bypass Safe mode [ extract tar.gz by Cpanel ]

==================================================== Cpanel Bypass Safe mode extract tar.gz by Cpanel ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' /' / /' 0 0 /, // ,/ / 1 1 // /' / // /' / /' 0 0 / / / / / ...

Subversion svn Protocol String Parsing (CVE-2004-0413)

Subversion is a revision control system that handles svn protocol requests. A specially crafted svn request could cause svnserve, the daemon that handles svn protocol requests, to allocate insufficient heap memory and overflow the heap. It is possible for a malicious attacker to run arbitrary cod...

HTTP Virtual Host Brute Force Scanner

This module tries to identify unique virtual hosts hosted by the target web server. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework May I reuse some methods? require 'cgi' class MetasploitModule 'HTTP Virtual Host Bru...

Mod_proxy From Apache 1.3 Integer Overflow

Name: Modproxy from apache 1.3 - Integer overflow which causes heap overflow. Author: Adam Zabrocki or Date: Jan 27, 2010 Issue: Modproxy from apache 1.3.xx tested on latest version - 1.3.41 allows local and remote attackers to overflow buffer on heap via integer overflow vulnerability...

StarDevelop Live Help 2.6 - SERVER Multiple Cross-Site Scripting Vulnerabilities

StarDevelop Live Help 2.6 - SERVER Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/37558/info Stardevelop Live Help is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An...

My Book World Edition NAS Cross Site Scripting

Exploit Title: My Book World Edition NAS multiple vulnerability Date: 20091230 Author: Emanuele 'emgent' Gentili Code: http://www.backtrack.it/emgent/exploits/20091230-NAS.txt Version: 01.01.16 with MioNet 2.3.9.13 firmware. CVE : N/A Vendor: http://www.wdc.com/mybookworld + REMOTE COMMAND...

My Book World Edition NAS multiple vulnerability

No description provided by source. Exploit Title: My Book World Edition NAS multiple vulnerability Date: 20091230 Author: Emanuele 'emgent' Gentili Code: http://www.backtrack.it/emgent/exploits/20091230-NAS.txt Version: 01.01.16 with MioNet 2.3.9.13 firmware. CVE : N/A Vendor:...

My Book World Edition NAS multiple vulnerability

Exploit for unknown platform in category web applications ================================================ My Book World Edition NAS multiple vulnerability ================================================ Exploit Title: My Book World Edition NAS multiple vulnerability Date: 20091230 Author:...

Calendar Express 2.0 - SQL Injection

Calendar Express 2.0 - SQL Injection Calendar Express 2.0 Vulnerability Calendar Express 2.0 Powered by Phplite.com Download:http://script.wareseeker.com/download/calendar-express-2.rar/11517 Author: Baybora Site: www.1923turk.biz Exploit: POST...