2611 matches found
Phpwiki Ploticus Remote Code Execution
The Ploticus module in PhpWiki 1.5.0 allows remote attackers to execute arbitrary code via command injection. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Phpwiki Ploticus Remote Code...
Rejetto HTTP File Server (HFS) 2.3.x - Remote Command Execution (1)
Rejetto HTTP File Server HFS 2.3.x - Remote Command Execution 1 Exploit Title: HttpFileServer 2.3.x Remote Command Execution Google Dork: intext:"httpfileserver 2.3" Date: 11-09-2014 Remote: Yes Exploit Author: Daniele Linguaglossa Vendor Homepage: http://rejetto.com/ Software Link:...
HttpFileServer 2.3.x Remote Command Execution
Affected software: http://sourceforge.net/projects/hfs/ Version : 2.3x Exploit Title: HttpFileServer 2.3.x Remote Command Execution Google Dork: intext:"httpfileserver 2.3" Date: 11-09-2014 Remote: Yes Exploit Author: Daniele Linguaglossa Vendor Homepage: http://rejetto.com/ Software Link:...
PHP Stock Management System 1.02 - Multiple Persistent Cross Site Scripting Vulnerabilities
Exploit for php platform in category web applications Exploit Title: Multiple Persistent Cross Site Scripting Vulnerabilities in PHP Stock Management System 1.02 Date: 25 Aug 2014 Exploit Author: Ragha Deepthi K R Vendor Homepage: http://www.posnic.com/ Software Link:...
DirPHP 1.0 - LFI Vulnerability
No description provided by source. !/usr/bin/env python -- coding:utf-8 -- from pocsuite.net import req from pocsuite.poc import Output, POCBase from pocsuite.utils import register class TestPOCPOCBase: vulID = '87159' version = '1' vulDate = '1406390400' createDate = '1442937600' references =...
DjVuLibre <= 3.5.25.3 - Out of Bounds Access Violation
No description provided by source. from shutil import copyfile import sys """ Exploit Title: DjVuLibre = 3.5.25 Out of Bounds Access Violation Date: 07/14/24 Exploit Author: drone @dronesec Vendor: http://djvu.sourceforge.net/ Software link:...
DjVuLibre 3.5.25.3 - Out of Bounds Access Violation
DjVuLibre 3.5.25.3 - Out of Bounds Access Violation from shutil import copyfile import sys """ Exploit Title: DjVuLibre .text:004D3BC5 mov eax, eax+ecx4 .text:004D3BC8 test eax, eax .text:004D3BCA jnz short loc We overwrite 4 bytes in an FG44 chunk header with \xff\xff\xff\xff: 46 47 34 34 00 00 ...
DjVuLibre 3.5.25.3 - Out of Bounds Access Violation
from shutil import copyfile import sys """ Exploit Title: DjVuLibre .text:004D3BC5 mov eax, eax+ecx4 .text:004D3BC8 test eax, eax .text:004D3BCA jnz short loc We overwrite 4 bytes in an FG44 chunk header with \xff\xff\xff\xff: 46 47 34 34 00 00 04 6E 00 64 01 02 FF FF FF FF 80 FF...
OL-Commerce 2.1.1 Cross Site Scripting / SQL Injection Vulnerabilities
OL-Commerce version 2.1.1 suffers from cross site scripting and remote SQL injection vulnerabilities. OL-Commerce v2.1.1 - Multiple Vulnerabilties =================================================================== .:. Author : AtT4CKxT3rR0r1ST .:. Contact : email protected , email protected .:...
Static Http Server 1.0 - Denial of Service (DoS) Exploit
No description provided by source. Exploit Title: Static Http Server 1.0 Denial Of Service Exploit Date: 24.11.2013 Exploit Author: GalaxyAndroid Vendor Homepage: http://sourceforge.net/projects/static-httpd/files/static-httpd/ Software Link:...
adaptbb 1.0b Multiple Vulnerabilities
No description provided by source. Salvatore drosophila Fresta + Application: AdaptBB + Version: 1.0 Beta + Website: http://sourceforge.net/projects/adaptbb/ + Bugs: A Multiple Blind SQL Injection B Multiple Dynamic Code Execution C Arbitrary File Upload + Exploitation: Remote + Date: 09 Apr 2009...
PHPcounter <= 1.3.2 (defs.php l) Local File Inclusion Vulnerability
No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP YmmMMMM MMM YM Discovered by dun \ dunatstrcpy.pl PHPcounter = 1.3.2 Local File Inclusion Vulnerability Script: A multi-account real time web-site...
Slooze PHP Web Photo Album 0.2.7 - Command Execution Vulnerability
No description provided by source. 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ 0 0 \ \ /\ /\ \ \ \ /\ \ \ /\ /\ \ \ \ \ \ \ / 1 1 \ \ \ \\ \ \ /\ \...
OpenEMR <= 2.8.1 (fileroot) Remote File Include Vulnerability
No description provided by source. $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ OpenEMR = 2.8.1 Remote File Include Vulnerability $$ Script site: http://sourceforge.net/projects/openemr/ $$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$ $$ Find by:...
KISGB <= (tmp_theme) 5.1.1 - Local File Inclusion Vulnerability
No description provided by source. !/usr/bin/env python -- coding:utf-8 -- from pocsuite.net import req from pocsuite.poc import Output, POCBase from pocsuite.utils import register class TestPOCPOCBase: vulID = '65284' version = '1' vulDate = '1206806400' createDate = '1442937600' references =...
PHP DB Designer <= 1.02 Remote File Include Vulnerabilities
No description provided by source. PHP DB Designer = 1.02 Remote File Include Exploit D.Script: http://sourceforge.net/projects/phpdbdesigner/ Discovered by: GloDM = Mahmoodali Homepage: http://www.Tryag.cc Greetz To: Tryag-Team & 4lKaSrGoLd3n-Team & AsbMay's Group...
PHP Volunteer Management System 1.0.2 - Multiple Vulnerabilities
No description provided by source. Exploit Title: PHP Volunteer Management System v 1.0.2 Multiple Vulnerabilities Date: 05/28/12 Author: Ashoo Mail: [email protected] Software Site: https://sourceforge.net/projects/phpvolunteer/ Version: 1.0.2 Tested on: IIS6.0-Windows 2003 ToC 1.0...
Audacity <= 1.2 (.gro File) Universal BOF Exploit (egg hunter)
No description provided by source. !/usr/bin/env python Audacity = 1.2 .gro universal buffer overflow exploit Author: mrme Download: http://audacity.sourceforge.net/download/ Tested on Wind0ws XP sp3 & Vist@ Greetz fly to Muts and the offensive-security team also to my wonderful partner Vanessa F...
jara 1.6 - SQL Injection vulnerability
No description provided by source. jara 1.6 sql injection vulnerability download http://sourceforge.net/projects/jara/files/v1.6/jarav16.zip author muuratsalo contact muuratsaloatgmail.com exploit http://localhost/jara/view.php?id=SQL Injection...
Web Cookbook - Multiple SQL Injection Vulnerabilities
No description provided by source. Exploit Title: Web Cookbook Multiple SQL Injection Date: 2013/3/12 Exploit Author: Saadat Ullah ? [email protected] Software Link: http://sourceforge.net/projects/webcookbook/ Author HomePage: http://security-geeks.blogspot.com/ Tested on: Server:...