phpPaleo - Local File Inclusion

'phpPaleo' Local File Inclusion CVE-2012-1671 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in index.php for language handling that allows for local file inclusion using a null-byte attack on the 'lang' GET parameter. II...

Simple PHP Agenda 2.2.8 - Cross-Site Request Forgery (Add Admin / Add Event)

+--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Simple PHP Agenda = 2.2.8 CSRF Add Admin - Add Event Date : 29-03-2012 Author : Ivano Binetti http://ivanobinetti.com Software link :...

Adobe Releases Malware Classifier Tool

Adobe has published a free tool that can help administrators and security researchers classify suspicious files as malicious or benign, using specific machine-learning algorithms. The tool is a command-line utility that Adobe officials hope will make binary classification a little easier. Adobe...

SnackAmp 3.1.3 - .aiff Denial of Service

SnackAmp 3.1.3 - .aiff Denial of Service SnackAmp 3.1.3 Malicious aiff File Denial of service =================================================================================== Exploit Title:SnackAmp 3.1.3 Malicious aiff File Denial of service Download link...

simple e-document <= v1.3 SQL injection Vulnerability

Exploit for php platform in category web applications Exploit Title: simple e-document !Muslims!,Mosta,team152,Inj3ct0r And all my Freinds + Algerian Hackers -----------------------------------------------------+ DzMafia © 2012 All rights reserved. 0day.today 2018-04-14...

KnFTPd 1.0.0 Denial Of Service

!/usr/bin/perl Advisory: KnFTPd 1.0.0 'FEAT' DoS PoC-Exploit Author: Stefan Schurtz Affected Software: Successfully tested on KnFTPd 1.0.0 Vendor URL: http://knftp.sourceforge.net/ Vendor Status: informed CVE-ID: - PoC-Version: 1.0 use strict; use Net::FTP; my $user = "system"; my $password =...

HT Editor Spawning Root Shell

Exploit for linux platform in category remote exploits !/usr/bin/python Exploit Title: HT Editor Spawning Root Shell Date: 29-Mar-2012 Author: blusp10it Version: 2.0.18 Download: http://sourceforge.net/projects/hte/files/ht-source/ht-2.0.18.tar.gz Tested on: BackTrack 4 R2, Ubuntu 10.04 Run with:...

PHP SQL Server (MSSQL) Query Analyzer Remote Code Execution

Exploit for php platform in category web applications ?php / +------------------------------------------------------------------+ + PHP SQL Server MSSQL Query Analyzer Remote Code Execution + +------------------------------------------------------------------+ Web-App : PHP SQL Server MSSQL Query...

KnFTPd 1.0.0 'FEAT' DoS PoC-Exploit

Exploit for windows platform in category dos / poc !/usr/bin/perl Advisory: KnFTPd 1.0.0 'FEAT' DoS PoC-Exploit Author: Stefan Schurtz Affected Software: Successfully tested on KnFTPd 1.0.0 Vendor URL: http://knftp.sourceforge.net/ Vendor Status: informed CVE-ID: - PoC-Version: 1.0 use strict; us...

Family Connections 2.9 Php Code Execution

Exploit for php platform in category web applications Exploit Title: Family Connections 2.9 Php COde Execution Date: 28/mar/2012 Author: L3b-r1'z Vendor or Software Link: http://sourceforge.net/projects/fam-connections/files/Family%20Connections/ Version: 2.9 Category: webapps Google dork:...

NextBBS 0.6.0 Authentication Bypass / SQL Injection / XSS

waraxe-2012-SA080 - Multiple Vulnerabilities in NextBBS 0.6.0 =============================================================================== Author: Janek Vind "waraxe" Date: 27. March 2012 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-80.html Description of vulnerable software:...

RIPS 0.53 Local File Inclusion

RIPS = 0.53 Multiple Local File Inclusion Vulnerabilities Google Dork: allintitle: "RIPS - A static source code analyser for vulnerabilities in PHP scripts" Althout this script is not intended to be accesible from internet, there are some websites that host it. Download:...

RIPS 0.53 - Multiple Local File Inclusions

RIPS 0.53 - Multiple Local File Inclusions RIPS = 0.53 Multiple Local File Inclusion Vulnerabilities Google Dork: allintitle: "RIPS - A static source code analyser for vulnerabilities in PHP scripts" Althout this script is not intended to be accesible from internet, there are some websites that...

PHP Grade Book 1.9.4 SQL Database Export

'PHP Grade Book' Unauthenticated SQL Database Export CVE-2012-1670 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in admin/index.php that allows for an unauthenticated user to export the entire application database by...

PHP Grade Book 1.9.4 - SQL Database Export

'PHP Grade Book' Unauthenticated SQL Database Export CVE-2012-1670 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in admin/index.php that allows for an unauthenticated user to export the entire application database by...

PHP Grade Book 1.9.4 - SQL Database Export

PHP Grade Book 1.9.4 - SQL Database Export 'PHP Grade Book' Unauthenticated SQL Database Export CVE-2012-1670 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in admin/index.php that allows for an unauthenticated user to expor...

PHP Grade Book 1.9.4 Unauthenticated SQL Database Export

Exploit for php platform in category web applications 'PHP Grade Book' Unauthenticated SQL Database Export CVE-2012-1670 Mark Stanislav - email protected I. DESCRIPTION --------------------------------------- A vulnerability exists in admin/index.php that allows for an unauthenticated user to...

Typesoft FTP Server 1.1 Denial Of Service

!/usr/bin/python SEH overflow exploiting a vulnerability in Typesoft-FTP APPE command. Date of Discovery: 3/16/2012 0 Day Author: Brock Haun Vulnerable Software Download: http://sourceforge.net/projects/ftpserv/ Software Version: 1.1 Target OS: Windows 7 REQUIRES VALID CREDENTIALS. Luckily,...

TypesoftFTP Server 1.1 Remote DoS (APPE)

Exploit for windows platform in category dos / poc !/usr/bin/python SEH overflow exploiting a vulnerability in Typesoft-FTP APPE command. Date of Discovery: 3/16/2012 0 Day Author: Brock Haun Vulnerable Software Download: http://sourceforge.net/projects/ftpserv/ Software Version: 1.1 Target OS:...

Singapore 0.10.1 Cross Site Scripting

Exploit Title: singapore 0.10.1 Remote XSS Vulnerabilities Author: T0x!c Facebook Page: www.facebook.com/DzTem E-mail: [email protected] Category:: webapps Google Dork: OFF Software : http://sourceforge.net/projects/singapore/ Version: 0.10.1 Tested on: || Windows || +----+ xXx xXx +----+ ===...