PHP Dir Submit - aid SQL Injection

PHP Dir Submit - aid SQL Injection ====================================================================== » Script : PHP Dir Submit Version 1.00 aid Remote SQL Injection Vuln » Language : php » Dork : Powered by PHP Dir Submit - Directory Submission Script » Script site :...

Practical Advice For Cleaning Hacked Web Sites

From the HP Security Labs blog If Google detects that your website is hosting malware, it is pretty clear your site has been attacked. A frightening trend with SQL Injection attacks concerns how an attacker will insert links to javascript content used to serve malicious links that may try and...

Best Dating Script Arbitrary Shell Upload Vulnerability

No description provided by source. ======================================================= +++++++++++++++++++ |Script info| +++++++++++++++++++++ ======================================================= Shell Upload Vulnerability - script : bestdatingscript - Site : http://www.bestdatingscript.co...

MRCGIGUY Thumbnail Gallery File Upload

MRCGIGUY Thumbnail Gallery Post 1b Remote File Upload Vuln + Discovered By ThE g0bL!N + Vendor:http://www.mrcgiguy.com/ + Download:http://www.mrcgiguy.com/cgi-bin/freedown.cgi?id=6 + Greets : SarBoT511 -Sub-ZeRo + Note: It is a Sex Site Thanx God For This Bug : Exploit: ------- 1Go To add Your...

Automated link exchange portal 1.3 - Multiple Vulnerabilities

Automated link exchange portal 1.3 - Multiple Vulnerabilities ------------------------------------------------------------------------- Automated Link Exchange Portal V1.3 Multiple Remote Vulnerabilities --------------------------------------------------------------- Founder : TiGeR-Dz...

Job Script 2.0 Shell Upload

/ | \ | | / \ \ | |/ /\ / // \ \ \ Y // | | / / / / / :: Egy Coders Team Researcher /- Job Board = Arbitrary File Upload Vulnerability /- demo : http://www.jobscriptdemo.com /- Greetz : ExH , ProViDoR , Bright D@rk , Error Code , all team /- Proud To Be Egyptian ..... /-...

Password Protector SD 1.3.1 Insecure Cookie

======================================================= +++++++++++++++++++ information +++++++++++++++++++++++ ======================================================= + Script : Password Protector SD v1.3.1 Insecure Cookie Handling Vulnerability + Found by : Mr.tro0oqy + C0ntact :...

Password Protector SD 1.3.1 Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications ================================================================== Password Protector SD 1.3.1 Insecure Cookie Handling Vulnerability ==================================================================...

Password Protector SD 1.3.1 - Insecure Cookie Handling

Password Protector SD 1.3.1 - Insecure Cookie Handling ======================================================= +++++++++++++++++++ information +++++++++++++++++++++++ ======================================================= + Script : Password Protector SD v1.3.1 Insecure Cookie Handling...

Dranzer: Fuzzing for ActiveX vulnerabilities

The United States Computer Emergency Response Team US-CERT has released a new ActiveX fuzzer to help developers pinpoint browser-based security vulnerabilities. The tool, called Dranzer, lets software developers test ActiveX controls for vulnerabilities before the software is released to the...

Star Downloader Free <= 1.45 (.dat) Universal SEH Overwrite Exploit

No description provided by source. / :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered and Exploited by dun Star Downloader Free = v1.45 .dat Universal SEH Overwrite Exploit Vendor:...

Mandriva Update for ksplash-engine-moodin MDVA-2008:067 (ksplash-engine-moodin)

Check for the Version of ksplash-engine-moodin OpenVAS Vulnerability Test Mandriva Update for ksplash-engine-moodin MDVA-2008:067 ksplash-engine-moodin Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you...

phpslash <= 0.8.1.1 Remote Code Execution Exploit

No description provided by source. !/usr/bin/php -q ?php phpslash = 0.8.1.1 Remote Code Execution Exploit - - - - - - - - - - - - - - - - - - - - - - - - - RCE with no special rights guest. No special PHP conditions required. - - - - - - - - - - - - - - - - - - - - - - - - - 0 It was a private...

phpMyAdmin 3.1.0 (XSRF) SQL Injection Vulnerability

No description provided by source. Written by Michael Brooks Special Thanks to str0ke and rGod Intro: phpMyAdmin is by far the most popular PHP project. Between phpmyadmin and the xampp project there are more than 34+ million downloads from sourceforge.net . This exploit was released along side...

Absolute Poll Manager XE 4.1 (xlacomments.php) SQL Injection Vulnerability

No description provided by source. Author : Hakxer Home : Www.educ-up.com Type Gap : Sql injection --MSSQL Injection-- script : Absolute Poll Manager XE see script http://www.xigla.com/absolutepm/demo.htm Greetz : Allah , Egyptian x Hacker , Soufiane , Sinaritx , SQLinj4ct0r , Stealth , Kof2002 T...

FOSS Gallery Admin <= 1.0 Remote Arbitrary Upload Vulnerability

No description provided by source. ! /usr/bin/perl -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- FOSS Gallery Admin Version = 1.0 / Remote Arbitrary Upload Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Program: FOSS Gallery Adm...

libxslt: fixed-sized steps array overflow via "template match" condition in XSL file

Buffer overflow in pattern.c in libxslt before 1.1.24 allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via an XSL style sheet file with a long XSLT "transformation match" condition that triggers a large number of steps...

[NEWS] GroupWise Windows Client API Security Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

APC Management Vulnerability

We have found a security exploit in the latest APC firmware versions for there switched rack PDU products. We have only tested this against the version listed below on a AP7932 0u 30amp PDU. Name: rpdu Version: v3.5.5 Date: 07/18/2007 Time: 11:38:29 Name: aos Version: v3.5.6 Date: 07/18/2007 Time...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Puzzle Apps CMS 2.2.1 allow remote attackers to execute arbitrary PHP code via a URL in the MODULEDIR parameter to 1 core/modules/my/my.module.php or 2 core/modules/xml/xml.module.php; the COREROOT parameter to 3 config.loader.php, 4...