CVE-2008-3097

Cross-site scripting XSS vulnerability in the Tinytax module aka Tinytax taxonomy block 5.x before 5.x-1.10-1 for Drupal allows remote authenticated users to inject arbitrary web script or HTML, probably by creating a crafted taxonomy term...

Sql injection

Multiple SQL injection vulnerabilities in index.php in Insanely Simple Blog 0.5 allow remote attackers to execute arbitrary SQL commands via 1 the id parameter, or 2 the term parameter in a search action. NOTE: the currentsubsection parameter is already covered by CVE-2007-3889...

CVE-2008-0722

Cross-site scripting XSS vulnerability in index.php in Pagetool 1.0.7 allows remote attackers to inject arbitrary web script or HTML via the searchterm parameter in a pagetoolsearch action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-5621

Multiple cross-site scripting XSS vulnerabilities in the Token module before 4.7.x-1.5, and 5.x before 5.x-1.9, for Drupal; as used by the ASIN Field, e-Commerce, Fullname field for CCK, Invite, Node Relativity, Pathauto, PayPal Node, and Ubercart modules; allow remote authenticated users with a...

PT-2007-3929 · Openld · Openld

Name of the Vulnerable Software and Affected Versions: OpenLD versions prior to 1.1.9 OpenLD 1.1-modified versions prior to 1.1-modified3 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the Search feature,...

CVE-2007-2579

Multiple cross-site scripting XSS vulnerabilities in ACP3 4.0 beta 3 allow remote attackers to inject arbitrary web script or HTML via 1 the formmail parameter to contact/contact/index.php; the 2 formmods or 3 formsearchterm parameter to search/list/actionsearch/index.php; 4 the id parameter to...

CVE-2006-1825

Cross-site scripting XSS vulnerability in index.php in phpLinks 2.1.3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the term parameter...

CVE-2006-1825

Cross-site scripting XSS vulnerability in index.php in phpLinks 2.1.3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the term parameter...

phpRPC Library 0.7 - XML Data Decoding Remote Code Execution (2)

phpRPC Library 0.7 - XML Data Decoding Remote Code Execution 2 !/usr/bin/perl phpRPC All rights reserved. never ctrl+c again. cijfer$ http://target.com/dir host changed to 'http://target.com/dir' cijfer$ $Id: cijfer-prpcxpl.pl,v 0.1 2006/03/01 05:46:00 cijfer Exp $ use LWP::UserAgent; use...

phpRPC Library 0.7 - XML Data Decoding Remote Code Execution (2)

!/usr/bin/perl phpRPC All rights reserved. never ctrl+c again. cijfer$ http://target.com/dir host changed to 'http://target.com/dir' cijfer$ $Id: cijfer-prpcxpl.pl,v 0.1 2006/03/01 05:46:00 cijfer Exp $ use LWP::UserAgent; use URI::Escape; use Getopt::Long; use Term::ANSIColor; $res =...

creLoaded <= 6.15 (HTMLAREA) Automated Perl Exploit

No description provided by source. !/usr/bin/perl creLoaded = 6.15 HTMLAREA automated perl exploit hacked up by kaneda [email protected] Rather simple exploit, but still an exploit nonetheless. Attempts to upload php script and utilise that to execute commands, and show off a fake shell. C...

Cisco PIX - Spoofed TCP SYN Packets Remote Denial of Service

Cisco PIX - Spoofed TCP SYN Packets Remote Denial of Service The easy way by logic [email protected] line 2 untested /str0ke hping -c 1 -S -s 31337 -k -b -p 22 10.0.xx.xxx !/usr/bin/perl eval "use Getopt::Long;";die "error Getopt::Long perl module is not installed \n" if $@; eval "use...

Cisco PIX Spoofed TCP SYN Packets Remote Denial of Service Exploit

Exploit for hardware platform in category dos / poc ================================================================== Cisco PIX Spoofed TCP SYN Packets Remote Denial of Service Exploit ================================================================== The easy way by logic email protected line 2...

Cisco PIX Spoofed TCP SYN Packets Remote Denial of Service Exploit

No description provided by source. The easy way by logic [email protected] line 2 untested /str0ke hping -c 1 -S -s 31337 -k -b -p 22 10.0.xx.xxx !/usr/bin/perl eval "use Getopt::Long;";die "error Getopt::Long perl module is not installed \n" if $@; eval "use Net::RawIP;";die "error Net::RawIP pe...

Cisco PIX - Spoofed TCP SYN Packets Remote Denial of Service

The easy way by logic [email protected] line 2 untested /str0ke hping -c 1 -S -s 31337 -k -b -p 22 10.0.xx.xxx !/usr/bin/perl eval "use Getopt::Long;";die "error Getopt::Long perl module is not installed \n" if $@; eval "use Net::RawIP;";die "error Net::RawIP perl module is not installed \n" if $...

Cisco PIX - TCP SYN Packet Denial of Service

Cisco PIX - TCP SYN Packet Denial of Service source: https://www.securityfocus.com/bid/15525/info Cisco PIX is susceptible to a remote denial-of-service vulnerability when handling certain TCP SYN packets. This issue allows attackers to temporarily block network traffic to arbitrarily targeted TC...

linux/x86 examples of long-term payloads hide-wait-change (.s)

Exploit for linux/x86 platform in category shellcode ============================================================== linux/x86 examples of long-term payloads hide-wait-change .s ==============================================================...

linux/x86 examples of long-term payloads hide-wait-change 187 bytes+

linux/x86 examples of long-term payloads hide-wait-change 187 bytes+. Shellcode exploit for linx86 platform /---------------------------------------------------------------------------- Mystique Project: Examples of long-term payloads hide-wait-change code by [email protected] & [email protected]...

linux/x86 examples of long-term payloads hide-wait-change 187 bytes+

No description provided by source. /---------------------------------------------------------------------------- Mystique Project: Examples of long-term payloads hide-wait-change code by [email protected] & [email protected] ----------------------------------------------------------------------------...

Grandstream Budge Tone 101102 VOIP Phone - Denial of Service

Grandstream Budge Tone 101102 VOIP Phone - Denial of Service !/usr/bin/perl use IO::Socket; use Term::ANSIColor; U S A G E system "clear"; print "\nGrandstream BT101/BT102 DoS\n"; print "written by pierre kroma [email protected]\n\n"; if !$ARGV2 print qq Usage: perl grandstream-DoS.pl -s -r/-s = ;- =...