Online-Development CMS Cross Site Scripting

Exploit Title : Online-Development Cms Cross-Site Scripting Vulnerabilitiy Author : Zarbat.Org & IrIsT.Ir Discovered By : Am!r Home : http://Zarbat.Org/forums/ Software Link : http://www.onlinedevelopment.co.uk/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows...

MyJobList v0.1.3 SQL Injection Vulnerability

Exploit for php platform in category web applications Title : MyJobList v0.1.3 SQL Injection Vulnerability Author : Red Security TEAM Date : 25/02/2012 Risk : High Download : http://www.oddnormality.com/programs/php/MyJobList.v0.1.3.zip Demo : http://www.oddnormality.com/demos/myjoblist/ Tested O...

PHPFox Cross Site Scripting

Exploit Title: phpfox xss exploit Google Dork: inurl:powered by phpof Date: 25-02-2012 Author: tRipLeZiX Software Link: http://www.phpfox.com/ Version: allversion Tested on: http://www.tanaogi.com/marketplace/6/debot-was-here/ CVE : exploit xss code tHx to:...

jetVideo 8.0.2 - Denial of Service

jetVideo 8.0.2 - Denial of Service Exploit Title: jetVideo Crash Exploit Author: Senator of Pirates Email : [email protected] Software Link: http://www.jetaudio.com/download/jetvideo.html Version: 8.0.2 Basic Tested on: Windows XP PS3 En header = "http://" junk = "A" 20000 payload...

Sysax Multi Server 5.52 - File Rename Buffer Overflow Remote Code Execution (Egghunter)

Sysax Multi Server 5.52 - File Rename Buffer Overflow Remote Code Execution Egghunter !/usr/bin/python Title: Sysax Multi Server " sys.exit1 target = sys.argv1 port = intsys.argv2 user = sys.argv3 password = sys.argv4 opersys = sys.argv5 base64 encode the provided creds creds =...

Ez Album - Blind SQL Injection

Title : Ez Album Blind SQL Injection Vulnerability Author : Red Security TEAM Date : 31/01/2012 Risk : High Demo : http://www.scriptsez.com Tested On : CentOS Contact : Info 4t RedSecurity d0t COM Home : http://RedSecurity.COM Exploit : http://server/album/index.php?action=view&id=BlindSQLi...

phpShowtime Directory Traversal

Title : phpShowtime Directory Travel Author : Red Security TEAM Date : 31/01/2012 Download : http://phpshowtime.kybernetika.de/ Demo : http://phpshowtime.kybernetika.de/demo/ Tested On : CentOS Contact : Info 4t RedSecurity d0t COM Home : http://RedSecurity.COM Exploit :...

EasyPage SQL Injection Vulnerability-vulnerability warning-the black bar safety net

Title : EasyPage SQL Injection Vulnerability Author : Red Security TEAM Date : 19/01/2012 Risk : High Vendor : http://karait.com/ Tested On : Windows Server 2 0 0 8 Microsoft-IIS/7.5 Dork : inurl:default. aspx? page=Document&app=Documents&docId= Contact : Info 4t RedSecurity d0t COM Home :...

Ultimate Locator SQL Injection

Exploit Title: Ultimate Locator SQL Injection Vulnerability Author: Robert Cooper Robert.Cooper at areyousecure.net Software Link: http://www.ultimatelocator.com/ Dork: "Powered by Ultimate Locator" Tested on: Linux/Windows 7 Vulnerable File: resultslist.php Vulnerable parameter: radius= PoC:...

Core Communications - SQL/XSS Vulnerabilities

Exploit for php platform in category web applications ========================================================================== Core Communications - SQL/XSS Vulnerabilities ========================================================================== Title: Core Communications - SQL Injection...

Proof Cast Design SQL Injection

Exploit Title: Proof Cast Design SQL Injection Vulnerability Date: 18/01/2012 - 04.13 Author: 3spi0n Software Website: http://proofcast.com/purplewebsites.php Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: Changer $ $ Demo Sites: www.onlyfineknives.com/knife.php?k=244859"...

PhpBridges Blog System SQL Injection

Exploit Title: PhpBridges Blog System SQL Injection Vulnerability Date: 18/01/2012 - 04.19 Author: 3spi0n Software Website: https://launchpad.net/phpbridges Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: members.php $ Demo Sites: fantasticas.odisseias.net/members.php?id=2...

TinyWebGallery 1.8.3 - Remote Command Execution

TinyWebGallery 1.8.3 - Remote Command Execution » TinyWebGallery 1.8.3 Remote Command Execution » --- Date : 05- 01- 2012 » --- Author : Expl0!Ts -------- My Best t34m ----- "BaC , RoBert MilEs , Bl4ckID" » --- Software Link : http://www.tinywebgallery.com/dl.php?file=twglatest » --- Version: n/a...

Readmore Systems SQL Injection

Exploit Title: Readmore Systems Script SQL Injection Vulnerability Google Dork: Website Powered By ReadMore Systems Date: 16/12/2011 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Software Link: http://readmoresystems.com Version: All Version Security Risk::High...

2xPress Cross Site Scripting / SQL Injection

Exploit Title: 2xPress Web Multiple Vulnerability Date: 08/12/2011 - 23:32 Author: 3spi0n Software Website: http://www.2xpress.com/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Dorks: "Developed by 2xpress.com" Vulnerable File : All $ Demo Sites:...

CMS Balitbang 3.x SQL Injection

========================================================================= CMS Balitbang 3.x SQL Injection Vulnerability ========================================================================= :-----------------------------------------------------------...

Yahoo! Small Business Directory Traversal

======================================== Yahoo! smallbusiness Directory Traversal ======================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=0 0 . .--. .--. .---. . 1 1 .'| / | 0 0 | --: --: / .-.| .-. . . 1 1 | / | | | 0 0 '---' --' --' ' -'--'---| 1 1 ; 0 0...

YSD Web Design SQL Injection

Exploit Title: Ysd Web Design Sql Injection Vulnerability Date: 20/11/2011 - 03:18 Author: 3spi0n Software Website: http://www.ysd.hk/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: Changer $ Dorks: "Designed by YSD" $ Demo Sites:...

Thunder Kankan Player 4.8.3.840 - Stack Overflow / Denial of Service

!/usr/bin/env python print """ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /\ /\ \ /\ /\ /\ \ /\ 0 0 /:/ / /::\ \ /:/ / /:/ / /::\ \ /:/ / 1 1 /:// /:/:\ \ /:/ / /:/ / /:/:\ \ /:// 0 0 /::\ \ /::\:\ \ /:/ / /:/ / /:/ :\ \ /::\ 1 1 /:/:\ /\ /:/:...

Thunder Kankan Player 4.8.3.840 - Stack Overflow Denial of Service

Thunder Kankan Player 4.8.3.840 - Stack Overflow Denial of Service !/usr/bin/env python print """ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /\ /\ \ /\ /\ /\ \ /\ 0 0 /:/ / /::\ \ /:/ / /:/ / /::\ \ /:/ / 1 1 /:// /:/:\ \ /:/ / /:/ / /:/:\ \ /:// 0 0...