657 matches found
Mambo N-Frettir SQL Injection
------------------------------------------------------------------------------------------------------ Exploit Title: Mambo Component comn-frettir SQL Injection Vulnerability Google Dork: inurl:index.php?option=comn-frettir Date: 01/09/2011 Author: CoBRa21 Penetration Tester E-Mail:...
Mambo Component com_n-myndir SQL Injection Vulnerability
Exploit for php platform in category web applications ------------------------------------------------------------------------------------------------------ Exploit Title: Mambo Component comn-myndir SQL Injection Vulnerability Google Dork: inurl:index.php?option=comn-myndir Date: 01/09/2011...
Citrix EdgeSight Load Tester Buffer Overflow
A stack overflow vulnerability exists in the Citrix EdgeSight Load Tester software installed on the remote host. By sending a specially crafted message to the server, a remote attacker can leverage this vulnerability to execute arbitrary code on the server as the SYSTEM account. Versions prior to...
Citrix EdgeSight Load Tester (ESLT) version detection
Binary data citrixesltdetect.nbin...
Nmap NSE net: smb-enum-processes
Pulls a list of processes from the remote server over SMB. This will determine all running processes, their process IDs, and their parent processes. It is done by querying the remote registry service, which is disabled by default on Vista; on all other Windows versions, it requires Administrator...
cPanel 11.25 - Cross-Site Request Forgery (Add User PHP Script)
cPanel 11.25 - Cross-Site Request Forgery Add User PHP Script Exploit Title: cPanel " Afterwards simply check for ninjashell.php in the directory. III. Counter-measures All cPanel versions starting from 11.25 and above have two in-built security features to prevent such attacks - security tokens...
cPanel < 11.25 CSRF - Add User php Script
Exploit for php platform in category web applications Exploit Title: cPanel " Afterwards simply check for ninjashell.php in the directory. III. Counter-measures All cPanel versions starting from 11.25 and above have two in-built security features to prevent such attacks - security tokens and...
cPanel < 11.25 - Cross-Site Request Forgery (Add User PHP Script)
Exploit Title: cPanel " Afterwards simply check for ninjashell.php in the directory. III. Counter-measures All cPanel versions starting from 11.25 and above have two in-built security features to prevent such attacks - security tokens and referrer security check. This means that if you are a cpan...
[eVuln.com] Multiple XSS in Alguest
New eVuln Advisory: Multiple XSS in Alguest Summary: http://evuln.com/vulns/151/summary.html Details: http://evuln.com/vulns/151/description.html -----------Summary----------- eVuln ID: EV0151 Software: Alguest Vendor: n/a Version: 1.1c-patched Critical Level: low Type: Cross Site Scripting Statu...
Microsoft HTML Help Compiler (hhc.exe) BOF POC
No description provided by source. Microsoft’s HTML Help Compiler hhc.exe is free tool to build Microsoft Compiled HTML Help .chm files. It is included within HTML Help Workshop and Visual Studio. The executable, hhc.exe, does not properly check the length of user-supplied command line arguments...
smb-enum-domains NSE Script
Attempts to enumerate domains on a system, along with their policies. This generally requires credentials, except against Windows 2000. In addition to the actual domain, the "Builtin" domain is generally displayed. Windows returns this in the list of domains, but its policies don't appear to be...
OpenSSL 0.9.8c-1 < 0.9.8g-9 (Debian and Derivatives) - Predictable PRNG Brute Force SSH (Ruby)
!/usr/bin/ruby Debian SSH Key Tester L4teral This tool helps to find user accounts with weak SSH keys that should be regenerated with an unaffected version of openssl. You will need the precalculated keys provided by HD Moore See http://metasploit.com/users/hdm/tools/debian-openssl/ for further...
Debian OpenSSL Predictable PRNG Bruteforce SSH Exploit (ruby)
Exploit for multiple platform in category remote exploits ============================================================= Debian OpenSSL Predictable PRNG Bruteforce SSH Exploit ruby ============================================================= !/usr/bin/ruby Debian SSH Key Tester L4teral This tool...
WinRAR <= 3.60 beta 6 (SFX Path) Local Stack Overflow Exploit
No description provided by source. """ WinRAR - Stack Overflows in SelF - eXtracting Archives ====================================================== Tested Versions..: WinRAR 3.60 beta 4 Original Author.............: posidron Shellcode Stuffing .........: muts """ import os, sys winrar =...
Boo! Don't tell Microsoft: shield genuine Feedback the program was born-vulnerability warning-the black bar safety net
A company called Firewall Leak Tester personal firewall is a software development company launched the first dedicated shield Microsoft genuine validation program WGA“to Microsoft call home”tools for software-RemoveWGA to. “Once Microsoft's WGA authentication tool determines that you are using...
UDP Stress Tester - Denial of Service
UDP Stress Tester - Denial of Service include include include include include include include include include define shit "BLEAHD" timet elapsed; long sendcount = 0, kbs; void statsint signum kbs = sendcount6/time0-elapsed/1024; // i dont think this is right but... printf"\npid: %d, ran for %u...
UDP Stress Tester - Denial of Service
include include include include include include include include include define shit "BLEAHD" timet elapsed; long sendcount = 0, kbs; void statsint signum kbs = sendcount6/time0-elapsed/1024; // i dont think this is right but... printf"\npid: %d, ran for %u seconds\n",getpid,time0 - elapsed;...