Ovidentia absences Module 2.64 - Remote File Inclusion

Title: Ovidentia Module absences 2.64 Remote File Include Vulnerability Author: bd0rk eMail: bd0rkathackermail.com Tested on: Ubuntu-Linux Download: http://www.ovidentia.org/index.php?tg=fileman&sAction=getFile&id=17&gr=Y&path=Downloads%2FAdd-ons%2FModules%2Fabsences&file=absences-2-64.zip&idf=88...

Ovidentia bulletindoc Module 2.9 - Multiple Remote File Inclusions

Title: Ovidentia Module bulletindoc 2.9 Multiple Remote File Inclusion Vulnerabilities Author: bd0rk eMail: bd0rkathackermail.com Twitter: twitter.com/bd0rk Tested on: Ubuntu-Linux Download:...

Ganglia Web Frontend < 3.5.1 - PHP Code Execution

...

Ganglia Web Frontend 3.5.1 - PHP Code Execution

Ganglia Web Frontend 3.5.1 - PHP Code Execution...

Ganglia Web Frontend PHP Code Execution

...

Ganglia Web Frontend < 3.5.1 - PHP Code Execution Exploit

Exploit for php platform in category web applications ?php / Author : Andrei Costin andrei theATsign firmware theDOTsign re Desc : CVE-2012-3448 PoC Details : This PoC will create a dummy file in the /tmp folder and will copy /etc/passwd to /tmp. To modify the attack payload, modify the code...

Ubuntu 10.04 LTS : linux-ec2 vulnerability (USN-2584-1)

A race condition between chown and execve was discovered in the Linux kernel. A local attacker could exploit this race by using chown on a setuid-user-binary to gain administrative privileges. Note that Tenable Network Security has extracted the preceding description block directly from the Ubunt...

SEED experiments: buffer overflow vulnerability lab-vulnerability warning-the black bar safety net

! A, experimental description A buffer overflow refers to a program trying to buffer write exceeds the pre-allocated fixed-length data. This vulnerability may be malicious users use to change program flow control, and even code execution of arbitrary fragments. This vulnerability occurs because t...

BlackBerry Z10 Authentication Bypass

--------------------------------------------------------------------- modzero Security Advisory: BlackBerry Z 10 - Storage and Access File-Exchange Authentication By-Pass MZ-13-04 ---------------------------------------------------------------------...

PHP Server Monitor Stored XSS

No description provided by source. Author: loneferret of Offensive Security Product: PHP Server Monitor Version: 2.0.1 and maybe older versions Google Dork: intext=Powered by PHP Server Monitor v2.0.1 yes people have made this available on the web Software Download:...

Maian Gallery 2 - Local File Download Vulnerability

No description provided by source. !/usr/bin/python This vulnerability uses filegetcontents so we have some limitations, we cant execute PHP and we cant read files that the web server will interpret such as PHP, conf etc tested on: Ubuntu Linux 2.6.32 with php v5.3.2 registerglobals = Off PRIVATE...

nodesforum 1.059 - Remote File Inclusion Vulnerability

No description provided by source. Exploit Title: nodesforum 1.059 Remote File Inclusion Vulnerability Google Dork: inurl: powered by Nodesforum Date: 6/23/2011 Author: bd0rk bd0rkathackermail.com Software-Download: http://home.nodesforum.com/download?file=nodesforum1.059withbbcode1.004.zip Teste...

vAuthenticate 3.0.1 Authentication Bypass

No description provided by source. ----------------------------------------------------------------------- vAuthenticate 3.0.1 Auth Bypass by Cookie SQL Injection Vulnerability ----------------------------------------------------------------------- Author: bd0rk Contact: bd0rkathackermail.com Dat...

WordPress CevherShare Plugin 2.0 - SQL Injection

No description provided by source. = WordPress CevherShare 2.0 plugin SQL Injection Vulnerability = Bugfounder: bd0rk = Contact: bd0rkathackermail.com = Greetings: Perle, Martin K., Carsten R., x0r32 = Affected-Software: WordPress CevherShare 2.0 plugin = Vendor: http://phpkode.com/ = Download:...

webid <= 1.0.5 - Directory Traversal

No description provided by source. Author: loneferret of Offensive Security Product: WeBid Version: 1.0.4 & 1.0.5 and maybe older versions Vendor Site: http://www.webidsupport.com Software Download:...

Mozilla Firefox 3.0 - Malformed JPEG File Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/29984/info Mozilla Firefox is prone to a remote denial-of-service vulnerability. Successful exploits can allow attackers to crash the affected browser, resulting in denial-of-service conditions. This issue affects Firefox...

phpMyRecipes 1.2.2 (viewrecipe.php, r_id param) - SQL Injection Vulnerability

No description provided by source. phpMyRecipes 1.2.2 SQL Injection Exploit By cr4wl3r http://bastardlabs.info Script: http://sourceforge.net/projects/php-myrecipes/files/ Demo: http://bastardlabs.info/demo/phpMyRecipes.png Tested: Ubuntu Linux Bugs found in viewrecipe.php $rid = $GET'rid'; if !...

Contrexx Shopsystem <= 2.2 SP3 - Blind SQL Injection

No description provided by source. Exploit title: Contrexx Shopsystem Blind SQL Injection Exploit Exploit PoC: index.php?section=shop&productId=VALID productid and YOUR BLIND SQL CODE Exploit tested on: Debian 6, Ubuntu Linux 11.04 Exploit found and written by: Penguin Version: = 2.2 SP 3 Date...

WeBid <= 1.0.5 - Cross Site Scripting Vulnerabilities

No description provided by source. Exploit Title: WeBid =1.0.5 Cross Site Scripting Vulnerabilities Date: 11/17/2012 Exploit Author: Woody Hughes [email protected] Vendor Homepage: http://www.webidsupport.com Software Link:...

BOOKSolved 1.2.2 - Remote File Disclosure

No description provided by source. ...BOOKSolved 1.2.2 l Remote File Disclosure Vulnerability ...Discovered by bd0rk ...Contact: bd0rkathackermail.com or follow me on twitter ...Greetz: inj3ct0r-Team, x0r32, Perle, Siber King ...Tested on: Ubuntu-Linux ...MEZ-Time: 08:17 ...Vendor:...