se2911-sql.txt

!/usr/bin/php -q -d shortopentag=on Thanks to rgod for the php code and Marty for the Love Special Thanks to all the guys of milw0rm IRC channel for theyr help ------------------------------------------------------------------------ "; if $argc 126 $result.=" ."; else $result.=" ".$string$i; if...

Moderate: Red Hat Security Advisory: mutt security update

An updated mutt package that fixes several security bugs is now available for Red Hat Enterprise Linux 3, 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Mutt is a text-mode mail user agent. A flaw was found in the way Mutt used...

[SECURITY] Fedora Core 5 Update: mutt-1.4.2.1-8.fc5

Mutt is a text-mode mail user agent. Mutt supports color, threading, arbitrary key remapping, and a lot of customization. You should install mutt if you have used it in the past and you prefer it, or if you are new to mail programs and have not decided which one you are going to use...

WEBInsta FM 0.1.4 login.php absolute_path Remote File Inclusion Exploit

Exploit for unknown platform in category web applications ======================================================================= WEBInsta FM 0.1.4 login.php absolutepath Remote File Inclusion Exploit ======================================================================= !/usr/bin/perl / \ / \ |...

CyBoards PHP Lite 1.21 (script_path) Remote File Include Exploit

No description provided by source. !/usr/bin/perl CyBoards PHP Lite 1.21 scriptpath Remote File Include Exploit Coded by bd0rk || SOH-Crew Usage: exploit.pl target cmd shell shell variable Greetings: str0ke, TheJT, Kacper, Lu7k, Maik Vulnerable Code: include"$scriptpath/include/defaultstyle.css";...

Fizzle : Firefox Extension Vulnerability

Fizzle allows feeds to use HTML in feed data resulting in JavaScript being run in the chrome: window with chrome permissions. The extension will convert HTML entities back to their ASCII equivalents thus becomes and so forth. Various feeds fields are vulnerable including the title which allows th...

IceBB 1.0-rc5 Remote Create Admin Exploit

Exploit for unknown platform in category web applications ========================================= IceBB 1.0-rc5 Remote Create Admin Exploit ========================================= !/usr/bin/perl IceBB 1.0-rc5 Remote Create Admin Exploit 1. register a user 2. run this exploit with this usage :...

IceBB 1.0-rc5 Remote Code Execution Exploit

Exploit for unknown platform in category web applications =========================================== IceBB 1.0-rc5 Remote Code Execution Exploit =========================================== !/usr/bin/perl IceBB 1.0-rc5 Remote Code Execution Exploit 1. register a user 2. run this exploit with this...

IceBB 1.0-rc5 - Remote Create Admin

IceBB 1.0-rc5 - Remote Create Admin !/usr/bin/perl IceBB 1.0-rc5 Remote Create Admin Exploit 1. register a user 2. run this exploit with this usage : $perl xpl.pl host&path uname pass 3. login with admin access : - magicquotesgpc = Off Coded & Discovered By Hessam-x / Hessamx-at-Hessamx.net use...

PBlang 4.66z - Remote Create Admin

PBlang 4.66z - Remote Create Admin !/usr/bin/perl PBlang 4.66z Create Admin Exploit this exploit register a user with admin access Coded & Discovered By Hessam-x / Hessamx-at-Hessamx.net use IO::Socket; use LWP::UserAgent; use HTTP::Cookies; $host = $ARGV0; $uname = $ARGV1; $passwd = $ARGV2; $url...

Woltlab Burning Board 2.x (usergroups.php) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Woltlab Burning Board 2.X usergroups.php SQL Injection exploit - burned2.pl written by x666 [email protected] jmp-esp.kicks-ass.net;blueshisha.chills.it SR-CREW should work on every wbb regardless of php settings. use strict; use warnings;...

News-Letterman 1.1 - eintrag.php?sqllog Remote File Inclusion

News-Letterman 1.1 - eintrag.php?sqllog Remote File Inclusion !/usr/bin/perl News-Letterman 1.1 eintrag.php Remote File Include Exploit Download: http://www.weltennetz.de/download/letterman1.1.zip Vulnerable Code: include $sqllog; Coded by bd0rk || SOH-Crew Usage: exploit.pl target cmd shell shel...

Cross site scripting

Cross-site scripting XSS vulnerability in Adobe ColdFusion web server allows remote attackers to inject arbitrary HTML or web script via the User-Agent HTTP header, which is not sanitized before being displayed in an error page...

CVE-2007-0817

CVE-2007-0817 is a cross-site scripting vulnerability in Adobe ColdFusion web server. The issue stems from failing to sanitize the User-Agent HTTP header before displaying it on the error page, allowing remote attackers to inject arbitrary HTML/script. Some sources note potential session hijackin...

CVE-2007-0817

Cross-site scripting XSS vulnerability in Adobe ColdFusion web server allows remote attackers to inject arbitrary HTML or web script via the User-Agent HTTP header, which is not sanitized before being displayed in an error page...

cold-xss.txt

Title: Cold Fusion Web Server XSS 0 day Own3d by: digi7al64 thx: WhiteAcid About: Default settings in Cold Fusion server ensure it returns a standardized error page whenever a exception occurs 404,500 etc. This page then echos the user agent, ip and referer back to the user for debugging purposes...

ColdFusion crossite scripting

User-Agent field from HTTP request is used unfiltered in error message text. It's possible to manipulate client's User-Agent field through Flash...

Adobe ColdFusion 67 - User_Agent Error Page Cross-Site Scripting

Adobe ColdFusion 67 - UserAgent Error Page Cross-Site Scripting source: https://www.securityfocus.com/bid/22401/info Adobe ColdFusion is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker could exploit this vulnerability to...

Cold Fusion Web Server XSS 0 day

Title: Cold Fusion Web Server XSS 0 day Own3d by: digi7al64 thx: WhiteAcid About: Default settings in Cold Fusion server ensure it returns a standardized error page whenever a exception occurs 404,500 etc. This page then echos the user agent, ip and referer back to the user for debugging purposes...

MOAB-25-01-2007.rb.txt

!/usr/bin/ruby c Copyright 2007 Lance M. Havok Proof of concept for MOAB-25-01-2007. require 'socket' webport = ARGV0 || 80.toi puts "++ Starting HTTP server at port webport." webserver = TCPServer.newnil, webport while session = webserver.accept randclen = rand80 useragent =...