A CGI program vulnerability discovery-vulnerability warning-the black bar safety net

Source: phpeval's BLOG Author: phpeval Yesterday a friend threw me acgiprogram. Call me to think of a way to get a SHELL. The CGI program but I've never seen it. Experience this for me brand new things. It really is a bit no way. But to throw to. Just when learning. I bite the bullet and see. The...

Product Sale Framework 0.1b SQL Injection

+++++++++++++++++++++++In The Name Of Allah+++++++++++++++++++++++++++ + + + Product Sale Framework sql injection Vulnerability + + + + Discovered by b3hz4d + + + + WwW.DeltaHacking.Net + + + + + + + ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ APA Center of Yazd...

ScriptsFeed (SF) Real Estate Classifieds Software - Arbitrary File Upload

ScriptsFeed SF Real Estate Classifieds Software Remote File Upload ---------------------------------------------------------- Discovered By: ZoRLu Date: 13.11.2008 Home: www.z0rlu.blogspot.com contact: [email protected] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : my bug number now: 39 my...

Adobe Reader util.printf() JavaScript Function Stack Overflow Exploit

Exploit for unknown platform in category local exploits ===================================================================== Adobe Reader util.printf JavaScript Function Stack Overflow Exploit ===================================================================== Adobe Reader 'util.printf'...

VLC Media Player RealText Subtitle Overflow

This module exploits a stack buffer overflow vulnerability in VideoLAN VLC use exploit/windows/fileformat/vlc/realtext msf undefinedrealtext show actions ...actions... msf undefinedrealtext set ACTION msf undefinedrealtext show options ...show and set options... msf undefinedrealtext run This...

joovili-insecure.txt

Joovili Script Insecure Cookie Handling Vulnerability version: 3.1.4 ---------------------------------------------------------- Discovered By: ZoRLu Date: 02.11.2008 Home: www.z0rlu.blogspot.com contact: [email protected] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : N0T: a.q kpss :...

sweetcms-sql.txt

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com -d3hydr8 - sinner01 - baltazar - P47r1ck - C1c4Tr1Z - beenu -rsauron - letsgorun - K1u - DON - OutLawz - MAGE -JeTFyrE -r45c4l -Bond...

Esqlanelapse Software Project 2.6.2 - Insecure Cookie Handling

Esqlanelapse Software Project version: 2.6.1 & 2.6.2 Insecure Cookie Handling Vulnerability donwload: http://sourceforge.net/project/showfiles.php?groupid=118575&packageid=129141&releaseid=519061 ---------------------------------------------------------- Discovered By: ZoRLu Date: 26.09.2008 Home...

Atomic Photo Album 1.1.0pre4 - Blind SQL Injection

php '.$argv0.' http://www.site.com/apa/album.php?apaalbumID=2 2 Live Demo : http://www.brzi.info/foto/album.php?apaalbumID=2 1 '; if $argc 1 $url = $argv1; if $argc $t-1 $count = $i; $i = 30; for $j = 1; $j $count; $j++ for $i = 46; $i = 122; $i=$i+2 if $i == 60 $i = 98;...

jetik-sql.txt

----------------------------------------------------------- JETIK-WEB Software v1 - SQL Injection Vulnerability http://www.jetik.net ---------------------------------------------------------- Bug founded by d3v1l Date: 22.09.2008 [email protected]...

pLink 2.07 - linkto.php Blind SQL Injection

pLink 2.07 - linkto.php Blind SQL Injection php '.$argv0.' http://www.site.com/link/linkto.php?id=128 2 Live Demo : http://www.uni-leipzig.de/fsrpowi/link/linkto.php?id=128 2 '; if $argc 1 $url = $argv1; if $argc 3 $userid = 1; else $userid = $argv2; $r = strlenfilegetcontents$url."+and+1=1/"; ec...

WebPortal CMS 0.7.4 - download.php SQL Injection

WebPortal CMS 0.7.4 - download.php SQL Injection !/usr/bin/perl --==+============================================================================+==-- --==+ WebPortal = 0.7.4 Remote SQL Injection Exploit +==-- --==+============================================================================+==--...

pForum 1.30 - showprofil.php SQL Injection

pForum 1.30 - showprofil.php SQL Injection ===================================================================================================== Powie's PHP Forum = v1.30 showprofil Remote SQL Injection Exploit...

zanficms-sql.txt

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + + Zanfi CMS lite / Jaw Portal free SQL Injection Vulnerability + + + + Discovered by Cru3l.b0y + + + + WwW.DeltaHacking.Net + + + + + + + ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ AUTHOR :...

Stash 1.0.3 - Multiple SQL Injections

Stash v1.0.3 Admin bypass / Remote File Disclosure AUTHOR : IRCRASH R3d.W0rm Sina Yazdanmehr Discovered by : IRCRASH R3d.W0rm Sina Yazdanmehr Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash - R3d.w0rm Sina Yazdanmehr Download :...

Sun Solaris 10 - snoop(1M) Utility Remote Command Execution

Sun Solaris 10 - snoop1M Utility Remote Command Execution / hoagiesnoop.c SUN SOLARIS SNOOP REMOTE EXPLOIT + Sun Solaris 8/9/10 + OpenSolaris /tmp/.patch.your.system.txt' now ... done attack:/exploits admin@opensolaris: snoop port 445 Using device pcn0 promiscuous mode sh1: ï¿œSMBr: not found ...

simasycms-sql.txt

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com -d3hydr8 - sinner01 - baltazar - P47r1ck - C1c4Tr1Z - beenu -rsauron - letsgorun - K1u - DON - OutLawz - MAGE -JeTFyrE Author: r45c4l &...

EO Video 1.36 Local Heap Overflow DOS / PoC

Exploit for unknown platform in category dos / poc =========================================== EO Video 1.36 Local Heap Overflow DOS / PoC =========================================== !/usr/bin/python -------------------------------------------------------------- EO Video v1.36 Heap Overflow local...

blazedvd_bof.pl.txt

!/usr/bin/perl Title: BlazeDVD 5.0 PLF Playlist File Remote Buffer Overflow Exploit PoC Summary: BlazeDVD is leading powerful and easy-to-use DVD player software. It can provide superior video and audioDolby quality, together with other enhanced features:e.g. recording DVD,playback image and...

myclan-sql.txt

MyClan Sql Injection AUTHOR : IRCRASH R3d.W0rm Sina Yazdanmehr Discovered by : IRCRASH R3d.W0rm Sina Yazdanmehr Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash - R3d.w0rm Sina Yazdanmehr Script Download : www.sourceforge.net/projects/haudenschilt DORK : Copyright A© 2005-2006...