Zemra Botnet CnC Web Panel Remote Code Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Zemra Botnet CnC Web Panel Remote Code Execution', 'Description' = %q This module exploits the CnC web panel of Zemra Botnet which...

Alpha Networks ADSL2/2+ Wireless Router ASL-26555 Password Disclosure

No description provided by source. - Title: Alpha Networks ADSL2/2+ Wireless Router ASL-26555 Remote Administration Password Disclosure - Author: Alberto Ortega @a0rtega [email protected] - Version: Tested on firmware version v2.0.0.30BES. Laboratory subject:...

Sports Clubs Web Panel 0.0.1 - Remote Game Delete Exploit

No description provided by source. !/usr/bin/perl -W Sports Clubs Web Panel 0.0.1 Remote Game Delete Exploit File affected: include/draw-delete.php id Vuln Code: 06: $did = $GET'id'; 08: mysqlqueryDELETE FROM draw WHERE did='$did'; by ka0x ka0x01 at gmail dot com D.O.M Labs - Security Researchers...

Sports Clubs Web Panel 0.0.1 - Remote File Upload Vulnerability

No description provided by source. --==+============================================================================+==-- --==+ Sports Clubs Web Panel 0.0.1 Remote File upload +==-- --==+============================================================================+==-- Discovered By: Stack +...

Ajenti 1.2.13 Cross Site Scripting

Exploit Title: Ajenti - Stored Persistent Cross Site Scripting Vulnerability Date: 16/01/2014 Exploit Author: projectzero labs Vendor Homepage: http://www.ajenti.org Vendor Informed: 14/01/2014 Software Link: http://www.ajenti.org Version: 1.2.13 Tested on: Kali Linux / Iceweasel v.22 About the...

Cythosia 2.x Botnet (C2 Web Panel) - SQL Injection

Exploit Title: Cythosia Botnet SQL-Injection Vulnerability Date: 11.12.2013 Exploit Author: GalaxyAndroid Vendor Homepage: unkn0wn Application Screenshots http://www.xylibox.com/2012/08/cythosia-botnet-vnloader.html Version: 2.x Tested on: Windows 7 with Xampp greets goes to: ChrisKSK, Protestant...

Cythosia 2.x Botnet (C2 Web Panel) - SQL Injection

Cythosia 2.x Botnet C2 Web Panel - SQL Injection Exploit Title: Cythosia Botnet SQL-Injection Vulnerability Date: 11.12.2013 Exploit Author: GalaxyAndroid Vendor Homepage: unkn0wn Application Screenshots http://www.xylibox.com/2012/08/cythosia-botnet-vnloader.html Version: 2.x Tested on: Windows ...

Carberp Web Panel C2 Backdoor Remote PHP Code Execution

This Metasploit module exploits backdoors that can be sighted all over the leaked source code of the Carberp botnet C2 Web Panel. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information...

Carberp Web Panel C2 Backdoor Remote PHP Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Carberp Web Panel C2 Backdoor Remote...

Carberp Web Panel C2 Backdoor Remote PHP Code Execution

This module exploits backdoors that can be found all over the leaked source code of the Carberp botnet C2 Web Panel. Module Options msf use exploit/unix/webapp/carberp/backdoorexec msf undefinedbackdoorexec show actions ...actions... msf undefinedbackdoorexec set ACTION msf undefinedbackdoorexec...

Alpha Networks ADSL2/2+ Wireless Router ASL-26555 - Password Disclosure

Title: Alpha Networks ADSL2/2+ Wireless Router ASL-26555 Remote Administration Password Disclosure - Author: Alberto Ortega @a0rtega [email protected] - Version: Tested on firmware version v2.0.0.30BES. Laboratory subject: http://a0rtega.pentbox.net/files/asl-26555-zombie.jpg - Summary: Alpha...

Zemra Botnet CnC Web Panel Remote Code Execution

This module exploits the CnC web panel of Zemra Botnet which contains a backdoor inside its leaked source code. Zemra is a crimeware bot that can be used to conduct DDoS attacks and is detected by Symantec as Backdoor.Zemra. Module Options msf use exploit/multi/http/zemra/panelrce msf...

DreamHost Hacked - Change Your Passwords Now !

DreamHost Hacked - Change Your Passwords Now ! All Dreamhost customers should read this post immediately and change all related passwords including WordPress ones. Dreamhost said "Last night we detected some unauthorized activity within one of our databases." They say there's "no evidence that...

CVE-2008-4592

Directory traversal vulnerability in index.php in Sports Clubs Web Panel 0.0.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the p parameter...

Directory traversal

Directory traversal vulnerability in index.php in Sports Clubs Web Panel 0.0.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the p parameter...

CVE-2008-4592

Directory traversal vulnerability in index.php in Sports Clubs Web Panel 0.0.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the p parameter...

CVE-2008-4592: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Sports Clubs Web Panel 0.0.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the p parameter...

Sports Clubs Web Panel 0.0.1 Remote Game Delete Exploit

No description provided by source. !/usr/bin/perl -W Sports Clubs Web Panel 0.0.1 Remote Game Delete Exploit File affected: include/draw-delete.php id Vuln Code: 06: $did = $GET'id'; 08: mysqlquery"DELETE FROM draw WHERE did='$did'"; by ka0x ka0x01 at gmail dot com D.O.M Labs - Security Researche...

Sports Clubs Web Panel 0.0.1 - Remote Game Delete

!/usr/bin/perl -W Sports Clubs Web Panel 0.0.1 Remote Game Delete Exploit File affected: include/draw-delete.php id Vuln Code: 06: $did = $GET'id'; 08: mysqlquery"DELETE FROM draw WHERE did='$did'"; by ka0x D.O.M Labs - Security Researchers - www.domlabs.org - ka0x@domlabs:/codes$ ./sportspanel.p...

Sports Clubs Web Panel 0.0.1 Remote Game Delete Exploit

Exploit for unknown platform in category web applications ======================================================= Sports Clubs Web Panel 0.0.1 Remote Game Delete Exploit ======================================================= !/usr/bin/perl -W Sports Clubs Web Panel 0.0.1 Remote Game Delete Explo...