what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 51 - 75 of 131

Files

FTGate-expl.pl.txt

Posted Nov 20, 2005

Authored by Luca Ercoli | Site lucaercoli.it

Remote proof of concept buffer overflow exploit for the IMAP server in FTGate4 Groupware version 4.1.

tags | exploit, remote, overflow, imap, proof of concept

SHA-256 | 407fcb6c333d58d2349fad1a8b780a19e4b7926bc74f534bc88f3a61e8b5177b

Download | Favorite | View

revizeSQL.txt

Posted Nov 20, 2005

Authored by Lostmon

Revize(r) CMS is susceptible to SQL injection and cross site scripting attacks. Exploitation details provided.

tags | exploit, xss, sql injection

SHA-256 | dd1ed25f98fe01cfca72917e5e732ba9d6ca3112d046e105c1601701928ccbb6

Download | Favorite | View

phpwebth14_xpl.html

Posted Nov 20, 2005

Authored by rgod | Site retrogod.altervista.org

PHPWebThings version 1.4 suffers from SQL injection, credential disclosure, and remote command execution vulnerabilities.

tags | exploit, remote, vulnerability, sql injection

SHA-256 | 6be81293ca11a04a30ed83c549ba3d0dab5beb1adc40f38bc72c767652bbc5d7

Download | Favorite | View

affiliateNetwork.txt

Posted Nov 20, 2005

Authored by Robin Verton

Affiliate Network Pro version 7.2 suffers from SQL injection, code execution, and cross site scripting flaws.

tags | exploit, code execution, xss, sql injection

SHA-256 | b68e33f43a3e04ebcaa708511893cd0724696a199e0423be9e92141c50125a03

Download | Favorite | View

SA027.txt

Posted Nov 20, 2005

Authored by sp3x | Site securityreason.com

PHPNuke version 7.8 is susceptible to SQL injection attacks. Exploitation details provided.

tags | exploit, sql injection

SHA-256 | 21b8d150f83a85c6b7a830edacbb89dc5a9a8dae43863c11ad091c4d36771c70

Download | Favorite | View

phpwcms.txt

Posted Nov 20, 2005

Authored by Stefan Lochbihler

PHPWCMS 1.2.5-DEV is susceptible to multiple cross site scripting and directory traversal attacks. Exploit details provided.

tags | exploit, xss

SHA-256 | 03939668efd23b836d4ebf352a7ce435dcca79d5e8e8db44df52321906754b46

Download | Favorite | View

walla30.txt

Posted Nov 15, 2005

Authored by Rafi Nahum, Pokerface

Walla Telesite versions 3.0 and below are susceptible to cross site scripting, SQL injection, and more. Details provided.

tags | exploit, xss, sql injection

SHA-256 | 3029dba35a73a6580ed83f41cb04ab6b626605998100431382b494603a6fcab4

Download | Favorite | View

kapda-12.txt

Posted Nov 15, 2005

Authored by trueend5 | Site KAPDA.ir

KAPDA Advisory - ekinboard version 1.0.3 is susceptible to cross site scripting and html injection flaws.

tags | exploit, xss

SHA-256 | f2e17a9c85b4d4db9dda650d51963910482d98e209bc126458dbbef1ebcbe96f

Download | Favorite | View

unb153pl3_xpl.html

Posted Nov 15, 2005

Authored by rgod | Site retrogod.altervista.org

Unclassified NewsBoard version 1.5.3 patch level 3 DateFrom and DateUntil blind SQL injection remote exploit.

tags | exploit, remote, sql injection

SHA-256 | 22deafafcb2fa5cf284ca67667292d8daa35ffabb767aa74fbebc0a1de799792

Download | Favorite | View

fbsdmaster.c

Posted Nov 15, 2005

Authored by Kingcope

master.passwd disclosure local exploit for FreeBSD versions 4.11 and below and 5.4 and below.

tags | exploit, local

systems | freebsd

SHA-256 | 3a61fec1748cbc5fd100cae534599348960f67d0d18a74422f337336777b870f

Download | Favorite | View

upnp-dos.c

Posted Nov 15, 2005

Authored by Winny Thomas

Denial of service exploit that makes use of a memory leak when sending a specially crafted upnp_getdevicelist request.

tags | exploit, denial of service, memory leak

SHA-256 | c4ad49a26be74e913688c536620eb0a55ff34d9b4d6b43f53754461c413ae7c8

Download | Favorite | View

pollvote.txt

Posted Nov 15, 2005

Authored by rUnViRuS

PollVote is susceptible to a remote file inclusion flaw.

tags | exploit, remote, file inclusion

SHA-256 | 284b9ec1459b822c63882279347e143a6f762f1fd9128b0b675fbc1a93eedfd5

Download | Favorite | View

fipsCMS.txt

Posted Nov 15, 2005

Authored by Preben Nylokken

fipsCMS is susceptible to cross site scripting.

tags | exploit, xss

SHA-256 | d30e2a08fb610241f8c040d9943b0f66bf652eee6f38565ebbddc2c539d1e258

Download | Favorite | View

cyphorSQL.txt

Posted Nov 15, 2005

Authored by HACKERS PAL

Cyphor versions 0.19 and below suffer from a SQL injection attack. Exploit provided.

tags | exploit, sql injection

SHA-256 | f0ff18d36ebedf80f58b098297e039e3a6ce902578726def5279e9a35264baf6

Download | Favorite | View

EasyPageCMSXSS.txt

Posted Nov 15, 2005

Authored by BiPi_HaCk | Site NightmareSecurity.net

EasyPageCMS is susceptible to cross site scripting attacks. Details provided.

tags | exploit, xss

SHA-256 | bb5df34d5c7cc6efd88bea73311464dd7b653e7a8b51dd4b8d42eae260645bb0

Download | Favorite | View

PHPCalendar.txt

Posted Nov 15, 2005

Authored by Robin Verton

A remote code execution vulnerability has been discovered in various CodeGrrl products including PHPCalendar, PHPClique, PHPFanBase, PHPCurrently, and PHPQuotes.

tags | exploit, remote, code execution

SHA-256 | 2539e6a0a10e5c9a163b673cf8ee1861d726956268b445b7b8fd95553d9bb737

Download | Favorite | View

Hardened-PHP Project Security Advisory 2005-21.81

Posted Nov 15, 2005

Authored by Christopher Kunz, Hardened-PHP Project | Site hardened-php.net

phpSysInfo versions 2.4 and below suffer from cross site scripting, HTTP response splitting, and arbitrary file inclusion flaws.

tags | exploit, web, arbitrary, xss, file inclusion

advisories | CVE-2005-3347, CVE-2005-3348

SHA-256 | 0e06964507a7ccca53a11efcf06c1e94edfb9afdc2311b04881c95bf3b588fcd

Download | Favorite | View

wizzSQL.txt

Posted Nov 15, 2005

Authored by HACKERS PAL

Wizz Forum is susceptible to multiple SQL injection attacks. Exploit provided.

tags | exploit, sql injection

SHA-256 | 892dd79222d9cd846ba10ecb938506a65059ffc81e6c80a8a0a09134ee751b69

Download | Favorite | View

midicartSQL.txt

Posted Nov 15, 2005

Authored by crazy frog

Midicart is susceptible to a SQL injection attack in search_list.asp.

tags | exploit, sql injection, asp

SHA-256 | 8283bf34eaa3cb519c16ce50c1dd3428e9119c6f871a60491507a21dc17a761d

Download | Favorite | View

12allSQL.txt

Posted Nov 15, 2005

Authored by bhs_team | Site Babol-Hackers.com

1-2-All Broadcast email software is susceptible to SQL injection attacks.

tags | exploit, sql injection

SHA-256 | 31ca02b5f82ace90ba5a6bb890159183fd8c5afc0eae186ef195ca4ad2d61ed0

Download | Favorite | View

phpWebThings144-2.txt

Posted Nov 15, 2005

Authored by AhLaM | Site lezr.com

phpWebThings version 1.4.4 is susceptible to SQL injection attacks in download.php.

tags | exploit, php, sql injection

SHA-256 | acddaf6e32dab9902b44b291240cac0d2abd8c645b5d0d0d1ff513130abb2920

Download | Favorite | View

SF_multi.pl.txt

Posted Nov 13, 2005

Authored by Kevin Finisterre | Site digitalmunition.com

Veritas Storage Foundation 4.0 local root exploit that takes advantage of a buffer overflow in the VCSI18N_LANG environment variable.

tags | exploit, overflow, local, root

SHA-256 | 587a778f72ac01b11f2daf11d28d6e33a3c6d445c52a6d3b53972ceb9b9746b2

Download | Favorite | View

xoops_xpl.html

Posted Nov 13, 2005

Authored by rgod | Site retrogod.altervista.org

XOOPS 2.2.3 is susceptible to a local file inclusion flaw and XOOPS WF-Downloads module version 2.05 is susceptible to SQL injection, credential disclosure, and remote command execution flaws. Exploitation details included.

tags | exploit, remote, local, sql injection, file inclusion

SHA-256 | 59511afa72fdf7c3314190b12b28476f8de5b259d05a221512df44e94c35d119

Download | Favorite | View

aMemberXSS.txt

Posted Nov 12, 2005

Authored by BiPi_HaCk | Site NightmareSecurity.net

aMember is susceptible to cross site scripting attacks via an unsanitized login variable.

tags | exploit, xss

SHA-256 | 09aeaa3107c25b1d5b405d6859a0ea1c2e31810c27dd8609186079c15aad9c49

Download | Favorite | View

ZH200502.txt

Posted Nov 12, 2005

Authored by Kevin Fernandez aka Siegfried | Site zone-h.fr

Zone-H Research Center Security Advisory 200502 - phpAdsNew versions 2.0.6 and below suffer from SQL injection flaws. Exploitation details provided.

tags | exploit, sql injection

SHA-256 | 2bb01d8a857a347319337c91c213000292e3c3de4261bf1f0a85cb37550308b2

Download | Favorite | View