what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 51 - 75 of 149

Files

csc-sqlxss.txt

Posted Jun 21, 2007

Authored by DoZ | Site hackerscenter.com

Comersus Shop Cart version 7.07 suffers from SQL injection and cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss, sql injection

SHA-256 | 58ba2fa8052fb0819670006c7bdfa1d55906e1a7c84ecc9a82070d3947e29cc5

Download | Favorite | View

wildea-sql.txt

Posted Jun 21, 2007

Authored by Crackers_Child

W1L3D4 WEBmarket version 0.1 suffers from a SQL injection vulnerability.

tags | exploit, sql injection

SHA-256 | 433606e9bfbc7fcdd3b374f544107fce3348a6ab959812ba710b2d401261ceef

Download | Favorite | View

ips-evasion.txt

Posted Jun 20, 2007

Authored by H D Moore

Various commercial IPS products fail to decode HTTP requests that contain 0x0c, 0x0b, and 0x0d instead of normal 0x20/0x09 separators.

tags | exploit, web

SHA-256 | 8bd2fb21a6f9fe779b10b9809f5d7d778051d40abcfa264fa44340d85608f90a

Download | Favorite | View

wppersist-xss.txt

Posted Jun 20, 2007

Authored by Matteo Carli | Site matteocarli.com

A persistent cross site scripting vulnerability exists in the Wordpress.com dashboard.

tags | exploit, xss

SHA-256 | dfaba2f61102da0059c193b2576ec0cfd98b29788b91f7a724667e8fc3e02e19

Download | Favorite | View

yabb-lfi.txt

Posted Jun 20, 2007

Authored by krasza | Site krasza.int.pl

YaBB versions 2.1 and below suffer from a local file inclusion vulnerability that allows for remote code execution.

tags | exploit, remote, local, code execution, file inclusion

SHA-256 | af958fb5a94edadc7e8f93f91b70ddb2da76329318f1774e91870c90573fdf8e

Download | Favorite | View

fusetalkpoc-sql.txt

Posted Jun 20, 2007

Authored by Ivan Almuina | Site fastcom-technology.com

FuseTalk version 2.0 suffers from a SQL injection vulnerability in autherror.cfm.

tags | exploit, sql injection

SHA-256 | 5ebbcffcaeb54aea7359861858adc1e00f52b63b66cc98e800d62c35c2366cd1

Download | Favorite | View

igshop14-eval.txt

Posted Jun 20, 2007

Authored by IFX

iG Shop version 1.4 suffers from an eval inclusion vulnerability.

tags | exploit

SHA-256 | 503e256e013dda3871574a243225434a0123140b50e47040b3018897fbd6b358

Download | Favorite | View

php523-overflow.txt

Posted Jun 20, 2007

Authored by rgod | Site retrogod.altervista.org

PHP version 5.2.3 Tidy extension local buffer overflow exploit for win32.

tags | exploit, overflow, local, php

systems | windows

SHA-256 | 77ab4ff0f5a046cb4cf44bd4a513d14d0712af937e419f340866aac22359816d

Download | Favorite | View

fuzzylime-xss.txt

Posted Jun 20, 2007

Site serapis.net

fuzzylime forum versions 1.01b and below suffer from a cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | 9ad9b369d80b57ebf091d1522196700efe20e03fd1e34f801017dcbdfef0aadc

Download | Favorite | View

webif-lfi.txt

Posted Jun 20, 2007

Authored by maiosyet | Site mawk.org

Webif.cgi suffers from a local file inclusion vulnerability.

tags | exploit, local, cgi, file inclusion

SHA-256 | d547b0f34f12329ecdd8498cec0bf1512aebabcd06b980ebfceddc93406b6a97

Download | Favorite | View

phb10-xss.txt

Posted Jun 20, 2007

Site serapis.net

PHP Hosting Biller version 1.0 suffers from a cross site scripting vulnerability.

tags | exploit, php, xss

SHA-256 | 7e237f155c2757d24d19d980e4a283173fa888e2c6f77f59c9789af664d74eb8

Download | Favorite | View

jasmine-exec.txt

Posted Jun 19, 2007

Authored by Silentz | Site w4ck1ng.com

Jasmine CMS version 1.0 SQL injection and remote code execution exploit.

tags | exploit, remote, code execution, sql injection

SHA-256 | 07fd84c504ba9ef31b7ee61355b21a2ed90c49e111f3f274c0add331555c58d8

Download | Favorite | View

minibill-rfi.txt

Posted Jun 19, 2007

Authored by Abo0od | Site hack-teach.org

MiniBill version 1.2.5 suffers from a remote file inclusion vulnerability in run_billing.php.

tags | exploit, remote, php, code execution, file inclusion

SHA-256 | 474f3766765762c9a7a9ccfd2748616e12d51e852b804cbaa5d792606070e5ee

Download | Favorite | View

se2911-sql.txt

Posted Jun 19, 2007

Authored by BlackHawk | Site itablackhawk.altervista.org

Solar Empire versions 2.9.1.1 and below blind SQL injection and hash retrieval exploit.

tags | exploit, sql injection

SHA-256 | 5fc0ba250cada89b50bbdf2917ebb50b75cf1a9415a6be0b84099e72d552970a

Download | Favorite | View

minibb205-lfi.txt

Posted Jun 19, 2007

Authored by Dj7xpl | Site Dj7xpl.2600.ir

MiniBB version 2.0.5 local file inclusion exploit.

tags | exploit, local, file inclusion

SHA-256 | 84a3770e4b1a2c8e8e1ecb284cb3d4115f3ff02a14739544654bc4cc883701a4

Download | Favorite | View

yfs-rfi.txt

Posted Jun 19, 2007

Authored by Crackers_Child

YourFreeScreamer version 1.0 suffers from a remote file inclusion vulnerability.

tags | exploit, remote, code execution, file inclusion

SHA-256 | 7229cd86b3f1c419c56a46bcf0a792a0335eb626bd17d5c6452273fa308e7f21

Download | Favorite | View

phpmyinv-rfi.txt

Posted Jun 19, 2007

Authored by o0xxdark0o

phpMyInventory version 2.8 suffers from a remote file inclusion vulnerability in global.inc.php.

tags | exploit, remote, php, code execution, file inclusion

SHA-256 | 3a13280f3a30004485abd8c7cb75aeb8385bd5eaaa3c9efa15e7da27c4f76d14

Download | Favorite | View

smf112-multi.tgz

Posted Jun 19, 2007

Authored by ShAnKaR | Site securityvulns.com

Simple Machines Forum (aka SMF) version 1.1.2 suffers from PHP injection and a weak CAPTCHA system. Exploit included to break the CAPTCHA.

tags | exploit, php

SHA-256 | 804c1a0a8f9eac81a336292bc52e53b359f021e708e75f6bfbf33aa684e05734

Download | Favorite | View

utopia-xss.txt

Posted Jun 19, 2007

Authored by Jesper Jurcenoks | Site netvigilance.com

Utopia News Pro version 1.4.0 suffers from a cross site scripting vulnerability.

tags | exploit, xss

advisories | CVE-2007-3129

SHA-256 | d44ae4310ef855d2f6a2512c581ae5743c5bae5757e51c7dc6de8af2e89f8899

Download | Favorite | View

wsportal-sql.txt

Posted Jun 19, 2007

Authored by Jesper Jurcenoks | Site netvigilance.com

WSportal version 1.0 suffers from a SQL injection vulnerability.

tags | exploit, sql injection

advisories | CVE-2007-3128

SHA-256 | 63b3914006fdc477bafedb2046b91a6c12a734ab99f02367d62371c9fa3e41ec

Download | Favorite | View

BTP00000P006KA.zip

Posted Jun 15, 2007

Site matousec.com

Demonstration code that shows how Kaspersky Internet Security 6 hooks many functions in SSDT and in at least nine cases it fails to validate arguments that come from the user mode.

tags | exploit

SHA-256 | 6d0d1ca3bc484c7a00854c53eec72c38dd889b5ea5dde97f8401308d0f41498b

Download | Favorite | View

phphtml-rfi.txt

Posted Jun 15, 2007

Authored by o0xxdark0o

PHP::HTML version 0.6.4 suffers from a remote file inclusion vulnerability in phphtml.php.

tags | exploit, remote, php, code execution, file inclusion

SHA-256 | bc5775c33dc42ad7966b0eac2926ab62d2be3de0be562f4f6544aa6739c9fa62

Download | Favorite | View

sitellitecms-rfi.txt

Posted Jun 15, 2007

Authored by o0xxdark0o

Sitellite CMS versions 4.2.12 and below suffer from a remote file inclusion vulnerability in 559668.php.

tags | exploit, remote, php, code execution, file inclusion

SHA-256 | 4ed906fecdcc37bc301b71c285a269be7270b242f3c771741ffd39d6a68690d9

Download | Favorite | View

popnupblog.txt

Posted Jun 15, 2007

Authored by FiSh

The XOOPS module PopnupBlog suffers from a remote file inclusion vulnerability.

tags | exploit, remote, file inclusion

SHA-256 | 0c8cf5e73633bb3313c3bda90a4aae5f5bbbf02bb6f2313543a48b54d8bd8712

Download | Favorite | View

cjay-rfi.txt

Posted Jun 15, 2007

Authored by FiSh

XOOPS module Cjay Content 3 suffers from a remote file inclusion vulnerability.

tags | exploit, remote, code execution, file inclusion

SHA-256 | be91a68f2bca327c5710bbb46b15837b44afbb7c2ae04b0cb24633e5edb1ab23

Download | Favorite | View