This exploit allows remote attackers to execute arbitrary code on ProFTPD servers. It takes advantage of a vulnerability in the IAC (Input Abstraction Class) feature of ProFTPD.
The LPRng software is an enhanced, extended, and portable version of the Berkeley LPR software (the standard UNIX printer spooler) that ships with Debian GNU/Linux. When root controls the print queue, the authentication that is used is based on whether the client source port connecting to lpd is privileged or not. Apparently, lpd does not check the source port properly, and it is possible for any local user to control the print queue with a modified client. The consequences of this vulnerability being exploited is a compromise of print queue control.
The SN News <= 1.2 application is vulnerable to SQL Injection. An attacker can exploit this vulnerability to gain unauthorized access to the application's database.
A blind SQL injection vulnerability exists in the 2.4.5 core of Jaow. The vulnerable page is add_ons.php, where the add_ons variable is not properly sanitized before being used in an SQL query. An attacker can exploit this vulnerability by injecting malicious SQL code into the add_ons parameter. This can lead to unauthorized access to the database.
Exploit for educational purpose only. SuperNews are a brazilian news system in PHP and MySQL. Versions priors to 2.6 have a simple SQL Injection on view news. The developer tried to fix the bug removing keywords like "union" and "select". But, with a recursion, it's possible to bypass this filters. Another SQL Injection on the administration panel: When deleting a post, you can inject SQL for delete all news on the database. Another vulnerability allows to delete files, on the administration panel: When deleting a post, a variable called "unlink" will talk to the system the new's image for delete. But it's possible to delete others files, typing all the file path or using "../".
The SSH_BRUTE tool is a remote users discovery tool that exploits a vulnerability in OpenSSH/PAM <= 3.6.1p1. It allows an attacker to test for the existence of valid user accounts on a target system by brute-forcing the authentication process. By sending multiple authentication requests with an illegal user and measuring the response time, the tool can determine if the user account exists. This can be used to gather information for further attacks or to identify potential targets for password guessing attacks.
This exploit allows an attacker to execute arbitrary code remotely on the Apache HTTP Server version 2.4.50. The vulnerability was assigned CVE-2021-41773 and CVE-2021-42013.
This proof-of-concept demonstrates the existence of the vulnerability reported by iDEFENSE (iDEFENSE Security Advisory 01.14.05). It allows an attacker to execute arbitrary code on a vulnerable system. The exploit has been tested against exim-4.41 under Debian GNU/Linux.
GNUPanel has a pure coded ticket support system Comment 'consultar' field is not ascaped so any tags including script tags can be stored in them. An unauthenticated user can cause a logged in user to create support ticket including malicious code.
WhiteCollarGroup discovered multiple vulnerabilities on TheBlog 2.0, including SQL Injection, XSS Persistent (stored) and Arbitrary File Upload. The exploit is a PoC for SQL Injection on index.php?id=.
Services By CQR