various vulnerabilities ______________ Dec 29, 2005 Author: rgod MS Internet Explorer 6.0 sp2 mshtml.dll (div) Denial Of Service exploit phpDocumentor <= 1.3.0 rc4 remote commands execution exploit

 

______________ Dec 27, 2005 Author: rgod Dev web management system <= 1.5 SQL injection / cross site scripting

 

various vulnerabilities ______________ Dec 22, 2005 Author: rgod PhpGedView <= 3.3.7 remote commands execution Limbo <= 1.0.4.2 _SERVER[REMOTE_ADDR] Overwrite Remote Exploit

 

various vulnerabilities ______________ Dec 13, 2005 Author: rgod Sugar Suite Open source <= 4.0 remote code execution Website Baker <= 2.6.0 SQL injection / remote commands execution Flatnuke 2.5.6 privilege escalation / remote commands execution phpCoin 1.2.2 Multiple vulnerabilities: advisory phpCoin 1.2.2 phpcoinsessid blind SQL injection phpCOIN 1.2.2 _CCFG[_PKG_PATH_DBSE] remote code execution

 

various vulnerabilities ______________ Dec 7, 2005 Author: rgod XOOPS 2.2.3 Final arbitrary local inclusion XOOPS WF-Downloads module v 2.05 SQL Injection / Administrative credentials disclousre / Remote commands execution Moodle <=1.6dev blind SQL Injection / Remote commands/code execution / xss ATutor 1.5.1pl2 SQL Injection / Remote commands execution Unclassified NewsBoard 1.5.3 patch level 3 "DateFrom" & "DateUntil" blind SQL injection Mambo <= 4.5.2 Globals overwrite / remote commands execution exploit Xaraya <=1.0.0 RC4 Denial Of Service advisory / exploit Zen-Cart <= 1.2.6d blind SQL injection / remote commands execution PHPWebThings 1.4 "msg" and "forum" SQL injection / remote commands execution exploit EKINboard 1.0.3 SQL injection / remote commands execution eFiction <= 2.0 remote code execution / SQL injection / login bypass / cross site scripting / path & information disclosure Guppy <= 4.5.9 Remote code execution / various arbitrary inclusion issues DoceboLMS 2.0.4 remote commands execution SimpleBBS <= v1.1 remote commands execution

 

various vulnerabilities ______________ Nov 3, 2005 Author: rgod PHP-Nuke 7.8 SQL Injection / Remote Command Execution Exploit CuteNews 1.4.1 arbitrary file inclusion/ Remote Command Execution Exploit MWChat 6.8 Sql Injection / Remote commands execution e107 <= 0.6172 (resetcore.php) Remote SQL Injection Exploit w-Agora <= 4.2.0 (quicklist.php) Remote Code Execution Exploit Lucid CMS 1.0.11 SQL Injection/Login Bypass/ Remote code execution advisory, exploit versatileBulletinBoard 1.00 RC2 (board takeover) SQL Injection advisory, exploit Cyphor <= 0.19 (board takeover) SQL Injection Exploit Utopia News Pro <= 1.1.3 (news.php) SQL Injection Exploit PHP-Fusion 6.00.109 (msg_send) SQL Injection Exploit MailGust <= 1.9 (board takeover) SQL Injection Exploit phpMyFAQ <= 1.5.1 (User-Agent) Remote Shell Injection Exploit MyBloggie 2.1.3beta null char + SQL Injection -> Login Bypass My Little Forum <= 1.5 (searchstring) SQL Injection Exploit

 

various vulnerabilities ______________ Sep 20, 2005 Author: rgod CuteNews 1.4.0 remote code execution AzDGDatingLite V 2.1.3 remote code execution ATutor 1.5.1 SQL Injection Digital Scribe v1.4 SQL Injection / remote code execution Mail-it Now! 1.5 contact.php remote code execution PHP Advanced Transfer Manager v1.30 directory traversal bug

 

various vulnerabilities ______________ Sep 9, 2005 Author: rgod class-1 Forum Software v 0.24.4 Remote code execution PBLang 4.65 (possibly prior versions) remote code execution / administrative credentials disclosure / system information disclosure / cross site scripting / path disclosure MAXdev MD-Pro 1.0.73 (possibly prior versions) remote code execution / cross site scripting / path disclosure phpCommunityCalendar 4.0.3 (possibly prior versions) sql injection / login bypass / cross site scripting UNB 1.5.3 cross site scripting Cyber-Cats ChitCHat 2.0 permits cross site scripting attacks, lets users launch exploits from, lets remote users obtain informations on target users, lets insecurely delete/create files

 

various vulnerabilities: ______________ Aug 31, 2005 Author: rgod Flatnuke 2.5.6 Underlying system information disclosure / Administrative & users credentials disclosure / cross site scripting / path disclosure / resource consumption poc FUDforum remote code execution (based on securityfocus advisory )

 

various vulnerabilities ______________ Aug 30, 2005 Author: rgod phpLDAPadmin 0.9.6 - 0.9.7/alpha5 (possibly prior versions) system disclosure, remote code execution, cross site scripting Looking Glass v20040427 arbitrary commands execution / cross site scripting SaveWebPortal 3.4 remote code execution / admin check bypass / remote file inclusion / cross site scripting NETQUERY 3.11 remote commands execution explit (3.1 not properly unpatched)

 

various vulnerabilities ______________ Aug 18, 2005 Author: rgod DevC++ V.4.9.9.2 null byte insertion / obfuscation flaw (update to synedit component obfuscation flaw explaination) Zorum 3.5 remote code execution poc exploit BBCaffe 2.0 cross site scripting poc

 

various vulnerabilities ______________ Aug 10, 2005 Author: rgod Synedit null byte insertion / code obfuscation (this bug is in a bunch of compilers...) Gravity Board X v1.1 (possibly prior versions) Remote code execution, SQL Injection / Login Bypass, cross site scripting, path disclosure poc FunkBoard V0.66CF (possibly prior versions) cross site scripting, possible database username/password disclosure & board takeover, possible remote code execution

 

FlatNuke 2.5.5 (possibly prior versions) remote commands execution / cross site scripting / path disclosure ______________ Aug 5, 2005 Author: rgod some critical vulnerabilities in FlatNuke 2.5.5, proof of concept exploit code here

Various vulnerabilities ______________ Aug 3, 2005 Author: rgod Silvernews 2.0.3 (possibly previous versions ) SQL Injection / Login Bypass / Remote commands execution / cross site scripting PHPFreeNews Version 1.32 (& previous) sql injection, cross site scripting, path disclosure, information disclosure   qliteNews arbitrary database manipulation & cross site scripting poc exploit Utopia News Pro 1.1.3 cross site scripting poc SAXON version 4.1 sql injection / login bypass phpeasynews v1.13 RC2 (possibly prior versions) cross site scripting, path disclosure , user check bypass Web Content Management News System Administrative Account creation & cross site scripting poc

 

Various advisories ______________ Jul 26, 2005 Author: rgod Simplicity OF Upload 1.3 (possibly prior versons) remote code execution & cross site scripting Flex PHPNews login bypass/ sql injection, cross site scripting & resource consumption poc exploit

 

Various vulnerabilities in php applications ______________ Jul 21, 2005 Author: rgod Netquery 3.1 remote commands execution, cross site scripting and information disclosure SEOboard 1.0 cross site scripting poc exploit XMLRPC.PHP Remote code execution CuteNews 1.3.6 path disclosure & cross site scripting / cookie disclosure poc exploit Website Generator Multiple vulnerabilities Asn Guestbook 1.5 cross site scripting poc exploit PHPPageProtect Version 1.0.0 Cross site scripting POC Exploit

 

Various XSS in php applications ______________ Jul 13, 2005 Author: rgod Pyrox search Cross Site Scripting poc exploit UPB Gold 1.9.6 XSS poc exploit UPB Gold 1.9.6 various XSS vulnerabilities Mambo 4.5.2.3 Cross Site Scripting poc exploit PHPSiteSearch 1.7.7d Cross Site Scripting poc exploit

 

PhpBB2Root = 2.0.15 ______________ Jul 10, 2005 Author: rgod exploit che permette di prendere il controllo di una macchina con installato PhpBB 2.0.15, lanciare comandi di shell e appropriarsi della password del database

 

602 Lan Suite 2004 _ resources consumption & remote programs execution exploit [php] ______________ Jun 10, 2005 Author: rgod Un utente remoto può saturare la memoria del sistema e lanciare programmi, inserendo nell'url chiamate a device names (come lpt1, com1...) (leggi tutto)

 

Pragma TelnetServer 6.0 Log Obfuscation ______________ Jun 10, 2005 Author: rgod Un utente remoto può causare che la visione dei file di log venga offuscata (leggi tutto)

 

602 Lan Suite bug: tag maliziosi in una richiesta di GET ______________ Jun 5, 2005 Author: rgod tramite l'inserimento di tag maliziosi in una richiesta di GET, si può impedire che l'amministratore veda i log tramite l'interfaccia del web server integrato

Mirc 6.16 & "generic Edit component" win32 trick ______________ Jun 3, 2005 Author: rgod Naturalmente si sa che una edit box di Windows permette di prelevare il suo testo tramite l'invio del messaggio WM_GETTEXT e settarlo con WM_SETTEXT, una volta che si è trovato il suo handle. Ma cosa accade quando si usano software di messaggistica come Mirc? :)

Serverscheck 5.9.00 exploit ______________ May 27, 2005 Author: rgod Trasversal url bug nel software di monioraggio Serverscheck 5.9.00. Una breve descrizione qui.

NmapGUI v0.9 per Win32 ______________ May 13, 2005 Author: rgod una front-end grafica per lo scanner di network Nmap. Aggiunge alcune funzionalità come: la possibilità di sfruttare al massimo il programma, sviscerandone tutti gli switch, disposti in più tabsheets; la possibilità di esportare l'output di Nmap in Html, Latex e Rtf; di salvare diverse onfigurazioni di host e porte, oltre a quelle generali del programma; la visualizzazione ell'output in una pratica synedit box; l'organizzazione dei logs per data e ora.

Google dorks scanner [PHP] revision ______________ Apr 12, 2005 Author: rgod Versione che implementa una lista di proxy. Aggiunta la grafica e una piacevole ascii-art, fixati alcuni bug.

Google dorks scanner [PHP] ______________ Apr 7, 2005 Author: rgod Si tratta di uno scanner che effettua una serie di ricerche su google allo scopo di evidenziare le vulnerabilità di un sito. Si serve di questo database:

proxy grabber [php] ______________ Mar 17, 2005 Author: rgod un semplice proxy grabber script

phpBB2root <= 2.0.10 [php] ______________ Dec 27, 2004 Author: uno script per prendere il controllo totale di una macchina con phpBB2 <=2.0.10 o semplicemente svelare l'account del database

socksifying a connection _ [ php] ______________ Dec 20, 2004 Author: breve articolo su come "socksificare" una connessione in php

Irene1.2b_ release ______________ Dec 13, 2004 Author: segnalibri; convertitore binario, decimale, esadecimale; una pratica tabella ascii; conto delle parole; uppercase/lowercase di una selezione; possibilità di convertire il valore RGB selezionato da una colorbox in HTML; possibilità di aggiungere il numero di riga ai sorgenti; fixati alcuni bug.

Irene 1.1b _ programming tool ______________ Dec 9, 2004 Author: questa versione del programma aggiunge alcuni linguaggi, la correzione e il completamento automatico, permette di esportare in Latex, permette di personalizzare i colori della sintassi

net send spoofing _ php ______________ Dec 1, 2004 Author: uno studio sulle possibili implicazioni del servizio di messaggistica immediata di win2k/xp

Irene _ syntax highligthing tool ______________ Nov 28, 2004 Author: rgod Un utile tool di syntax highligthing ed exporting scritto in Delphi, supporta le sintassi di 46 linguaggi/applicativi differenti, permette di esportare i sorgenti in un buon html e in rtf...

phpscan _ nbss session request ______________ Nov 16, 2004 Author: rgod Aggiunte alcune funzionalità: ICMP Echo requests (Ping sweep); NBSS session request (permette di vedere se attiva la condivisione di file e stampanti, in particolare mostra come sono codificati i nomi netbios); UDP scan : inserito uno scan preliminare sulle porte alte per determinare il tempo di timeout; fixati alcuni bug; inseriti dei commenti sulla configurazione più adeguata di php.ini.

pscan _ SNMP queries ______________ Oct 7, 2004 Author: rgod Aggiunte funzionalità di SNMP discovery, una tabella di visualizzazione dei pacchetti in esadecimale e plain text, fixato un bug.

pscan ______________ Oct 4, 2004 Author: rgod Fixato un bug nel codice relativo all'UDP scan; inserita una funzionalità di netbios discovery

php scanner ______________ Oct 3, 2004 Author: rgod TCP/UDP Port scanner tool, scritto totalmente in PHP è in fase di sviluppo: aggiunti versione fornisce scan customizzabili, collegamenti ipertestuali...