Login or Register :: Home :: Search :: Your Account :: Forums :: Waraxe Advisories :: Tools :: September 13, 2026 Menu Home Logout Discussions Forums Members List IRC chat Tools Base64 coder MD5 hash CRC32 checksum ROT13 coder SHA-1 hash URL-decoder Sql Char Encoder Affiliates y3dips ITsec Md5 Cracker User Manuals AlbumNow Content Content Sections FAQ Top Info Feedback Recommend Us Search Journal Your Account User Info Welcome, Anonymous Nickname Password (Register) Membership: Latest: MichaelSnaRe New Today: 0 New Yesterday: 0 Overall: 9144 People Online: Visitors: 433 Members: 0 Total: 433 Full disclosure [0day-rubbish] Royal Server 5.04.50529.0 Local privilege escalation to LocalSystem on the execution path without credential override (7.2) [0day-rubbish] core-admin 1.0.164 (build 16468) Systemic shell command injection via ineffective quote escaping (8.8) [0day-rubbish] OP5 Monitor 9.20 Command injection surviving the CVE-2025-34115 patch (OPT-IN fix ineffective) (8.8) [0day-rubbish] QuantaStor 6.8.3.018 Command injection in the alert-mail command via the smtpPassword field (8.8) [0day-rubbish] SmarterMail 100.0.9693 (Build 9693) Antivirus command-line configuration executing as NT AUTHORITY\SYSTEM (7.2) [0day-rubbish] Jitterbit Agent 12.8.1.6 (Docker jitterbit/agent:12.8.1.6) Unauthenticated SOAP with hard-coded credentials leading to OS command execution (9.8) [0day-rubbish] Accurate Online Private Cloud on-prem (current) Unauthenticated Hessian deserialization leading to JNDI remote class loading (9.8) [0day-rubbish] DBxtra .NET 13.1.1.0 Unauthenticated SOAP API to xp_cmdshell code execution (9.8) **Subject:** CVE-2026-2035703: Tozed ZLT X300 5G CPE — Unauthenticated Remote Root Code Execution via TR-069 Command Injection (CVSS 9.8) CVE-2026-52307: Stored XSS in 1CMS v5.6 HP Easy Start for macOS: CVE-2026-12554 / CVE-2026-12555 /CVE-2026-12556 Next.js 16.4.0-canary.13 Image Optimizer DNS Rebinding TOCTOU SSRF Still Exists O-CMS 1.0.0 Authenticated OS Command Injection viaai_cli_script Flextype v1.0.0-alpha.3 CMS registerShortcodes() Remote Code Execution via Attacker-Controlled File Inclusion Flextype v1.0.0-alpha.3 Stored Fetch Shortcode Allows Server-Side Request Forgery IT Security and Insecurity Portal www.waraxe.us Forum Index -> Suggestions -> Security ADDON for your nuke site.. View previous topic :: View next topic Security ADDON for your nuke site.. Posted: Fri Jun 18, 2004 10:51 am SteX Advanced user Joined: May 18, 2004 Posts: 181 Location: Serbia This is better of Protector System... (and faster i think) This tool can protect site from "UNKNOW" exploits..so..security on 1st place.. Quote: Admin Secure is an add-on script (not a module, block, nor else) for PHP-Nuke web portal system. This add-on gives you additional protection scheme for admin accounts from hacking activities and perform filtering to input variables from possible hacking attempts. This add-on does not prevent another hacking methods such as DoS (denial of service), hammering, session spoofing, backdoors, port scanning, system exploit, root access, etc. Admin Secure will monitoring suspicious SQL Injection activities as well as illegal administration access for your PHP-Nuke based website. Features: • Blocking known PHP-Nuke exploits. • Prevent fake admin account access through input requests. • Blocking cross-site scripting in modules.php and index.php files. • Ensuring admin account session taken from cookie. • Prevent unauthorized admin account creation, deletion, and modification. • Compare admin account validity through "mirrored" database table. • Changes to admin accounts (create, edit, delete) require God admin approval. • E-mail notification. An alert sent along with additional info. • Banning system for accessing site and PHP-Nuke modules. • Log site activities. • Flood Protection. • And more. Changes in This Version: • Add: Safe Requests Mode • Add: Safe HTML Strings • Add: Automatic Database Checking • Add: Automatic Database Optimization • Add: Site Close/Open option in Administration Panel • Add: Unapproved admin accounts deletion from Administration Panel • Add: Confirmation Prompt • Add: Selectable Blocking page (either html page or server response codes) • Add: SQL Injection deep scanning mode • Add: Illegal HTML Tags deep scanning mode • Add: Tracking System • Add: Maximum Site Visitors • Add: Send mail notification as MIME mail • Add: Send mail notification using IMAP (if supported by server) • Update: Strengthen Admin Secure global variables • Update: Improve Admin Secure Administration Panel interface • Update: Improve SQL Injection checking algorithm • Update: Flood protection auto-disable in admin/user login • Fix: False illegal html tags checking in phpbb/bb2nuke Forum preview mode • Fix: False illegal html tags checking in Private Messages preview mode • Fix: Corrupt downloaded ban/log files if gz output enabled by server http://gp4tweaker.vadertrophy.com/cms/downloads-cat13.html _________________ We would change the world, but God won't give us the sourcecode... ....Watch the master. Follow the master. Be the master.... ------------------------------------------------------- Posted: Fri Jun 18, 2004 8:32 pm madman Active user Joined: May 24, 2004 Posts: 46 And here is home of the project: http://sourceforge.net/projects/asec/ And soon, this tool will get new home (for supports) in thefreeserver. Thanks to you. _________________ ch88rs, madman Security ADDON for your nuke site.. www.waraxe.us Forum Index -> Suggestions You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum All times are GMT Page 1 of 1 All Posts1 Day7 Days2 Weeks1 Month3 Months6 Months1 YearOldest FirstNewest First Select a forumSecurity Research by waraxe----------------General discussionHow to fixMetasploit relatedHash cracking requests----------------MD5 hashesAll other hashesHash related informationhttp://www.waraxe.us portal----------------SuggestionsCooperation proposalsSecurity bugs and issues in general----------------Newbies cornerSql injectionCross-site scripting aka XSSRemote file inclusionFull path disclosureShell commands injectionPhishing and Social EngineeringAll other security holesVarious software----------------PhpNukePostNukePhpBBXMB forumvBulletin BoardInvision Power Boarde107MamboJoomlaXOOPSM$ WindowsLinux worldAll other softwareCoppermine Photo GalleryProgramming languages----------------PhpMySqlPerlJavaJavascriptC and C++Visual BasicBorland Delphi and PascalPythonHTML and XMLAssemblerReverse engineering----------------Newbies cornerDisassemblingPHP script decode requestsMiscellaneous stuff----------------Future of the ITNanotechnologyFun cornerLinksTry2hack sitesProxy databaseDirect Downloads----------------ToolsTutorialsWordlistsRecycle Bin----------------Removed messagesOutdated posts Powered by phpBB © 2001-2008 phpBB Group

PCWizardHub - Helping you fix, build, and optimize your PC life
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
Page Generation: 0.038 Seconds