Login or Register :: Home :: Search :: Your Account :: Forums :: Waraxe Advisories :: Tools :: October 15, 2026 Menu Home Logout Discussions Forums Members List IRC chat Tools Base64 coder MD5 hash CRC32 checksum ROT13 coder SHA-1 hash URL-decoder Sql Char Encoder Affiliates y3dips ITsec Md5 Cracker User Manuals AlbumNow Content Content Sections FAQ Top Info Feedback Recommend Us Search Journal Your Account User Info Welcome, Anonymous Nickname Password (Register) Membership: Latest: MichaelSnaRe New Today: 0 New Yesterday: 0 Overall: 9144 People Online: Visitors: 880 Members: 0 Total: 880 Full disclosure [0day-rubbish] StreamSets Transformer 3.17.0 auth-mode none fallback and un-sandboxed ScalaDTransform execution to container root (8.1 primary) [0day-rubbish] RCDevs WebADM 2.4.14 authenticated log viewer sid command injection to webadm uid 999 code execution (7.2) [0day-rubbish] Maian Cart 3.8 addBanners unrestricted banner upload to PHP webshell and administrator command execution (7.2 primary, PR:H) [0day-rubbish] IPConfigure Orchid VMS 26.3.0 authenticated DNF repository GPG-key property command injection to root (7.2) [0day-rubbish] Circutor LineEds 24.11.14-r0 unauthenticated pwrstudio events.xml shellExecute command injection (9.8) [0day-rubbish] Asustor ADM 3.5.9.RWM1 (AS602T) music.cgi act=live stored-filename command injection reaching system() (8.8 primary, PR:L) [0day-rubbish] Advantech WebAccess Node 9.2.3 unauthenticated CrystalRpt.aspx file upload and path traversal to code execution in w3wp.exe (9.8) SEC Consult Research 20261001 :: Arbitrary Email sender spoofing in Apple iCloud mail SEC Consult SA-20260924-0 :: Multiple Vulnerabilities in Paessler PRTG Network Monitor #CVE-2026-4637 #CVE-2026-4638 [NotCVE-2026-0019] game-music-emu through 0.6.5 VGM Command Interpreter Missing Operand Length Check Allows Heap Out-of-Bounds Read [NotCVE-2026-0018] game-music-emu (libgme) through 0.6.5 Unbounded GYM Command Loop Allows Heap Out-of-Bounds Read [NotCVE-2026-0017] game-music-emu (libgme) 0.6.5 and Earlier AY Loader NULL Pointer Dereference Allows Denial of Service [NotCVE-2026-0016] game-music-emu VGM Command Interpreter Unvalidated 0xE0 PCM Seek Offset Allows Out-of-Bounds Read and Denial of Service APPLE-SA-09-28-2026-3 macOS Sequoia 15.8.1 APPLE-SA-09-28-2026-2 macOS Tahoe 26.7.1 IT Security and Insecurity Portal www.waraxe.us Forum Index Search found 7 matches [QUE]SQL Injection queries Forum:Sql injection Posted: Sat Feb 25, 2006 5:16 am Subject: [QUE]SQL Injection queries Pi3cH Replies: 0 Views: 8327 hi there i have some question about below queries, could some one explain(analyze) them for me? these queries use for blind sql injection. 1. AND (SELECT COUNT(name) FROM sysobjects ... Injectable? Forum:Sql injection Posted: Tue Jan 17, 2006 2:24 pm Subject: Injectable? Pi3cH Replies: 3 Views: 11550 oh! i dont see the left part of =, could you give live example? Injectable? Forum:Sql injection Posted: Sat Jan 14, 2006 1:53 pm Subject: Injectable? Pi3cH Replies: 3 Views: 11550 could give me live example? the $curpage limited at this line of code: $curpage = ceil(($current) / 50); Possible bug in phpnuke.org (PHP-Nuke 7.9) Forum:PhpNuke Posted: Tue Dec 27, 2005 3:45 pm Subject: Possible bug in phpnuke.org (PHP-Nuke 7.9) Pi3cH Replies: 3 Views: 15705 oh! advisory reportet by you ! yes htmlspecialchars good solution. is there any bug for this function of php? (nowdays many webapplications use it) Possible bug in phpnuke.org (PHP-Nuke 7.9) Forum:PhpNuke Posted: Tue Dec 27, 2005 9:15 am Subject: cool! Pi3cH Replies: 3 Views: 15705 use: <IMG SRC="jav&#x09;ascript:alert('XSS');" i think the preg_match only search for < ends with > if we use tags with out > all of them works properly: & ... The Cross-site Scripting Virus / Cross-Site Scripting Worm Forum:Cross-site scripting aka XSS Posted: Sat Dec 24, 2005 3:22 pm Subject: The Cross-site Scripting Virus / Cross-Site Scripting Worm Pi3cH Replies: 2 Views: 11526 xss virus! cool it's act like others viruses with many limitation and also many future (platform independent, depend on 2 side) thanks LINUX Xss types, HTML Injection , script injection Forum:Cross-site scripting aka XSS Posted: Tue Dec 20, 2005 3:02 pm Subject: Xss types, HTML Injection , script injection Pi3cH Replies: 0 Views: 9642 hi there i think u hear about HTML Injection or Script inection attacks, but they are type of XSS attack. you think so? for example if something injected into HTML source code they (securityfocu ... Page 1 of 1 All times are GMT Select a forumSecurity Research by waraxe----------------General discussionHow to fixMetasploit relatedHash cracking requests----------------MD5 hashesAll other hashesHash related informationhttp://www.waraxe.us portal----------------SuggestionsCooperation proposalsSecurity bugs and issues in general----------------Newbies cornerSql injectionCross-site scripting aka XSSRemote file inclusionFull path disclosureShell commands injectionPhishing and Social EngineeringAll other security holesVarious software----------------PhpNukePostNukePhpBBXMB forumvBulletin BoardInvision Power Boarde107MamboJoomlaXOOPSM$ WindowsLinux worldAll other softwareCoppermine Photo GalleryProgramming languages----------------PhpMySqlPerlJavaJavascriptC and C++Visual BasicBorland Delphi and PascalPythonHTML and XMLAssemblerReverse engineering----------------Newbies cornerDisassemblingPHP script decode requestsMiscellaneous stuff----------------Future of the ITNanotechnologyFun cornerLinksTry2hack sitesProxy databaseDirect Downloads----------------ToolsTutorialsWordlistsRecycle Bin----------------Removed messagesOutdated posts Powered by phpBB © 2001-2008 phpBB Group

PCWizardHub - Helping you fix, build, and optimize your PC life
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
Page Generation: 0.043 Seconds