Login or Register :: Home :: Search :: Your Account :: Forums :: Waraxe Advisories :: Tools :: October 26, 2026 Menu Home Logout Discussions Forums Members List IRC chat Tools Base64 coder MD5 hash CRC32 checksum ROT13 coder SHA-1 hash URL-decoder Sql Char Encoder Affiliates y3dips ITsec Md5 Cracker User Manuals AlbumNow Content Content Sections FAQ Top Info Feedback Recommend Us Search Journal Your Account User Info Welcome, Anonymous Nickname Password (Register) Membership: Latest: MichaelSnaRe New Today: 0 New Yesterday: 0 Overall: 9144 People Online: Visitors: 357 Members: 0 Total: 357 Full disclosure [0day-rubbish] TRENDnet TV-IP302PI firmware 1.02.38 authenticated NTP server-address OS command injection to root command execution via a shell-form system() call (7.2 High, PR:H) [0day-rubbish] Royal Render 9.1.26b: default-unauthenticated job submission on rrServer TCP 7773 reaches worker-side shell execution as the worker identity, measured root (8.1 High) [0day-rubbish] ProSoft Technology RLX-IFH24E v2.2.44 unsigned firmware upgrade package to root command execution and full account-database overwrite (7.2) [0day-rubbish] Parasoft Continuous Testing Platform 10.7.5-SNAPSHOT anonymous deserialization in the database restore path to JSP command execution as uid=1000 (9.8) [0day-rubbish] Exasol Database 7.1.30 docker-db form: shipped default SYS credential to PYTHON3 UDF os.popen command execution as uid=500(exadefusr), output returned in-band (8.8) [0day-rubbish] Edimax BR-6478AC firmware v2.20 authenticated command injection in the setWAN WAN-configuration handler, root command execution (7.2) [0day-rubbish] Edimax BR-6478AC firmware v2.20 authenticated command injection in the formWlanMP manufacturing-test handler, root command execution (7.2) [ROOTEDCON] Call for Papers 2027 · RootedCON2027 (Madrid) VestaCP <= 0.9.8-26: authenticated config-parser eval sinks ->root RCE (VESTACP-2026-001) [SYSS-2026-080]: dcm4che - Path Traversal (CWE-22) [SYSS-2026-079]: dcm4che - Path Traversal (CWE-22) [SYSS-2026-078]: dcm4che - Path Traversal (CWE-22) [SYSS-2026-077]: dcm4che - Path Traversal (CWE-22) [0day-rubbish] Synametrics Syncrify 6.2 build 1178 authenticated PublicLink chunk-upload path traversal to /etc/cron.d and root command execution (7.5) [0day-rubbish] South River Technologies Titan MFT Server 26.0.0 first-run administrator setup chained to job post-command injection, NT AUTHORITY\SYSTEM (8.1) IT Security and Insecurity Portal www.waraxe.us Forum Index Search found 35 matches Passwords pro Forum:Newbies corner Posted: Thu Feb 07, 2008 9:53 pm Subject: Passwords pro Vixje Replies: 9 Views: 16145 hehe Try to learn a pogramming language to begin with. I suggest u start off with something like C# Discover version Forum:Invision Power Board Posted: Sun Feb 03, 2008 3:36 pm Subject: Discover version Vixje Replies: 1 Views: 8861 Hey guys, Does anyone have a trick to see the current versions of todays modern invision power board forums? How did they get the md5's from my friends website? Forum:Newbies corner Posted: Sat Feb 02, 2008 2:49 pm Subject: How did they get the md5's from my friends website? Vixje Replies: 3 Views: 9598 Thanks, i think that was it! The script doesnt seem to work though unfortunally. Nomatter what url or path I provide, always the error Error:Libcurl isnt installed. How did they get the md5's from my friends website? Forum:Newbies corner Posted: Sat Feb 02, 2008 2:07 pm Subject: How did they get the md5's from my friends website? Vixje Replies: 3 Views: 9598 Hi there, My friend's website got compromised. And i'm trying to figure out how. Now he has been using Wordpress, and I found a certain plugin he uses which has a exploit available on the net. Belo ... PUNbb sql injection Forum:All other software Posted: Sat Aug 26, 2006 2:43 pm Subject: PUNbb sql injection Vixje Replies: 2 Views: 11368 Hi there, I am able to insert this command using the administration panel of the forum. There is also a backup feature but its not working so i need to try this manually. I managed to get sql ... Request for a Tagalog (Philippines) dictionary file Forum:Wordlists Posted: Sun Aug 20, 2006 5:56 pm Subject: Request for a Tagalog (Philippines) dictionary file Vixje Replies: 0 Views: 9824 As the subject says, i've been looking and poking around for a while now but i just cant get my hands on a philippine/tagalog word list. If anybody could help me out that would be just great Tha ... test horde webmail vulnerability Forum:All other software Posted: Thu Aug 03, 2006 9:04 pm Subject: test horde webmail vulnerability Vixje Replies: 14 Views: 25587 Thanks a lot for helping me think this one out hehe, and thanks for having me as a visitor on your forum. This board is one of the few where I can find some more serious people around without speaking ... test horde webmail vulnerability Forum:All other software Posted: Thu Aug 03, 2006 8:48 pm Subject: test horde webmail vulnerability Vixje Replies: 14 Views: 25587 No, here's what happens: horddy> cd C:\Inetpub\vhosts\webmail\horde\services\help So if " is a problem, maybe i can use the windows shortcuts, like progra~1 for program files f.e. cd c:\ ... test horde webmail vulnerability Forum:All other software Posted: Thu Aug 03, 2006 8:22 pm Subject: test horde webmail vulnerability Vixje Replies: 14 Views: 25587 I've been testing a bit more, here's my results: When i locally execute: perl -e system(ftp) The cli replies with a ftp>, allowing to to ftp. When i use this at the remote host, horddy&g ... test horde webmail vulnerability Forum:All other software Posted: Thu Aug 03, 2006 6:30 pm Subject: test horde webmail vulnerability Vixje Replies: 14 Views: 25587 Woah, bingo Damn you are good hehe. Usage: C:\Program Files\SWsoft\Plesk\Additional\Perl\bin\perl.exe [switches] [--] [programfile] [arguments] -0[octal] specify record separator (\0, i ... test horde webmail vulnerability Forum:All other software Posted: Thu Aug 03, 2006 6:15 pm Subject: test horde webmail vulnerability Vixje Replies: 14 Views: 25587 As much as i know, win 2003/2000/xp does not have "whoami" and "who" utilities, as in unix. Now, ftp.exe and tftp.exe are residing in "windows/system32" directory and if user has low privileges, then ... test horde webmail vulnerability Forum:All other software Posted: Thu Aug 03, 2006 5:58 pm Subject: test horde webmail vulnerability Vixje Replies: 14 Views: 25587 horddy> ftp --help horddy> nope didnt work im affraid, strange i would expect also less priveleged accounts would have ftp --help access. Is there a sort of, who am i, in windows? Hmm, SE ... test horde webmail vulnerability Forum:All other software Posted: Thu Aug 03, 2006 5:46 pm Subject: test horde webmail vulnerability Vixje Replies: 14 Views: 25587 horddy> ver Microsoft Windows [Version 5.2.3790] horddy> ok, so that seems to work. mkdir test, doesnt work, and also i cannot go outside of the folder i'm in. MD5 Help? Forum:All other hashes Posted: Tue Aug 01, 2006 9:11 pm Subject: MD5 Help? Vixje Replies: 11 Views: 19990 i was able to recover 3rd and 7th password using a wordlist. Both are: microsoft test horde webmail vulnerability Forum:All other software Posted: Tue Aug 01, 2006 7:38 pm Subject: test horde webmail vulnerability Vixje Replies: 14 Views: 25587 Hi there, I am testing a vulnerability on a horde webmail page: Here's the perl script: http://www.milw0rm.com/exploits/1650 When I execute this script, i seem to arrive within a shell and ... Page 1 of 3 Goto page 1, 2, 3Next All times are GMT Select a forumSecurity Research by waraxe----------------General discussionHow to fixMetasploit relatedHash cracking requests----------------MD5 hashesAll other hashesHash related informationhttp://www.waraxe.us portal----------------SuggestionsCooperation proposalsSecurity bugs and issues in general----------------Newbies cornerSql injectionCross-site scripting aka XSSRemote file inclusionFull path disclosureShell commands injectionPhishing and Social EngineeringAll other security holesVarious software----------------PhpNukePostNukePhpBBXMB forumvBulletin BoardInvision Power Boarde107MamboJoomlaXOOPSM$ WindowsLinux worldAll other softwareCoppermine Photo GalleryProgramming languages----------------PhpMySqlPerlJavaJavascriptC and C++Visual BasicBorland Delphi and PascalPythonHTML and XMLAssemblerReverse engineering----------------Newbies cornerDisassemblingPHP script decode requestsMiscellaneous stuff----------------Future of the ITNanotechnologyFun cornerLinksTry2hack sitesProxy databaseDirect Downloads----------------ToolsTutorialsWordlistsRecycle Bin----------------Removed messagesOutdated posts Powered by phpBB © 2001-2008 phpBB Group

PCWizardHub - Helping you fix, build, and optimize your PC life
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
Page Generation: 0.053 Seconds