Login or Register :: Home :: Search :: Your Account :: Forums :: Waraxe Advisories :: Tools :: September 22, 2026 Menu Home Logout Discussions Forums Members List IRC chat Tools Base64 coder MD5 hash CRC32 checksum ROT13 coder SHA-1 hash URL-decoder Sql Char Encoder Affiliates y3dips ITsec Md5 Cracker User Manuals AlbumNow Content Content Sections FAQ Top Info Feedback Recommend Us Search Journal Your Account User Info Welcome, Anonymous Nickname Password (Register) Membership: Latest: MichaelSnaRe New Today: 0 New Yesterday: 0 Overall: 9144 People Online: Visitors: 233 Members: 0 Total: 233 Full disclosure [0day-rubbish] Royal Server 5.04.50529.0 Local privilege escalation to LocalSystem on the execution path without credential override (7.2) [0day-rubbish] core-admin 1.0.164 (build 16468) Systemic shell command injection via ineffective quote escaping (8.8) [0day-rubbish] OP5 Monitor 9.20 Command injection surviving the CVE-2025-34115 patch (OPT-IN fix ineffective) (8.8) [0day-rubbish] QuantaStor 6.8.3.018 Command injection in the alert-mail command via the smtpPassword field (8.8) [0day-rubbish] SmarterMail 100.0.9693 (Build 9693) Antivirus command-line configuration executing as NT AUTHORITY\SYSTEM (7.2) [0day-rubbish] Jitterbit Agent 12.8.1.6 (Docker jitterbit/agent:12.8.1.6) Unauthenticated SOAP with hard-coded credentials leading to OS command execution (9.8) [0day-rubbish] Accurate Online Private Cloud on-prem (current) Unauthenticated Hessian deserialization leading to JNDI remote class loading (9.8) [0day-rubbish] DBxtra .NET 13.1.1.0 Unauthenticated SOAP API to xp_cmdshell code execution (9.8) **Subject:** CVE-2026-2035703: Tozed ZLT X300 5G CPE — Unauthenticated Remote Root Code Execution via TR-069 Command Injection (CVSS 9.8) CVE-2026-52307: Stored XSS in 1CMS v5.6 HP Easy Start for macOS: CVE-2026-12554 / CVE-2026-12555 /CVE-2026-12556 Next.js 16.4.0-canary.13 Image Optimizer DNS Rebinding TOCTOU SSRF Still Exists O-CMS 1.0.0 Authenticated OS Command Injection viaai_cli_script Flextype v1.0.0-alpha.3 CMS registerShortcodes() Remote Code Execution via Attacker-Controlled File Inclusion Flextype v1.0.0-alpha.3 Stored Fetch Shortcode Allows Server-Side Request Forgery IT Security and Insecurity Portal www.waraxe.us Forum Index Search found 29 matches Can you help me? my forum has been hacked Forum:How to fix Posted: Fri Mar 04, 2005 6:20 pm Subject: A simple guide to secure a forum Zeelock Replies: 10 Views: 27059 - First use .htaccess for protection admin directory and admin files - Second use only one admin - Disable System() and any other dangerous function (if not used) - Third For forums only use ... Postnuke all versions + pnphpbb <=1.2 sql injection Forum:PostNuke Posted: Fri Mar 04, 2005 12:20 pm Subject: Postnuke all versions + pnphpbb <=1.2 sql injection Zeelock Replies: 5 Views: 19129 It's a bug in old Phpbb. Of course if you use old phpbb versions... Howto Find bugs? Forum:Newbies corner Posted: Fri Mar 04, 2005 11:43 am Subject: Howto Find bugs? Zeelock Replies: 4 Views: 12172 Really good is to use a debugger. Using Zend is amazing what you can find... phpbb v. 2.0.12 and earlier authendication bypass Forum:PhpBB Posted: Mon Feb 28, 2005 1:53 pm Subject: phpbb v. 2.0.12 and earlier authendication bypass Zeelock Replies: 15 Views: 46079 If you want I'll censor the info as well Debugging with ZEND Forum:Php Posted: Mon Feb 28, 2005 1:52 pm Subject: Debugging with ZEND Zeelock Replies: 0 Views: 7969 I'm using since a while Zend STudio. Yesterday I tryed for the first time version 4.0 and I was impressed. Auditing and debugging is far away easier! phpbb v. 2.0.12 and earlier authendication bypass Forum:PhpBB Posted: Mon Feb 28, 2005 11:03 am Subject: phpbb v. 2.0.12 and earlier authendication bypass Zeelock Replies: 15 Views: 46079 I think that Janek censored the message, because it's really harmful at the moment MercuryBoard v1.1.2 Forum:All other software Posted: Mon Feb 28, 2005 9:14 am Subject: MercuryBoard v1.1.2 Zeelock Replies: 2 Views: 10795 For the code injection you need to have Magic Quotes disabled. If you have the protection On, you should be safe To fix the sql Injection Change: if (!$mercury->perms->is_guest) &# ... phpbb v. 2.0.12 and earlier authendication bypass Forum:PhpBB Posted: Mon Feb 28, 2005 8:40 am Subject: For comparing Strings use === Zeelock Replies: 15 Views: 46079 Heintz Great Job. Even if it's a common trick and well documented I didn't notice it yet ( ). This error is very common in converting perl scripts into php. For more info: http://www.ph ... MercuryBoard v1.1.2 Forum:All other software Posted: Mon Feb 28, 2005 8:35 am Subject: Blind SQL-Injection Zeelock Replies: 2 Views: 10795 I already have made a template-tutorial for blind injection in MercuryBoard. Anyway this is not a Select, it's a replace. You can change the active item: You have an error in your SQL syntax. ... XSS remote control Forum:Cross-site scripting aka XSS Posted: Fri Feb 25, 2005 8:46 am Subject: XSS remote control Zeelock Replies: 4 Views: 14628 The guy that developed it is Anton Rager. To have more info about there is his paper about: http://xss-proxy.sourceforge.net/Advanced_XSS_Control.txt I found it very interesting, even if the gu ... vBulletin 3.0.6 and prior versions Exec commands in server Forum:Shell commands injection Posted: Thu Feb 24, 2005 10:43 am Subject: vBulletin 3.0.6 and prior versions Exec commands in server Zeelock Replies: 12 Views: 31017 Original Link: http://www.milw0rm.com/id.php?id=832 Made by Pokleyzz Vulns in Phpbb 2.0.11 Forum:PhpBB Posted: Wed Feb 23, 2005 8:51 am Subject: Unink () Zeelock Replies: 10 Views: 19816 Just for deleting files, Quote from Idefense: Remote exploitation of an input validation vulnerability in the phpBB Group's phpBB2 bulletin board system allows attackers to unlink (delete) ar ... Vulns in Phpbb 2.0.11 Forum:PhpBB Posted: Mon Feb 21, 2005 8:53 am Subject: These Exploits Zeelock Replies: 10 Views: 19816 This kind of stuff is good because it gives information about table prefixes. In the errors you can acknowlegdge the full name of the table. There is another issue here: http://www.site.com/ ... Vulns in Phpbb 2.0.11 Forum:PhpBB Posted: Fri Feb 18, 2005 6:20 pm Subject: Magic Quotes Zeelock Replies: 10 Views: 19816 it doesn't seem to be exploitable :-] Yep It deals with the magic quotes and the backslash. From the manual: When magic_quotes are on, all ' (single-quote), " (double quote), (backslash) an ... Phishing with Unicode Tricks Forum:All other security holes Posted: Fri Feb 18, 2005 11:50 am Subject: Phishing with Unicode Tricks Zeelock Replies: 0 Views: 9014 http://www.schneier.com/blog/archives/2005/02/unicode_url_hac_1.html Page 1 of 2 Goto page 1, 2Next All times are GMT Select a forumSecurity Research by waraxe----------------General discussionHow to fixMetasploit relatedHash cracking requests----------------MD5 hashesAll other hashesHash related informationhttp://www.waraxe.us portal----------------SuggestionsCooperation proposalsSecurity bugs and issues in general----------------Newbies cornerSql injectionCross-site scripting aka XSSRemote file inclusionFull path disclosureShell commands injectionPhishing and Social EngineeringAll other security holesVarious software----------------PhpNukePostNukePhpBBXMB forumvBulletin BoardInvision Power Boarde107MamboJoomlaXOOPSM$ WindowsLinux worldAll other softwareCoppermine Photo GalleryProgramming languages----------------PhpMySqlPerlJavaJavascriptC and C++Visual BasicBorland Delphi and PascalPythonHTML and XMLAssemblerReverse engineering----------------Newbies cornerDisassemblingPHP script decode requestsMiscellaneous stuff----------------Future of the ITNanotechnologyFun cornerLinksTry2hack sitesProxy databaseDirect Downloads----------------ToolsTutorialsWordlistsRecycle Bin----------------Removed messagesOutdated posts Powered by phpBB © 2001-2008 phpBB Group

PCWizardHub - Helping you fix, build, and optimize your PC life
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
Page Generation: 0.043 Seconds