Login or Register :: Home :: Search :: Your Account :: Forums :: Waraxe Advisories :: Tools :: October 21, 2026 Menu Home Logout Discussions Forums Members List IRC chat Tools Base64 coder MD5 hash CRC32 checksum ROT13 coder SHA-1 hash URL-decoder Sql Char Encoder Affiliates y3dips ITsec Md5 Cracker User Manuals AlbumNow Content Content Sections FAQ Top Info Feedback Recommend Us Search Journal Your Account User Info Welcome, Anonymous Nickname Password (Register) Membership: Latest: MichaelSnaRe New Today: 0 New Yesterday: 0 Overall: 9144 People Online: Visitors: 419 Members: 0 Total: 419 Full disclosure [0day-rubbish] TRENDnet TV-IP302PI firmware 1.02.38 authenticated NTP server-address OS command injection to root command execution via a shell-form system() call (7.2 High, PR:H) [0day-rubbish] Royal Render 9.1.26b: default-unauthenticated job submission on rrServer TCP 7773 reaches worker-side shell execution as the worker identity, measured root (8.1 High) [0day-rubbish] ProSoft Technology RLX-IFH24E v2.2.44 unsigned firmware upgrade package to root command execution and full account-database overwrite (7.2) [0day-rubbish] Parasoft Continuous Testing Platform 10.7.5-SNAPSHOT anonymous deserialization in the database restore path to JSP command execution as uid=1000 (9.8) [0day-rubbish] Exasol Database 7.1.30 docker-db form: shipped default SYS credential to PYTHON3 UDF os.popen command execution as uid=500(exadefusr), output returned in-band (8.8) [0day-rubbish] Edimax BR-6478AC firmware v2.20 authenticated command injection in the setWAN WAN-configuration handler, root command execution (7.2) [0day-rubbish] Edimax BR-6478AC firmware v2.20 authenticated command injection in the formWlanMP manufacturing-test handler, root command execution (7.2) [ROOTEDCON] Call for Papers 2027 · RootedCON2027 (Madrid) VestaCP <= 0.9.8-26: authenticated config-parser eval sinks ->root RCE (VESTACP-2026-001) [SYSS-2026-080]: dcm4che - Path Traversal (CWE-22) [SYSS-2026-079]: dcm4che - Path Traversal (CWE-22) [SYSS-2026-078]: dcm4che - Path Traversal (CWE-22) [SYSS-2026-077]: dcm4che - Path Traversal (CWE-22) [0day-rubbish] Synametrics Syncrify 6.2 build 1178 authenticated PublicLink chunk-upload path traversal to /etc/cron.d and root command execution (7.5) [0day-rubbish] South River Technologies Titan MFT Server 26.0.0 first-run administrator setup chained to job post-command injection, NT AUTHORITY\SYSTEM (8.1) IT Security and Insecurity Portal www.waraxe.us Forum Index Search found 64 matches setup-x86.exe Forum:General discussion Posted: Thu Dec 18, 2014 3:22 pm Subject: setup-x86.exe sk8er Replies: 1 Views: 15058 you can more especific , for example how ??? cmd SETUP-X86.EXE myProgram.exe ??? i not understand sql privilege escalation problem Forum:Shell commands injection Posted: Thu Dec 18, 2014 3:02 pm Subject: sql privilege escalation problem sk8er Replies: 1 Views: 18360 I sugges : http://resources.infosecinstitute.com/anatomy-of-an-attack-gaining-reverse-shell-from-sql-injection/ Saludos waraxe pls help me in complex blind SQL injection Forum:Sql injection Posted: Thu Dec 18, 2014 2:58 pm Subject: waraxe pls help me in complex blind SQL injection sk8er Replies: 2 Views: 20359 hey men you can see this video for help : https://www.youtube.com/watch?v=_qxvJY6Zyac Exploiting MYSQL Database driven by ASP? Forum:Newbies corner Posted: Sun Oct 06, 2013 6:14 pm Subject: Exploiting MYSQL Database driven by ASP? sk8er Replies: 3 Views: 15641 In this case, you can see : http://nibblesec.org/files/MSAccessSQLi/MSAccessSQLi.html its good. Cracking Windows 7 NTLM Forum:Newbies corner Posted: Sat Oct 05, 2013 8:10 am Subject: Cracking Windows 7 NTLM sk8er Replies: 2 Views: 13752 or you can use : https://crackstation.net/ saludos Bypassing \' MySQL- [help] WAF Evasion Forum:Sql injection Posted: Sat Sep 24, 2011 4:33 am Subject: Bypassing \' MySQL- [help] WAF Evasion sk8er Replies: 4 Views: 17664 one good option when bloking with internal errors, is use inference (BLIND SQL) for example, SQLiX available on : https://www.owasp.org/index.php/Category:OWASP_SQLiX_Project working with these ... Bypassing \' MySQL- [help] WAF Evasion Forum:Sql injection Posted: Thu Sep 22, 2011 6:13 pm Subject: Bypassing \' MySQL- [help] WAF Evasion sk8er Replies: 4 Views: 17664 if you want to avoid a firewall, I recommend you use a encoded string for you query's, is only one idea Help- Extracting Data from Columns Forum:Sql injection Posted: Tue Sep 20, 2011 3:10 pm Subject: Help- Extracting Data from Columns sk8er Replies: 1 Views: 12403 you tried Blind Sql Injection ?, maybe with these tecnique you get a bit information. in other hand you tried reading files and show in the UNION's comand in this site show a one example : ... Access in phpmyadmin Forum:Newbies corner Posted: Sun Sep 18, 2011 6:52 am Subject: Access in phpmyadmin sk8er Replies: 5 Views: 15645 one resource : http://www.openwall.com/john/ it's useful en these cases Access in phpmyadmin Forum:Newbies corner Posted: Sat Sep 17, 2011 10:36 pm Subject: Access in phpmyadmin sk8er Replies: 5 Views: 15645 in the "owned by uid 512" you should find the root user, or scaling the privilegies Someone can find the admin DIrectory Forum:Newbies corner Posted: Sat Sep 17, 2011 5:54 am Subject: Someone can find the admin DIrectory sk8er Replies: 1 Views: 12483 I guess, a Web Scanning for the listed the directories. Which programing language should I choose? Forum:Newbies corner Posted: Thu Sep 15, 2011 5:31 pm Subject: Which programing language should I choose? sk8er Replies: 4 Views: 16922 I guess phyton Exploiting MYSQL Database driven by ASP? Forum:Newbies corner Posted: Thu Sep 15, 2011 5:30 pm Subject: Exploiting MYSQL Database driven by ASP? sk8er Replies: 3 Views: 15641 "Microsoft OLE DB Provider for ODBC Drivers error '80040e14' [Microsoft][ODBC Microsoft Access Driver] Syntax error (missing operator) in query expression 'fldUserLogin='admin ' or '1'='1'/*''. ... Problem SQLi Forum:Sql injection Posted: Thu Sep 15, 2011 5:23 pm Subject: Problem SQLi sk8er Replies: 4 Views: 17595 you should trie with clausule "HAVING" form more results help me !!! sqli hard... Forum:Sql injection Posted: Thu Sep 15, 2011 5:21 pm Subject: help me !!! sqli hard... sk8er Replies: 1 Views: 11115 te sugiero que intentes con BLIND SQL. I tried with the single cuote : http://www.pampling.com/ficha_producto.php?id_producto=%27 Warning: mysql_fetch_assoc(): supplied argument is not a vali ... Page 1 of 5 Goto page 1, 2, 3, 4, 5Next All times are GMT Select a forumSecurity Research by waraxe----------------General discussionHow to fixMetasploit relatedHash cracking requests----------------MD5 hashesAll other hashesHash related informationhttp://www.waraxe.us portal----------------SuggestionsCooperation proposalsSecurity bugs and issues in general----------------Newbies cornerSql injectionCross-site scripting aka XSSRemote file inclusionFull path disclosureShell commands injectionPhishing and Social EngineeringAll other security holesVarious software----------------PhpNukePostNukePhpBBXMB forumvBulletin BoardInvision Power Boarde107MamboJoomlaXOOPSM$ WindowsLinux worldAll other softwareCoppermine Photo GalleryProgramming languages----------------PhpMySqlPerlJavaJavascriptC and C++Visual BasicBorland Delphi and PascalPythonHTML and XMLAssemblerReverse engineering----------------Newbies cornerDisassemblingPHP script decode requestsMiscellaneous stuff----------------Future of the ITNanotechnologyFun cornerLinksTry2hack sitesProxy databaseDirect Downloads----------------ToolsTutorialsWordlistsRecycle Bin----------------Removed messagesOutdated posts Powered by phpBB © 2001-2008 phpBB Group

PCWizardHub - Helping you fix, build, and optimize your PC life
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
Page Generation: 0.044 Seconds