Login or Register :: Home :: Search :: Your Account :: Forums :: Waraxe Advisories :: Tools :: August 19, 2026 Menu Home Logout Discussions Forums Members List IRC chat Tools Base64 coder MD5 hash CRC32 checksum ROT13 coder SHA-1 hash URL-decoder Sql Char Encoder Affiliates y3dips ITsec Md5 Cracker User Manuals AlbumNow Content Content Sections FAQ Top Info Feedback Recommend Us Search Journal Your Account User Info Welcome, Anonymous Nickname Password (Register) Membership: Latest: MichaelSnaRe New Today: 0 New Yesterday: 0 Overall: 9144 People Online: Visitors: 284 Members: 0 Total: 284 Full disclosure Security advisory: Pre-authentication RCE (SQL injection) in XPressEntry 3.7.7454 (Telaeris Inc) Security advisory: Authenticated RCE (SQL injection) in Scrutinizer 19.7.0 (Plixer) Security advisory: Pre-authentication SYSTEM RCE (Zip-Slip plugin planting) in Output Messenger Server 2.0.x (>= 2.0.63) (Srimax Software (Output Technology)) Security advisory: Pre-authentication RCE (arbitrary file write) in RapidDeploy 5.2.2 (MidVision) Security advisory: Authenticated RCE (second-order SQL injection) in Lansweeper 12.2.1.0 (web reports 12.2.1.6) (Lansweeper) Security advisory: Authenticated RCE (command injection) in Kerio Connect 10.0.9 Patch 2 (build 10320) (GFI Software) Security advisory: Pre-authentication RCE (default credentials + path traversal) in PulseNET Enterprise 6.0.3 (build 6975) (GE Vernova) Security advisory: Pre-authentication RCE (BinaryFormatter deserialization) in Cinegy Cinegize 2026-02-05 installer (Cinegy GmbH) Security advisory: Pre-authentication RCE in Wyn Enterprise 9.1.00145.0 (Mescius (GrapeCity)) Security advisory: Pre-authentication RCE (default credentials) in ObjectDB 2.9.5 server mode (ObjectDB Software) Security advisory: Pre-authentication RCE in nanoDLP stable build #10729 (Nano3Dtech) Security advisory: Pre-authentication SYSTEM RCE in MAPS SCADA 4.0.5.5 (Adroit Technologies) Security advisory: Pre-authentication RCE in Confluent Platform (ksqlDB) 7.9.1-ce (Confluent, Inc.) Security advisory: Pre-authentication SYSTEM RCE in iMonnit Express 4.0.5.5 (Monnit / iMonnit) Security advisory: Pre-authentication RCE in Ontotext GraphDB 11.4.3 Free edition (Ontotext / Graphwise) IT Security and Insecurity Portal www.waraxe.us Forum Index Search found 64 matches setup-x86.exe Forum:General discussion Posted: Thu Dec 18, 2014 3:22 pm Subject: setup-x86.exe sk8er Replies: 1 Views: 14730 you can more especific , for example how ??? cmd SETUP-X86.EXE myProgram.exe ??? i not understand sql privilege escalation problem Forum:Shell commands injection Posted: Thu Dec 18, 2014 3:02 pm Subject: sql privilege escalation problem sk8er Replies: 1 Views: 17949 I sugges : http://resources.infosecinstitute.com/anatomy-of-an-attack-gaining-reverse-shell-from-sql-injection/ Saludos waraxe pls help me in complex blind SQL injection Forum:Sql injection Posted: Thu Dec 18, 2014 2:58 pm Subject: waraxe pls help me in complex blind SQL injection sk8er Replies: 2 Views: 19895 hey men you can see this video for help : https://www.youtube.com/watch?v=_qxvJY6Zyac Exploiting MYSQL Database driven by ASP? Forum:Newbies corner Posted: Sun Oct 06, 2013 6:14 pm Subject: Exploiting MYSQL Database driven by ASP? sk8er Replies: 3 Views: 15212 In this case, you can see : http://nibblesec.org/files/MSAccessSQLi/MSAccessSQLi.html its good. Cracking Windows 7 NTLM Forum:Newbies corner Posted: Sat Oct 05, 2013 8:10 am Subject: Cracking Windows 7 NTLM sk8er Replies: 2 Views: 13391 or you can use : https://crackstation.net/ saludos Bypassing \' MySQL- [help] WAF Evasion Forum:Sql injection Posted: Sat Sep 24, 2011 4:33 am Subject: Bypassing \' MySQL- [help] WAF Evasion sk8er Replies: 4 Views: 17210 one good option when bloking with internal errors, is use inference (BLIND SQL) for example, SQLiX available on : https://www.owasp.org/index.php/Category:OWASP_SQLiX_Project working with these ... Bypassing \' MySQL- [help] WAF Evasion Forum:Sql injection Posted: Thu Sep 22, 2011 6:13 pm Subject: Bypassing \' MySQL- [help] WAF Evasion sk8er Replies: 4 Views: 17210 if you want to avoid a firewall, I recommend you use a encoded string for you query's, is only one idea Help- Extracting Data from Columns Forum:Sql injection Posted: Tue Sep 20, 2011 3:10 pm Subject: Help- Extracting Data from Columns sk8er Replies: 1 Views: 12146 you tried Blind Sql Injection ?, maybe with these tecnique you get a bit information. in other hand you tried reading files and show in the UNION's comand in this site show a one example : ... Access in phpmyadmin Forum:Newbies corner Posted: Sun Sep 18, 2011 6:52 am Subject: Access in phpmyadmin sk8er Replies: 5 Views: 15205 one resource : http://www.openwall.com/john/ it's useful en these cases Access in phpmyadmin Forum:Newbies corner Posted: Sat Sep 17, 2011 10:36 pm Subject: Access in phpmyadmin sk8er Replies: 5 Views: 15205 in the "owned by uid 512" you should find the root user, or scaling the privilegies Someone can find the admin DIrectory Forum:Newbies corner Posted: Sat Sep 17, 2011 5:54 am Subject: Someone can find the admin DIrectory sk8er Replies: 1 Views: 12210 I guess, a Web Scanning for the listed the directories. Which programing language should I choose? Forum:Newbies corner Posted: Thu Sep 15, 2011 5:31 pm Subject: Which programing language should I choose? sk8er Replies: 4 Views: 16415 I guess phyton Exploiting MYSQL Database driven by ASP? Forum:Newbies corner Posted: Thu Sep 15, 2011 5:30 pm Subject: Exploiting MYSQL Database driven by ASP? sk8er Replies: 3 Views: 15212 "Microsoft OLE DB Provider for ODBC Drivers error '80040e14' [Microsoft][ODBC Microsoft Access Driver] Syntax error (missing operator) in query expression 'fldUserLogin='admin ' or '1'='1'/*''. ... Problem SQLi Forum:Sql injection Posted: Thu Sep 15, 2011 5:23 pm Subject: Problem SQLi sk8er Replies: 4 Views: 17137 you should trie with clausule "HAVING" form more results help me !!! sqli hard... Forum:Sql injection Posted: Thu Sep 15, 2011 5:21 pm Subject: help me !!! sqli hard... sk8er Replies: 1 Views: 10875 te sugiero que intentes con BLIND SQL. I tried with the single cuote : http://www.pampling.com/ficha_producto.php?id_producto=%27 Warning: mysql_fetch_assoc(): supplied argument is not a vali ... Page 1 of 5 Goto page 1, 2, 3, 4, 5Next All times are GMT Select a forumSecurity Research by waraxe----------------General discussionHow to fixMetasploit relatedHash cracking requests----------------MD5 hashesAll other hashesHash related informationhttp://www.waraxe.us portal----------------SuggestionsCooperation proposalsSecurity bugs and issues in general----------------Newbies cornerSql injectionCross-site scripting aka XSSRemote file inclusionFull path disclosureShell commands injectionPhishing and Social EngineeringAll other security holesVarious software----------------PhpNukePostNukePhpBBXMB forumvBulletin BoardInvision Power Boarde107MamboJoomlaXOOPSM$ WindowsLinux worldAll other softwareCoppermine Photo GalleryProgramming languages----------------PhpMySqlPerlJavaJavascriptC and C++Visual BasicBorland Delphi and PascalPythonHTML and XMLAssemblerReverse engineering----------------Newbies cornerDisassemblingPHP script decode requestsMiscellaneous stuff----------------Future of the ITNanotechnologyFun cornerLinksTry2hack sitesProxy databaseDirect Downloads----------------ToolsTutorialsWordlistsRecycle Bin----------------Removed messagesOutdated posts Powered by phpBB © 2001-2008 phpBB Group

PCWizardHub - Helping you fix, build, and optimize your PC life
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
Page Generation: 0.035 Seconds