Waraxe IT Security Portal
Login or Register
October 15, 2026
Menu
Home
Logout
Discussions
Forums
Members List
IRC chat
Tools
Base64 coder
MD5 hash
CRC32 checksum
ROT13 coder
SHA-1 hash
URL-decoder
Sql Char Encoder
Affiliates
y3dips ITsec
Md5 Cracker
User Manuals
AlbumNow
Content
Content
Sections
FAQ
Top
Info
Feedback
Recommend Us
Search
Journal
Your Account
User Info
Welcome, Anonymous
Nickname
Password
(Register)

Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9144

People Online:
Visitors: 881
Members: 0
Total: 881
Full disclosure
[0day-rubbish] StreamSets Transformer 3.17.0 auth-mode none fallback and un-sandboxed ScalaDTransform execution to container root (8.1 primary)
[0day-rubbish] RCDevs WebADM 2.4.14 authenticated log viewer sid command injection to webadm uid 999 code execution (7.2)
[0day-rubbish] Maian Cart 3.8 addBanners unrestricted banner upload to PHP webshell and administrator command execution (7.2 primary, PR:H)
[0day-rubbish] IPConfigure Orchid VMS 26.3.0 authenticated DNF repository GPG-key property command injection to root (7.2)
[0day-rubbish] Circutor LineEds 24.11.14-r0 unauthenticated pwrstudio events.xml shellExecute command injection (9.8)
[0day-rubbish] Asustor ADM 3.5.9.RWM1 (AS602T) music.cgi act=live stored-filename command injection reaching system() (8.8 primary, PR:L)
[0day-rubbish] Advantech WebAccess Node 9.2.3 unauthenticated CrystalRpt.aspx file upload and path traversal to code execution in w3wp.exe (9.8)
SEC Consult Research 20261001 :: Arbitrary Email sender spoofing in Apple iCloud mail
SEC Consult SA-20260924-0 :: Multiple Vulnerabilities in Paessler PRTG Network Monitor #CVE-2026-4637 #CVE-2026-4638
[NotCVE-2026-0019] game-music-emu through 0.6.5 VGM Command Interpreter Missing Operand Length Check Allows Heap Out-of-Bounds Read
[NotCVE-2026-0018] game-music-emu (libgme) through 0.6.5 Unbounded GYM Command Loop Allows Heap Out-of-Bounds Read
[NotCVE-2026-0017] game-music-emu (libgme) 0.6.5 and Earlier AY Loader NULL Pointer Dereference Allows Denial of Service
[NotCVE-2026-0016] game-music-emu VGM Command Interpreter Unvalidated 0xE0 PCM Seek Offset Allows Out-of-Bounds Read and Denial of Service
APPLE-SA-09-28-2026-3 macOS Sequoia 15.8.1
APPLE-SA-09-28-2026-2 macOS Tahoe 26.7.1
Log in Register Forum FAQ Memberlist Search
IT Security and Insecurity Portal

www.waraxe.us Forum Index
Search found 42 matches
IPB backdoor
PostForum:Invision Power Board Posted: Thu Sep 28, 2006 4:07 am Subject: IPB backdoor
subzero
Replies: 0
Views: 9248




New video tutorial added.

video by Darksh3ll.

more : http://www.kisobox.com/area52
hackpassword
PostForum:PhpBB Posted: Thu Sep 28, 2006 3:29 am Subject: hackpassword
subzero
Replies: 1
Views: 9781




New video tutorial added.

video by Darksh3ll.

more : http://www.kisobox.com/area52
phpbb 2.0.21 xss admin
PostForum:PhpBB Posted: Mon Jul 17, 2006 12:29 pm Subject: phpbb 2.0.21 xss admin
subzero
Replies: 0
Views: 9708




phpBB 2.0.21 XSS in administration
**********************************

//-- By Blwood


#End here

Credit goes to exploit author.

Video tutorial have been host here
http://kisobox.com/are ...
Tutorial how to use exploits!!!
PostForum:Perl Posted: Sun Jul 16, 2006 10:27 pm Subject: Tutorial how to use exploits!!!
subzero
Replies: 24
Views: 105880




take a look at
http://kisobox.com/area52.php might give u extra info
vbulletin <=3.0.6 misc.php remote execution (perl)
PostForum:All other software Posted: Sun Feb 26, 2006 4:37 am Subject: vbulletin <=3.0.6 misc.php remote execution (perl)
subzero
Replies: 6
Views: 24314




go to any open folder >> view >> folder option and disable by clicking the extension disable.

change save file to .pl .
i guess your previous file was saved as vb306.pl.txt.
correct ...
l
PostForum:PhpBB Posted: Sun Feb 12, 2006 1:52 am Subject: l
subzero
Replies: 25
Views: 57753




thats his problem to make real or fake money for hacking. Wink
point is exploits with greater version number are spread in the wild,tell me why you go for this later version? Laughing
phpBB <= 2.0.18 Remote XSS Cookie Disclosure Exploit
PostForum:PhpBB Posted: Sat Feb 11, 2006 11:24 am Subject: phpBB <= 2.0.18 Remote XSS Cookie Disclosure Exploit
subzero
Replies: 1
Views: 11396




credit : Everyone

poc :
http://kisobox.com/exploits/phpbb.2.0.18.xss+cookies.stealer.txt

video tutorial
http://kisobox.com/area52/phpbb2.0.18/

Wink
l
PostForum:PhpBB Posted: Sat Feb 11, 2006 6:56 am Subject: l
subzero
Replies: 25
Views: 57753




btw what money are you talking about...

http://kisobox.com/exploits/phpbb.2.0.17.xss+cookies.stealer.txt

well have fun Laughing
phpBB <= 2.0.19 XSS Remote Cookie Disclosure Exploit
PostForum:PhpBB Posted: Sat Feb 11, 2006 6:08 am Subject: phpBB <= 2.0.19 XSS Remote Cookie Disclosure Exploit
subzero
Replies: 19
Views: 61389




credit to everyone that found this bug


poc
http://kisobox.com/exploits/phpbb.2.0.19.xss+cookies.stealer.txt

brief video tutorial about it.

http://kisobox.com/vtu.php or http://kisobox.com/ ...
vbulletin <=3.0.6 misc.php remote execution (perl)
PostForum:All other software Posted: Tue Sep 20, 2005 3:27 pm Subject: vbulletin <=3.0.6 misc.php remote execution (perl)
subzero
Replies: 6
Views: 24314




#!/usr/bin/perl

# vBulletin <= 3.0.6 Add templates remote execute exploit (perl)
# suBzero@kisobox.com
# Reference: http://www.securityfocus.com/bid/12622/info
#

use IO::Socket ...
phpBB 2.0.17 and most likely below
PostForum:PhpBB Posted: Sun Aug 21, 2005 3:57 pm Subject: phpBB 2.0.17 and most likely below
subzero
Replies: 63
Views: 118691




Laughing so we have 3-4 vulnerable now and not forgetting from the bug finder himself. Wink

so this vulnerable affect most of the cms out there.
you will able to do more such as adding admin user the ...
phpBB 2.0.17 and most likely below
PostForum:PhpBB Posted: Sun Aug 21, 2005 3:04 pm Subject: phpBB 2.0.17 and most likely below
subzero
Replies: 63
Views: 118691





how about in other forum or bulettin board *_^ .. we should give a try Razz

nice idea.there are lots of others cms (content manager ) that use bbcode in their post .
you can try popular and widely ...
phpBB 2.0.17 and most likely below
PostForum:PhpBB Posted: Sun Aug 21, 2005 6:32 am Subject: phpBB 2.0.17 and most likely below
subzero
Replies: 63
Views: 118691




mm accesing script to add user as admin in /admin/ folder would ask admin to re-authenticate him/herself

hard to access /admin/ folder now.
but you can delete specific posting then,
whenever an ...
phpBB 2.0.17 and most likely below
PostForum:PhpBB Posted: Sat Aug 20, 2005 7:14 am Subject: phpBB 2.0.17 and most likely below
subzero
Replies: 63
Views: 118691




nice discussion over here.
first of all,no need to fight or flaming just because of small thing.

releasing poc for it,for those dont believe it. try it out

make yourself a folder .. like darkc ...
IPB cookies disclosure
PostForum:PhpBB Posted: Sun Jul 17, 2005 10:14 am Subject: IPB cookies disclosure
subzero
Replies: 2
Views: 10439




#!/usr/bin/perl -w

##################################################################
# This one actually works :) Just paste the outputted cookie into
# your request header using livehtt ...
Page 1 of 3 Goto page 1, 2, 3Next
All times are GMT


Powered by phpBB © 2001-2008 phpBB Group



PCWizardHub - Helping you fix, build, and optimize your PC life
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
Page Generation: 0.046 Seconds