Login or Register :: Home :: Search :: Your Account :: Forums :: Waraxe Advisories :: Tools :: August 21, 2026 Menu Home Logout Discussions Forums Members List IRC chat Tools Base64 coder MD5 hash CRC32 checksum ROT13 coder SHA-1 hash URL-decoder Sql Char Encoder Affiliates y3dips ITsec Md5 Cracker User Manuals AlbumNow Content Content Sections FAQ Top Info Feedback Recommend Us Search Journal Your Account User Info Welcome, Anonymous Nickname Password (Register) Membership: Latest: MichaelSnaRe New Today: 0 New Yesterday: 0 Overall: 9144 People Online: Visitors: 299 Members: 0 Total: 299 Full disclosure [0day-rubbish] VMS 6.48.809 Authenticated command injection to root RCE (8.8) [0day-rubbish] ONE Reporter 13.1 Authenticated RCE / privilege escalation via CommandExecutor (8.8) [0day-rubbish] Gemini 7.3.0 Authenticated SQL injection to xp_cmdshell RCE (8.8) [0day-rubbish] RoboTask 11.0.5.1229 Unauthenticated REST API remote task execution (9.8) [0day-rubbish] ActiveFax Server 10.70 Unauthenticated LPD Ghostscript %pipe% SYSTEM RCE (9.8) [0day-rubbish] Tornado 2.11.3 Unauthenticated arbitrary file write to root RCE (storeTo=file: to cron) (9.8) [0day-rubbish] Datalore On-Premises 2026.2.3 Unauthenticated RCE via InteractiveReport access-mapping flaw (9.8) APPLE-SA-08-18-2026-1 Safari 26.6.1 Cudy WR3000: Hard-coded JWT Secret to Root Command Injection Security advisory: Pre-authentication RCE (SQL injection) in XPressEntry 3.7.7454 (Telaeris Inc) Security advisory: Authenticated RCE (SQL injection) in Scrutinizer 19.7.0 (Plixer) Security advisory: Pre-authentication SYSTEM RCE (Zip-Slip plugin planting) in Output Messenger Server 2.0.x (>= 2.0.63) (Srimax Software (Output Technology)) Security advisory: Pre-authentication RCE (arbitrary file write) in RapidDeploy 5.2.2 (MidVision) Security advisory: Authenticated RCE (second-order SQL injection) in Lansweeper 12.2.1.0 (web reports 12.2.1.6) (Lansweeper) Security advisory: Authenticated RCE (command injection) in Kerio Connect 10.0.9 Patch 2 (build 10320) (GFI Software) IT Security and Insecurity Portal www.waraxe.us Forum Index -> PhpBB -> Any working exploits for phpBB 2.0.14? Goto page Previous1, 2 View previous topic :: View next topic Posted: Thu May 12, 2005 1:58 pm lone_wolf Regular user Joined: Feb 20, 2005 Posts: 9 shai-tan wrote: Thats how I found this site too same advisory too. He had done it wrong on purpose. Only 25 Characters of the users MD5 came out of it. Yes, my thought exactly. But, that didn't help much - that exploit have started a line of highest risk exploits that made good old PhpBB one of the most unsecure boards at the moment shai-tan wrote: Warez and Ares are P2Ps they have chat rooms on them for heaps of different subjects there are tonnes of "hacking" ones on it. Ugh. I've heard much of that kind of places but never stumbled upon it myself Hopefully. Posted: Fri May 13, 2005 2:18 am jearthree Regular user Joined: May 10, 2005 Posts: 6 Does anyone know if castlecop released the exploit? Re Posted: Wed Jun 01, 2005 10:36 pm mister Beginner Joined: Jun 02, 2005 Posts: 4 Does anyone know if castlecop released the exploit? Posted: Thu Jun 02, 2005 4:20 pm Injector Active user Joined: Dec 29, 2004 Posts: 49 This sites not bad but abit too open for skiddies though, like showing them some proof of concept instead of just showing them the bug. Now all they have to do is stick those characters to the URL. sad....sad....sad...... Then the worst part is when they ask question like this ones Is there any exploit for this software? Posted: Sun Jun 05, 2005 1:40 pm dfenzz Beginner Joined: Jun 05, 2005 Posts: 1 *INTRODUCTION phpBB is a popular bulletin board system based on PHP. There is a lack of filtering for the BBCODE URL. Initially discovered: encapsulating a specially crafted URL, a user caught clicking on the resulting hyperlinks can have their registry entries modified without their knowledge [huge hazard!], among other things. Originally successfully tested with "javascript://", but subsequent discovery showed that "applet://", "about://", "activex://", "chrome://", and "script://" may be able to get thru as well with the URL enclosure or not (of course, browser dependant). It is recommended that these types of URIs not be allowed to render at all in the phpBB system as the possible user computer hijacking can be gargantuan. There is enough hijacking in spyware products (ref: http://castlecops.com/f67-Hijackthis_Spyware_Viruses_Worms_Trojans_Oh_My.html ). *PROOF OF CONCEPT This POC uses the URL encapsulation: Alert box with "CouCou" Create registry entry: HKCU\QQQQQ\qq = "CouCou" Modify opener page: Paul -> P.A.U.L If you click on the second link, be sure to find and remove the "QQQQQ" entry in your Windows Registry. However, we recommend you do not click expect for developer testing and patching. Any working exploits for phpBB 2.0.14? www.waraxe.us Forum Index -> PhpBB You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum All times are GMT Page 2 of 2 Goto page Previous1, 2 All Posts1 Day7 Days2 Weeks1 Month3 Months6 Months1 YearOldest FirstNewest First Select a forumSecurity Research by waraxe----------------General discussionHow to fixMetasploit relatedHash cracking requests----------------MD5 hashesAll other hashesHash related informationhttp://www.waraxe.us portal----------------SuggestionsCooperation proposalsSecurity bugs and issues in general----------------Newbies cornerSql injectionCross-site scripting aka XSSRemote file inclusionFull path disclosureShell commands injectionPhishing and Social EngineeringAll other security holesVarious software----------------PhpNukePostNukePhpBBXMB forumvBulletin BoardInvision Power Boarde107MamboJoomlaXOOPSM$ WindowsLinux worldAll other softwareCoppermine Photo GalleryProgramming languages----------------PhpMySqlPerlJavaJavascriptC and C++Visual BasicBorland Delphi and PascalPythonHTML and XMLAssemblerReverse engineering----------------Newbies cornerDisassemblingPHP script decode requestsMiscellaneous stuff----------------Future of the ITNanotechnologyFun cornerLinksTry2hack sitesProxy databaseDirect Downloads----------------ToolsTutorialsWordlistsRecycle Bin----------------Removed messagesOutdated posts Powered by phpBB © 2001-2008 phpBB Group

PCWizardHub - Helping you fix, build, and optimize your PC life
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
Page Generation: 0.042 Seconds