 |
Menu |
 |
|
Home |
| |
|
Discussions |
| |
|
Tools |
| |
|
Affiliates |
| |
|
Content |
| |
|
Info |
| | |
|
|
|
|
 |
User Info |
 |
Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9144
People Online:
Visitors: 493
Members: 0
Total: 493
|
|
|
|
|
 |
Full disclosure |
 |
CyberDanube Security Research 20251014-0 | Multiple Vulnerabilities in Phoenix Contact QUINT4 UPS
apis.google.com - Insecure redirect via __lu parameter(exploited in the wild)
Urgent Security Vulnerabilities Discovered in Mercku Routers Model M6a
Re: Security Advisory: Multiple High-Severity Vulnerabilities in Suno.com (JWT Leakage, IDOR, DoS)
Security Advisory: Multiple High-Severity Vulnerabilities in Suno.com (JWT Leakage, IDOR, DoS)
[SBA-ADV-20250730-01] CVE-2025-39664: Checkmk Path Traversal
[SBA-ADV-20250724-01] CVE-2025-32919: Checkmk Agent Privilege Escalation via Insecure Temporary Files
CVE-2025-59397 - Open Web Analytics SQL Injection
Re: [FD]Full Disclosure: CVE-2025-31200 & CVE-2025-31201 – 0-Click iMessage Chain ? Secure Enclave Key Theft, Wormable RCE, Crypto Theft
Re: Full Disclosure: CVE-2025-31200 & CVE-2025-31201 – 0-Click iMessage Chain ? Secure Enclave Key Theft, Wormable RCE, Crypto Theft
Re: Defense in depth -- the Microsoft way (part 93): SRP/SAFERwhitelisting goes black on Windows 11
Re: [FD]: "Glass Cage" – Zero-Click iMessage ? Persistent iOS Compromise + Bricking (CVE-2025-24085 / 24201, CNVD-2025-07885)
Re: [FD]Full Disclosure: CVE-2025-31200 & CVE-2025-31201 – 0-Click iMessage Chain ? Secure Enclave Key Theft, Wormable RCE, Crypto Theft
Samtools v1.22.1 Uncontrolled Memory Allocation from Large BED Intervals Causes Denial-of-Service in Samtools/HTSlib
Samtools v1.22.1 Improper Handling of Excessive Histogram Bin Counts in Samtools Coverage Leads to Stack Overflow
|
|
|
|
|
|
 |
|
 |
 |
|
 |
IT Security and Insecurity Portal |
|
Posted: Mon Jun 16, 2008 4:42 pm |
|
|
Final |
Beginner |

 |
|
Joined: Jun 05, 2008 |
Posts: 3 |
|
|
|
 |
 |
 |
|
Thanks for your help, mixman, but I can't get it to work. Where exactly do I have to put the code when editing the templates? I have created a new template which hasn't been used in any news yet, but when I try the second way you described and hit 'Save Changes', I get a blank screen - And that happens every time I try to edit it. The only way to undo my actions is to use the backwards-button of my browser.
Any step-by-step instructions, anyone?  |
|
|
|
|
Posted: Mon Jul 07, 2008 10:46 am |
|
|
Dr_Death |
Beginner |

 |
|
Joined: Jul 07, 2008 |
Posts: 1 |
|
|
|
 |
 |
 |
|
thanks waraxe, exploit have bug it hange with users that have space (firstname lastname) ...etc |
|
|
|
|
Posted: Thu Aug 07, 2008 8:37 pm |
|
|
harasym |
Regular user |

 |
|
Joined: Aug 07, 2008 |
Posts: 6 |
|
|
|
 |
 |
 |
|
I have a problem when trying to exploit cutenews. Here it is:
C:\Program Files\PHP>php cuteuser.php
Validating target URL
PHP Fatal error: Call to undefined function curl_init() in C:\Program Files\PHP
\cuteuser.php on line 347
C:\Program Files\PHP> |
|
|
|
|
Posted: Thu Aug 07, 2008 9:12 pm |
|
|
oniric |
Advanced user |

 |
|
Joined: Jul 24, 2008 |
Posts: 65 |
|
|
|
 |
 |
 |
|
You have to enable curl extension from you php.ini. Decomment the related line. |
|
|
|
|
Posted: Fri Aug 08, 2008 10:25 am |
|
|
harasym |
Regular user |

 |
|
Joined: Aug 07, 2008 |
Posts: 6 |
|
|
|
 |
 |
 |
|
I used search in php.ini file but i don't found curl line  |
|
|
|
|
Posted: Fri Aug 08, 2008 11:10 am |
|
|
oniric |
Advanced user |

 |
|
Joined: Jul 24, 2008 |
Posts: 65 |
|
|
|
 |
 |
 |
|
Look in you php ext dir for the file php_curl.dll ( I assume you use Windows ). If it's there then add to your php.ini the line
extension=php_curl.dll
The extension is included in php for windows as far as I know. |
|
|
|
|
Posted: Fri Aug 08, 2008 11:54 am |
|
|
harasym |
Regular user |

 |
|
Joined: Aug 07, 2008 |
Posts: 6 |
|
|
|
 |
 |
 |
|
oniric wrote: | Look in you php ext dir for the file php_curl.dll ( I assume you use Windows ). If it's there then add to your php.ini the line
extension=php_curl.dll
The extension is included in php for windows as far as I know. |
Yes? I'm using windows, but i haven't php_curl.dll file in my php dir. Here is a link to php installer that i've installed:
_http://ua2.php.net/get/php-5.2.6-Win32.zip/from/this/mirror |
|
|
|
|
Posted: Fri Aug 08, 2008 12:31 pm |
|
|
oniric |
Advanced user |

 |
|
Joined: Jul 24, 2008 |
Posts: 65 |
|
|
|
 |
 |
 |
|
Isn't it in the ext dir as I said? |
|
|
|
|
Posted: Fri Aug 08, 2008 2:32 pm |
|
|
harasym |
Regular user |

 |
|
Joined: Aug 07, 2008 |
Posts: 6 |
|
|
|
 |
 |
 |
|
|
|
|
|
Posted: Fri Aug 08, 2008 2:48 pm |
|
|
oniric |
Advanced user |

 |
|
Joined: Jul 24, 2008 |
Posts: 65 |
|
|
|
 |
 |
 |
|
I just download the same zip file and it's there  |
|
|
|
|
Posted: Sat Jan 10, 2009 2:32 pm |
|
|
Pauwlas |
Beginner |

 |
|
Joined: Jan 10, 2009 |
Posts: 2 |
|
|
|
 |
 |
 |
|
I don't understand why this script don't work for me, just write this error:
Fatal error: Call to undefined function curl_init() in C:\xampp\htdocs\hack\acc.php on line 347
Can someone help my? |
|
|
|
|
Posted: Sat Jan 10, 2009 2:56 pm |
|
|
waraxe |
Site admin |

 |
|
Joined: May 11, 2004 |
Posts: 2407 |
Location: Estonia, Tartu |
|
|
 |
 |
 |
|
|
|
|
|
Posted: Mon Feb 09, 2009 11:13 pm |
|
|
NYDAz |
Advanced user |

 |
|
Joined: Jan 26, 2009 |
Posts: 109 |
Location: Valley of the Kings |
|
|
 |
 |
 |
|
On 3 different cutenews powered sites I'm getting the same md5 hash :
d24725eda8256a3f7c2561d5677e9abd
Waraxe, what can it be ?
EDIT :
It's my password !
md5("winstonz") = d24725eda8256a3f7c2561d5677e9abd
LATER EDIT:
I was using this exploit http://www.milw0rm.com/exploits/4779
 |
|
_________________ A person who never made a mistake never tried anything new. |
|
|
|
www.waraxe.us Forum Index -> All other software
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
All times are GMT
Page 2 of 2
Goto page Previous1, 2
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|