3623 matches found
Analysis of Cisco 0day Vulnerability CVE-2 0 1 6-6 4 1 5-vulnerability warning-the black bar safety net
! Clipboard Image. png We yesterdaypublished an articlea simple introduction to the equation of“BENIGNCERTAIN”the use of the tool and the vulnerability CVE-2 0 1 6-6 4 1 5 in this article, we will take everyone to understand this loophole in the end is what the situation. Events overview This...
Disk Pulse Enterprise 9.0.34 - Buffer Overflow Exploit
Exploit for windows platform in category remote exploits !/usr/bin/python print "Disk Pulse Enterprise 9.0.34 Buffer Overflow Exploit" print "Author: Tulpa // tulpaattulpa-securitydotcom" Author website: www.tulpa-security.com Author twitter: @tulpa-security.com Exploit will land you NT...
Joomla com_videoflow SQL injection Vulnerability
Exploit for php platform in category web applications Exploit Title : Joomla comvideoflow SQL injection Vulnerability Exploit Author : xBADGIRL21 Dork : inurl:index.php?option=comvideoflow Vendor Homepage : http://www.fidsoft.com version : 1.1.3 - 1.1.5 Tested on: BACK BOX skype:xbadgirl21 Date:...
WordPress Directory Themes Arbitrary Shell Upload Vulnerability
Exploit for php platform in category web applications Exploit Title : Wordpress Theme Directory Arbitrary Shell Upload Vulnerability Exploit Author : xBADGIRL21 Dork : inurl:/wp-content/themes/Directory/ Vendor Homepage : https://templatic.com/ version : 2.0.16 - 2.0.14 & maybe high or lower Test...
Simpla Admin Single-adsID SQL Injection / Shell Upload Vulnerabilities
Exploit for php platform in category web applications Exploit Title : Simpla Admin Single-adsID SQL Injection / Shell Upload Exploit Author : xBADGIRL21 Dork : intext:connexion "single-ads.php?ID=" or inurl:.single-ads.php?ID= Software link :...
Imrokraft Solutions CMS Admin Page ByPass Vulnerability
Exploit for php platform in category web applications Exploit Title : Imrokraft Solutions CMS Admin Page ByPass Exploit Author : xBADGIRL21 Dork : intext:"Designed by Imrokraft Solutions" or intext:"Powered By : Imrokraft Solutions" Vendor : http://www.imrokraft.com/ Tested on: Windows...
DWebPro 8.4.2 - Multiple Vulnerabilities
Exploit for windows platform in category remote exploits Exploit Title: DWebPro 8.4.2 Remote Binary Execution Date: 01/10/2016 Exploit Author: Tulpa Contact: email protected Author website: www.tulpa-security.com Author twitter: @tulpasecurity Vendor Homepage: http://www.dwebpro.com/ Software Lin...
ShoreTel Connect ONSITE - Blind SQL Injection
Exploit for php platform in category web applications Exploit Title: ShoreTel Connect ONSITE Blind SQL Injection Vulnerability Date: 19-09-2016 Software Link: https://www.shoretel.com/resource-center/shoretel-connect-onsite-overview Exploit Author: Iraklis Mathiopoulos Contact:...
PHP 5.0.0 - 'tidy_parse_file()' Buffer Overflow
Exploit for php platform in category local exploits 0day.today 2018-01-01...
Ocean CMS V6. 2 8 command execution 0DAY-vulnerability warning-the black bar safety net
t00ls a friend fuzz out of a 0day, but the analysis does not come out what's the problem, I analyze a bit. I is how to track this 0day? In fact, as long as the chase area parameters of the treated place. After a character is an illegal judgment, call echoSearchPage function area parameters after...
Finecms 2.0.1 background GETSHELL 0DAY-vulnerability warning-the black bar safety net
FineCMS have a cache function, and when the Wordpress like, there is a cache function and cache file name is not random and the suffix is php, it leads to a can use background cache function getshell it. Below is the Payload PHP | 1 2 3 4 5 6 7 8 9 1 0 1 1 1 2 1 3 1 4 1 5 1 6 1 7 1 8 | POST /inde...
MySQL <= 5.7.15 remote Root code execution vulnerability
http://legalhackers.com - dawid at legalhackers.com - Release date: 12.09.2016 I. VULNERABILITY ------------------------- MySQL = 5.7.15 Remote Root Code Execution / Privilege Escalation 0day 5.6.33 5.5.52 MySQL clones are also affected, including: MariaDB PerconaDB II. BACKGROUND...
Airmail 3.0.2 - Cross-Site Scripting
Exploit for macOS platform in category web applications Airmail is a popular email client on iOS and OS X. I found a vulnerability in airmail of the latest version which could cause a file:// xss and arbitrary file read. Author: redrain, email protected Date: 2016-08-15 Version: 3.0.2 and earlier...
Zabbix 2.0 < 3.0.3 - SQL Injection
Exploit for php platform in category web applications Exploit Title: 2.0 Zabbix 3.0.4 SQL Injection Python PoC Data: 20-08-2016 Software Link: www.zabbix.com Exploit Author: Unknownhttp://seclists.org/fulldisclosure/2016/Aug/82 Version: Zabbix 2.0-3.0.x3.0.4 PoC Author: Zzzians Contact:...
Belkin F9K1122v1 1.00.30 Buffer Overflow / Cross Site Request Forgery
import socket, sys , base64, struct, string, urllib from getopt import getopt as GetOpt, GetoptError from uuid import getnode as getmac import SimpleHTTPServer, SocketServer TIMELINE ''' 3/16/2016 - First Submission to Belkin no response 5/3/2016 - Second Submission to Belkin no response 6/4/2016...
Belkin F9K1122v1 1.00.30 - Buffer Overflow (via Cross-Site Request Forgery)
Belkin F9K1122v1 1.00.30 - Buffer Overflow via Cross-Site Request Forgery import socket, sys , base64, struct, string, urllib from getopt import getopt as GetOpt, GetoptError from uuid import getnode as getmac import SimpleHTTPServer, SocketServer TIMELINE ''' 3/16/2016 - First Submission to Belk...
Belkin F9K1122v1 1.00.30 - Buffer Overflow (via Cross-Site Request Forgery)
Exploit for hardware platform in category web applications import socket, sys , base64, struct, string, urllib from getopt import getopt as GetOpt, GetoptError from uuid import getnode as getmac import SimpleHTTPServer, SocketServer TIMELINE ''' 3/16/2016 - First Submission to Belkin no response...
PHP 5.0.0 - 'imap_mail()' Local Denial of Service
Exploit for php platform in category dos / poc 0day.today 2018-03-28...
Ocean CMS to the latest version V6. 2 8 command execution 0DAY-vulnerability warning-the black bar safety net
t00ls a friend fuzz out of a 0day, but the analysis does not come out what's the problem, I analyze a bit. I is how to track this 0day? In fact, as long as the chase area parameters of the treated place. After a character is an illegal judgment, call echoSearchPagefunction area parameters after t...