LuManager high-risk SQL injection 0day analysis-vulnerability warning-the black bar safety net

2 0 1 5 year 9 month 7 day Ali cloud shield situational awareness system captures the LuManager system of 0day a gold that confirmed that the vulnerabilities once a hacker can use directly to the highest authority of the login background, upload webshell, the control system database, the operatio...

PHP Utility Belt - Remote Code Execution Vulnerability

Exploit for php platform in category web applications Exploit Title : PHP utility belt Remote Code Execution vulnerability Author : WICS Date : 8/12/2015 Software Link : https://github.com/mboynes/php-utility-belt Overview: PHP utility belt is a set of tools for PHP developers. Install in a...

Zortam Mp3 Media Studio 19.85 - Memory Corruption Exploit

Exploit for windows platform in category dos / poc !/usr/bin/python print """ + Exploit Title: Zortam Mp3 Media Studio 19.85 - Memory Corruption + Exploit Author: ZwX + Date: 05.12.2015 + Vendor : http://www.zortam.com/ + Download Product: http://www.majorgeeks.com/mg/get/zortammp3center,1.html +...

Vulnerability acquisition platform Zerodium publication of various types of software and digital intrusion method price list-vulnerability warning-the black bar safety net

! 1 1 May 1 8, Zerodium（0day brokers published a variety of from a network of criminals to buy and then resell to the needs of the target software and intrusion methods of the price list. Vulnerabilities platform released a price list Zerodium CEO Chaouki bekrar has said: “0day trading the first...

SuperScan 4.1 - Windows Enumeration Hostname/IP/URL Field SEH Overflow Exploit

Exploit for windows platform in category dos / poc !/usr/bin/env python -- coding: utf-8 -- Exploit Title : SuperScan 4.1 Windows Enumeration Hostname/IP/URL Field SEH Overflow Crash PoC Discovery by : Luis Martínez Email : email protected Discovery Date : 18/11/2015 Vendor Homepage :...

Chrome 0day so that millions of Android devices suffer from a remote threat-vulnerability warning-the black bar safety net

! From China qihoo 3 6 0 security researcher Guang Gong in the latest version of the Android platform, Chrome browser found a serious 0day vulnerability, which allows attacker to obtain the victim's cell phone the full administrator access, and the vulnerability of the use of the code to be able ...

PHP Address Book 8.2.5.2 SQL Injection Vulnerability

PHP Address Book version 8.2.5.2 suffers from a remote SQL injection vulnerability. Full Disclosure Exploit Title : PHP Address Book SQL Injection Vulnerability Exploit Author : Rahul Pratap Singh Date : 14/Nov/2015 Home Page Link : http://sourceforge.net/projects/php-addressbook/ Blog Url :...

Sam Spade 1.14 - Browse URL Buffer Overflow PoC

Exploit for windows platform in category dos / poc !/usr/bin/env python Exploit Title : Sam Spade 1.14 Browse URL Buffer Overflow PoC Discovery by : Nipun Jaswal Email : email protected Discovery Date : 14/11/2015 Vendor Homepage : http://samspade.org Software Link :...

foobar2000 1.3.9 - (.pls; .m3u; .m3u8) Local Crash PoC

Exploit for windows platform in category dos / poc Exploit Title: foobar2000 1.3.9 .pls; .m3u; .m3u8 Local Crash PoC Date: 11-15-2015 Exploit Author: Antonio Z. Vendor Homepage: http://www.foobar2000.org/ Software Link:...

YESWIKI 0.2 - Path Traversal Vulnerability

Exploit for php platform in category web applications Exploit Title: YESWIKI 0.2 - Path Traversal template param Date: 2015-11-10 Exploit Author: HaHwul Exploit Author Blog: http://www.codeblack.net Vendor Homepage: http://yeswiki.net Software Link: https://github.com/YesWiki/yeswiki Version:...

Wordpress Ajax Load More Plugin 2.8.1.1 Upload Shell Exploit

This Metasploit module exploits an arbitrary file upload in the WordPress Ajax Load More version 2.8.1.1. It allows you to upload arbitrary php files and get remote code execution. This Metasploit module has been tested successfully on WordPress Ajax Load More 2.8.0 with WordPress 4.1.3 on Ubuntu...

ownCloud: RCE in ci.owncloud.com / ci.owncloud.org

Hi, I know you are more interested in vulnerabilities found in ownCloud Server, but I do would like to inform you on a RCE that can be executed on ci.owncloud.com/org. Vulnerability There is a 0day vulnerability in Jenkins that can be exploited in certain circumstances. The Jenkins instance on...

Well-known Forum app for vBulletin 5 exposure remote command execution vulnerability that may have leaked millions of user data-bug warning-the black bar safety net

! On Monday, it is reported that vBulletin developer site suffered a hacker attack and compromised nearly 4 8 million the vBulletin user's sensitive information. In the event a hacker after the attack, the vBulletin official emergency mandatory require the user to reset the password, they warn th...

Solarwinds Log and Event Manager/Trigeo SIM 6.1.0 - Remote Command Execution Exploit

Exploit for windows platform in category remote exploits Requirements: Python 2.7 netcat Tested on: Ubuntu 14.04 LTS Vulnerable Appliance Version: 6.1.0 Download: http://downloads.solarwinds.com/solarwinds/Release/LEM/SolarWinds-LEM-v6.1.0-Evaluation-VMware.exe Instructions: The exploitlem.py...

vBulletin 5.1.x - PreAuth 0day Remote Code Execution Exploit

Exploit for php platform in category web applications Exploit Title: Vbulletin 5.1.X unserialize 0day preauth RCE exploit Date: Nov 4th, 2015 Exploit Author: hhjj Vendor Homepage: http://www.vbulletin.com/ Version: 5.1.x Tested on: Debian CVE : I did not discover this exploit, leaked from the IoT...

vBulletin 5.1.x - Remote Code Execution

Exploit Title: Vbulletin 5.1.X unserialize 0day preauth RCE exploit Date: Nov 4th, 2015 Exploit Author: hhjj Vendor Homepage: http://www.vbulletin.com/ Version: 5.1.x Tested on: Debian CVE : I did not discover this exploit, leaked from the IoT. Build the object php functions'freeresult' =...

Sam Spade 1.14 - (Crawl website) Buffer OverFlow Exploit

Exploit for windows platform in category local exploits Exploit Title : Sam Spade 1.14 - Buffer OverFlow Date : 10/30/2015 Exploit Author : MandawCoder Contact : email protected Vendor Homepage : http://samspade.org Software Link : http://www.majorgeeks.com/files/details/samspade.html Version :...

vBulletin 5.x.x Remote Code Execution 0day Exploit

sql injection vulnerability, you can upload shell and remote execute Today I am hacked vbulletin.com , You can buy 0day today ; http://www.vbulletin.com/forum/content.php/813-Recovering-a-hacked-vBulletin-Site This is private exploit. You can buy it at http://0day.today...

TCPing 2.1.0 Buffer Overflow Vulnerability

Exploit for multiple platform in category local exploits Vendor: ================================ Spetnik.com Product: ================================= Spetnik TCPing 2.1.0 / tcping.exe circa 2007 TCPing "pings" a server on a specific port using TCP/IP by opening and closing a connection on the...

AIX 7.1 - lquerylv Local Privilege Escalation Vulnerability

Exploit for aix platform in category local exploits !/bin/sh Exploit Title: AIX 7.1 lquerylv privilege escalation Date: 2015.10.30 Exploit Author: S2 Crew Hungary Vendor Homepage: www.ibm.com Software Link: - Version: - Tested on: AIX 7.1 7100-02-03-1334 CVE : CVE-2014-8904 From file writing to...