(0Day) Oracle Data Quality DscXB onloadstatechange Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Data Quality. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Joomla Simple Photo Gallery - Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla Simple Photo Gallery - Arbitrary File Upload Google Dork: inurl:comsimplephotogallery Date: 10.03.2015 Exploit Author: CrashBandicot @DosPerl My Github: github.com/CCrashBandicot Vendor Homepage: https://www.apptha.com/...

PhpMoAdmin vulnerability analysis report-vulnerability warning-the black bar safety net

phpMoAdmin is a convenient online MongoDB management tool that can be used to create, delete and modify databases and indexes, view and data search tool that provides database startup time and memory statistics, support for JSON format data import and export the php application. Recently named...

The use of third-party software 0day vulnerability to load and execute the Trojan analysis-vulnerability warning-the black bar safety net

0x00 Preface The recent Tencent anti-virus laboratory to capture a number of targeted attacks of the high Trojan horse,the Trojan uses the recent hot current events topic as bait,for special populations do ongoing targeted attacks,and currently Tencent computer Butler has been able to accurately...

Seagate Business NAS <= 2014.00319 - Pre-Authentication Remote Code Execution (0day)

Some Seagate Business NAS devices are vulnerable to command execution via a local file include vulnerability hidden in the language parameter of the CodeIgniter session cookie. The vulnerability manifests in the way the language files are included in the code on the login page, and hence is open ...

phpMoAdmin - MongoDB unauthenticated remote execution 0day authomatic exploit

This is an unauthenticated remote execution 0day exploit coded by sp1nlock phpMoAdmin is a web interface for mongodb databases, is like phpmyadmin but for this nosql bigdata oriented database named MongoDB. Usage Info ./phpmohack.py url cmd ex: ./phpmohack.py http://test.com/path/ 'ls -l' This is...

aspcms each version vulnerability 0day collection-vulnerability warning-the black bar safety net

admin/content/About/AspCmsAboutEdit. asp? id=1 9 and 1=2 union select 1,2,3,4,5,loginname,7,8,9,password,1 1,1 2,1 3,1 4,1 5,1 6,1 7,1 8,1 9,2 0,2 1,2 2,2 3,2 4 from aspcmsuser where userid=1 ------------------------ Powered by AspCms2. 0 Not verify the permissions, and the presence of injection...

Mail.com Email Remote Authentication bypass 0day Exploit

This 0day Vulnerability can reset any email on mail.com service. Material holder may access any email box. This is private exploit. You can buy it at https://0day.today...

Wordpress plugin Fancybox-for-WordPress 3.0.2 Stored XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress plugin Fancybox-for-WordPress 3.0.2 Stored XSS Exploit Author: NULLpOint7r Date: 2015-02-11 Contact me: email protected Version: 3.0.2 Download link:...

Wordpress Video Gallery 2.7.0 SQL Injection Vulnerability

Photo Gallery Plugin for WordPress contains a flaw that allows a remote attacker to execute arbitrary PHP code. This flaw exists because the photo-gallery\photo-gallery.php script allows access to filemanager\UploadHandler.php. The post method in UploadHandler.php Exploit Title : Wordpress Video...

Gold Partner: security researchers discovered Flash 0day vulnerability with BEDEP virus there is a close Association-vulnerability warning-the black bar safety net

2 0 1 5 year at the beginning of the Adobe Flash sequential burst more0dayvulnerability, and has not been repaired when it waslarge-scale malicious usethe. Recently, Trend Micro security researchers in Adobe 0day vulnerabilities in the tracking survey, found BEDEP series virus with the Adobe Flas...

CVE-2015-0071

Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka “Internet Explorer ASLR Bypass Vulnerability.” Recent assessments: gwillcox-r7 at November 23, 2020 6:02pm UTC reported: Reported as exploited in the wild as part o...

MooPlayer 1.3.0 - m3u SEH Buffer Overflow PoC

Exploit for windows platform in category local exploits !/usr/bin/env python Exploit Title: MooPlayer 1.3.0 'm3u' SEH Buffer Overflow POC Date Discovered: 09-02-2015 Exploit Author: Samandeep Singh SaMaN - @samanL33T Vulnerable Software: Moo player 1.3.0 Software Link: https://mooplayer.jaleco.co...

Wordpress Theme Evo Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress Theme Evo Arbitrary File Upload Vulnerability Source: https://github.com/UpThemes/Evo-Theme Author: terrorist Email: email protected Team: GHC - Georgian Hacking Community Category: webapps/php Google dork:...

Wordpress Theme Holding Pattern Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress Theme Holding Pattern Arbitrary File Upload Vulnerability Source: https://github.com/heyjoeb/fenix/tree/master/wp-content/themes/holdingpattern Author: terrorist Email: email protected Team: GHC - Georgian Hacking...

Wordpress Theme Micro Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress Theme Micro Arbitrary File Upload Vulnerability Source: https://github.com/UpThemes/Micro-Theme Author: terrorist Email: email protected Team: GHC - Georgian Hacking Community Category: webapps/php Google dork:...

Wordpress Theme Gallery pro Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress Theme Gallery pro Arbitrary File Upload Vulnerability Source: https://github.com/UpThemes/Gallery-Pro-Theme Author: terrorist Email: email protected Team: GHC - Georgian Hacking Community Category: webapps/php Google...

Adobe Flash CVE-2 0 1 5-0 3 1 3 new 0day-vulnerability warning-the black bar safety net

In the Adobe Flash Player newly discovered a high risk vulnerability, hackers can take advantage of its large-scale forced-by downloaddrive-by downloadattacks, also known as the“website hanging horse attack”, when you're viewing contains a malicious code of a web page or to access the AD, it will...

Third Adobe Flash 0Day Under Attack in HanJuan Exploit Kit

The little-known HanJuan exploit kit is delivering attacks targeting the most recent Adobe Flash Player zero-day vulnerability. Adobe has yet to produce a patch for the flaw, which researchers at Trustwave said is a use-after-free vulnerability. The flaw is the third to hit Flash in the last two...

0day third bomb: yet another Flash critical vulnerability-exposure-vulnerability warning-the black bar safety net

! Recently, a third serious Flash 0day vulnerabilities show up. The vulnerability affects Windows, Linux, Mac system Adobe Flash Player 16.0.0.296 and all earlier versions, can lead to attacker control of the target system. Vulnerability This is the last few weeks Adobe user the third facing 0day...