facebook - Grabbing permanent access token which Never expires of your accounts and pages .

The bug is that we can generate access token of our account which have all the permissions that normally a facebook user have that is to read , write , modify ,etc . Note : Permissions are depend on app by Which facebook access token is grabbed . Note: Mainly you can grab only your temporary acce...

Atom CMS Shell Upload / SQL Injection / Bypass Vulnerabilities

Atom CMS suffers from remote shell upload and remote SQL injection vulnerabilities. Exploit Title : Atom CMS SQL Injection and file upload vulnerability Author : Jagriti Sahu Vendor : https://github.com/thedigicraft/Atom.CMS Date : 07/07/2014 Discovered at : IndiShell Lab Love to : Surbhi, Mradul...

Winamp 5.572 - Local Crash PoC (0day)

No description provided by source. !\C:\Perl\bin In The Name Of Allah The Mercifull Title : WiNamP V5.572 0day suffer from local CRASH PoC Tested : Windows xp sp3 AUThoR: R3d-D3v!L Credits to : XP10HACKER XP10.ME print qq WiNamP V5.572 0day SWF local CRASH PoC Credits : XP10.ME XP10HACKER Author ...

G Data TotalCare 2011 0day Local Kernel Exploit

No description provided by source. / Exploit Title: G Data TotalCare 2011 0day Local Kernel Exploit Date: 2010-11-08 Author: Nikita Tarakanov CISS Research Team Software Link: http://www.gdata.de/ Version: up to date, version 21.1.0.5, MiniIcpt.sys version 1.0.8.9 Tested on: Win XP SP3 CVE :...

Invision Power Board <= 3.3.4 unserialize Regex Bypass

No description provided by source. ?php / So this is the patch that sanitizes, static public function safeUnserialize $serialized // unserialize will return false for object declared with small cap o // as well as if there is any ws between O and : if isstring $serialized && strpos $serialized, \...

LiquidXML Studio 2010 ActiveX Remote 0day

No description provided by source. html object classid='clsid:E68E401C-7DB0-4F3A-88E1-159882468A79' id='target'//object script var sofa = ..\..\..\..\..\..\..\..\..\Documents and Settings\All Users\Start Menu\Programs\Startup\thedoctorisin.hta; var king = Oh noz, Look what DrIDE...

MyBB Profile Albums Plugin 0.9 (albums.php, album parameter) - SQL Injection

No description provided by source. Exploit Title: Profile Albums MyBB plugin SQL Injection 0day Google Dork: inurl:albums.php intext:powered by Mybb Date: 14.10.2012 Exploit Author: Zixem Software Link: http://mods.mybb.com/view/profilealbums Version: 0.9 Tested on: Linux...

vBShout Persistent XSS

No description provided by source. Exploit Title: vBShout persistent XSS 0day Google Dork: DragonByte Technologies Ltd vbshout Date: 21/3/2012 9:00 PM EST Author: ToiL Software Link: http://www.dragonbyte-tech.com/ Version: all Tested on: all CVE : XSS Greeting from Team Odyessy. Today we will...

New-CMS - Multiple Vulnerability

No description provided by source. Multiple Vulnerability in New-CMS Vendor SW: New-CMS Version: 1.08 but possible all versions Vendor URL: www.new-cms.org Tested on: Ubuntu Server 9.10 Category: Webapps/0day Date: 17 Feb 2010 Author: Alberto fulgur Fontanella Author URL: ictsec.wordpress.com...

Joomla Core <= 1.5.x com_component - DoS (0day)

No description provided by source. !/bin/bash Copyright C 2009 Emanuele Gentili [email protected] This program is released under the terms of the GNU General Public License GPL, which is distributed with this software in the file COPYING. The GPL specifies the terms under which users may copy a...

Drupal <= 6.16 and 5.21 - DoS (0day)

No description provided by source. !/bin/bash Copyright C 2009 Emanuele Gentili [email protected] This program is released under the terms of the GNU General Public License GPL, which is distributed with this software in the file COPYING. The GPL specifies the terms under which users may copy a...

Joomla Component com_pandafminigames SQL Injection Vulnerabilities

No description provided by source. Exploit Title: Joomla Component compandafminigames SQL Injection Vulnerabilities Date: 16.04.2010 Author: Valentin Category: webapps/0day Version: unknown Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: |...

UltraISO 9.3.6.2750 Local Buffer Overflow Exploit (0day)

No description provided by source. / Ultraiso local buffer overflow exploit0day This 0day is kickass from fl0 fl0w a.k.a Stefan! Run calc.exe or bind port and hack ,fuck antisecurity. Thanks to George Nicolaou one of the best there is! / includestdio.h includestring.h includegetopt.h void...

ZipWrangler 1.20 (.zip) SEH 0day exploit

No description provided by source. !/usr/bin/perl Title: ZipWrangler 1.20 .zip SEH 0day exploit Author: TecR0c & Sud0 Date: April 24th, 2010 Corelan Reference: http://www.corelan.be:8800/advisories.php?id=CORELAN-10-031 Download: http://www.softpedia.com/get/Compression-tools/ZipWrangler.shtml...

Freefloat FTP Server Buffer Overflow Vulnerability 0day

No description provided by source. Exploit Title: Freefloat FTP Server Buffer Overflow Vulnerability Date: 12/05/2010 Author: 0v3r Software Link: http://www.freefloat.com/software/freefloatftpserver.zip Tested on: Windows XP SP3 EN CVE: N/A !/usr/bin/python import socket import sys def usage: pri...

I-net Multi User Email Script SQLi Vulnerability

No description provided by source. Name : I-net Multi User Email Script SQLi Vulnerability Date : june, 27 2010 Critical Level : HIGH Vendor Url : http://www.i-netsolution.com/ Google Dork: inurl:/jobsearchengine/ Author : Sid3^effects aKa HaRi shellc99atyahoo.com special thanks to : r0073r...

AJ Article Persistent XSS Vulnerability

No description provided by source. 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 vendor URL :http://www.ajsquare.com/ Google Dork :Powered By: AJ Square Inc Author : Sid3^effects aKa HaRi special thanks to : r0073r...

Mereo 1.9.2 - Remote HTTP Server Denial of Service Vulnerability

No description provided by source. !/usr/bin/python Title: Mereo v1.9.2 Remote HTTP Server DoS 0day By: CwG GeNiuS Email: cwggenius at gmail dot com Tested: XPSP3 Download: http://www.ohloh.net/p/mereo import socket, sys payload =GET /; payload+=X 10000; payload+= HTTP/1.1\r\n\r\n; count = 1; try...

MuPDF 1.3 - Stack-based Buffer Overflow in xps_parse_color()

No description provided by source. ============================================================= 0day - MuPDF Stack-based Buffer Overflow in xpsparsecolor ============================================================= Date of discovery: 2013-01-26 Software Links: http://www.mupdf.com/ ;...

Novell File Reporter Agent XML Parsing Remote Code Execution Vulnerability (0day)

No description provided by source. wwww.abysssec.com Novell File Reporter Agent XML Parsing Remote Code Execution Vulnerability 0day CVE-2012-4959 @abysssec well just one more of our 0day got published after 2 year here is info :...