WordPress Ajax Store Locator 1.2 Arbitrary File Download

WordPress Ajax Store Locator plugin version 1.2 suffers from an arbitrary file download vulnerability. Exploit Title : Wordpress Ajax Store Locator = 1.2 Arbitrary File Download Exploit Author : Claudio Viviani Vendor Homepage : http://codecanyon.net/item/ajax-store-locator-wordpress/5293356...

Advantech WebAccess 7.2 Stack-Based Buffer Overflow Vulnerability

Advantech WebAccess version 7.2 is vulnerable to a stack-based buffer overflow attack, which can be exploited by remote attackers to execute arbitrary code, by providing a malicious html file with specific parameters for an ActiveX component. Advantech WebAccess Stack-based Buffer Overflow 1...

Android browser versions 4.4 content security policy bypass vulnerability

Android browser versions prior to 4.4 suffer from a content security policy bypass vulnerability. Hello. I hope this is the correct place to report this bug. I've found a Content Security Policy bypass similar to the same and related to the same origin policy bypass in this CVE. This is a separat...

WordPress ShortCode Plugin 1.1 - Local File Inclusion Vulnerability

Exploit for php platform in category web applications Title : WordPress ShortCode Plugin - Local File Inclusion Vulnerability Severity : High+/Critical Reporters : Mehdi Karout & Christian Galeone Google Dork : inurl:wp/wp-content/force-download.php Plugin Version : 1.1 Plugin Name : Download...

ISPConfig 3.0.54p1 - Authenticated Admin Local root Vulnerability

Exploit for linux platform in category web applications While logged in as admin user: 1 add a shell user 2 under option set gid to ispconfig 3 log in as that user 4 edit /usr/local/ispconfig/interface/lib/lang/en.lng with system$GET'cmd'; 5 browse to: http://server:8080/index.php?cmd=echo...

.NET Runtime Optimization Service Privilege Escalation Exploit 0day

No description provided by source. / Exploit Title: .NET Runtime Optimization Service Privilege Escalation Date: 03-07-2011 Author: XenoMuta [email protected] Version: v2.0.50727 Tested on: Windows XP sp3, 2003 R2, 7 CVE : n/a | |/ / / |/ / / / | / / / / /|/ / / / / / / / / / / / / // / / /...

ZipWrangler 1.20 (.zip) SEH 0day exploit

No description provided by source. !/usr/bin/perl Title: ZipWrangler 1.20 .zip SEH 0day exploit Author: TecR0c & Sud0 Date: April 24th, 2010 Corelan Reference: http://www.corelan.be:8800/advisories.php?id=CORELAN-10-031 Download: http://www.softpedia.com/get/Compression-tools/ZipWrangler.shtml...

Ananda Image Gallery SQL Vulnerability

No description provided by source. Exploit Title:Ananda Image Gallery SQL Vulnerable Vendor url:http://www.softwebsnepal.com/ Version:n/a Price:159$ Author: L0rd CrusAd3r aka VSN [email protected] Published: 2010-06-17 Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue, S1ayer,d3c0d3r,KD and to...

MyAuth3 - Blind SQL Injection

No description provided by source. Exploit Title: MyAuth3 Blind SQL Injection / Root Shell Access 0day exploit Google Dork: allinurl:1881/?console=panel Date: 09/06/2011 Author: Marcio Almeida marcioatalligatorteamdot org | @marcioalm Version: 3.0 Tested on: Linux EDB-Note: apparently no true...

OpenNetAdmin 13.03.01 - Remote Code Execution

No description provided by source. Exploit Title: OpenNetAdmin Remote Code Execution Date: 03/04/13 Exploit Author: Mandat0ry aka Matthew Bryant Vendor Homepage: http://opennetadmin.com/ Software Link: http://opennetadmin.com/download.html Version: 13.03.01 Tested on: Ubuntu CVE : No CVE exists -...

TOSHIBA e-Studio 232/233/282/283 - Change Admin Password CSRF Vulnerability

No description provided by source. Exploit Title: TOSHIBA e-Studio 232/233/282/283 Change Admin Password CSRF Vulnerability Date: 02.10.2013 Exploit Author: Hubert Gradek PL Affected version: firmware T377SY0EXXX Tested on: TOSHIBA e-Studio 232 T377SY0E354 / 233 T377SY0E331 CVE : No CVE exists -...

Adobe Flash and Reader - 0day Exploit PoC (from the wild)

No description provided by source. Exploit-DB Note - Live POC originally found at http://qoop.org/security/poc/cve-2010-1297/ File is malicious! Taken from the wild! Beware! To decrypt the file: openssl aes-256-cbc -d -a -in adobe-0day-2010-1297.tar.enc -out adobe-0day-2010-1297.tar Password is e...

Advanced File Vault(eSellerateControl350.dll) Activex Heap Spray 0day

No description provided by source. // Exploit Title: Advanced File VaulteSellerateControl350.dll Activex Heap Spray 0-day // Date: 08-08-2010 // Author: ThE g0bL!N // Version: 0-day // Tested on: xp sp2 html script language=JavaScript defer var sCode =...

Wordpress MU 0day Remote Code Execution Exploit

Remote PHP and Shell code execution on any version of Wordpress MU. See dork: "powered by wordpress mu". 0day exploit never been released. This exploit will re-write the file wp-config.php and add a shell to it eval$GET'HIDDEN'; you can replace this to anything you want in the exploit code just...

Wordpress Work-The-Flow Plugin 1.2.1 - Arbitrary File Upload

Exploit for php platform in category web applications Author: nopesled Date: 24/04/14 Software: https://wordpress.org/plugins/work-the-flow-file-upload/ Company: http://wtf-fu.com/ Version: 1.2.1 Tested on: Windows 7 Vulnerability: Unrestricted File Upload Submit an image file via the wtf upload...

PCMAN FTP 2.07 ABOR Command - Buffer Overflow Exploit

Exploit for windows platform in category remote exploits Exploit Title: PCMAN FTP 2.07 ABOR Command Buffer Overflow Date: Jan 25,2014 Exploit Author: Mahmod Mahajna Mahy Version: 2.07 Tested on: Windows 7 sp1 x64 english Email: email protected import socket as s from sys import argv iflenargv != ...

Growing market of zero-day vulnerability exploits pose real threat to Cyber Security

NSS Labs issued the report titled "The Known Unknowns" to explain the dynamics behind the market of zero-day exploits. Last week I discussed about the necessity to define a model for "cyber conflict" to qualify the principal issues related to the use of cyber tools and cyber weapons in an...

Zimbra 2009-2013 - Local File Inclusion

Exploit Title: Zimbra 0day exploit / Privilegie escalation via LFI Date: 06 Dec 2013 Exploit Author: rubina119 Contact Email : rubina119atgmail.com Vendor Homepage: http://www.zimbra.com/ Version: 2009, 2010, 2011, 2012 and early 2013 versions are afected, Tested on: Centosx, Ubuntu. CVE : No CVE...

TOSHIBA e-Studio 232/233/282/283 Change Admin Password CSRF

Exploit Title: TOSHIBA e-Studio 232/233/282/283 Change Admin Password CSRF Vulnerability Date: 02.10.2013r. Exploit Author: Hubert Grądek PL Affected version: firmware T377SY0EXXX Tested on: TOSHIBA e-Studio 232 T377SY0E354 / 233 T377SY0E331 CVE : No CVE exists - 0day exploit This is private...

Wordpress NOSpamPTI Plugin - Blind SQL Injection Vulnerability

Exploit for php platform in category web applications NOSpamPTI Wordpress plugin Blind SQL Injection Vendor product description NOSpamPTI eliminates the spam in your comment box so strong and free, developed from the idea of Nando Vieira http://bit.ly/d38gB8, but some themes do not support change...