Rapid PHP Editor IDE 14.1 Cross Site Request Forgery Vulnerability

Exploit for php platform in category web applications + Credits: John Page aka hyp3rlinx Vendor: ====================== www.rapidphpeditor.com Product: =============================== Rapid PHP Editor IDE rapidphp2016.exe v14.1 Rapid PHP editor is a faster and more powerful PHP editor for Windows...

Memcached 1.4.33 - PoC (1)

Exploit for linux platform in category dos / poc Source: http://paper.seebug.org/95/ import struct import socket import sys MEMCACHEDREQUESTMAGIC = "\x80" OPCODEPREPENDQ = "\x1a" keylen = struct.pack"!H",0xfa extralen = "\x00" datatype = "\x00" vbucket = "\x00\x00" bodylen = struct.pack"!I",0...

PizzaInn Beta 3 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title :----------------- : PizzaInn Restaurant Scripti Beta v3 - categories-exec.php - Stored XSS Author :------------------------ : Nassim Asrir Author Company :------------------------ : HenceForth Author Email...

Allwinner 3.4 Legacy Kernel - Local Privilege Escalation (Metasploit)

Exploit for Android platform in category local exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require "msf/core" class MetasploitModule "Allwinner 3.4 Legacy Kernel Local Privilege Escalation", "Description" ...

Disk Pulse Enterprise 9.0.34 - Buffer Overflow Exploit

Exploit for windows platform in category remote exploits !/usr/bin/python print "Disk Pulse Enterprise 9.0.34 Buffer Overflow Exploit" print "Author: Tulpa // tulpaattulpa-securitydotcom" Author website: www.tulpa-security.com Author twitter: @tulpa-security.com Exploit will land you NT...

ShoreTel Connect ONSITE - Blind SQL Injection

Exploit for php platform in category web applications Exploit Title: ShoreTel Connect ONSITE Blind SQL Injection Vulnerability Date: 19-09-2016 Software Link: https://www.shoretel.com/resource-center/shoretel-connect-onsite-overview Exploit Author: Iraklis Mathiopoulos Contact:...

Airmail 3.0.2 - Cross-Site Scripting

Exploit for macOS platform in category web applications Airmail is a popular email client on iOS and OS X. I found a vulnerability in airmail of the latest version which could cause a file:// xss and arbitrary file read. Author: redrain, email protected Date: 2016-08-15 Version: 3.0.2 and earlier...

NUUO NVRmini 2 3.0.8 - Arbitrary File Deletion

Exploit for php platform in category web applications NUUO Arbitrary File Deletion Vulnerability Vendor: NUUO Inc. Product web page: http://www.nuuo.com Affected version: ================================================================== Tested on: GNU/Linux 3.0.8 armv7l GNU/Linux 2.6.31.8 armv5t...

Drupal Module CODER 2.5 - Remote Command Execution (Metasploit)

Exploit for php platform in category web applications This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Drupal CODER Module Remote Command Execution', 'Description' = %q This module exploits a...

NewsP Free News Script 1.4.7 - User Credentials Disclosure

Exploit for php platform in category web applications Exploit Title: Free News Script User Password Download File Date: 2016-07-18 Exploit Author: Meisam Monsef email protected or email protected Vendor Homepage: http://www.newsp.eu/index.php?pt=ns Version: All Version Download Link :...

Adobe Flash Player 22.0.0.192 - DefineSprite Memory Corruption

Exploit for multiple platform in category dos / poc Application: Adobe Flash Player Platforms: Windows,OSX Versions: 22.0.0.192 and earlier Author: Sébastien Morin of COSIG Website: https://cosig.gouv.qc.ca/en/advisory/ Twitter: @COSIG Date: July 12, 2016 CVE-2016-4175 COSIG-2016-22 1 Introductio...

Adobe Acrobat Reader DC 15.016.20045 - Invalid Font '.ttf' Memory Corruption (6)

Exploit for multiple platform in category dos / poc Application: Adobe Acrobat Reader DC Platforms: Windows,OSX Versions: 15.016.20045 and earlier Author: Sébastien Morin of COSIG Website: https://cosig.gouv.qc.ca/en/advisory/ Twitter: @COSIG Date: July 12, 2016 CVE: CVE-2016-4206 COSIG-2016-25 1...

Alibaba Clone B2B Script - Arbitrary File Disclosure

Exploit for php platform in category web applications Exploit Title: Alibaba Clone B2B Script File Read Vulnerability Date: 2016-06-22 Exploit Author: Meisam Monsef email protected or email protected Vendor Homepage: http://alibaba-clone.com/ Version: All Versions Tested on: CentOS and Windows...

Airia - Cross-Site Request Forgery (Add Content)

Exploit for php platform in category web applications document.forms.csrfpoc.submit; 0day.today 2018-02-19...

Microsoft Windows Media Center - '.MCL' File Processing Remote Code Execution (MS16-059)

Exploit for windows platform in category remote exploits Exploit Title: Microsoft Windows Media Center .MCL File Processing Remote Code Execution Vulnerability MS16-059 Date: May 11th, 2016 Exploit Author: Eduardo Braun Prado Vendor Homepage : http://www.microsoft.com Version: All prior to May...

Vesta Control Panel 0.9.8-15 - Persistent Cross-Site Scripting

Exploit for php platform in category web applications Exploit Title :Vesta Control Panel " http://victimserve...

Rips Scanner 0.5 - (code.php) Local File Inclusion

Exploit for php platform in category web applications ================================================================================ Rips Scanner 0.5 - code.php Local File Inclusion ================================================================================ Vendor Homepage:...

PHP Address Book 8.2.5.2 SQL Injection Vulnerability

PHP Address Book version 8.2.5.2 suffers from a remote SQL injection vulnerability. Full Disclosure Exploit Title : PHP Address Book SQL Injection Vulnerability Exploit Author : Rahul Pratap Singh Date : 14/Nov/2015 Home Page Link : http://sourceforge.net/projects/php-addressbook/ Blog Url :...

Sam Spade 1.14 - Browse URL Buffer Overflow PoC

Exploit for windows platform in category dos / poc !/usr/bin/env python Exploit Title : Sam Spade 1.14 Browse URL Buffer Overflow PoC Discovery by : Nipun Jaswal Email : email protected Discovery Date : 14/11/2015 Vendor Homepage : http://samspade.org Software Link :...

Solarwinds Log and Event Manager/Trigeo SIM 6.1.0 - Remote Command Execution Exploit

Exploit for windows platform in category remote exploits Requirements: Python 2.7 netcat Tested on: Ubuntu 14.04 LTS Vulnerable Appliance Version: 6.1.0 Download: http://downloads.solarwinds.com/solarwinds/Release/LEM/SolarWinds-LEM-v6.1.0-Evaluation-VMware.exe Instructions: The exploitlem.py...