634 matches found
Linksys WRT110 Remote Command Execution Vulnerability
Exploit for hardware platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core...
ClipBucket 2.6 Multi Exploits(Arbitrary File Uploader and XSS)
Exploit for php platform in category web applications This is private exploit. You can buy it at https://0day.today...
Facebook Account Reset Hijack Trick
Title : Hack Any Facebook Account Without User Name And Password + Discovered By : Prince Cyber-Boss + Site : Cyber-Boss.Net | blog.Cyber-Boss.Net + Facebook Page : http://fb.com/cyberboss.net + Geetz : YasH , Code Injector, Arafat, Kunal :p With A Bit Social Eng. And A Smart Hack You Can Access...
FlashChat File Upload Vulnerability
Exploit Title: FlashChat File Upload Vulnerability Google Dork: intitle:FlashChat v6.0.8 Date: 02.10.2013 Exploit Author: x-hayben21 Vendor Homepage: www.punish3r.com Software Link: http://www.tufat.com/script2.htm Version: v6.0.8, v6.0.2, v6.0.4, v6.0.5, v6.0.6, v6.0.7, Tested on: Windows, PHP 5...
KingView 6.53 - Insecure ActiveX Control (SuperGrid)
Exploit for windows platform in category local exploits KingView Insecure ActiveX Control Proof of Concept - SuperGrid.ocx This proof of concept will copy any arbritrary file from one location to a second location. A malicious user may be able to use this to copy a file from an attacker controlle...
VoltEdit CMS SQL Injection / Shell Upload Vulnerabilities
VoltEdit CMS suffers from administrative login bypass due to remote SQL injection and allows for PHP shells to be uploaded. Note that this finding houses site-specific data. ========================================================================================== VoltEdit CMS SQL Injection Admin...
WordPress Trafficanalyzer Plugin XSS Vulnerability
WordPress Trafficanalyzer Plugin is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the...
Omnistar Affiliate Software - XSS Vulnerability
Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...
FunGamez Remote File Upload Vulnerability
Exploit for php platform in category web applications Source FunGamez/admin/modules/game.php .......... 135 And your shell will be available here: http://localhost/FunGamez/data/flash/shell.php 0day.today 2018-03-12...
Windu CMS 2.2 Cross Site Request Forgery Vulnerability
Windu CMS version 2.2 suffers from a cross site request forgery vulnerability. Windu CMS 2.2 CSRF Add Admin Exploit form method="POST" action="http://localhost/winducms/a...
Simple File Manager v.024 - Login Bypass Vulnerability
Exploit for php platform in category web applications Exploit Title: Simple File Manager v.024 Login Bypass Vulnerability Date Published: 2013/6/17 Exploit Author: Chako Software Link: http://onedotoh.sourceforge.net/ Version: v.024 Doesn't work on v.025 Description: ===================== A...
Lead Capture Page System Multiple Vulnerabilties
Exploit for php platform in category web applications Lead Capture Page System Multiple Vulnerabilties ============================================================== .:. Author : AtT4CKxT3rR0r1ST .:. Contact : email protected , email protected .:. Home : http://www.iphobos.com/blog/ .:. Script :...
Haraj Script Stored XSS and File Upload Vulnerability
You Can Upload file And make come Xss code ! at Once ,, in famous arabic scripth php Haraj script . ============================= 1: first enter to site of our target , and signup in the target site . 2: go to HTTP://TARGET.COM/home/add/ or HTTP://TARGET.COM/homeadd.html or or...
Joomla Jnews 8.0.1 Cross Site Scripting Vulnerability
Joomla Jnews version 8.0.1 suffers from an Open Flash-Chart cross site scripting vulnerability. Exploit Title: Joomla comjnews Open Flash-Chart XSS Release Date: 14/05/2013 Author: Deepankar Arora And Rafay Baloch Blog: http://rafayhackingarticles.net Vendor: www.joobi.co Versions Affected:...
Forumfree, Forumcommunity and Blogfree Filter Bypass
http://youtube.com/v/D3wbITV15zM This is private exploit. You can buy it at https://0day.today...
Joomla Component com_shohada Local File Inclusion Vulnerability
Exploit for php platform in category web applications Joomla Component comshohada Local File Inclusion ============================================================== .:. Author : AtT4CKxT3rR0r1ST email protected .:. Dork : inurl:"comshohada" === Exploit ===...
Ajax Availability Calendar 3.X.X Multiple Vulnerabilties
Exploit for php platform in category web applications Ajax Availability Calendar 3.X.X Multiple Vulnerabilties ============================================================== .:. Author : AtT4CKxT3rR0r1ST email protected .:. Script : http://www.ajaxavailabilitycalendar.com/ .:. Dork : intitle:"Aja...
Craigslist Gold - SQL Injection Vulnerability
Exploit for php platform in category web applications http://exemple/classifieds2/?view=ads&catid=-1+union+select+concatemail,0x3a,code+from+clfads-- 0day.today 2018-01-01...
phpVMS Virtual Airline Administration - SQL Injection Vulnerability
phpVMS is the most popular, free, virtual airline software, with support for various ACARS applications kACARS, FSACARS, XAcars, FS Flight Keeper, and FSPassengers, AJAX-driven administration panel, complete with financial reports, schedule management and various other features designed for...