Joomla JE Gallery 1.3 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component JE Gallery v1.3 - SQL Injection Google Dork: inurl:index.php?option=comjegallery Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy:...

SonicDICOM PACS 2.3.2 CSRF Add Admin Exploit

Exploit for windows platform in category web applications SonicDICOM PACS 2.3.2 CSRF Add Admin Exploit Vendor: JIUN Corporation Product web page: https://www.sonicdicom.com Affected version: 2.3.2 and 2.3.1 Summary: SonicDICOM is PACS software that combines the capabilities of DICOM Server with w...

Joomla com_joominaflileselling 2.2 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title : Joomla comjoominaflileselling 2.2 SQL injection Vulnerability Exploit Author : xBADGIRL21 Dork : inurl:index.php?option=comjoominaflileselling Vendor Homepage : http://www.joomina.ir by amirrezatehrani Link :...

Collabo - Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Exploit Title: Collabo - TeamBusiness Collaboration Network - Arbitrary File Download Google Dork: N/A Date: 10.02.2017 Vendor Homepage: http://321-internet.com/ Software Buy:...

Posnic 1.03 Unauthorized Password Recovery Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------- + Posnic 1.03 forgetpass.php Unauthorized Password Recovery ------------------------------------------------------------------------ Discovered by Juri Gianni -...

macOS 10.11.* / 10.12.* Kernel Code Execution - SIP bypass 0day Exploit

Privilege Escalation Exploit for OS macOS from root to kernel. Usage Info sudo ./exploit This is private exploit. You can buy it at https://0day.today...

POSNIC 1.03 Shell Upload Exploit

POSNIC version 1.03 suffers from a remote shell upload vulnerability. 0 echo "Return Code: " . $FILES"file""error" . ""; else $upload = $FILES"file""name"; $type = $FILES"file""type"; if fileexists"upload/" . $FILES"file""name" unlink$upload; $name = $FILES"file""name";...

My Photo Gallery 1.0 SQL Injection / Unauthorized Login Vulnerabilities

Exploit for php platform in category web applications ------------------------------------------------------------------------- + My Photo Gallery 1.0 SQL Injection / Unauthorized Login ------------------------------------------------------------------------ Discovered by Juri Gianni - Turin,Ital...

Windows SMBv3 remote denial of service 0day vulnerabilities-vulnerability warning-the black bar safety net

GMT + 2 on 2 September, the foreign technology website Github exposure Windows SMBv3 the presence of remote attacks 0day vulnerability. According to the disclosure of the vulnerability the authentication code, The POC, the attacker can force the affected system to blue screen crash, this...

Ghostscript 9.20 - Filename Command Execution Vulnerability

Exploit for windows platform in category local exploits + + Credits: John Page AKA hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/GHOSTSCRIPT-FILENAME-COMMAND-EXECUTION.txt + ISR: ApparitionSec + Vendor: =============== ghostscript.com Product:...

Google Chrome - HTMLKeygenElement::shadowSelect() Type Confusion Exploit

Exploit for multiple platform in category dos / poc var range = document.caretRangeFromPoint50, 50; var shadowtreecontainer = range.commonAncestorContainer; shadowtreecontainer.prepend"foo"; keygenelement.disabled = true; 0day.today 2018-03-09...

Wix Remote Email PoC 0day

Wix send remote email affects all pages created with wix.com, possible social engineering attack. Usage Info usage: exploit.py -h -u URL -t EMAILTO -f EMAILFROM -s SUBJECT -i SITEID -m MESSAGE This is private exploit. You can buy it at https://0day.today...

WordPress Google Forms Plugin unauthenticated PHP Object injection vulnerability

Exploit for php platform in category web applications Abstract A PHP Object injection vulnerability was found in the Google Forms WordPress Plugin, which can be used by an unauthenticated user to instantiate arbitrary PHP Objects. Using this vulnerability it is possible to execute arbitrary PHP...

GNU Screen 4.5.0 - Privilege Escalation (Bash) Vulnerability

Exploit for linux platform in category local exploits !/bin/bash screenroot.sh setuid screen v4.5.0 local root exploit abuses ld.so.preload overwriting to get root. bug: https://lists.gnu.org/archive/html/screen-devel/2017-01/msg00025.html HACK THE PLANET infodox 25/1/2017 echo " gnu/screenroot "...

Joomla 3.6.5 Remote code execution Exploit 0day

Joomla 3.6.5 Core suffers from a remote code execution vulnerability. Joomla Core affected Joomla! 3.6.X versions. Exploit automated. It is possible to specify a list of sites. For the work you need to install Python. This is private exploit. You can buy it at https://0day.today...

WD My Cloud Mirror 2.11.153 RCE and Authentication Bypass Vulnerabilities

Exploit for hardware platform in category web applications Exploit Title: WD My Cloud Mirror 2.11.153 RCE and Authentication Bypass Date: 24.01.2017 Software Link: https://www.wdc.com Exploit Author: Kacper Szurek Contact: https://twitter.com/KacperSzurek Website: https://security.szurek.pl/...

Chromebackdoor graniet v3.0 web panel Multi Vulnerability

Exploit for php platform in category web applications Exploit Title: botnet graniet chrome backdoor v3.0 web panel multi vulnerability Date: 10-1-2017 Exploit Author: alqnas eslam Vendor Homepage:fb.com/alqnas4 Software Link:https://github.com/graniet/chromebackdoor Tested on:any os 1- cross site...

Microsoft Power Point 2016 - Java Code Execution Exploit

Exploit for windows platform in category local exploits Exploit Title: Microsoft Power Point Java Payload Code Execution Exploit Author: Fady Mohamed Osman @fadyosman Demo Video : https://www.youtube.com/watch?v=DOJSUJK7hRo Video Tutorial : https://www.youtube.com/watch?v=Lih-iuXgEM Youtube...

Haraj v2 Script Shell Upload Vulnerability

Exploit for php platform in category web applications |----------------------------| | xBADGIRL21 | | N3W PUBLIC 3XPL0IT | | , | | 0day T == -- | | /-' | | // | | x21 | |----------------------------| | Exploit Title : Haraj v2 Script Shell Upload Vulnerability | Exploit Author : xBADGIRL21 | Dork...

Courier Business Website Script - Authentication Bypass Vulnerability

Exploit for php platform in category web applications Vulnerability: Admin Login Bypass & SQLi Date: 13.01.2017 Vendor Homepage: http://scriptfirm.com/ Script Name: Courier Business Website Script Script Buy Now: http://scriptfirm.com/courier-business-website Author: İhsan Şencan Author Web:...