BLUE COM Router 5360/52018 - Password Reset Exploit

BlueCom router model 5360/52018 remote password reset exploit. Exploit Title: BLUE COM Router - 5360/52018 Password Reset Exploit Date: 20/1/2013 Exploit Author: KAI kaisai12 Home: CEH.VN Version: BCOM - 5360 vulnerability - change password easy ! no protect ! var loc = 'password.cgi?'; switch id...

MuPDF 1.3 - Stack-based Buffer Overflow in xps_parse_color()

MuPDF versions 1.3 and below suffer from a stack-based buffer overflow in xpsparsecolor. Proof of concept file included. ============================================================= 0day - MuPDF Stack-based Buffer Overflow in xpsparsecolor...

齐博CMS存储型XSS可getshell（组合利用）

简要描述： 齐博cms,利用威胁不大的前台存储型xss+没有任何危害的后台CSRF+几乎无影响可忽略的后台getshell 3个0day 结合起来的威力拿下齐博cms,虽然不算什么严重的漏洞,但是中途遇到的问题和突破还是聊以慰藉的,还请各位看官轻轻拍砖. ——by pandas 详细说明： 前一段时间西毒爆出qibocms 0day的时候...

By the LFI caused by the Zimbra mail management system of 0day-vulnerability warning-the black bar safety net

Zimbra is a company with a lot of the mail system, may relate to many of the company's internal confidential, it is extremely important. This is a few days ago on exploit-db. com on the issue to the 0day to: it. By a local file inclusion vulnerability can be seen localconfig. xml content, and thi...

XAMPP 3.2.1 Cross Site Scripting

Title : XAMPP 3.2.1 Cross Site Scripting Author : DevilScreaM Date : 15 January 2014 Category : Web Applications Vendor : http://sourceforge.net/projects/xampp Version : 3.2.1 Type : PHP Greetz : 0day-id.com | newbie-security.or.id | Borneo Security | Indonesian Security Indonesian Hacker |...

XAMPP 3.2.1 Cross Site Scripting Vulnerability

Exploit for multiple platform in category local exploits Title : XAMPP 3.2.1 Cross Site Scripting Author : DevilScreaM Date : 15 January 2014 Category : Web Applications Vendor : http://sourceforge.net/projects/xampp Version : 3.2.1 Type : PHP Greetz : 0day-id.com | newbie-security.or.id | Borneo...

dedecms xss 0day pass to kill all versions can be getshell-a vulnerability warning-the black bar safety net

The hole reason: DEDECMS since the editor filter is not strict, will cause the malicious script to run. Can getshell obtain permission. Why say it is a 0Day? Can getshell of all 0Day（tasteless play together also can become the Phoenix is currently just a test over 5. 3 to 5. 7 version. Other...

PhotoStore Arbitrary Shell upload Vulnerability

Exploit for php platform in category web applications Exploit Title:PhotoStore Arbitrary Shell upload Google Dork: "site:photocity.co.za" Exploit Author: Index Php Tested on: Windows, PHP 5.2 exploit "@$uploadfile", 'folder'='/'; curlsetopt$ch, CURLOPTRETURNTRANSFER, 1; $postResult = curlexec$ch;...

WeBid Local File Discolure vulnerability

+Description: Open source php/mysql fully featured auction script. Perfect for those who want to start their own auction site. +Exploit: Acal Suffers from an LFD vulnerability: Usage Info 127.0.0.1/PATH/WEBID/loader.php?js=LFD + Author: TUNISIAN CYBER + Exploit Title: WeBid all versions LFD...

eshop v7. 5 network fun online shopping system flagship version V7. 5 0day +GETSHELL-a vulnerability warning-the black bar safety net

Test description: Environment: window2003+IIS6. 0 0X1: the discovery of two storage-typeXSS 0x101: register new user ! ! ! 0X2 the background simulation management login and operation ! ! 0X201: proven results, log ! ! 0X202: adding the administrator account ! OK sign in the background ! 1 2 next...

EasyFTP Server Remote Exploit

Exploit for multiple platform in category remote exploits This is private exploit. You can buy it at https://0day.today...

Mega File Hosting Script v1.x Remote Command Execution

vuln alow to attacker to execute evil code This is private exploit. You can buy it at https://0day.today...

Wordpress Persuasion Theme - Arbitrary File Download and File Deletion Exploit

Exploit for php platform in category web applications Exploit Title: Persuasion Wordpress Theme - Arbitrary File Download and File Deletion Exploit Date: 19 December 2013 Exploit Author: Interference Security Vendor Homepage: http://mysitemyway.com/ Software Link:...

PotPlayer 1.5.42509 Beta - DOS (Integer Division by Zero Exploit)

Exploit for windows platform in category local exploits !/usr/bin/python rawinput"Hit Enter to create a malicious file" f = open"victim.wav","w" header="\x2E\x73\x6E\x64\x00\x00\x01\x18\x00\x00\x42\xDC\x00\x00\x00\x01" "\x00\x00\x1F\x40\x00\x00\x00\x00\x69\x61\x70\x65\x74\x75\x73\x2E"...

phpcms upload cause getshell detailed and case-vulnerability warning-the black bar safety net

0x01 what is upload vulnerability A lot of cms in order to enrich their functions are to provide the upload an avatar, upload pictures and other functions. But if the uploaded content does not do better than the filter, it is equal to say to the attacker to an arbitrary code execution. For exampl...

KikChat - (LFI/RCE) Multiple Vulnerability

Exploit for php platform in category web applications KikChat http://127.0.0.1/KikChat/myroom/shell.php?cmd=whoami;id;uname -a;pwd;ls -al makase banyak : tau lo bentor to hulandalo tamongodula'a wau tamohutata, dulo ito momongulipu \\\\\\\\\\\\\\\\\\\\\\\\\ p.s malandingalo...

Kingsoft wps2012-2 0 1 3 pass to kill 0day-vulnerability warning-the black bar safety net

CVE-2 0 1 3-3 9 3 4-1-1024x705 CVE-2 0 1 3-3 9 3 4-2-1024x430 Provide some py !/ usr/bin/python Exploit Title: Kingsoft Office Writer v2012 8.1.0.3385 . wps Buffer Overflow Exploit SEH Version: 2 0 1 2 8.1.0.3385 Date: 2013-11-27 Author: Julien Ahrens @MrTuxracer Homepage:...

Growing market of zero-day vulnerability exploits pose real threat to Cyber Security

NSS Labs issued the report titled "The Known Unknowns" to explain the dynamics behind the market of zero-day exploits. Last week I discussed about the necessity to define a model for "cyber conflict" to qualify the principal issues related to the use of cyber tools and cyber weapons in an...

BoxBilling 3.6.11 (mod_notification) Stored Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications BoxBilling 3.6.11 modnotification Stored Cross-Site Scripting Vulnerability Vendor: BoxBilling Product web page: http://www.boxbilling.com Affected version: 3.6.11 modnotification 1.0.0 Summary: BoxBilling is a free billing, invoicing & client...

Wordpress page-flip-image-gallery plugins Remote File Upload

Exploit for php platform in category web applications Exploit Title: Wordpress page-flip-image-gallery plugins Remote File Upload Vulnerability Author: Ashiyane Digital Security Team Date: 12/06/2013 Vendor Homepage: http://pageflipgallery.com Software Link :...