Zimbra Privilegie escalation LFI Vulnerability

Exploit for php platform in category web applications Exploit Title: Zimbra 0day exploit / Privilegie escalation via LFI Date: 06 Dec 2013 Exploit Author: rubina119 Contact Email : rubina119atgmail.com Vendor Homepage: http://www.zimbra.com/ Version: 2009, 2010, 2011, 2012 and early 2013 versions...

Zimbra 2009-2013 - Local File Inclusion

Exploit Title: Zimbra 0day exploit / Privilegie escalation via LFI Date: 06 Dec 2013 Exploit Author: rubina119 Contact Email : rubina119atgmail.com Vendor Homepage: http://www.zimbra.com/ Version: 2009, 2010, 2011, 2012 and early 2013 versions are afected, Tested on: Centosx, Ubuntu. CVE : No CVE...

Zimbra 2009-2013 - Local File Inclusion

Zimbra 2009-2013 - Local File Inclusion Exploit Title: Zimbra 0day exploit / Privilegie escalation via LFI Date: 06 Dec 2013 Exploit Author: rubina119 Contact Email : rubina119atgmail.com Vendor Homepage: http://www.zimbra.com/ Version: 2009, 2010, 2011, 2012 and early 2013 versions are afected,...

NDPROXY Local SYSTEM Privilege Escalation

Usage Info Original crash ... null pointer dereference Access violation - code c0000005 !!! second chance !!! 00000038 ?? ??? from ctypes import from ctypes.wintypes import import os, sys kernel32 = windll.kernel32 ntdll = windll.ntdll GENERICREAD = 0x80000000 GENERICWRITE = 0x40000000...

Microsoft Windows - NDPROXY SYSTEM Privilege Escalation (MS14-002)

Microsoft Windows - NDPROXY SYSTEM Privilege Escalation MS14-002 NDPROXY Local SYSTEM privilege escalation http://www.offensive-security.com Tested on Windows XP SP3 http://www.offensive-security.com/vulndev/ndproxy-local-system-exploit-cve-2013-5065/ Original crash ... null pointer dereference...

ZIP Password Recovery Professional 5.1 (.zip) - Crash POC

Exploit for windows platform in category dos / poc Exploit Title: ZIP Password Recovery Professional 5.1 .zip - Crash POC Date: 30.11.2013 Exploit Author: KAI - KAISAI12 Version: 5.1 Vendor Homepage: http://www.recoverlostpassword.com/ Tested on: Windows 7...

WordPress dzs-videogallery Plugins Remote File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress dzs-videogallery Plugins Remote File Upload Vulnerability Author: iskorpitx Date: 22/11/2013 Vendor Homepage: http://digitalzoomstudio.net Themes Link: http://digitalzoomstudio.net/docs/wpvideogallery/ Infected File:...

Iscripts-AutoHoster Multiple Vulnerabilities

Multi vulnerabilities for iscripts autohoster The script cost $199.95 http://www.iscripts.com/productlistingdetail.php?productid=18 used by some big companies Many vulnerabilities founded such as File upload + SQL + LFD ... This is private exploit. You can buy it at https://0day.today...

Elastix Voip system 2.x , Php code injection / Data dump Exploit

Elastix is famous asterisk voip system interface dist. it's vulnerable to php code injection vuln , which can be used to dump all data including - SIP Extention Data - Plain text admin password - Moderators passwords - All trunks data - shell upload Usage Info just add the ip list to "list.txt"...

CVE-2013-5065 Microsoft NDProxy.sys Privilege Escalation

NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in November 2013. Recent assessments: wchen-r7 at September 12, 2019 6:07pm UTC reported: Xp recently broke a local kernel...

Pirelli Discus DRG A125g - Remote Change SSID Value Vulnerability

Exploit for hardware platform in category web applications http://10.0.0.2/wlbasic.wl?wlSsidIdx=0&wlSsid=bysmagof info: where the parameter "wlSsid" is where the attacker will enter the new SSID. If the victim clicks on the url your modem / router will reboot automatically with the new SSID...

TomatoCart 1.1.8.2 LFI / Directory Traversal Vulnerabilities

TomatoCart version 1.1.8.2 suffers from local file inclusion and directory traversal vulnerabilities. Exploit Title: TomatoCart 1.1.8.2 - LFI / Directory Traversal Vulnerability Product: TomatoCart Official site: http://www.tomatocart.com/ Demo : http://demo.tomatocart.com/ Risk Level: High Explo...

WordPress Amplus v3.x.x Themes CSRF File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress Amplus v3.x.x Themes CSRF File Upload Vulnerability Author: Bebyyers404 Date: 11/17/2013 Infected Version: v3.x.x Infected File: uploadhandler.php Category: webapps/php Google dork: inurl:/wp-content/themes/Amplusv3 PO...

Android 4.2.x Superuser Unsanitized Environment Vulnerability

Vulnerable releases of several common Android Superuser packages may allow malicious Android applications to execute arbitrary commands as root without notifying the device owner. This advisoriy documents PATH and BOOTCLASSPATH vulnerabilities. Vulnerable releases of several common Android...

WordPress rayoflight-theme Themes Remote File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress rayoflight-theme Themes Remote File Upload Vulnerability Author: iskorpitx Date: 12/11/2013 Vendor Homepage: http://www.orange-themes.com/ Themes Link: http://www.orange-themes.com/portfolio/ray-of-light/ Infected File...

WordPress oxygen-theme Themes Remote File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress oxygen-theme Themes Remote File Upload Vulnerability Author: iskorpitx Date: 12/11/2013 Vendor Homepage: http://www.orange-themes.com/ Themes Link: http://www.orange-themes.com/portfolio/oxygen/ Infected File:...

WordPress bordeaux-theme Themes Remote File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress bordeaux-theme Themes Remote File Upload Vulnerability Author: iskorpitx Date: 12/11/2013 Vendor Homepage: http://www.orange-themes.com/ Themes Link: http://www.orange-themes.com/portfolio/bordeaux/ Infected File:...

WordPress Army Knife CSRF File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress Army Knife CSRF File Upload Vulnerability Author: Bebyyers404 Date: 11/09/2013 Vendor Homepage: http://freelancewp.co Themes Link: http://freelancewp.com/wordpress-theme/army-knife/ Infected File: upload-handler.php...

Aol.com XSS | Cookie Stealer (0day)

Exploit for multiple platform in category web applications This is private exploit. You can buy it at https://0day.today...

WP Front-End Repository Manager Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...