MS13-009 Internet Explorer WScript.Shell Remote Code Execution

A security vulnerability in Internet Explorer, versions 6–9, allows an attacker to excute a malcious code This is private exploit. You can buy it at https://0day.today...

LetterIt2 <= XSS Vulnerability

Exploit for php platform in category web applications LetterIt2 alert1; Demo: 01 :http://iz.sp.gov.br/stats/help/install.php?langhelpSprache=%22%3E%3Cscript%3Ealert%281337%29;%3C/script%3E 02...

Tech-ex 6. x~8. x getshell 0day-vulnerability warning-the black bar safety net

Brief description: Not on the submitted parameter is determined, the result can be written to any file on the server... Detailed description: Wap/Plus/PhotoVote. asp 1 4 - 2 3 Dim KS:Set KS=New PublicCls Dim ID:ID = ReplaceKS. S"ID"," ","" Dim ChannelID:ChannelID=KS. G"ChannelID" If ChannelID=""...

dedecms local file inclusion and Lilu-path leaked 0day-vulnerability warning-the black bar safety net

Dinner eating support, scan the following code digestion digestion. Recently Php0day group where the brothers are in the discussion of the dede hole more quickly under a jacket, with editplus search for a few keywords, and sure enough found some problems. Saying usually write code also like to us...

v0pCr3w Web Shell Remote Code Execution Vulnerability

This Metasploit module exploits a lack of authentication in the shell developed by v0pCr3w and is widely reused in automated RFI payloads. This Metasploit module takes advantage of the shell's various methods to execute commands. This file is part of the Metasploit Framework and may be subject to...

ActFax 5.01 RAW Server Buffer Overflow

Exploit for windows platform in category remote exploits require 'msf/core' class Metasploit3 'ActFax 5.01 RAW Server Buffer Overflow', 'Description' = %q This module exploits a vulnerability in ActFax Server 5.01 RAW server. The RAW Server can be used to transfer fax messages without any...

BLDCMS(the white boss novels) Getshell 0day EXP-vulnerability warning-the black bar safety net

Before the want to engage in a black wide Station found next to the station there is a station with a BLDCMS I download it to see.. found a getshellvulnerability Saying last night, Sunny day a small cast in 90sec found someone to put this getshell vulnerability analysis of the issue to the RUB...

vBulletin 5.0.0 Beta 11 5.0.0 Beta 28 - SQL Injection

vBulletin 5.0.0 Beta 11 5.0.0 Beta 28 - SQL Injection Exploit Title: vBulletin 5 Beta XX SQLi 0day Google Dork: "Powered by vBulletin™ Version 5.0.0 Beta" Date: 24/03/2013 Exploit Author: Orestis Kourides Vendor Homepage: www.vbulletin.com Software Link: Version: 5.0.0 Beta 11 - 5.0.0 Beta 28...

WordPress IndiaNIC FAQs Manager Plugin 1.0 - Multiple Vulnerabilities

IndiaNIC FAQ Settings Page is vulnerable for CSRF. The Ask Question area front-end is vulnerable for XSS. It is possible to insert alert1 in question parameter. The Captcha value can be read from captcha parameter hidden field =================== We don't need the captcha Image when we have this ...

BlazeVideo HDTV Standard v.6.6.0.2 SEH Buffer Overflow

Exploit for windows platform in category dos / poc Exploit Title:BlazeVideo HDTV Player Standard 6.6.0.2 SEH Buffer Overflow Date: 19-03-2013 Exploit Author: metacom RST Vendor Homepage: http://www.blazevideo.com/hdtv-player/ Download version 6.6.0.2:...

Wordpress WP-e-Commerce plugin v3.8.9.5 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Ruby Gem Minimagic Command Execution Vulnerability

Ruby Gem MiniMagic suffers from a remote command execution vulnerability due to a lack of user input sanitization. MiniMagic ruby gem remote code execution 3/12/2013 https://github.com/hcatlin/minimagick A ruby wrapper for ImageMagick or GraphicsMagick command line. Tested on both Ruby 1.9.2 and...

Linux Kernel 'SCTP_GET_ASSOC_STATS()' - Stack-Based Buffer Overflow

Exploit for linux platform in category dos / poc include include include include define SCTPGETASSOCSTATS 112 define SOLSCTP 132 int mainvoid char buf =...

PHPBoost 4.0 <= (FileUpload/Disclosure) Multiple Vulnerabilities

PHPBoost 4.0 Multiple Vulnerabilities - Remote File Upload - Full Informations Disclosure 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type...

uTorrent 3.x app exploit 0day

Exploit for windows platform in category local exploits This is private exploit. You can buy it at https://0day.today...

TECNOMEGA SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: TECNOMEGA / SQL Injection vulnerability Date: 21/02/2013 Exploit Author: DiegoAsencio || r4z0rbl4ck Twitter: @r4z0rbl4ck Blog: http://r4z0rbl4ck.wordpress.com/ Vendor Homepage: http://www.tecnomega.net/ Tested on: Linux Ubuntu...

e107 Persistant XSS vulnerability

Exploit for php platform in category web applications Exploit Title: E107 CMS Persistant XSS vulnerability Google Dork: "intitle:e107 powered website" | inurl:e107admin | ... Date: 18/02/2013 Exploit Author: Zyklon B Vendor Homepage: http://e107.org/ Software Link:...

科讯 6.x~8.x getshell 0day

简要描述： 未对提交参数判断，导致可以写任意文件到服务器上... 详细说明： Wap/Plus/PhotoVote.asp 14 - 23 Dim KS:Set KS=New PublicCls Dim ID:ID = ReplaceKS.S"ID"," ","" Dim ChannelID:ChannelID=KS.G"ChannelID" If ChannelID="" Then ChannelID=2 If KS.G"LocalFileName""" And KS.G"RemoteFileUrl""" Then If...

Alt-N MDaemon 13.0.3 and 12.5.6 Email Body HTML/JS Injection Vulnerability

Exploit for windows platform in category web applications VULNERABILITY DESCRIPTION: ========================== Alt-N MDaemon is prone to an HTML/Javascript injection vulnerability because it fails to sanitize user-supplied input. Attacker-supplied HTML and/or JavaScript code could run in the...

vBulletin 5.0.0 Beta Release 0day Exploit

It is an SQL Injection, not the same as others one on the wild. It works on any vBulletin 5, any Beta Release including the latest. It doesnt work on lower versions, such as 4.1,4.2,3.8, etc. / The screenshots are taken on a vBulletin 5.0.0 Beta 18, but a moderator can confirm its working on high...