Jahia Enterprise v6.6.0.0 CSRF Vulnerability

Exploit for jsp platform in category web applications A.B.C.D = URL, EXAMPLE: http://localhost:8080/cms/en/users/root.changePassword.do CSRF Exploit to change Password 0day.today 2018-03-20...

vBulletin 3.x / 4.x AjaxReg SQL Injection

!/usr/bin/php userid key". "\n+ Ex. : php 0day.php localhost /vBulletin/ 1 abcdefghijklmnopqrstuvwxyz". "\n+ Note. : Its a 0day exploit\n\n"; exit ; function check $hostname, $path, $field, $pos, $usid, $char $char = ord $char; $inj = 'ajax.php?do=CheckUsername&param='; $inj.=...

vBulletin ajaxReg Module - SQL Injection

source: https://www.securityfocus.com/bid/56877/info The ajaxReg module for vBulletin is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromise the application,...

RealPlayer .html v15.0.6.14 Memory Corruption and Overflow POC

It's critical bug in RealPlayer, you can make corruption in the memory and local buffer overflow when you drop/open this html file with RP. Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail : submitat1337day.com 1 0 0 1 1 ...

Mysql provide the right to exploit the expanded applications-vulnerability warning-the black bar safety net

This: MySQL Windows Remote System Level Exploit Stuxnet technique 0day http://www.exploit-db.com/exploits/23083/ Roughly looked at, the original is in the export file when the out of the question, specifically how out of the question, showing look at the mysql source code than I can see to...

VLC media player 2.0.4 buffer overflow PoC

buffer overflow during the handling of the swf file context-dependent Successful exploits can allow attackers to execute arbitrary code Title : VLC media player 2.0.4 buffer overflow POC Version : 2.0.4 Twoflower Date : 2012-12-06 Vendor : http://www.videolan.org/vlc/ Impact : Med/High Contact :...

Moodle 1.9.14.2 Full Puth Disclosure Vulnerability

Exploit for php platform in category web applications Exploit Title: Full Path Disclosure --- Moodle 1.9.x - 1.9.14.2 Date: 2012 / 11 / 30 Author: r00tc0d3rs WebSite: www.r00tc0d3rs.org Facebook: www.facebook.com/r00tc0d3rs Twitter: @r00tc0d3rs Version: Moodle 1.9.x - 1.9.14.2 Category:: WebApps...

Tectia SSH USERAUTH Change Request Password Reset

This Metasploit module exploits a vulnerability in Tectia SSH server for Unix-based platforms. The bug is caused by a SSH2MSGUSERAUTHPASSWDCHANGEREQ request before password authentication, allowing any remote user to bypass the login routine, and then gain access as root. This file is part of the...

myBB KingChat Plugin SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: KingChat MyBB plugin SQL Injection 0day Google Dork: inurl:"kingchat.php" Date: 13.10.2012 Exploit Author: RedHat NullSec Software Link: http://mods.mybb.com/view/kingchat Tested on: Windows & Linux. Vulnerable code : query"SELE...

Opera Web Browser 12.11 Crash PoC

Heap corruption during the handling of the Gif files Context-dependent Successful exploits can allow attackers to execute arbitrary code Title : Opera Web Browser 12.11 WriteAV Vulnerability Version : 12.11 Build 1661 and 12.12 Date : 2012-12-03 Vendor : http://www.opera.com/ Impact : High Contac...

MyBB KingChat Plugin - SQL Injection

MyBB KingChat Plugin - SQL Injection Exploit Title: KingChat MyBB plugin SQL Injection 0day Google Dork: inurl:"kingchat.php" Date: 13.10.2012 Exploit Author: RedHat NullSec Software Link: http://mods.mybb.com/view/kingchat Tested on: Windows & Linux. Vulnerable code : query"SELECT FROM...

MyBB KingChat SQL Injection

Exploit Title: KingChat MyBB plugin SQL Injection 0day Google Dork: inurl:"kingchat.php" Date: 13.10.2012 Exploit Author: RedHat NullSec Software Link: http://mods.mybb.com/view/kingchat Tested on: Windows & Linux. Vulnerable code : query"SELECT FROM ".TABLEPREFIX."users WHERE...

MySQL (Linux) Stack Based Buffer Overrun PoC Zeroday

Exploit for linux platform in category dos / poc !/usr/bin/perl =for comment MySQL Server exploitable stack based overrun Ver 5.5.19-log for Linux and below tested with Ver 5.1.53-log for suse-linux-gnu too unprivileged user any account anonymous account?, post auth as illustrated below the...

IBM System Director Remote System Level Exploit

Exploit for windows platform in category remote exploits IBM System Director Remote System Level Exploit CVE-2009-0880 extended zeroday Copyright C 2012 Kingcope IBM System Director has the port 6988 open. By using a special request to a vulnerable server, the attacker can force to load a dll...

MySQL Windows Remote System Level Exploit (Stuxnet technique) 0day

Exploit for windows platform in category remote exploits MySQL Scanner & MySQL Server for Windows Remote SYSTEM Level Exploit Version 1.0 By Kingcope In the Year of 2012 http://www.exploit-db.com/sploits/23083.zip use this on a fast scan server! How to use. pnscan: the file "accounts" holds the...

Android 4.0.3 <= Browser Remote Crash Exploit

Exploit for Android platform in category dos / poc http://www.0xffe4.org -- var mframe = ""; forvar i = 0; i 0day.today 2018-01-10...

kesioncms 4. x-8. x-chicken-wap-column directory+getshell 0day-vulnerability warning-the black bar safety net

The need to open the wap module supports turned on by default, but the wap module database connection file is different from the reception database connection file, so only support normal open through the wap to the station,so a little tasteless nature, the door subscriber station will generally...

Wordpress Themes - Shotzz Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------------- Wordpress Themes- Shotzz Arbitrary File Upload Vulnerability -------------------------------------------------------------------------------- Author = Zikou-16...

Joomla Component com_jsmusic shell upload Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------------- Joomla Component comjsmusic shell upload Vulnerability -------------------------------------------------------------------------------- Author = Zikou-16 Facebook ...

Network Shutdown Module 3.21 Remote PHP Code Injection

This Metasploit module exploits a vulnerability in lib/dbtools.inc which uses unsanitized user input inside a eval call. Additionally the base64 encoded user credentials are extracted from the database of the application. Please note that in order to be able to steal credentials, the vulnerable...