Rapid PHP Editor IDE 14.1 Cross Site Request Forgery Vulnerability

Exploit for php platform in category web applications + Credits: John Page aka hyp3rlinx Vendor: ====================== www.rapidphpeditor.com Product: =============================== Rapid PHP Editor IDE rapidphp2016.exe v14.1 Rapid PHP editor is a faster and more powerful PHP editor for Windows...

PCMan FTP Server 2.0.7 - 'SITE CHMOD' Command Buffer Overflow Exploit

Exploit for windows platform in category remote exploits !/usr/bin/env python -- coding: utf-8 -- Exploit Title: PCMan FTP Server 2.0 BoF SITE CHMOD Command Date: 04/11/2016 Exploit Author: Luis Noriega Tested on: Windows XP Profesional V. 5.1 Service Pack 3 CVE : n/a import socket shellcode with...

Memcached 1.4.33 - PoC (1)

Exploit for linux platform in category dos / poc Source: http://paper.seebug.org/95/ import struct import socket import sys MEMCACHEDREQUESTMAGIC = "\x80" OPCODEPREPENDQ = "\x1a" keylen = struct.pack"!H",0xfa extralen = "\x00" datatype = "\x00" vbucket = "\x00\x00" bodylen = struct.pack"!I",0...

SweetRice 1.5.1 - Cross-Site Request Forgery Vulnerability

Exploit for php platform in category web applications document.forms0.submit; 0day.today 2018-01-01...

NVIDIA Driver - Unchecked User-Provided Pointer in Escape 0x5000027 Exploit

Exploit for windows platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=937 The DxgkDdiEscape handler for 0x5000027 accepts a user provided pointer, but does no checks on it before using it. ... DWORD userptr = escape5000027data-userptr; v32 = userptr2...

Freefloat FTP Server 1.0 - 'HOST' Command Buffer Overflow Exploit

Exploit for windows platform in category remote exploits !/usr/bin/env python -- coding: utf-8 -- Exploit Title: FreeFloat FTP Server HOST Command Buffer Overflow Exploit Date: 30/10/2016 Exploit Author: Cybernetic Software Link: http://www.freefloat.com/software/freefloatftpserver.zip Version:...

NVIDIA Driver - Unchecked Write to User-Provided Pointer in Escape 0x700010d Exploit

Exploit for windows platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=894 The DxgkDdiEscape handler for 0x700010d accepts a user provided pointer as the destination for a memcpy call, without doing any checks on said pointer. void fastcall...

Vulnerability warning: joomla, ja-k2-filter-and-search component 0day injection vulnerability-vulnerability warning-the black bar safety net

Recently, foreign security researcher Dimitrios Roussis and Evangelos Apostoloudis find joomla ja-k2-filter-and-search component existsSQL injectionvulnerabilities. Currently, the vulnerability is also not in any of the international sites above are found or published, in addition, component...

PizzaInn Beta 3 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title :----------------- : PizzaInn Restaurant Scripti Beta v3 - categories-exec.php - Stored XSS Author :------------------------ : Nassim Asrir Author Company :------------------------ : HenceForth Author Email...

WhatsApp Android text Crash 0day Exploit

This code work on all Android versions. Don't work on all android emulators as nexus. It is a short code that acts on android. When Android PROCESS the code, the app gets a crash. Don't work if android don't process directly the code. tested and work 100% on: - whatsapp message. - whatsapp...

HikVision Security Systems - Activex Buffer Overflow

HikVision Security Systems - Activex Buffer Overflow !/usr/bin/env python The exploit is a part of EAST Framework - use only under the license agreement specified in LICENSE.txt in your EAST Framework distribution visit eastfw.com eastexploits.com for more info import sys import re import os impo...

Allwinner 3.4 Legacy Kernel - Local Privilege Escalation (Metasploit)

Exploit for Android platform in category local exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require "msf/core" class MetasploitModule "Allwinner 3.4 Legacy Kernel Local Privilege Escalation", "Description" ...

PHP Press Release - Stored Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title : PHP Press Release - Stored Cross Site Scripting Author : Besim Google Dork : - Date : 09/10/2016 Type : webapps Platform : PHP Vendor Homepage : http://www.pagereactions.com/product.php?pku=1 Software link :...

Analysis of Cisco 0day Vulnerability CVE-2 0 1 6-6 4 1 5-vulnerability warning-the black bar safety net

! Clipboard Image. png We yesterdaypublished an articlea simple introduction to the equation of“BENIGNCERTAIN”the use of the tool and the vulnerability CVE-2 0 1 6-6 4 1 5 in this article, we will take everyone to understand this loophole in the end is what the situation. Events overview This...

Dup Scout Enterprise 9.0.28 - Buffer Overflow Exploit

Exploit for windows platform in category remote exploits !/usr/bin/python print "Dup Scout Enterprise 9.0.28 Buffer Overflow Exploit" print "Author: Tulpa / tulpaattulpa-securitydotcom" Author website: www.tulpa-security.com Author twitter: @tulpasecurity Exploit will land you NT AUTHORITY\SYSTEM...

Disk Pulse Enterprise 9.0.34 - Buffer Overflow Exploit

Exploit for windows platform in category remote exploits !/usr/bin/python print "Disk Pulse Enterprise 9.0.34 Buffer Overflow Exploit" print "Author: Tulpa // tulpaattulpa-securitydotcom" Author website: www.tulpa-security.com Author twitter: @tulpa-security.com Exploit will land you NT...

Joomla com_videoflow SQL injection Vulnerability

Exploit for php platform in category web applications Exploit Title : Joomla comvideoflow SQL injection Vulnerability Exploit Author : xBADGIRL21 Dork : inurl:index.php?option=comvideoflow Vendor Homepage : http://www.fidsoft.com version : 1.1.3 - 1.1.5 Tested on: BACK BOX skype:xbadgirl21 Date:...

WordPress Directory Themes Arbitrary Shell Upload Vulnerability

Exploit for php platform in category web applications Exploit Title : Wordpress Theme Directory Arbitrary Shell Upload Vulnerability Exploit Author : xBADGIRL21 Dork : inurl:/wp-content/themes/Directory/ Vendor Homepage : https://templatic.com/ version : 2.0.16 - 2.0.14 & maybe high or lower Test...

Simpla Admin Single-adsID SQL Injection / Shell Upload Vulnerabilities

Exploit for php platform in category web applications Exploit Title : Simpla Admin Single-adsID SQL Injection / Shell Upload Exploit Author : xBADGIRL21 Dork : intext:connexion "single-ads.php?ID=" or inurl:.single-ads.php?ID= Software link :...

Imrokraft Solutions CMS Admin Page ByPass Vulnerability

Exploit for php platform in category web applications Exploit Title : Imrokraft Solutions CMS Admin Page ByPass Exploit Author : xBADGIRL21 Dork : intext:"Designed by Imrokraft Solutions" or intext:"Powered By : Imrokraft Solutions" Vendor : http://www.imrokraft.com/ Tested on: Windows...