PHP Address Book 8.2.5.2 SQL Injection Vulnerability

PHP Address Book version 8.2.5.2 suffers from a remote SQL injection vulnerability. Full Disclosure Exploit Title : PHP Address Book SQL Injection Vulnerability Exploit Author : Rahul Pratap Singh Date : 14/Nov/2015 Home Page Link : http://sourceforge.net/projects/php-addressbook/ Blog Url :...

Sam Spade 1.14 - Browse URL Buffer Overflow PoC

Exploit for windows platform in category dos / poc !/usr/bin/env python Exploit Title : Sam Spade 1.14 Browse URL Buffer Overflow PoC Discovery by : Nipun Jaswal Email : email protected Discovery Date : 14/11/2015 Vendor Homepage : http://samspade.org Software Link :...

foobar2000 1.3.9 - (.pls; .m3u; .m3u8) Local Crash PoC

Exploit for windows platform in category dos / poc Exploit Title: foobar2000 1.3.9 .pls; .m3u; .m3u8 Local Crash PoC Date: 11-15-2015 Exploit Author: Antonio Z. Vendor Homepage: http://www.foobar2000.org/ Software Link:...

YESWIKI 0.2 - Path Traversal Vulnerability

Exploit for php platform in category web applications Exploit Title: YESWIKI 0.2 - Path Traversal template param Date: 2015-11-10 Exploit Author: HaHwul Exploit Author Blog: http://www.codeblack.net Vendor Homepage: http://yeswiki.net Software Link: https://github.com/YesWiki/yeswiki Version:...

Wordpress Ajax Load More Plugin 2.8.1.1 Upload Shell Exploit

This Metasploit module exploits an arbitrary file upload in the WordPress Ajax Load More version 2.8.1.1. It allows you to upload arbitrary php files and get remote code execution. This Metasploit module has been tested successfully on WordPress Ajax Load More 2.8.0 with WordPress 4.1.3 on Ubuntu...

ownCloud: RCE in ci.owncloud.com / ci.owncloud.org

Hi, I know you are more interested in vulnerabilities found in ownCloud Server, but I do would like to inform you on a RCE that can be executed on ci.owncloud.com/org. Vulnerability There is a 0day vulnerability in Jenkins that can be exploited in certain circumstances. The Jenkins instance on...

Well-known Forum app for vBulletin 5 exposure remote command execution vulnerability that may have leaked millions of user data-bug warning-the black bar safety net

! On Monday, it is reported that vBulletin developer site suffered a hacker attack and compromised nearly 4 8 million the vBulletin user's sensitive information. In the event a hacker after the attack, the vBulletin official emergency mandatory require the user to reset the password, they warn th...

Solarwinds Log and Event Manager/Trigeo SIM 6.1.0 - Remote Command Execution Exploit

Exploit for windows platform in category remote exploits Requirements: Python 2.7 netcat Tested on: Ubuntu 14.04 LTS Vulnerable Appliance Version: 6.1.0 Download: http://downloads.solarwinds.com/solarwinds/Release/LEM/SolarWinds-LEM-v6.1.0-Evaluation-VMware.exe Instructions: The exploitlem.py...

vBulletin 5.1.x - PreAuth 0day Remote Code Execution Exploit

Exploit for php platform in category web applications Exploit Title: Vbulletin 5.1.X unserialize 0day preauth RCE exploit Date: Nov 4th, 2015 Exploit Author: hhjj Vendor Homepage: http://www.vbulletin.com/ Version: 5.1.x Tested on: Debian CVE : I did not discover this exploit, leaked from the IoT...

vBulletin 5.1.x - Remote Code Execution

Exploit Title: Vbulletin 5.1.X unserialize 0day preauth RCE exploit Date: Nov 4th, 2015 Exploit Author: hhjj Vendor Homepage: http://www.vbulletin.com/ Version: 5.1.x Tested on: Debian CVE : I did not discover this exploit, leaked from the IoT. Build the object php functions'freeresult' =...

Sam Spade 1.14 - (Crawl website) Buffer OverFlow Exploit

Exploit for windows platform in category local exploits Exploit Title : Sam Spade 1.14 - Buffer OverFlow Date : 10/30/2015 Exploit Author : MandawCoder Contact : email protected Vendor Homepage : http://samspade.org Software Link : http://www.majorgeeks.com/files/details/samspade.html Version :...

vBulletin 5.x.x Remote Code Execution 0day Exploit

sql injection vulnerability, you can upload shell and remote execute Today I am hacked vbulletin.com , You can buy 0day today ; http://www.vbulletin.com/forum/content.php/813-Recovering-a-hacked-vBulletin-Site This is private exploit. You can buy it at http://0day.today...

TCPing 2.1.0 Buffer Overflow Vulnerability

Exploit for multiple platform in category local exploits Vendor: ================================ Spetnik.com Product: ================================= Spetnik TCPing 2.1.0 / tcping.exe circa 2007 TCPing "pings" a server on a specific port using TCP/IP by opening and closing a connection on the...

AIX 7.1 - lquerylv Local Privilege Escalation Vulnerability

Exploit for aix platform in category local exploits !/bin/sh Exploit Title: AIX 7.1 lquerylv privilege escalation Date: 2015.10.30 Exploit Author: S2 Crew Hungary Vendor Homepage: www.ibm.com Software Link: - Version: - Tested on: AIX 7.1 7100-02-03-1334 CVE : CVE-2014-8904 From file writing to...

A new sore point: the APT organization PawnStorm 0Day how to bypass the Java click to play protection-vulnerability warning-the black bar safety net

A few months ago, Trend Micro found out the APT organizations Pawn Storm using before without the disclosure of a Java Vulnerability, CVE-2 0 1 5-2 5 9 0 for attack. After that, we noticed a is used for dyeing and Java click to play click-to-play protection of a separate vulnerability. The second...

CVE-2015-4902

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment. Recent assessments: gwillcox-r7 at November 23, 2020 6:18pm UTC reported: Reported as exploited in the wild as part of Google’s 2020 0day...

Boxoft WAV to MP3 Converter 1.1 - SEH Buffer Overflow Exploit

Exploit for windows platform in category local exploits Exploit Title: Boxoft WAV to MP3 Converter 1.1 - SEH Buffer Overflow Date: 10/13/2015 Exploit Author: ArminCyber Contact: email protected Version: 1.1 Tested on: XP SP3 EN Description: A malicious .aiff file cause this vulnerability. categor...

Singapore telecommunications extensive use of the ZHONE Router with the hijacking of risk-vulnerability warning-the black bar safety net

By Singapore of a Telecom operator authorized to use and is made all over the world“first-class enterprise”operation used by thousands of router device there is a 0day vulnerability, and this vulnerability can give way by the controller is completely hijacked, the vast majority of users had no...

Antivirus Avast is exposed 0day vulnerabilities in users computer to execute malicious code-vulnerability warning-the black bar safety net

Google security expert Tavis Ormandy, found a Avast antivirus of 0day vulnerabilities, the vulnerabilities could lead to attackers invade a user's computer and the user computers to execute malicious code. Tavis Ormandy recently in the Avast antivirus found a serious 0day vulnerability. And just...

Subrion CMS 3.3.1.10 - Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Title : Subrion CMS 3.3.1.10 - Cross Site Scripting Vulnerability Author : ZwX Vendor : http://www.subrion.com/ Severity Level : Medium Tested on : Windows 7 ------------------------ Description ------------------------ An attacker can inject ...