WordPress Authentic Arbitrary File Download Vulnerability

WordPress Authentic theme suffers from an arbitrary file download vulnerability. Note that this finding houses site-specific data. |||||||||||||||||||||||||||||||||||||||||||||||||| |-------------------------------------------------------------------------| | Exploit Title: Wordpress Authentic...

Wordpress Bulk Delete Users by Email Plugin 1.0 - CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: Bulk Delete Users by Email, Wordpress Plugin 1.0 - CSRF Google Dork: N/A Date: 05.09.2014 Exploit Author: Fikri Fadzil - email protected Vendor Homepage - http://www.speakdigital.co.uk/ Software Link:...

Oracle NUMTODSINTERVAL() Buffer Overflow Exploit

This module exploits a buffer overflow in Oracle9i. When sending a specially formatted query to the numtodsinterval function, an attacker may be able to execute arbitrary code. NOTE: For targets running DEP, you will need to choose target 1 then rexploit using target 0. The first query will disab...

LeapFTP 3.1.0 URL Handling Buffer Overflow Exploit

LeapFTP version 3.1.0 URL handling SEH buffer overflow exploit that spawns calc.exe. Exploit Title: LeapFTP 3.1.0 URL Handling SEH Exploit Google Dork: "k3170makan is totally awesome" hehehe Date: 2014-08-28 Exploit Author: k3170makan Vendor Homepage: http://www.leapware.com/ Software Link:...

DomainTrader Domain Parking / Auction Script 2.5.3 CSRF / XSS

Exploit Title: DomainTrader Domain Parking and Auction Script Multiple 0day Vulnerabilities Google Dork: Find yourself xD Date: 26/8/2014 Exploit Author: Haider Mahmood | @HaiderMQ Vendor Homepage: http://www.smartscriptsolutions.com/domain-trader/ Version: Tested on Latest Version 2.5.3 Add new...

WordPress ShortCode Plugin 1.1 - Local File Inclusion Vulnerability

Exploit for php platform in category web applications Title : WordPress ShortCode Plugin - Local File Inclusion Vulnerability Severity : High+/Critical Reporters : Mehdi Karout & Christian Galeone Google Dork : inurl:wp/wp-content/force-download.php Plugin Version : 1.1 Plugin Name : Download...

WordPress Plugin KenBurner Slider Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Exploit Title : WordPress Plugin KenBurner Slider Arbitrary File Download Vulnerability Google Dork: Index of /wp-content/plugins/kbslider Date: 2014-08-21 Exploit Author: MF0x and Daniel Pentest Vendor Homepage:...

TomatoCart 1.x - SQL Injection Vulnerability

Exploit for php platform in category web applications Title: TomatoCart v1.x latest-stable Remote SQL Injection Vulnerability Background: TomatoCart is open source ecommerce solution developed and maintained by a number of 64,000+ users from 50+ countries and regions. It's distributed under the...

CVE-2014-0546

Adobe Reader and Acrobat 10.x before 10.1.11 and 11.x before 11.0.08 on Windows allow attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context, via unspecified vectors. Recent assessments: gwillcox-r7 at November 22, 2020 3:25am UTC reported...

CVE-2014-2817

Microsoft Internet Explorer 6 through 11 allows remote attackers to gain privileges via a crafted web site, aka “Internet Explorer Elevation of Privilege Vulnerability.” Recent assessments: gwillcox-r7 at November 22, 2020 3:25am UTC reported: Reported as exploited in the wild as part of Google’s...

Wordpress GB Gallery Slideshow 1.5 Authenticated SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title : Wordpress GB Gallery Slideshow 1.5 Authenticated SQL Injection Exploit Author : Claudio Viviani Vendor Homepage : http://gb-plugins.com/ Software Link : http://downloads.wordpress.org/plugin/gb-gallery-slideshow.1.5.zip Date :...

ISPConfig 3.0.54p1 - Authenticated Admin Local root Vulnerability

Exploit for linux platform in category web applications While logged in as admin user: 1 add a shell user 2 under option set gid to ispconfig 3 log in as that user 4 edit /usr/local/ispconfig/interface/lib/lang/en.lng with system$GET'cmd'; 5 browse to: http://server:8080/index.php?cmd=echo...

Wordpress WP BackupPlus - Database And Files Backup Download (0day)

Exploit for php platform in category web applications Exploit Title: Wordpress wpbackupplus Database and files Backup download 0-day Google Dork: Index of:"/wp-backup-plus" Date: 19/07/2014 Exploit Author: pSyCh03D Arfaoui Moslem https://www.facebook.com/lulz.sec Vendor Homepage:...

PCMAN FTP 2.07 PORT 命令 缓冲区溢出漏洞（0day）

No description provided by source. Exploit Title: PCMAN FTP 2.07 PORT Command Buffer Overflow Exploit Date: 07 13,2014 Exploit Author: niubl Version: 2.07 Tested on: Windows xp sp3 chinese Email: [email protected] thank for Mahmod Mahajna. i learn from him. 漏洞太多了这个版本软件 import socket as s from sys...

Wordpress BSK PDF Manager 1.3.2 Authenticated SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title : Wordpress BSK PDF Manager 1.3.2 Authenticated SQL Injection Exploit Author : Claudio Viviani Vendor Homepage : http://www.bannersky.com/bsk-pdf-manager/ Software Link : http://downloads.wordpress.org/plugin/bsk-pdf-manager.zip...

Wordpress Theme ProjectTheme Shell Upload Vulnerability

Python exploit able to upload a shell and generate its link in any website having ProjectTheme Shell Upload Vulnerability Usage Info Usage: python exploit.py -t http://site.com -s shellname -p UploadingPath Title : Wordpress Theme ProjectTheme Shell Upload Vulnerability Author : Aloulou Date :...

facebook - Grabbing permanent access token which Never expires of your accounts and pages .

The bug is that we can generate access token of our account which have all the permissions that normally a facebook user have that is to read , write , modify ,etc . Note : Permissions are depend on app by Which facebook access token is grabbed . Note: Mainly you can grab only your temporary acce...

Atom CMS Shell Upload / SQL Injection / Bypass Vulnerabilities

Atom CMS suffers from remote shell upload and remote SQL injection vulnerabilities. Exploit Title : Atom CMS SQL Injection and file upload vulnerability Author : Jagriti Sahu Vendor : https://github.com/thedigicraft/Atom.CMS Date : 07/07/2014 Discovered at : IndiShell Lab Love to : Surbhi, Mradul...

Softmaker Office 2012 - TextMaker Memory Corruption Vulnerability

No description provided by source. / Title : Softmaker Office 2012 TextMaker Memory Corruption Vulnerability 0day Version : 2012.12.20.654 Author : Arash Allebrahim Contact : [email protected] Date : 2013-10-30 Vendor : http://www.softmaker.com/english/ofen.htm tested : Win XP SP3 ENG &...

Bigant Messenger <= 2.52 - (AntCore.dll) RegisterCom() Remote 0day Heap Overflow

No description provided by source. !/usr/bin/python Bigant Messenger = v2.52 - AntCore.dll RegisterCom Remote 0day Heap Overflow Exploit Found by: Steven Seeley - mrme AT corelan.be - http://net-ninja.net/ Homepage: http://www.bigantsoft.com/ Download: http://www.bigantsoft.com/download.html Test...