Code injection

HP Smart Zero Core 4.3 and 4.3.1 on the t410 All-in-One Smart Zero Client, t410 Smart Zero Client, t510 Flexible Thin Client, t5565z Smart Client, t610 Flexible Thin Client, and t610 PLUS Flexible Thin Client allows local users to obtain sensitive information, modify data, or cause a denial of...

Prestige Software CMS File Disclosure

Exploit Title : Prestige Software CMS Local File Disclosure Author : IrIsT.Ir Discovered By : BeniVanda Home : http://IrIsT.Ir/en/ Software Link : http://www.prestijsoftware.com/tr/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu/BT/Fedora - win7 Dork : intext:Bu site...

[SECURITY] Fedora 18 Update: knavalbattle-4.10.4-1.fc18

Naval Battle is a ship sinking game for KDE. Ships are placed on a board which represents the sea. Players try to hit each others ships in turns without knowing where they are placed. The first player to destroy all ships wins the game...

Design/Logic Flaw

The remoteDispatchStoragePoolListAllVolumes function in the storage pool manager in libvirt 1.0.5 allows remote attackers to cause a denial of service file descriptor consumption via a large number of requests "to list all volumes for the particular pool."...

Dsl Router D-link BZ_1.06 Multiple Vulnerabilities

Exploit for hardware platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1...

CVE-2013-2696

Cross-site request forgery CSRF vulnerability in the All in One Webmaster plugin before 8.2.4 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the All in One Webmaster plugin before 8.2.4 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences...

CVE-2013-2696

CVE-2013-2696 affects the All in One Webmaster WordPress plugin prior to 8.2.4. A CSRF flaw lets remote attackers hijack authentication for requests that insert XSS sequences, potentially abusing an authenticated session. CVSS v2 base score 6.8 (Medium). Remediation: update the plugin to 8.2.4 or...

CVE-2013-2696

Cross-site request forgery CSRF vulnerability in the All in One Webmaster plugin before 8.2.4 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences...

CVE-2013-2696: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the All in One Webmaster plugin before 8.2.4 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences...

PT-2013-3876

Name of the Vulnerable Software and Affected Versions All in One Webmaster plugin versions prior to 8.2.4 Description The issue is related to a cross-site request forgery CSRF vulnerability, which allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS...

GreenBrowser all Version Remote Code Excution Vulnerability

A security vulnerability in GreenBrowser, all versions, allows an attacker to excute a malcious code This is private exploit. You can buy it at https://0day.today...

Nmap NSE 6.01: p2p-conficker

Checks if a host is infected with Conficker.C or higher, based on Conficker's peer to peer communication. When Conficker.C or higher infects a system, it opens four ports: two TCP and two UDP. The ports are random, but are seeded with the current week and the IP of the infected host. By determini...

PT-2013-1479

Name of the Vulnerable Software and Affected Versions Lazyest Backup plugin versions prior to 0.2.2 Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the xml or all parameter in the lazyest-backup.ph...

KMPlayer - Denial of Service

KMPlayer - Denial of Service Title : KMPlayer PlayList M3U Denial Of Service PoC All Versions Author : Jigsaw Abdelmorite Eljoaydi Date : 26-01-2013 E-mail : [email protected] Home : Morroco Facebook page : facebook.com/abdelmorit.alma platform : software Impact : Denial Of Service Tested on :...

WordPress Gallery 3.8.3 Arbitrary File Read

​ Exploit Title : Wordpress gallery-3.8.3 plugin Arbitrary File Read Vulnerability Author : IrIsT.Ir Discovered By : BeniVanda Home : http://IrIsT.Ir/forum/ Software Link : http://wordpress.org/extend/plugins/gallery-plugin/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu ...

Saggitarius CMS SQL Injection

Exploit Title : Saggitarius Cms Sql Injection Vulnerability Author : IrIsT.Ir Discovered By : BeniVanda Home : http://www.IrIsT.Ir/forum Software Link : http://www.saggitarius.pl/ Security Risk : High Version : All Version Tested on : win7,BT,Ubuntu Dork : intext:"design by Saggitarius" Expl0iTs ...

Oracle MySQL for Microsoft Windows FILE Privilege Abuse

This module takes advantage of a file privilege misconfiguration problem specifically against Windows MySQL servers. This module abuses the FILE privilege to write a payload to Microsoft's All Users Start Up directory which will execute every time a user logs in. The default All Users Start Up...

SmartCMS - index.php?menuitem SQL Injection Cross-Site Scripting

SmartCMS - index.php?menuitem SQL Injection Cross-Site Scripting SmartCMS SQL Injection & Cross Site Scripting Vulnerabilities Bug discovered by Yakir Wizman AKA Pr0T3cT10n, Date: 29/11/2012 Version: ALL Vendor Link: http://smartcms.nl/ ISRAEL Author will be not responsible for any damage. SQL...

[VSD] (Virtual Section Dumper) Just another Virtual Section Dumper for Windows Processes

What's VSD? VSD Virtual Section Dumper is intented to be a tool to visualize and dump the memory regions of a running 32 bits or a 64 bits process in many ways. For example, you can dump the entire process and fix the PE Header , dump a given range of memory or even list and dump every virtual...