Internet Download Manager - '.ief' Crash (PoC)

!/usr/bin/env python Title : Internet Download Manager - Crash Proof Of Concept Affected Versions: All Version Founder : InternetDownloadManager Tested on Windows 7 / Server 2008 Author : Mohammad Reza Espargham Linkedin : https://ir.linkedin.com/in/rezasp E-Mail : meatrezadotes ,...

WordPress Download Manager Plugin Information Disclosure

An information disclosure vulnerability has been reported in WordPress Download Manager plugin. Successful exploitation of this vulnerability could allow a remote attacker to download local files, and may lead to information disclosure...

WordPress Download Manager Plugin <= 2.2.2 - XSS

This plugin is prone to admin.php cid parameter cross site scripting vulnerability. Solution Update the plugin...

WordPress WP Filebase Download Manager Plugin <= 0.3.0.02 - Arbitrary Code Execution

This plugin is prone to class/Admin.php GetFileHash function remote code execution vulnerability. Solution Update the plugin...

Internet Download Manager 6.xx DLL Hijacking

/ + Author: TUNISIAN CYBER + Exploit Title: Internet Download Manager 6.XX DLL Hijacking + Date: 30-03-2015 + Type: Local Exploits + Vendor: http://www.internetdownloadmanager.com/ + Tested on: WinXp + Friendly Sites: sec4ever.com + Twitter: @TCYB3R + POC IMG:http://i.imgur.com/qfkEFR8.png...

WordPress Download Manager Plugin Privilege Escalation (CVE-2014-9260)

A privilege escalation vulnerability has been found in WordPress Download Manager Plugin. An authenticated remote attacker may leverage this vulnerability to gain administrative access to the vulnerable server...

IDM-6.20-Local-Buffer

Author: TUNISIAN CYBER + Exploit Title: IDM v6.20 Local Buffer Overflow + Date: 27-03-2015 + Type: Local Exploits + Tested on: WinXp/Windows 7 Pro + Vendor: https://www.internetdownloadmanager.com/ + Friendly Sites: sec4ever.com...

Internet Download Manager 6.20 Local Buffer Overflow Vulnerability

Internet Download Manager version 6.20 suffers from a local buffer overflow vulnerability. Usage Info Create IDMLBOF.txt then open , copy the content then go to Options-VPN/Dial Up and paste it in the username field. !/usr/bin/env python + Author: TUNISIAN CYBER + Exploit Title: IDM v6.20 Local...

IDM 6.20 - Local Buffer Overflow

!/usr/bin/env python + Author: TUNISIAN CYBER + Exploit Title: IDM v6.20 Local Buffer Overflow + Date: 27-03-2015 + Type: Local Exploits + Tested on: WinXp/Windows 7 Pro + Vendor: http://www.internetdownloadmanager.com/ + Friendly Sites: sec4ever.com + Twitter: @TCYB3R +...

Internet Download Manager 6.20 Local Buffer Overflow

!/usr/bin/env python + Author: TUNISIAN CYBER + Exploit Title: IDM v6.20 Local Buffer Overflow + Date: 27-03-2015 + Type: Local Exploits + Tested on: WinXp/Windows 7 Pro + Vendor: https://www.internetdownloadmanager.com/ + Friendly Sites: sec4ever.com + Twitter: @TCYB3R +...

WordPress Download Manager 2.7.2 - Privilege Escalation Vulnerability

WordPress Download Manager plugin version 2.7.2 suffers from a privilege escalation vulnerability. Exploit Title: WordPress Download Manager 2.7.2 Privilege Escalation Date: 24-11-2014 Software Link: https://wordpress.org/plugins/download-manager/ Exploit Author: Kacper Szurek Contact:...

WordPress Download Manager 2.7.2 Privilege Escalation

Exploit Title: WordPress Download Manager 2.7.2 Privilege Escalation Date: 24-11-2014 Software Link: https://wordpress.org/plugins/download-manager/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps CVE: CVE-2014-9260 1...

WordPress Download Manager Privilege Escalation

Privilege escalation vulnerability in WordPress Download Manager plugin Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Wordpress Download Manager 2.7.4 /wp-content/plugins/download-manager/wpdm-core.php code execution vulnerability

No description provided by source...

GetGo Download Manager HTTP Response Buffer Overflow Exploit

Exploit for windows platform in category remote exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'GetGo Download Manager HTTP Response Buffer Overflow', 'Description' = %q...

CM Download Manager < 2.0.7 - CSRF to Cross-Site Scripting

The lack of CSRF check and sanitisation could allow attackers to perform CSRF attacks against logged in administrators, and set a Cross-Site Scripting payload via addonstitle parameter in the CMDMadminsettings page...

GetGo Download Manager HTTP Response Buffer Overflow

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'GetGo Download Manager HTTP Response Buffer Overflow', 'Description' = %q This module exploits a stack-based buffer overflow...

Wordpress Download Manager 2.7.4 - Remote Code Execution Vulnerability

Exploit for php platform in category web applications !/usr/bin/python Exploit Name: Wordpress Download Manager 2.7.0-2.7.4 Remote Command Execution Vulnerability discovered by SUCURI TEAM http://blog.sucuri.net/2014/12/security-advisory-high-severity-wordpress-download-manager.html Exploit writt...

WordPress Plugin Download Manager 2.7.4 - Remote Code Execution

WordPress Plugin Download Manager 2.7.4 - Remote Code Execution !/usr/bin/python Exploit Name: Wordpress Download Manager 2.7.0-2.7.4 Remote Command Execution Vulnerability discovered by SUCURI TEAM http://blog.sucuri.net/2014/12/security-advisory-high-severity-wordpress-download-manager.html...

WordPress Download Manager 2.7.4 - Remote Code Execution

Download Manager plugin is prone to a remote code execution vulnerability via "/download-manager/wpdm-core.php". It allows attackers to execute arbitrary PHP code. Solution Upgrade the plugin...