Download Manager <= 2.7.94 - Authenticated Stored XSS

The stored XSS vulnerability allows any authenticated user to inject malicious code via the name of the uploaded file: Example: .jpg The vulnerability exists because the file name is not properly sanitized and this can lead to malicious code injection that will be executed on the target’s browser...

WordPress Download Manager Free 2.7.94 / Pro 4 XSS

WordPress Download Manager Free 2.7.94 & Pro 4 Authenticated Stored XSS Vendor Homepage: http://www.wpdownloadmanager.com Software Link: https://wordpress.org/plugins/download-manager Affected Versions: Free 2.7.94 & Pro 4 Tested on: WordPress 4.2.2 Discovered by Filippos Mastrogiannis Twitter:...

Internet Download Manager Crash Proof Of Concepts

!/usr/bin/env python Title : Internet Download Manager - Crash Proof Of Concept Affected Versions: All Version Founder : InternetDownloadManager Tested on Windows 7 / Server 2008 Author : Mohammad Reza Espargham Linkedin : https://ir.linkedin.com/in/rezasp E-Mail : meatrezadotes ,...

WordPress Plugin Download Manager Free 2.7.94 & Pro 4 - (Authenticated) Persistent Cross-Site Scripting

WordPress Download Manager Free 2.7.94 & Pro 4 Authenticated Stored XSS Vendor Homepage: http://www.wpdownloadmanager.com Software Link: https://wordpress.org/plugins/download-manager Affected Versions: Free 2.7.94 & Pro 4 Tested on: WordPress 4.2.2 Discovered by Filippos Mastrogiannis Twitter:...

Download Manager <= 2.7.94 - Authenticated Stored XSS

The stored XSS vulnerability allows any authenticated user to inject malicious code via the name of the uploaded file: Example: .jpg The vulnerability exists because the file name is not properly sanitized and this can lead to malicious code injection that will be executed on the target’s browser...

WordPress Download Manager Free 2.7.94 & Pro 4 - Authenticated Stored XSS

Download Manager Free and Pro is prone to an authenticated stored XSS that allows an attacker to create new download package and upload files, called .jpg. This vulnerability works, when user try to edit this download package. Solution Upgrade to the latest version...

WordPress Plugin Download Manager Free 2.7.94 Pro 4 - (Authenticated) Persistent Cross-Site Scripting

WordPress Plugin Download Manager Free 2.7.94 Pro 4 - Authenticated Persistent Cross-Site Scripting WordPress Download Manager Free 2.7.94 & Pro 4 Authenticated Stored XSS Vendor Homepage: http://www.wpdownloadmanager.com Software Link: https://wordpress.org/plugins/download-manager Affected...

Internet Download Manager - .ief Crash (PoC)

Internet Download Manager - .ief Crash PoC !/usr/bin/env python Title : Internet Download Manager - Crash Proof Of Concept Affected Versions: All Version Founder : InternetDownloadManager Tested on Windows 7 / Server 2008 Author : Mohammad Reza Espargham Linkedin : https://ir.linkedin.com/in/reza...

Internet Download Manager - Find Download Crash (PoC)

!/⁠usr/⁠bin/⁠env python Title : Internet Download Manager -⁠ Crash Proof Of Concept Affected Versions: All Version Founder : InternetDownloadManager Tested on Windows 7 /⁠ Server 2008 Author : Mohammad Reza Espargham Linkedin : https://ir.linkedin.com/in/rezasp E-⁠Mail : meatrezadotes ,...

Internet Download Manager - Find Download Crash (PoC)

Internet Download Manager - Find Download Crash PoC !/⁠usr/⁠bin/⁠env python Title : Internet Download Manager -⁠ Crash Proof Of Concept Affected Versions: All Version Founder : InternetDownloadManager Tested on Windows 7 /⁠ Server 2008 Author : Mohammad Reza Espargham Linkedin :...

Internet Download Manager - '.ief' Crash (PoC)

!/usr/bin/env python Title : Internet Download Manager - Crash Proof Of Concept Affected Versions: All Version Founder : InternetDownloadManager Tested on Windows 7 / Server 2008 Author : Mohammad Reza Espargham Linkedin : https://ir.linkedin.com/in/rezasp E-Mail : meatrezadotes ,...

WordPress Download Manager Plugin Information Disclosure

An information disclosure vulnerability has been reported in WordPress Download Manager plugin. Successful exploitation of this vulnerability could allow a remote attacker to download local files, and may lead to information disclosure...

WordPress Download Manager Plugin <= 2.2.2 - XSS

This plugin is prone to admin.php cid parameter cross site scripting vulnerability. Solution Update the plugin...

WordPress WP Filebase Download Manager Plugin <= 0.3.0.02 - Arbitrary Code Execution

This plugin is prone to class/Admin.php GetFileHash function remote code execution vulnerability. Solution Update the plugin...

Internet Download Manager 6.xx DLL Hijacking

/ + Author: TUNISIAN CYBER + Exploit Title: Internet Download Manager 6.XX DLL Hijacking + Date: 30-03-2015 + Type: Local Exploits + Vendor: http://www.internetdownloadmanager.com/ + Tested on: WinXp + Friendly Sites: sec4ever.com + Twitter: @TCYB3R + POC IMG:http://i.imgur.com/qfkEFR8.png...

WordPress Download Manager Plugin Privilege Escalation (CVE-2014-9260)

A privilege escalation vulnerability has been found in WordPress Download Manager Plugin. An authenticated remote attacker may leverage this vulnerability to gain administrative access to the vulnerable server...

IDM-6.20-Local-Buffer

Author: TUNISIAN CYBER + Exploit Title: IDM v6.20 Local Buffer Overflow + Date: 27-03-2015 + Type: Local Exploits + Tested on: WinXp/Windows 7 Pro + Vendor: https://www.internetdownloadmanager.com/ + Friendly Sites: sec4ever.com...

Internet Download Manager 6.20 Local Buffer Overflow Vulnerability

Internet Download Manager version 6.20 suffers from a local buffer overflow vulnerability. Usage Info Create IDMLBOF.txt then open , copy the content then go to Options-VPN/Dial Up and paste it in the username field. !/usr/bin/env python + Author: TUNISIAN CYBER + Exploit Title: IDM v6.20 Local...

IDM 6.20 - Local Buffer Overflow

!/usr/bin/env python + Author: TUNISIAN CYBER + Exploit Title: IDM v6.20 Local Buffer Overflow + Date: 27-03-2015 + Type: Local Exploits + Tested on: WinXp/Windows 7 Pro + Vendor: http://www.internetdownloadmanager.com/ + Friendly Sites: sec4ever.com + Twitter: @TCYB3R +...

Internet Download Manager 6.20 Local Buffer Overflow

!/usr/bin/env python + Author: TUNISIAN CYBER + Exploit Title: IDM v6.20 Local Buffer Overflow + Date: 27-03-2015 + Type: Local Exploits + Tested on: WinXp/Windows 7 Pro + Vendor: https://www.internetdownloadmanager.com/ + Friendly Sites: sec4ever.com + Twitter: @TCYB3R +...