WebCC Remote Video Surveillance System Exploits Arbitrary File Download Vulnerabilities

WebCC remote video surveillance system is a video surveillance system of Jinan Zhongwei Century Technology Co. WebCC remote video surveillance system in China Wealth WebCC remote video surveillance system there are arbitrary file download vulnerability. Comprehensive use of the vulnerability,...

WordPress NativeChurch theme arbitrary file download vulnerability

WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL.NativeChurch is a multi-purpose theme. An arbitrary file download vulnerability exists in the WordPress NativeChurch theme, which allows remote attackers to exploit...

Download Zip Attachments 1.0 File Download

Title: Remote file download vulnerability in download-zip-attachments v1.0 Author: Larry W. Cashdollar, @larry0 Date: 2015-06-10 Download Site: https://wordpress.org/plugins/download-zip-attachments/ Vendor: rivenvirus Vendor Notified: 2015-06-15 Vendor Contact:...

WordPress History Collection Plugin Arbitrary File Download Vulnerability

WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. An arbitrary file download vulnerability in the WordPress History Collectio plugin allows remote attackers to exploit the vulnerability by submitting a special...

BlackCat CMS 'logs.php' Arbitrary File Download Vulnerability

BlackCat CMS is a content management system based on PHP5 and HTML5. BlackCat CMS suffers from an input validation vulnerability that allows remote attackers to submit a special request to download arbitrary files...

WordPress WP-Instance-Rename 1.0 File Download

Title: Arbitrary File download in wordpress plugin wp-instance-rename v1.0 Author: Larry W. Cashdollar, @larry0 Date: 2015-06-12 Download Site: https://wordpress.org/plugins/wp-instance-rename/ Vendor: Vlajo Vendor Notified: 2015-06-12 Advisory: http://www.vapid.dhs.org/advisory.php?v=127 Vendor...

WordPress Zip Attachments Plugin Arbitrary File Download Vulnerability

WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. An arbitrary file download vulnerability exists in the WordPress Zip Attachments plugin, which allows remote attackers to exploit the vulnerability by submitting a...

Linux/x86 - Download & Execute

Linux/x86 - Download & Execute. Shellcode exploit for linx86 platform Linux/x86 Download&Execute ------WE ARE BOMBERMANS---- Greetz : BombermanLeader Author : B3mB4m Just the two of us LOL. Info! This shellcode has two part.Because when using fork in asm, ocurrs problems in shellcode. So you can...

wp-instance-rename <= 1.0 - Arbitrary File Download

The wp-instance-rename WordPress plugin was affected by an Arbitrary File Download security vulnerability. url --data "dbname=wp&dumpfname=/etc/passwd&backupfolder=." http://www.example.com/wp-instance-rename/mysqldumpdownload.php -o p.zip...

wp-instance-rename <= 1.0 - Arbitrary File Download

The wp-instance-rename WordPress plugin was affected by an Arbitrary File Download security vulnerability. PoC url --data "dbname=wp=/etc/passwdfolder=." http://www.example.com/wp-instance-rename/mysqldumpdownload.php -o p.zip...

WordPress Revslider 4.2.2 XSS / Information Disclosure Vulnerabilities

WordPress Revslider plugin version 4.2.2 suffer from cross site scripting, file download, and information disclosure vulnerabilities. Note that this finding houses site-specific data. | Title : WordPress Revslider 4.2.2 Multi Vulnerability | Author : indoushka | email : email protected | Dork :...

BlackCat CMS v1.1.1 Arbitrary File Download Vulnerability

Exploit Title: BlackCat CMS v1.1.1 Arbitrary File Download Vulnerability Date: 2015/06/16 Vendor Homepage: http://blackcat-cms.org/ Software Link: http://blackcat-cms.org/temp/packetyzer/blackcatcms2fo3PXdKj1.zip Version: v1.1.1 Tested on: Centos 6.5,PHP 5.4.41 Category: webapps Description...

BlackCat CMS 1.1.1 Arbitrary File Download Vulnerability

BlackCat CMS version 1.1.1 suffers from an arbitrary file download vulnerability. Exploit Title: BlackCat CMS v1.1.1 Arbitrary File Download Vulnerability Date: 2015/06/16 Vendor Homepage: http://blackcat-cms.org/ Software Link: http://blackcat-cms.org/temp/packetyzer/blackcatcms2fo3PXdKj1.zip...

BlackCat CMS 1.1.1 - Arbitrary File Download

Exploit Title: BlackCat CMS v1.1.1 Arbitrary File Download Vulnerability Date: 2015/06/16 Vendor Homepage: http://blackcat-cms.org/ Software Link: http://blackcat-cms.org/temp/packetyzer/blackcatcms2fo3PXdKj1.zip Version: v1.1.1 Tested on: Centos 6.5,PHP 5.4.41 Category: webapps Description...

BlackCat CMS 1.1.1 - Arbitrary File Download

BlackCat CMS 1.1.1 - Arbitrary File Download Exploit Title: BlackCat CMS v1.1.1 Arbitrary File Download Vulnerability Date: 2015/06/16 Vendor Homepage: http://blackcat-cms.org/ Software Link: http://blackcat-cms.org/temp/packetyzer/blackcatcms2fo3PXdKj1.zip Version: v1.1.1 Tested on: Centos 6.5,P...

MantisBT 1.3.0 File Download

| Title : Mantis 1.3.0 Bug Trackers File Download Vulnerability | Author : indoushka | email : [email protected] | Dork : Powered by MantisBT 1.3.0-rc1-dev master-5ee4075 | Tested on: windows 8.1 Français V.Pro | Download : https://www.mantisbt.org ======================================= p...

BlackCat CMS 1.1.1 Arbitrary File Download

Exploit Title: BlackCat CMS v1.1.1 Arbitrary File Download Vulnerability Date: 2015/06/16 Vendor Homepage: http://blackcat-cms.org/ Software Link: http://blackcat-cms.org/temp/packetyzer/blackcatcms2fo3PXdKj1.zip Version: v1.1.1 Tested on: Centos 6.5,PHP 5.4.41 Category: webapps Description...

WordPress NativeChurch Theme 1.0 / 1.5 Arbitrary File Download

Exploit Title: Wordpress Theme NativeChurch - Arbitrary File Download Google Dork: inurl:"/wp-content/themes/NativeChurch/" Date: 13/6/2015 Exploit Author: Arash Khazaei Vendor Homepage: http://support.imithemes.com/forums/forum/html-templates/native-church/ Software Link: N/A Version: 1.0-1.5...

WordPress SE HTML5 Album Audio Player Plugin 1.1.0 - Directory Traversal

There is a remote file download vulnerability in this plugin. The file called " downloadaudio.php" does not check the file path. Solution Upgrade the plugin...

Zip Attachments <= 1.1.4 - Arbitrary File Download

The zip-attachments plugin allows arbitrary file downloads because it does not check the download path of the requested file. http://www.example.com/wp-content/plugins/zip-attachments/download.php?zafile=../../../../../etc/passwd&zafilename=passwd...