Joomla HD FLV 2.1.0.1 Arbitrary File Download

!/usr/bin/env python Exploit Title : Joomla HD FLV 2.1.0.1 and below Arbitrary File Download Vulnerability Exploit Author : Claudio Viviani Vendor Homepage : http://www.hdflvplayer.net/ Software Link : http://www.hdflvplayer.net/downloadcount.php?pid=5 Dork google 1: inurl:/component/hdflvplayer/...

Joomla HD FLV Player 2.1.0.1 - Arbitrary File Download Vulnerability

Joomla HD FLV version 2.1.0.1 suffers from an arbitrary file download vulnerability !/usr/bin/env python Exploit Title : Joomla HD FLV 2.1.0.1 and below Arbitrary File Download Vulnerability Exploit Author : Claudio Viviani Vendor Homepage : http://www.hdflvplayer.net/ Software Link :...

Web Servers File Download Manipulation

An attacker can manipulate a web server to download and execute code stored on a third party server...

D-Link DCS-2103 Directory Traversal

Hello list! There are Directory Traversal and Full path disclosure vulnerabilities in D-Link DCS-2103 IP camera. ------------------------- Affected products: ------------------------- Vulnerable is the next model: D-Link DCS-2103, Firmware 1.0.0. This model with other firmware versions also must ...

Joomla! Component com_hdflvplayer < 2.1.0.1 - Arbitrary File Download

!/usr/bin/env python Exploit Title : Joomla HD FLV 2.1.0.1 and below Arbitrary File Download Vulnerability Exploit Author : Claudio Viviani Vendor Homepage : http://www.hdflvplayer.net/ Software Link : http://www.hdflvplayer.net/downloadcount.php?pid=5 Dork google 1: inurl:/component/hdflvplayer/...

Joomla! Component com_hdflvplayer 2.1.0.1 - Arbitrary File Download

Joomla! Component comhdflvplayer 2.1.0.1 - Arbitrary File Download !/usr/bin/env python Exploit Title : Joomla HD FLV 2.1.0.1 and below Arbitrary File Download Vulnerability Exploit Author : Claudio Viviani Vendor Homepage : http://www.hdflvplayer.net/ Software Link :...

Parallels Plesk Sitebuilder 9.5 - Multiple Vulnerabilities

No description provided by source. +++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Title : Multiple Vulnerabilities in Parallels® Plesk Sitebuilder Author : alieye vendor : http://www.parallels.com/ Contact : [email protected] Risk : High Class: Remote Google Dork: inurl::2006/Sites...

强智教务管理信息系统任意文件下载致多所学校沦陷打包部分学校（赤裸裸的sa）

简要描述： RT 详细说明： 关键字：版 权:长沙市强智科技发展有限责任公司·版权所有 这只是我搜索的部分网站。 http://58.18.213.238/jwgl/public/download.asp?filename=../jwjs/conn/connstring.asp. http://jiaowu.hustwenhua.net/public/download.asp?filename=../jwjs/conn/connstring.asp...

Joomla-FaceGallery 1.0 /index.php 任意文件下载漏洞

No description provided by source...

Joomla MacGallery 1.5 /index.php 任意文件下载漏洞

No description provided by source...

WordPress Download Manager Plugin - Arbitrary File Download

Because of this vulnerability, the attackers can read arbitrary files in the "fname" parameter to views/filedownload.php or filedownload.php. Solution Update the plugin...

Parallels Plesk Sitebuilder 9.5 - Multiple Vulnerabilities

Exploit for php platform in category web applications +++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Title : Multiple Vulnerabilities in Parallels® Plesk Sitebuilder Author : alieye vendor : http://www.parallels.com/ Contact : email protected Risk : High Class: Remote Google Dork:...

WordPress Download Manager Arbitrary File Download

WordPress Download Manager Plugin - Arbitrary File Download CWE: CWE-98 Risk: High Author: Hugo Santiago dos Santos Contact: [email protected] Date: 25/10/2014 Vendor Homepage: https://wordpress.org/plugins/download-manager/ Tested on: Windows 7 and Gnu/Linux Google Dork:...

Multiple Vulnerabilities in Parallels® Plesk Sitebuilder

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Title : Multiple Vulnerabilities in Parallels® Plesk Sitebuilder Author : alieye vendor : http://www.parallels.com/ Contact : [email protected] Risk : High Class: Remote Google Dork: inurl::2006/Sites ext:aspx inurl::2006 inurl:.ashx?media...

[CERT VU#121036 / Multiple CVEs] RCE, domain admin creds leakage and more in BMC Track-It!

Hi, tl;dr - I am releasing two 0 day exploits for BMC Track-It!. One is a RCE and the other gets you the domain admin and SQL database creds. Other minor vulns are also disclosed. Details below. CERT handled the disclosure for these vulnerabilities see CERT VU121036 and according to them BMC didn...

ASProxy <= 5.5.0 Arbitrary File Download Vulnerability

Exploit for asp platform in category web applications PoC: http://host/surf.aspx?dec=1&url=Base64code Enter URL: file:///C:/windows/system32/cmd.exe file:///C:/windows/system32/drivers/etc/hosts file:///C:/Program Files/Internet Explorer/iexplore.exe ...any other path 0day.today 2018-04-03...

LittleSite 0.1 /index.php 任意文件下载漏洞

No description provided by source...

skywcm v3.1 /skywcm/webpage/download.jsp 任意文件下载漏洞

No description provided by source...

XAMPP < 1.8.2 Local Write Access Vulnerability (Oct 2014) - Active Check

XAMPP is prone to an arbitrary file download vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apachefriends:xampp";...

Joomla! Mac Gallery Component Arbitrary File Download Vulnerability

Joomla! Mac Gallery Component is prone to arbitrary file download vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...