DNS Reverse Download and Exec Shellcode

No description provided by source. Shellcode: download and execute file via reverse DNS channel Features: Windows 7 tested UAC without work svchost.exe makes requests via getaddrinfo Firewall/Router/Nat/Proxy bypass reverse connection like dnscat do, but without sockets and stable! NO SOCKET DNS...

phpdaily (sql/xss/lfd) Multiple Vulnerabilities

No description provided by source. | | | | | / / / / / // / / / / // || || |/ // // \ | | | | ^ / / / // / // / / / // // || | | v // / / O / | | | | / \ / / / / / / / / /// // /| || | | \ / / / | | | |/ / / / / / / / / / / / / / // /| || | | |\ \ / / /\ \ | | | / /\ / // // // // // ///|||||...

UUSee 2008 UUUpgrade ActiveX Control 'Update' Method Arbitrary File Download Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/29963/info UUSee is prone to a vulnerability that can cause malicious files to be downloaded and saved to arbitrary locations on an affected computer. Attackers may exploit this issue to overwrite sensitive files with...

CMS Loko Media Local File Download Vulnerability

No description provided by source. !===========================================================================! CMS Lokomedia Local File Download Vulnerability Author : Xr0b0t [email protected] Homepage : http://www.indonesiancoder.com | http://xrobot.mobi | http://mc-crew.net Date : 16 Mei,...

ASP Folder Gallery Download_Script.ASP Arbitrary File Download Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/24345/info ASP Folder Gallery is prone to an arbitrary-file-download vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit this issue to download arbitrary files...

Snapshot Viewer for Microsoft Access ActiveX Control Arbitrary File Download

No description provided by source. $Id: ms08041snapshotviewer.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

qibocmsV7整站系统任意文件下载导致无限制注入多处(可提升自己为管理 Demo演示)

简要描述： 我擦 写完标题后发现标题如此的长。 应该是qibo中用得最多的系统了把。 与之前我发的那个有所不同。 Fuzz。 发现qibo是不是换人了? 给分给的越来越低? 之前18 到 10 到现在的5分了? 用demo来演示演示把。 应该可以直接登录后台 懒得弄了。 如果这个洞还不给20的话 我只能呵呵了。 详细说明： http://bbs.qibosoft.com/down2.php?v=v7down 下载地址 刚下载的。 在inc/job/download.php中 $url=trimbase64decode$url;...

Wordpress Theme Elegance /dl-skin.php 任意文件下载漏洞

No description provided by source...

Wordpress Theme Infocus /dl-skin.php 任意文件下载漏洞

No description provided by source...

某门户网站系统存在两处任意文件下载漏洞

简要描述： 两处。 详细说明： 看样式对比，应该是官网这个产品： http://www.threeoa.com/product/501.html 案例应该还是不少的！ 第一处下载： http://www.jmsyz.net/eeoaftp/downloadFile.action?path=WEB-INF/web.xml http://jdyz.ijd.cn/eeoaftp/downloadFile.action?path=WEB-INF/web.xml http://www.wxxqml.com/eeoaftp/downloadFile.action?path=WEB-INF/web.x...

WordPress Theme Method Arbitrary File Download Vulnerability

WordPress theme SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mysitemyway:method"; ifdescription...

Wordpress Theme Manbiz2 Arbitrary File Download Vulnerability

This exploit allows attacker to download any writable file from the server Usage Info Put the path of the file in the file's field of the exploit ,then click "Download" button then you get the file directly Title : Wordpress Theme Manbiz2 Arbitrary File Download Vulnerability Author : Aloulou Dat...

Wordpress Theme Myriad Arbitrary File Download Vulnerability

This exploit allows attacker to download any writable file from the server Usage Info The exploit extension is .html Put the path of the file in the file's field of the exploit ,then click "Download" button then you get the file directly Title : Wordpress Theme Myriad Arbitrary File Download...

Wordpress Theme Construct Arbitrary File Download Vulnerability

This exploit allows attacker to download any writable file from the server Usage Info Put the path of the file in the file's field of the exploit ,then click "Download" button then you get the file directly Title : Wordpress Theme Construct Arbitrary File Download Vulnerability Author : Aloulou...

Wordpress Theme Echelon Arbitrary File Download Vulnerability

This exploit allows attacker to download any writable file from the server Usage Info Put the path of the file in the file's field of the exploit ,then click "Download" button then you get the file directly Title : Wordpress Theme Echelon Arbitrary File Download Vulnerability Author : Aloulou Dat...

Wordpress Theme Awake Arbitrary File Download Vulnerability

This exploit allows attacker to download any writable file from the server Usage Info Put the path of the file in the file's field of the exploit ,then click "Download" button then you get the file directly Title : Wordpress Theme Awake Arbitrary File Download Vulnerability Author : Aloulou Date ...

Wordpress Theme Elegance Arbitrary File Download Vulnerability

This exploit allows attacker to download any writable file from the server Usage Info Put the path of the file in the file's field of the exploit ,then click "Download" button then you get the file directly Title : Wordpress Theme Elegance Arbitrary File Download Vulnerability Author : Aloulou Da...

Wordpress Theme Method Arbitrary File Download Vulnerability

This exploit allows attacker to download any writable file from the server Usage Info Put the path of the file in the file's field of the exploit ,then click "Download" button then you get the file directly Title : Wordpress Theme Method Arbitrary File Download Vulnerability Author : Aloulou Date...

Wordpress Theme Fusion Arbitrary File Download Vulnerability

This exploit allows attacker to download any writable file from the server Usage Info Put the path of the file in the file's field of the exploit ,then click "Download" button then you get the file directly Title : Wordpress Theme Fusion Arbitrary File Download Vulnerability Author : Aloulou Date...

Wordpress Theme Infocus Arbitrary File Download Vulnerability

This exploit allows attacker to download any writable file from the server Usage Info The exploit extension is .html Put the path of the file in the file's field of the exploit ,then click "Download" button then you get the file directly Title : Wordpress Theme Infocus Arbitrary File Download...