Aireplay-ng 1.2 beta3 - tcp_test Length Stack Overflow

Aireplay-ng 1.2 beta3 - tcptest Length Stack Overflow / Exploit Title: Aireplay "tcptest" Length Parameter Inconsistency Date: 10/3/2014 Exploit Author: Nick Sampanis Vendor Homepage: http://www.aircrack-ng.org/ Version: Aireplay-ng 1.2 beta3 Tested on: Kali Linux 1.0.9 x64 CVE : CVE-2014-8322...

Kali Linux "NetHunter" — Turn Your Android Device into Hacking Weapons

The developers of one of the most advance open source operating system for penetration testing, 'KALI Linux' have announced yesterday the release of a new Kali project, known as NetHunter, that runs on a Google Nexus device. Kali Linux is an open source Debian-based operating system for penetrati...

EGYWEB (Mantrac) <= Remote File Disclosure Exploit

database passwords can be drawn.. Usage Info python exploit.py http://TARGET.COM EGYWEB Mantrac Example and tested on; http://www.deltagroup.com.eg http://www.mantracvostok.ru http://www.mantracghana.com http://www.mantracnigeria.com http://www.mantrackenya.com http://www.mantractanzania.com...

Food Order Portal 8.3 Cross Site Request Forgery

Food Order Portal 8.3 - CSRF Remote Admin Delete PoC My + Author : KnocKout Contactonlymail : [email protected] HomePage : http://Cyber-Warrior.Org - http://h4x0resec.blogspot.com Greetz: DaiMon,furty,BackDoor,EthicalHacker,BARCOD3,SZE©,VolqaN,Septemb0x | Unuttuklarýmýz affola.. Turkey...

PHP Stock Management System 1.02 - Multiple Vulnerabilty

Exploit for php platform in category web applications Exploit Title: PHP Stock Management System 1.02 - Multiple Vulnerabilty Date : 9-9-2014 Author : jsass ​ Vendor Homepage: ​http://www.posnic.com/​ Software Link:​ http://sourceforge.net/projects/stockmanagement/ Version: ​1.02 Tested on: kali...

WordPress ShortCode Plugin 1.1 - Local File Inclusion Vulnerability

Exploit for php platform in category web applications Title : WordPress ShortCode Plugin - Local File Inclusion Vulnerability Severity : High+/Critical Reporters : Mehdi Karout & Christian Galeone Google Dork : inurl:wp/wp-content/force-download.php Plugin Version : 1.1 Plugin Name : Download...

LY Website CMS SQL Injection

Title: LY Website CMS Sql Injection vulnerability + Date: 2014-08-15 + Author: Iran Security Group + Vendor Homepage: http://www.lywebsite.com/ + Tested on: Windows7 & Kali Linux + Vulnerable Files: /pro.php + Dork : inurl:/pro.php?CateId= intext:"Power By LY Website" POC:...

WordPress CK-And-SyntaxHighLighter Arbitrary File Upload

Title: Wordpress ck-and-syntaxhighlighter Plugin RFU vulnerability + Date: 2014-08-12 + Author: Hekt0r + Tested on: Windows7 & Kali Linux + Vendor Homepage: http://wordpress.org/ + Software Link: http://wordpress.org/plugins/ck-and-syntaxhighlighter/ + Dork :...

J&W Communications SQL Injection

Title: J&W Communications Cms SQL Injection Vulnerability + Date: 2014-07-29 + Author: Hekt0r + Vendor Homepage: www.jw-com.com + Tested on: Windows7 & Kali Linux + Vulnerable Files: /rosters.php /team.php /scoresheet.php + Dork : intext:"designed by J&W Communications" inurl:/team.php.php?id=...

Oxwall 1.7.0 Cross Site Request Forgery / Cross Site Scripting

Oxwall 1.7.0 Multiple CSRF And Stored XSS Vulnerabilities input type="hidden" name="formname"...

Oxwall 1.7.0 - Multiple Cross-Site Request Forgery HTML Injection Vulnerabilities

Oxwall 1.7.0 - Multiple Cross-Site Request Forgery HTML Injection Vulnerabilities Oxwall 1.7.0 Multiple CSRF And Stored XSS Vulnerabilities form action="http://192.168.0.105/admin/users/roles/" method="...

Oxwall 1.7.0 Remote Code Execution

!/usr/bin/env python Oxwall 1.7.0 Remote Code Execution Exploit Vendor: Oxwall Software Foundation Product web page: http://www.oxwall.org Affected version: 1.7.0 build 7907 and 7906 Summary: Oxwall is unbelievably flexible and easy to use PHP/MySQL social networking software platform. Desc: Oxwa...

Oxwall 1.7.0 - Remote Code Execution

!/usr/bin/env python Oxwall 1.7.0 Remote Code Execution Exploit Vendor: Oxwall Software Foundation Product web page: http://www.oxwall.org Affected version: 1.7.0 build 7907 and 7906 Summary: Oxwall is unbelievably flexible and easy to use PHP/MySQL social networking software platform. Desc: Oxwa...

Oxwall 1.7.0 - Remote Code Execution

Oxwall 1.7.0 - Remote Code Execution !/usr/bin/env python Oxwall 1.7.0 Remote Code Execution Exploit Vendor: Oxwall Software Foundation Product web page: http://www.oxwall.org Affected version: 1.7.0 build 7907 and 7906 Summary: Oxwall is unbelievably flexible and easy to use PHP/MySQL social...

Kali Linux 1.0.8 — New Release Supports UEFI Boot

Great news for Hackers and Backtrack Linux fans! Offensive Security, the developers of one of the most advance open source operating system for penetration testing known as 'KALI Linux', has finally announced the release of the latest version i.e. Kali Linux 1.0.8. Kali Linux is based upon Debian...

Netgear DGN2200 Password Disclosure

Exploit Title: Password Disclosure vulnerability Software: NETGEAR DGN2200 Software Link: netgear.com Version: DGN2200 Author: Dolev Farhi, email: dolevatopenflaredotorg Date: 23.7.2014 Tested on: Kali Linux Firmware 1.0.0.291.7.29HotS 2. Vulnerability Description: ===============================...

Cabovisao wifi router WPA2PSK Default Algorithm

Cabovisao wifi router WPA2PSK Default Algorithm Exploit Many of the routers use their default key. This only works if the WPA2PSK key is the DEFAULT 68b 6MMMMb\ Y89 6M' 9 MM / YM. MM M' 6MMMMb\ 6MMMMb 6MMMMb YMMMMb Mb d' MM' MM' Mb MM' Mb Mb YM. ,P YM. MM ,MM MM MM M YMMMMb .M9 ,MM' MM Mbd' Mb MM...

Omeka 2.2.1 - Remote Code Execution

Omeka 2.2.1 - Remote Code Execution !/usr/bin/env python Omeka 2.2.1 Remote Code Execution Exploit Vendor: Omeka Team CHNM GMU Product web page: http://www.omeka.org Affected version: 2.2.1 and 2.2 Summary: Omeka is a free, flexible, and open source web-publishing platform for the display of...

Netgear DGN2200 1.0.0.29_1.7.29_HotS - Password Disclosure

Exploit Title: Password Disclosure vulnerability Software: NETGEAR DGN2200 Software Link: netgear.com Version: DGN2200 Author: Dolev Farhi, email: dolevatopenflaredotorg Date: 23.7.2014 Tested on: Kali Linux Firmware 1.0.0.291.7.29HotS 2. Vulnerability Description: ===============================...

MQAC.sys Arbitrary Write Privilege Escalation

A vulnerability within the MQAC.sys module allows an attacker to overwrite an arbitrary location in kernel memory. This module will elevate itself to SYSTEM, then inject the payload into another SYSTEM process. Module Options msf use exploit/windows/local/mqac/write msf undefinedwrite show action...