12883 matches found
WordPress Plugin Extra User Details 0.4.2 - Privilege Escalation
""" Exploit Title: Extra User Details Privilege Escalation Discovery Date: 2016-02-13 Exploit Author: Panagiotis Vagenas Author Link: https://twitter.com/panVagenas Vendor Homepage: http://vadimk.com/ Software Link: https://wordpress.org/plugins/extra-user-details/ Version: 0.4.2 Tested on:...
Prezi Cross Site Scripting
Document Title: =============== Prezi Bug Bounty 7 - Charts Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1725 Release Date: ============= 2016-02-23 Vulnerability Laboratory ID VL-ID: ==================================== 1723...
Ubiquiti Networks UniFi 3.2.10 - Cross-Site Request Forgery
Exploit for hardware platform in category web applications 1. ADVISORY INFORMATION ----------------------- Product: Ubiquiti Networks UniFi Vendor URL: www.ubnt.com Type: Cross-Site Request Forgery CWE-353 Date found: 2015-03-19 Date published: 2016-02-23 CVSSv3 Score: 6.3...
Ubiquiti Networks UniFi 3.2.10 - Cross-Site Request Forgery
Ubiquiti Networks UniFi 3.2.10 - Cross-Site Request Forgery RCE Security Advisory https://www.rcesecurity.com 1. ADVISORY INFORMATION ----------------------- Product: Ubiquiti Networks UniFi Vendor URL: www.ubnt.com Type: Cross-Site Request Forgery CWE-353 Date found: 2015-03-19 Date published:...
GitLab: Markdown based stored XSS (IE only)
Hello, My other report 116697 deals with any browser even through its not a direct XSS as it doesn't execute in the context of the site. But here is another type of XSS using vbscript: which affects only IE users but executes on the context of the site check the screenshot for POC...
Core FTP Server 1.2 - Buffer Overflow (PoC)
Exploit for windows platform in category local exploits -- coding: utf-8 -- Exploit Title : Core FTP Server v1.2 - BufferOverflow POC Date: 2016-02-22 Author: INSECT.B Facebook : https://www.facebook.com/B.INSECT00 GitHub : binsect00 Blog : http://binsect00.tistory.com Vendor Homepage :...
Prezi Bug Bounty #7 - (Charts) Persistent Vulnerability
Document Title: =============== Prezi Bug Bounty 7 - Charts Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1723 Release Date: ============= 2016-02-22 Vulnerability Laboratory ID VL-ID: ==================================== 1723...
SOLIDserver < 5.0.4 - Local File Inclusion
Title: SOLIDserver =5.0.4 - Local File Inclusion Vunerability Author: Saeed reza Zamanian penetrationtest @ Linkedin Product: SOLIDserver Tested Version: : 5.0.4 and 4.0.2 Vendor: efficient IP http://www.efficientip.com Google Dork: SOLIDserver login Date: 17 Feb 2016...
SOLIDserver <= 5.0.4 - Local File Inclusion
Exploit for php platform in category web applications Title: SOLIDserver =5.0.4 - Local File Inclusion Vunerability Author: Saeed reza Zamanian penetrationtest @ Linkedin Product: SOLIDserver Tested Version: : 5.0.4 and 4.0.2 Vendor: efficient IP http://www.efficientip.com Google Dork: SOLIDserve...
Uber: XSS @ love.uber.com
Hello Team, I found a Cross-Site Scripting XSS in http://love.uber.com/ I'm not sure if it is eligible for bounty, as this domain is not listed under scope of the program. still as the issue is an XSS, i wanted to bring it to your attention. please mark this report as informative if you're not...
DirectAdmin 1.491 - Cross-Site Request Forgery
Exploit for php platform in category web applications ============================================================================= Title : DirectAdmin 1.491 CSRF Vulnerability Date : 27-10-2014 updated 18-02-2016 Version : =1.491 Author : Necmettin COSKUN =@babayarisi Blog :http://ha.cker.io...
Adobe Flash - H264 File Stack Corruption
Source: https://code.google.com/p/google-security-research/issues/detail?id=633 The attached flv file causes stack corruption when loaded into Flash. To use the PoC, load LoadMP42.swf?file=lownull.flv from a remote server. Proof of Concept:...
Adobe Flash - Sound.loadPCMFromByteArray Dangling Pointer
Exploit for multiple platform in category dos / poc Source: https://code.google.com/p/google-security-research/issues/detail?id=698 There is a dangling pointer that can be read, but not written to in loadPCMFromByteArray. A minimal PoC is as follows: var s = new Sound; var b = new ByteArray; for...
glibc getaddrinfo 栈缓冲区溢出漏洞(CVE-2015-7547)
漏洞概要 Glibc是GNU发布的LIBC库的C运行库，Glibc是Linux系统中最底层的API，基本其它任何运行库都会依赖于Glibc。Glibc除了封装Linux操作系统所提供的系统服务外，还提供了其它的必要服务的实现。由于 Glibc 几乎包含所有的 UNIX 通行的标准，可以说是操作系统重要支撑库。 Glibc中的 DNS...
Adobe Flash - textfield Constructor Type Confusion
Adobe Flash - textfield Constructor Type Confusion Source: https://code.google.com/p/google-security-research/issues/detail?id=701 There is a type confusion vulnerability in the TextField constructor in AS3. When a TextField is constructed, a generic backing object is created and reused when...
Dimofinf CMS 3.0.0 Cross Site Scripting
Exploit Title : Dimofinf CMS 3.0.0 Cross Site Scripting Exploit Author : Persian Hack Team Vendor Homepage : http://www.dimofinf.net/index.php Google Dork : "Powered by Dimofinf cms Version 3.0.0" Date: 2016/02/17 Version = 3.0.0 PoC: Username: MobhaM" onmouseover=alert"MobhaM" bad=" Password : 0...
Adobe Flash - H264 File Stack Corruption
Adobe Flash - H264 File Stack Corruption Source: https://code.google.com/p/google-security-research/issues/detail?id=633 The attached flv file causes stack corruption when loaded into Flash. To use the PoC, load LoadMP42.swf?file=lownull.flv from a remote server. Proof of Concept:...
Adobe Flash - H264 File Stack Corruption
Exploit for multiple platform in category dos / poc Source: https://code.google.com/p/google-security-research/issues/detail?id=633 The attached flv file causes stack corruption when loaded into Flash. To use the PoC, load LoadMP42.swf?file=lownull.flv from a remote server. Proof of Concept:...
WebDAV local mention the right Vulnerability, CVE-2 0 1 6-0 0 5 1. THE POC & EXP-vulnerability warning-the black bar safety net
Vulnerability information The vulnerability exists in the Microsoft Web Distributed Authoring and Versioning WebDAV, if Microsoft Web Distributed Authoring and Versioning WebDAV client to validate the input properly, then which will present elevation of privilege vulnerability. Successful...