PDF Converter Editor 2.1 iOS - Local File Inclusion

PDF Converter Editor 2.1 iOS - Local File Inclusion Document Title: =============== PDF Converter & Editor 2.1 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1480 Release Date: ============= 2015-05-06 Vulnerability...

vPhoto-Album 4.2 Local File Inclusion

Document Title: =============== vPhoto-Album v4.2 iOS - File Include Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1477 Release Date: ============= 2015-05-05 Vulnerability Laboratory ID VL-ID: ==================================== 147...

Pie Register 2.0.14-2.0.15 - SQL Injection

User input is not validated correctly when accepting an Invitation Code, as such an SQL Injection attack is possible. This attack is triggered when the parameters ‘showdashwidget’ and ‘invitaioncode’ are provided to any page, by any user anonymous or otherwise. PoC import requests,base64,re...

PHP Fusion 7.02.07 XSS / Clickjacking

Hi Team, Affected Vendor: https://www.php-fusion.co.uk/home.php Date: 04/05/2015 Creditee: http://osvdb.org/creditees/13518-vadodil-joel-varghese Type of vulnerability: Persistent XSS + Clickjacking Tested on: Windows 8.1 Product: PHP Fusion Version: 7.02.07 1 Cross Site Scripting...

HackerOne: Homograph attack

Hi, I would like to report an incomplete fix of 58612 is. In short, backslash is not taken in consideration. PoC \http://ebay.com http://ebay.com...

WeeklyNews Premium Theme <= 2.2 - Cross-Site Scripting (XSS)

Vendor confirmed fixed in as 2.2.9 although this issue was not mentioned in the changelog. PoC http://www.example.com/?s=test"...

Dropbox: XSS in dropbox main domain

Video POC: https://www.youtube.com/watch?v=qgeCfWO6VIU vuln link: https://www.dropbox.com/restore/xxxx%20Team%20Folder?prev=javascript:aler1;&subjectuid=412738972...

TestDisk 6.14 - Check_OS2MB Stack Buffer Overflow (PoC)

TestDisk 6.14 - CheckOS2MB Stack Buffer Overflow PoC , , . '.' '. ', . , '. , .', , / / / \ \ ==/ /\ \ / / \ / \ / / | \ \ Y Y \ / /| / \ /||| / / /.-. / /:wq x.0 '=.|w|.=' =''"''=. presents.. TestDisk 6.14 CheckOS2MB Stack Buffer Overflow Affected versions: TestDisk 6.14 - Linux, Windows...

Ninja Privilege Escalation Detection and Prevention System 0.1.3 - Race Condition Exploit

Exploit for linux platform in category local exploits Title Ninja privilege escalation detection and prevention system race condition Author Ben 'highjack' Sheppard URL http://highjack.github.io/ Description There is a small delay between the time of execution of a command and the time privelege...

PayPal exposed a remote code execution vulnerability-vulnerability warning-the black bar safety net

Recently well-known online payment company PayPal was traced to the presence of a serious remote code execution vulnerability, an attacker could exploit the vulnerability in the PayPal web application on the server execute a malicious command, and ultimately to obtain the Server Control permissio...

White Label CMS <= 1.5.2 - Stored XSS

Due to a lack of CSRF protection, and lack of sanitation of user input, it is possible to trigger a Persistent XSS attack via a CSRF attack. This attack targets in particular the Import functionality, which is located in the 'wlcmsImport' function, within the file...

Wordpress < 4.1.2 storage type XSS analysis and stability of the POC-vulnerability warning-the black bar safety net

Wordpress thisXSSis actually very easy to use, anonymous users can post and trigger, this gives a simple analysis of the stability of the trigger of the POC. In fact, the vulnerability of the author in the articlexss-vulnerability-4-1-2/"...

i.FTP 2.21 SEH Overflow Crash PoC

Exploit for windows platform in category dos / poc iFTP 2.21 SEH overwritten Crash PoC Author: Avinash Kumar Thapa "-Acid" Date of Testing : 28th April'2015 Vendor's home page: http://www.memecode.com/iftp.php Software's Url: http://www.memecode.com/data/iftp-win32-v2.21.exe Crash Point: Go to...

UniPDF 1.2 Buffer Overflow

Exploit Title: UniPDF v1.2 BufferOverflow, SEH overwrite DoS PoC Author : Avinash Kumar Thapa "-Acid" Date of Testing : 25th April 2015 Tested On : Windows XP- Service Pack 3 && Windows 7 Home Basic Vendor Homepage: http://unipdf.com/ Software Link: http://unipdf.com/file/unipdf-setup.exe Steps t...

UniPDF 1.2 - 'xml' Buffer Overflow Crash (PoC)

Exploit Title: UniPDF v1.2 BufferOverflow, SEH overwrite DoS PoC Author : Avinash Kumar Thapa "-Acid" Date of Testing : 25th April 2015 Tested On : Windows XP- Service Pack 3 && Windows 7 Home Basic Vendor Homepage: http://unipdf.com/ Software Link: http://unipdf.com/file/unipdf-setup.exe Steps t...

Wireshark 1.12.4 - Memory Corruption and Access Violation (PoC)

!/usr/bin/python EXPLOIT TITLE: WIRESHARK IP Statistics then any of the field you can use. Statistics Packet Length Paste the buffer in the field Statistics ANCP Statistics Collectd Statistics Compared Statistis buffer = "A"80000 file = open"wireshark.txt","w" file.writebuffer file.close print "P...

Ultimate Product Catalogue <= 3.1.2 - Unauthenticated SQL Injection

Unauthenticated SQL injection in ajax call when the plugin is counting the times a product is being seen by the web visitors. The vulnerable POST parameter is "ItemID". Vulnerable code: In file Functions/ProcessAjax.php line 67: ... $ItemID = $POST'ItemID'; $Item = $wpdb-getrow"SELECT ItemViews...

shopNC O2O系统储存型xss+添加管理员POC

简要描述： 上万网点受影响 详细说明： 0x01 首先有个小问题，绝对路径泄露 0x02 首先注册一个用户，然后到圈子里面发布话题 在发布话题这里存在存储型的xss，其利用过程就是，具体可以参照这篇文章 http://drops.wooyun.org/tips/2031。 在上传附件的地方只对附件的后缀进行的检测，但是没有检测附件内容。导致我们可以把一个swf文件修改成jpg后缀的文件然后上传。其中在嵌入swf文件的时候是allowScript=always。这样就导致了xss的产生。先上传恶意的swf 虽然报错了，但是还是传上去了。 然后在话题处添加一个flash文件，就是我们上传的文...

iPassword Manager 2.6 Script Insertion

Document Title: =============== iPassword Manager v2.6 iOS - Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1453 Release Date: ============= 2015-04-21 Vulnerability Laboratory ID VL-ID: ==================================== 14...

Socrata Bug Bounty #1 - Persistent Encoding Vulnerability

Document Title: =============== Socrata Bug Bounty 1 - Persistent Encoding Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1438 Release Date: ============= 2015-04-22 Vulnerability Laboratory ID VL-ID: ====================================...