12884 matches found
Mac OS X rootpipe Local Privilege Escalation Exploit
Mac OS X rootpipe local proof of concept privilege escalation exploit. PoC exploit code for rootpipe CVE-2015-1130 Created by Emil Kvarnhammar, TrueSec Tested on OS X 10.7.5, 10.8.2, 10.9.5 and 10.10.2 import os import sys import platform import re import ctypes import objc import sys from Cocoa...
phpmps 注入
简要描述： phpmps 注入 详细说明： member.php 的comment流程中，使用了$username存在二次注入 漏洞证明： 注册一个 xxxxx\ 的用户并登陆，提交请求如下，可以看到延迟效果和执行的语句。 POC: POST /phpmpsv2.3build150302utf8https://images.seebug.org/upload/member.php?act=comment id=1&content=,1,1,1,sleep3 -- a...
Apple Mac OSX 10.7.510.8.210.9.510.10.2 - Rootpipe Local Privilege Escalation
Apple Mac OSX 10.7.510.8.210.9.510.10.2 - Rootpipe Local Privilege Escalation PoC exploit code for rootpipe CVE-2015-1130 Created by Emil Kvarnhammar, TrueSec Tested on OS X 10.7.5, 10.8.2, 10.9.5 and 10.10.2 import os import sys import platform import re import ctypes import objc import sys from...
Apple Mac OSX < 10.7.5/10.8.2/10.9.5/10.10.2 - 'Rootpipe' Local Privilege Escalation
PoC exploit code for rootpipe CVE-2015-1130 Created by Emil Kvarnhammar, TrueSec Tested on OS X 10.7.5, 10.8.2, 10.9.5 and 10.10.2 import os import sys import platform import re import ctypes import objc import sys from Cocoa import NSData, NSMutableDictionary, NSFilePosixPermissions from...
QAEngine Theme - Privilege Escalation
QAEngine vulnerability allows an attacker to have an administrator account on the target's website. PoC http://www.example.com/wp-admin/admin-ajax.php?action=ae-sync-user=createlogin=xADMINpass=xPASS=administrator...
w3tw0rk Pitbull Perl IRC Bot - Remote Code Execution
w3tw0rk Pitbull Perl IRC Bot - Remote Code Execution thehunter.py Exploit Title: Pitbull / w3tw0rk Perl IRC Bot Remote Code Execution Author: Jay Turla @shipcod3 Description: pitbull-w3tw0rkhunter is POC exploit for Pitbull or w3tw0rk IRC Bot that takes over the owner of a bot which then allows...
Synology.com Cross Site Scripting
Exploit Title: Synology.com sub-domain OAuth exchange Reflected XSS RXSS Date: 03/04/2014 Author: Yann CAM @ Synetis - ASafety Vendor or Software Link: www.synology.com Version: / Category: Reflected Cross Site Scripting Google dork: Tested on: Synology.com update sub-domain Synology description ...
WordPress Plugin Simple Ads Manager 2.5.94 - Arbitrary File Upload
WordPress Plugin Simple Ads Manager 2.5.94 - Arbitrary File Upload Vulnerability title: Wordpress plugin Simple Ads Manager - Arbitrary File Upload Product: Wordpress plugin Simple Ads Manager Vendor: https://profiles.wordpress.org/minimus/ Affected version: Simple Ads Manager 2.5.94 Download lin...
Wordpress Business Intelligence Plugin - SQL injection Vulnerability
Exploit for php platform in category web applications Exploit Title : Wordpress Plugin 'Business Intelligence' Remote SQL Injection vulnerability Author : Jagriti Sahu AKA Incredible Vendor Link : https://www.wpbusinessintelligence.com Download Link :...
NASA.gov Cross Site Scripting
Exploit Title: NASA.gov main-domain DOM-XSS Date: 01/04/2015 Author: Yann CAM - Georges TAUPIN @ Synetis - ASafety Vendor or Software Link: www.nasa.gov Version: / Category: DOM-XSS Google dork: Tested on: NASA.gov main-domain NASA description :...
Palo Alto Traps Server 3.1.2.1546 - Persistent Cross-Site Scripting
!/usr/bin/ruby =begin ------------------------------------------------------------------------ Product: Palo Alto Traps Server formerly Cyvera Endpoint Protection Vendor: Palo Alto Networks Vulnerable Versions: 3.1.2.1546 Tested Version: 3.1.2.1546 Advisory Publication: 29 March 2015 Vendor...
X (Formerly Twitter): HTTP Response Splitting (CRLF injection) due to headers overflow
Hi, I would like to report another HTTP Response Splitting vulnerability caused by header fields "overflow" that allows attackers to inject arbitrary headers in the response. Note that this issue is similar to 52042 but the root cause is different. Also, the below PoC is not the only affected pag...
“Tear forced war”in the second quarter: Google found Windows 7 and Windows 8.1 there is a local mentioning right and sandbox escape vulnerabilities, Microsoft deny it-vulnerability warning-the black bar safety net
The Google security team recently found that Windows 7 and Windows 8.1 there is a local mentioning right and sandbox escape vulnerabilities, it was Microsoft's ruthless denied. Google will publish vulnerability details and POC. Vulnerability description This problem exists in theoperating systems...
Stored XSS Vulnerability in ADPlugg Wordpress Plugin
===================================================== Stored XSS Vulnerability in ADPlugg Wordpress Plugin ===================================================== . contents:: Table Of Content Overview ======== Title :Stored XSS Vulnerability in ADPlugg Wordpress Plugin Author: Kaustubh G. Padwad...
Joomla Spider FAQ SQL Injection
Exploit Title : Joomla Spider FAQ component SQL Injection vulnerability Author : Manish Kishan Tanwar AKA error1046 Vendor Link : http://demo.web-dorado.com/spider-faq.html Date : 21/03/2015 Discovered at : IndiShell Lab Love to : zero cool,Team indishell,Mannu,Viki,Hardeep Singh,Incredible,Kisha...
PHP unserialize() Use-After-Free
Use After Free Vulnerability in unserialize Taoguang Chen - Write Date: 2015.2.3 - Release Date: 2015.3.20 A use-after-free vulnerability was discovered in unserialize with a specially defined object's wakeup magic method that can be abused for leaking arbitrary memory blocks or execute arbitrary...
D-Link and TRENDnet 'ncc2' service - multiple vulnerabilities
D-Link and TRENDnet 'ncc2' service - multiple vulnerabilities Discovered by: ---- Peter Adkins [email protected] Access: ---- Local network; unauthenticated access. Remote network; unauthenticated access. Remote network; 'drive-by' via CSRF. Tracking and identifiers: ---- CVE - Mitre...
FastStone Image Viewer 5.3 - '.tga' Crash (PoC)
Exploit Title : FastStoneImage Viewer Corrupted tga IMAGESPECIFICATION.Width Crash POC Product : FastStoneImage Viewer Date : 25.02.2015 Exploit Author : ITDefensor Vulnerability Research Team http://itdefensor.ru/ Software Link : http://www.faststone.org/FSViewerDownload.htm Vulnerable version :...
FastStone Image Viewer 5.3 - .tga Crash (PoC)
FastStone Image Viewer 5.3 - .tga Crash PoC Exploit Title : FastStoneImage Viewer Corrupted tga IMAGESPECIFICATION.Width Crash POC Product : FastStoneImage Viewer Date : 25.02.2015 Exploit Author : ITDefensor Vulnerability Research Team http://itdefensor.ru/ Software Link :...
Brasero CDDVD Burner 3.4.1 - .m3u Buffer Overflow Crash (PoC)
Brasero CDDVD Burner 3.4.1 - .m3u Buffer Overflow Crash PoC !/usr/bin/python Exploit title: Brasero 3.4.1 'm3u' Buffer Overflow POC Date Discovered: 15th March' 2015 Exploit Author: Avinash Kumar Thapa "-Acid" Vulnerable Software: Brasero 3.4.1 CD/DVD for the Gnome Desktop...