WordPress Plugin Audio Gallery Playlist 0.12 - SQL Injection

WordPress Plugin Audio Gallery Playlist 0.12 - SQL Injection Exploit Title: WordPress wp audio gallery playlist plugin prefix . "posts"; ... if isset$GET'postgallery' $query = 'SELECT FROM '.$tablename.' WHERE postparent = ''.$GET'postgallery'.'' AND postmimetype = 'audio/mpeg' ORDER BY...

WordPress Plugin Event Registration 5.4.3 - SQL Injection

WordPress Plugin Event Registration 5.4.3 - SQL Injection Exploit Title: WordPress Event Registration plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20 --------------- Vulnerable code --------------- $id= $REQUEST'id'; ... $sql = "SELECT FROM " . $eventsdetailtbl . " WHERE id='$id'";...

WordPress Plugin Couponer 1.2 - SQL Injection

Exploit Title: WordPress Couponer plugin = 1.2 SQL Injection Vulnerability Date: 2011-08-31 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/couponer.zip Version: 1.2 tested Note: magicquotes has to be turned off --- PoC ---...

DVD X Player 5.5.0 Pro / Standard Universal Exploit, DEP+ASLR Bypass

Exploit for windows platform in category local exploits // Author: sickness // Take a look at mona.py : awesome tool developed by corelanc0d3r and his team: https://www.corelan.be/index.php/2011/07/14/mona-py-the-manual/ // ----------------------------------------------------------- // Exploit...

Joomla Simple File Lister module <= 1.0 Directory Traversal Vulnerability

No description provided by source. Exploit Title: Joomla Simple File Lister module = 1.0 Directory Traversal Vulnerability Google Dork: "Simple File Lister v1.0" "Files in directory" Date: 2011-08-28 Author: evilsocket evilsocket at gmail dot com Software Link:...

WordPress Photoracer plugin <= 1.0 SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress Photoracer plugin = 1.0 SQL Injection Vulnerability Google Dork: inurl:"wp-content/plugins/photoracer/viewimg.php" Date: 2011-08-26 Author: evilsocket evilsocket at gmail dot com Software Link:...

Joomla! Component mod_simpleFileLister 1.0 - Directory Traversal

Exploit Title: Joomla Simple File Lister module = 1.0 Directory Traversal Vulnerability Google Dork: "Simple File Lister v1.0" "Files in directory" Date: 2011-08-28 Author: evilsocket evilsocket at gmail dot com Software Link:...

WordPress Collision Testimonials plugin <= 3.0 SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress Collision Testimonials plugin = 3.0 SQL Injection Vulnerability Date: 2011-08-26 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/collision-testimonials.zip Version: 3.0...

WordPress Plugin Super CAPTCHA 2.2.4 - SQL Injection

Exploit Title: WordPress Super CAPTCHA plugin Accounts Flagged'; for$i=0;$iusers ." SET spam='1' WHERE ID='". $UIDs$i ."'"; mysqlquery"UPDATE ". $wpdb-users ." SET userstatus='1' WHERE ID='". $UIDs$i ."'"; echo'USER ID: '. $UIDs$i .' marked as spammer.';...

NGS00054 Technical Advisory: : Lumension Device Control (formerly Sanctuary) remote memory corruption

======= Summary ======= Name: Lumension Device Control formerly Sanctuary remote memory corruption Release Date: 24 August 2011 Reference: NGS00054 Discoverer: Andy Davis [email protected] Vendor: Lumension Vendor Reference: Systems Affected: Lumension Device Control v4.4 SR6 Risk: High...

WordPress Plugin Photoracer 1.0 - SQL Injection

WordPress Plugin Photoracer 1.0 - SQL Injection Exploit Title: WordPress Photoracer plugin prefix."photoracer where imgid=$imgid"; $out = $wpdb-getrow$q1; --- PoC --- http://www.site.com/wp-content/plugins/photoracer/viewimg.php?id=-1 UNION SELECT 0,1,2,3,4,VERSION,6,7,8...

Groovy Media Player 2.6.0 - '.m3u' Local Buffer Overflow (PoC)

!/usr/bin/perl Exploit Title: Groovy Media Player Version 2.6.0 .m3u Local Buffer Overflow PoC Date: 26/08/2011 Author: D3r K0n!G Software Link: http://www.bestwebsharing.com/groovy-media-player Category: Local Buffer Overflow PoC Version: 2.6.0 Tested on: Windows XP SP3 CVE: N/A !/bin/usr/ZL4b!4...

Enform / Thecaryard SQL Injection

. . . | |/ |\ | \ ..\ | | //||| /\ | / \ / | | /\ | / / / / / / // / / Title : Site Designed enform Powered by thecaryard Multiple SQL Injection Vulnerabilities Vendor/Software : www.enform.co.nz & www.thecaryard.co.nz Author : kebumen cyber J feat R Contact : [email protected]...

Web Solutions Wcs2u - SQL Injection

Title : Web Solutions Wcs2u SQL Injection Vulnerability Vendor or Software Link: : http://www.wcs2u.com/ Author : tempemendoan Contact : [email protected] Google Dork : inurl:"gorengan tempe" intext:"Engineered by WCS2U.COM" === POC === » http://website/index.php?id=SQL »...

Web Solutions Wcs2u - SQL Injection

Web Solutions Wcs2u - SQL Injection Title : Web Solutions Wcs2u SQL Injection Vulnerability Vendor or Software Link: : http://www.wcs2u.com/ Author : tempemendoan Contact : [email protected] Google Dork : inurl:"gorengan tempe" intext:"Engineered by WCS2U.COM" === POC === »...

Wcs2u SQL Injection

Title : Web Solutions Wcs2u SQL Injection Vulnerability Vendor or Software Link: : http://www.wcs2u.com/ Author : tempemendoan Contact : [email protected] Google Dork : inurl:"gorengan tempe" intext:"Engineered by WCS2U.COM" === POC === » http://website/index.php?id=SQL »...

Sites By Redlab SQL Injection

Title : Site by Redlab Multiple Vulnerabilities Vendor or Software Link: : http://www.redlab.net/ Author : tempemendoan Contact : [email protected] Google Dork : inurl:"gorengan tempe" intext:"Site by Redlab Co., Ltd" === POC === » http://website/path/careers-detail.asp?id=SQL »...

Facebook SmarterMind - SQL Injection Vulnerability

Document Title: =============== Facebook SmarterMind - SQL Injection Vulnerability Release Date: ============= 2011-08-22 Vulnerability Laboratory ID VL-ID: ==================================== 44 Product & Service Introduction: =============================== This application is currently includ...

Moyea FLV Player(.flv)Local Crash Poc

Exploit for windows platform in category dos / poc !/usr/bin/python print "" print " Name: Moyea FLV Player.flvLocal Crash Poc " print " Author: Angel Injection " print " Email: email protected " print " home page: http://club-h.co.cc http://sec-krb.org " print "" try : junk = "\x41" 10000 f =...

Skype zero day HTML/(Javascript) code injection

Skype zero day HTML/Javascript code injection Noptri Public Security Advisory has publised a working skype zero day vulnerability with POC for skype. Skype users need be aware of this vulnerability. Affected Software: Software: Skype = 5.5.0.113 Affected Platforms: Windows XP, Vista, 7 Problem...