Boybdream Shop SQL Injection

============================================== Boybdream Shop Sql Injection Vulnerability ============================================== + Author : Bl4ck.Viper + Mail : [email protected] + Vender : http://www.boybdream.com/ + Dork : inurl:"shoppage.php?shopid="...

IDrive Online Backup ActiveX control Insecure Method

High-Tech Bridge SA Security Research Lab has discovered vulnerability in IDrive Online Backup ActiveX control, which can be exploited to overwrite arbitrary files. 1 Insecure method in IDrive Online Backup ActiveX Control The vulnerability is caused due to the UniBasicPack.UniTextBox...

WordPress Wysi Plugin Arbitrary File upload Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress Wysi Plugin Arbitrary File upload Vulnerability Date: June, 14th 2011 GMT +7 Author: Net.Edit0r Software Link: http://wordpress.org/extend/plugins/real-wysiwyg/ Version : 0.0.2 Tested on: ubuntu 11.04 CVE : -...

Microsoft Windows Media Player with K-Lite Codec Pack - Denial of Service (PoC)

Microsoft Windows Media Player with K-Lite Codec Pack - Denial of Service PoC Greetings, There is a DOS condition on windows media player when the klite codec pack is installed. Exploit Title: Windows Media Player with klite codec pack DOS Poc Date: 14/06/2011 Author: Nicolas Krassas ,...

Conky Linux 1.8.0 - Local Denial of Service (PoC)

Conky Linux 1.8.0 - Local Denial of Service PoC / / / Vulnerability Conky 1.8.0 on Linux / / Tested on: Linux with kernel 2.6.32.1-smp / / Found: by Arturo D'Elia / / Date found: 12 Dec 2010 / / Fix: No Fix / / Contacts: [email protected] / include include include char killyou= " w000wwwww i...

Conky Linux 1.8.0 Local DoS/PoC Exploit

Exploit for linux platform in category dos / poc / / / Vulnerability Conky 1.8.0 on Linux / / Tested on: Linux with kernel 2.6.32.1-smp / / Found: by Arturo D'Elia / / Date found: 12 Dec 2010 / / Fix: No Fix / / Contacts: email protected / / / include include include char killyou= " w000wwwww i...

Conky Linux 1.8.0 - Local Denial of Service (PoC)

/ / / Vulnerability Conky 1.8.0 on Linux / / Tested on: Linux with kernel 2.6.32.1-smp / / Found: by Arturo D'Elia / / Date found: 12 Dec 2010 / / Fix: No Fix / / Contacts: [email protected] / include include include char killyou= " w000wwwww i exploit it and i kill you!"; int main int argc,...

Pacer Edition CMS 2.1 (l param) Local File Inclusion Vulnerability

Exploit for php platform in category web applications Pacer Edition CMS 2.1 l param Local File Inclusion Vulnerability Vendor: The Pacer Edition Product web page: http://www.thepaceredition.com Affected version: RC 2.1 SVN: 867 Summary: The 'Pacer Edition' is a Content Management SystemCMS writte...

Pacer Edition CMS 2.1 - 'l' Local File Inclusion

Pacer Edition CMS 2.1 l param Local File Inclusion Vulnerability Vendor: The Pacer Edition Product web page: http://www.thepaceredition.com Affected version: RC 2.1 SVN: 867 Summary: The 'Pacer Edition' is a Content Management SystemCMS written using PHP 5.2.9 as a minimum requirement. The Pacer...

Dataface Local File Include Vulnerability

Exploit for php platform in category web applications //========================================================================== // Topic : Dataface // Bug type : local file include // Advisory : http://xataface.com/ //========================================================================== /...

Mevlana Content Management System SQL-i Vulnerability

Exploit for php platform in category web applications +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+= +=+=+= +=+=+= +=+=+= /\ | | | | +=+=+= +=+=+= / \ | || | / / | \ | |\ \ / \ / / +=+=+= +=+=+= / /\ | || | // | | | | / | | \ / / / +=+=+= +=+=+= / \ | | | | | | ...

Ushahidi 2.0.1 SQL Injection

Ushahidi 2.0.1 range param SQL Injection Vulnerability post-auth Vendor: Ushahidi, Inc. Product web page: http://www.ushahidi.com Affected version: 2.0.1 Tunis Summary: The Ushahidi Platform is a platform for information collection, visualization and interactive mapping. Desc: Input passed via th...

Bifrost v1.2.1d.exe Local buffer PoC

Exploit for windows platform in category local exploits !/usr/bin/perl Title : This PoC For Local buffer Bifrost v1.2.1d.exe Author : Or4nG.M4n Home : cc.7rs.org | tryag.cc | v4-team.com Email : email protected Date : n\a Tested on : indows XP SP3 Professional Edition My Blog :...

A Really Simple Chat (ARSC) 3.3-rc2 XSS / SQL Injection

============================== Vulnerability ID: HTB22999 Reference: http://www.htbridge.ch/advisory/multiplesqlinjectionsinareallysimplechatarsc.html Product: A Really Simple Chat ARSC Vendor: http://www.reallysimplechat.org/ http://www.reallysimplechat.org/ Vulnerable Version: 3.3-rc2 Vendor...

Kentico CMS <=5.5R2.23 Cross-Site Scripting POST Injection Vulnerability

Summary .NET Web Content Management System for ASP.NET. Description Kentico CMS suffers from a XSS vulnerability when parsing user input to the 'userContextMenuparameter' parameter via POST method in '/examples/webparts/membership/users-viewer.aspx'. Attackers can exploit this weakness to execute...

Dreamzsop SQL Injection Vulnerbility

Exploit for php platform in category web applications Exploit Title: SQL Injection Vulnerbility in Dreamzsop Google Dork: intext:"By: Dreamzsop" Date: 30/5/2011 Author: lionaneesh Software Link: http://dreamzsop.co.in/ Risk Level : High A hacker can get admin access to web database leading to...

XSS Vulnerability on Real Player Website by THEc7cREW

XSS Vulnerability on Real Player Website by THEc7cREW THEc7cREW Found XSS Vulnerability on Real Player Website , Click Here to See the POC...

Cotonti 0.9.2 users.php Blind SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Puzzle Apps CMS 3.2 - Local File Inclusion

------------------------------------------------------------------------ Software................ Puzzle Apps CMS 3.2 Vulnerability........... Local File Inclusion Site.................... http://www.puzzleapps.org/ Download Link...

HP Data Protector Client 6.11 - 'EXEC_SETUP' Remote Code Execution

Exploit Title: HP Data Protector Cliet EXECSETUP Remote Code Execution Vulnerability PoC ZDI-11-056 Date: 2011-05-29 Author: @fdiskyou e-mail: rui at deniable.org Version: 6.11 Tested on: Windows 2003 Server SP2 en CVE: CVE-2011-0922 Notes: ZDI-11-056 Reference:...