Worst Day for eBAY, Multiple Flaws leave Millions of Users vulnerable to Hackers

It's not been more than 36 hours since eBay revealed it was hacked and we just come to know about three more critical vulnerabilities in eBay website that could allow an attacker to compromise users' account once again, even if you have already reset your account password after the last...

WordPress cnhk-slideshow Shell Upload

Exploit Title: Wordpress cnhk-slideshow plugin Shell Upload Author: Ashiyane Digital Security Team Date: 05/18/2014 Vendor Homepage: http://cnhk-systems.webege.com Software Link : http://downloads.wordpress.org/plugin/cnhk-slideshow.2.1.1.zip Google dork: inurl:/wp-content/plugins/cnhk-slideshow/...

Wordpress Theme Echea Shell Upload Vulnerability

Exploit for php platform in category web applications Title : Wordpress Theme Echea Shell Upload Vulnerability Author : Aloulou Date : 15/05/2014 Facebook : http://www.facebook.com/Aloulou.TN Email: email protected Vendor : www.themeforest.net Google Dork : inurl:/wp-content/themes/echea/ Tested ...

Wordpress Theme Photocrati-theme-v4.07 Shell Upload Vulnerability

Exploit for php platform in category web applications Title : Wordpress Theme Photocrati-theme-v4.07 Shell Upload Vulnerability Author : Aloulou Date : 13/05/2014 Facebook : http://www.facebook.com/Aloulou.TN Email: email protected Vendor : www.photocrati.com Google Dork...

ASPCMS最新版CSRF添加管理员及GetShell

简要描述： 详细说明： ASPCMS最新版2.5.2 CSRF添加管理员： 后台添加管理员的请求如下： 链接：http://10.65.203.100:90/adminaspcms/user/Admin/AspCmsAdminAdd.asp?action=add POST：GroupID=1&LoginName=111111&Password=111111&AdminDesc=111111&UserStatus=1 可以看到没有防御CSRF 我们构造伪造表单： 管理员组 超级管理员组 lpyuan 普通管理员 管理员名称 管理员密码 管理员描述 状态 漏洞利用之前： img...

Joomla! 3.3.0 SQL Injection / automatic upload shell Exploit (0day)

Joomla Core version 3.3.0 have suffers from a remote SQL injection vulnerability and upload shell. This is private exploit. You can buy it at https://0day.today...

WordPress Echelon Theme Shell Upload

Exploit Author:Th3 R0cksT3r Exploit Title: WordPress Echelon Theme Shell Upload Date: 25.04.2014 Email: [email protected] Vendor Homepage: http://wordpress.org/ Google Dork: inurl:/wp-content/themes/echelon/ Exploit : ========== "@$uploadfile"; curlsetopt$ch, CURLOPTRETURNTRANSFER, 1;...

WordPress Business Intelligence 1.0.6 Shell Upload

Exploit Title : wordpress plugin "wp-business-intelligence" Remote code execution exploit Exploit Author : Manish Kishan Tanwar vendor Home : www.wpbusinessintelligence.com Version Affected: 1.0.6 Discovered At : IndiShell LAB indishell.in aka indian cyber army Love to : zero cool,Team...

BigDump 0.35b Shell Upload

Arbitrary Upload on BigDump v0.35b + Date: 23/03/2014 + Risk: High + Author: Felipe Andrian Peixoto + Vendor Homepage: http://www.ozerov.de/bigdump/ + Contact: [email protected] + Tested on: Windows 7 and Linux + Vulnerable File: bigdump.php + Version: v0.35b + Exploit :...

KCFinder 2.53 Shell Upload

Exploit Title : KCFinder Upload Shell Vulnerability + Google Dork : inurl:/kcfinder/browse.php + Date : 24/04/2014 + Exploit Author : IranianDarkCodersTeam + Home : http://www.idc-team.net + Discovered By : Black.Hack3r + Vendor Homepage : http://kcfinder.sunhater.com/ + Version : 2.51 - 2.53 +...

WordPress Vithy / Appius / Dagda / Vector / Shotzz Shell Upload

Exploit Title : WordPress Custom Background Shell Upload Google Dork : inurl:"/wp-content/plugins/custom-background/" Date : 23-03-2014 Exploit Author : CaFc Versace Tested on : Windows 7 Contact : [email protected], [email protected] Prooft:...

WordPress Felici / Custom Background Shell Upload

Exploit Title : WordPress Felici Shell Upload Google Dork : inurl:"/wp-content/themes/felici/" Date : 23-03-2014 Exploit Author : CaFc Versace Vendor Homepage : http://wordpressnull.com/themeforest-felici-v1-7-wordpress-magazine-theme/ Tested on : Windows 7 Contact : [email protected],...

MyBB Uploader 1.1.2 Shell Upload

IIIIIIII RRRRRRRRRRRR HHHHHHHH HHHHHHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRRRRRRRR HHHHHHHHHHHHHHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIIIIIII RRRRRRRR RRRRRR...

WordPress Premium Gallery Manager Shell Upload

Wordpress Plugins Premium Gallery Manager Arbitrary File Upload Author : eX-Sh1Ne Facebook : www.fb.me/ShiNe.gov Google Dork = inurl:"wp-content/plugins/PremiumGalleryManager" Vuln : wp-content/plugins/PremiumGalleryManager/uploadify/uploadify.php Exploit : "@$uploadfile",...

Barclaycart - Unauthenticated Shell Upload

The Barclaycart WordPress plugin was found to be vulnerable to an Unauthenticated Shell Upload security vulnerability, due to using a vulnerable version of the third-party uploadify dependency. This issue has been seen exploited in the wild. PoC "@$uploadfile",...

Barclaycart - Unauthenticated Shell Upload

The Barclaycart WordPress plugin was found to be vulnerable to an Unauthenticated Shell Upload security vulnerability, due to using a vulnerable version of the third-party uploadify dependency. This issue has been seen exploited in the wild. "@$uploadfile",...

大汉xxgk（政府信息公开）系统某处越权+getshell

简要描述： 政府信息公开系统的getshell。和前两天发的那个拿shell方式是不一样的。 详细说明： 越权发生在setup/oprsetting.jsp 拿shell是在上传license文件的jsp中setup/oprlicenceinfo.jsp 漏洞证明： 此时已经将setup的登录密码清空。（有风险，请勿随意尝试，不要跟着我犯错……） 提交数据的时候清空密码即可登录成功 img src="https://images.seebug.org/upload/201403/032350491567f745ccbf670be2346bb5147a9878.png"...

WordPress TheCotton Shell Upload

@@@ @@@@@@@@@@@ @@@@@ @@@@@@@@@@ @@@ @@@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@@@@@@@@@ @@@ @ @@@@@@@@@@ @@@ @@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@ @@@ @@@ @@ @@@...

TYPO3 6.1.7 XSS / Disclosure / Shell Upload

TYPO3 version 6.1.7 suffers from cross site scripting, information disclosure, and remote shell upload vulnerabilities. ============================================================== Title ...| Multiple vulnerabilities in Typo3 CMS Version .| introductionpackage-6.1.7 Date ....| 24.02.2014 Found...

Zen Cart E-Commerce 1.5.1 XSS / Open Redirect / Shell Upload

============================================================== Title ...| Multiple vulnerabilities in Zen Cart e-commerce Version .| zen-cart-v1.5.1-full-fileset-09182012 Date ....| 23.02.2014 Found ...| HauntIT Blog Home ....| ============================================================== + For...