SongForever.com Clone Shell Upload Vulnerability

No description provided by source...

Wordpress Plugin CopySafe Web Protection Shell Upload (0day) Vulnerability

Exploit for php platform in category web applications Title : Wordpress Plugin CopySafe Web Protection Shell Upload Vulnerability Author : Aloulou Date : 01/06/2014 Facebook : http://www.facebook.com/Aloulou.TN Email: email protected Vendor : wordpress.org Google Dork :...

Wordpress Plugin CopySafe PDF Protection Shell Upload (0day) Vulnerability

Exploit for php platform in category web applications Title : Wordpress Plugin CopySafe PDF Protection Shell Upload Vulnerability Author : Aloulou Date : 01/06/2014 Facebook : http://www.facebook.com/Aloulou.TN Email: email protected Vendor : wordpress.org Google Dork :...

Dotclear 2.6.2 Multiple Vulnerability

Dotclear versions 2.6.2 and below suffer from a remote SQL injection, remote shell upload Dotclear 2.6.2 SQL Injection Vulnerability - Affected Versions: Version 2.6.2 and probably prior versions. - Vulnerability Description: The vulnerable code is located in /admin/categories.php: 70. Update ord...

kesako script SQL Injection Vulnerability

Exploit for php platform in category web applications kesako script SQL Injection =================================================================== .:. Exploit Title : kesako Script Sql Injection .:. Author : Microsoft-dz .:. Contact : email protected .:. Dork : intext:powered by kesako...

Worst Day for eBAY, Multiple Flaws leave Millions of Users vulnerable to Hackers

It's not been more than 36 hours since eBay revealed it was hacked and we just come to know about three more critical vulnerabilities in eBay website that could allow an attacker to compromise users' account once again, even if you have already reset your account password after the last...

WordPress cnhk-slideshow Shell Upload

Exploit Title: Wordpress cnhk-slideshow plugin Shell Upload Author: Ashiyane Digital Security Team Date: 05/18/2014 Vendor Homepage: http://cnhk-systems.webege.com Software Link : http://downloads.wordpress.org/plugin/cnhk-slideshow.2.1.1.zip Google dork: inurl:/wp-content/plugins/cnhk-slideshow/...

Wordpress Theme Echea Shell Upload Vulnerability

Exploit for php platform in category web applications Title : Wordpress Theme Echea Shell Upload Vulnerability Author : Aloulou Date : 15/05/2014 Facebook : http://www.facebook.com/Aloulou.TN Email: email protected Vendor : www.themeforest.net Google Dork : inurl:/wp-content/themes/echea/ Tested ...

Wordpress Theme Photocrati-theme-v4.07 Shell Upload Vulnerability

Exploit for php platform in category web applications Title : Wordpress Theme Photocrati-theme-v4.07 Shell Upload Vulnerability Author : Aloulou Date : 13/05/2014 Facebook : http://www.facebook.com/Aloulou.TN Email: email protected Vendor : www.photocrati.com Google Dork...

ASPCMS最新版CSRF添加管理员及GetShell

简要描述： 详细说明： ASPCMS最新版2.5.2 CSRF添加管理员： 后台添加管理员的请求如下： 链接：http://10.65.203.100:90/adminaspcms/user/Admin/AspCmsAdminAdd.asp?action=add POST：GroupID=1&LoginName=111111&Password=111111&AdminDesc=111111&UserStatus=1 可以看到没有防御CSRF 我们构造伪造表单： 管理员组 超级管理员组 lpyuan 普通管理员 管理员名称 管理员密码 管理员描述 状态 漏洞利用之前： img...

Joomla! 3.3.0 SQL Injection / automatic upload shell Exploit (0day)

Joomla Core version 3.3.0 have suffers from a remote SQL injection vulnerability and upload shell. This is private exploit. You can buy it at https://0day.today...

WordPress Echelon Theme Shell Upload

Exploit Author:Th3 R0cksT3r Exploit Title: WordPress Echelon Theme Shell Upload Date: 25.04.2014 Email: [email protected] Vendor Homepage: http://wordpress.org/ Google Dork: inurl:/wp-content/themes/echelon/ Exploit : ========== "@$uploadfile"; curlsetopt$ch, CURLOPTRETURNTRANSFER, 1;...

WordPress Business Intelligence 1.0.6 Shell Upload

Exploit Title : wordpress plugin "wp-business-intelligence" Remote code execution exploit Exploit Author : Manish Kishan Tanwar vendor Home : www.wpbusinessintelligence.com Version Affected: 1.0.6 Discovered At : IndiShell LAB indishell.in aka indian cyber army Love to : zero cool,Team...

BigDump 0.35b Shell Upload

Arbitrary Upload on BigDump v0.35b + Date: 23/03/2014 + Risk: High + Author: Felipe Andrian Peixoto + Vendor Homepage: http://www.ozerov.de/bigdump/ + Contact: [email protected] + Tested on: Windows 7 and Linux + Vulnerable File: bigdump.php + Version: v0.35b + Exploit :...

KCFinder 2.53 Shell Upload

Exploit Title : KCFinder Upload Shell Vulnerability + Google Dork : inurl:/kcfinder/browse.php + Date : 24/04/2014 + Exploit Author : IranianDarkCodersTeam + Home : http://www.idc-team.net + Discovered By : Black.Hack3r + Vendor Homepage : http://kcfinder.sunhater.com/ + Version : 2.51 - 2.53 +...

WordPress Vithy / Appius / Dagda / Vector / Shotzz Shell Upload

Exploit Title : WordPress Custom Background Shell Upload Google Dork : inurl:"/wp-content/plugins/custom-background/" Date : 23-03-2014 Exploit Author : CaFc Versace Tested on : Windows 7 Contact : [email protected], [email protected] Prooft:...

WordPress Felici / Custom Background Shell Upload

Exploit Title : WordPress Felici Shell Upload Google Dork : inurl:"/wp-content/themes/felici/" Date : 23-03-2014 Exploit Author : CaFc Versace Vendor Homepage : http://wordpressnull.com/themeforest-felici-v1-7-wordpress-magazine-theme/ Tested on : Windows 7 Contact : [email protected],...

MyBB Uploader 1.1.2 Shell Upload

IIIIIIII RRRRRRRRRRRR HHHHHHHH HHHHHHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRRRRRRRR HHHHHHHHHHHHHHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIIIIIII RRRRRRRR RRRRRR...

WordPress Premium Gallery Manager Shell Upload

Wordpress Plugins Premium Gallery Manager Arbitrary File Upload Author : eX-Sh1Ne Facebook : www.fb.me/ShiNe.gov Google Dork = inurl:"wp-content/plugins/PremiumGalleryManager" Vuln : wp-content/plugins/PremiumGalleryManager/uploadify/uploadify.php Exploit : "@$uploadfile",...

Barclaycart - Unauthenticated Shell Upload

The Barclaycart WordPress plugin was found to be vulnerable to an Unauthenticated Shell Upload security vulnerability, due to using a vulnerable version of the third-party uploadify dependency. This issue has been seen exploited in the wild. PoC "@$uploadfile",...