File upload vulnerability in BEESCMS admin/upload.php page

BEESCMS is a content management system. A file upload vulnerability exists in the BEESCMS admin/upload.php page, which allows attackers to exploit the vulnerability and upload a shell by modifying the filename suffix to php...

webnetseo CMS Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title : webnetseo CMS Multiple Vulnerabilities Exploit Author : Ashiyane Digital Security Team Vendor Homepage: webnetseo.net Date : 2017 07 May Category : WebApp MY HOME : Ashiyane.org CWE : CWE-89 - CWE-276 And ... Video :...

Lcnt Team Shell Upload Vulnerability

Exploit for php platform in category web applications xBADGIRL21 N3W PUBLIC 3XPL0IT , 0day T == -- /-' // x21 Exploit Title : Lcnt Team Shell Upload Vulnerability Exploit Author : xBADGIRL21 Dork : CopyRight 2006-2017 温州龙诚互联科技有限公司 Lcnt Team Vendor : http://icnt.net Tested on: WIN7 MyBlog :...

Pixie 1.0.4 - Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: File Extension Filter Bypass in File Manager Pixie 1.0.4 With Low Privilege Google Dork: no Date: 02-April-2017 Exploit Author: @runggareksya, @dvnrcy, @dickysofficial Vendor Homepage: http://www.getpixie.co.uk Software Link:...

Pixie 1.0.4 Shell Upload

Exploit Title: File Extension Filter Bypass in File Manager Pixie 1.0.4 With Low Privilege Google Dork: no Date: 02-April-2017 Exploit Author: @runggareksya, @dvnrcy, @dickysofficial Vendor Homepage: http://www.getpixie.co.uk Software Link:...

WPForce - Wordpress Attack Suite

WPForce is a suite of Wordpress Attack tools. Currently this contains 2 scripts - WPForce, which brute forces logins via the API, and Yertle, which uploads shells once admin credentials have been found. Yertle also contains a number of post exploitation modules. For more information, visit the bl...

Wordpress Multimedia1 Themes CSRF Vulnerability

Exploit for php platform in category web applications Wordpress Themes Multimedia1 Shell Upload Vulnerability | CSRF Author : Berandal Google Dork: inurl:/wp-content/themes/multimedia1/ Tested on: Win 7, Linux Blog : http://www.maxteroit.com/ +-+-+-+-+-+-+-+-+ |B|e|r|a|n|d|a|l| +-+-+-+-+-+-+-+-+ ...

HumHub 0.20.1 / 1.0.0-beta.3 Shell Upload

Security Advisory - Curesec Research Team 1. Introduction Affected Product: HumHub 0.20.1 / 1.0.0-beta.3 Fixed in: 1.0.0 Fixed Version https://www.humhub.org/en/download/default/form?version=1.0.0 Link: &type=zip Vendor Website: https://www.humhub.org/ Vulnerability Code Execution Type: Remote Ye...

Teradici Management Console 2.2.0 Shell Upload / Privilege Escalation Vulnerabilities

Teradici Management Console version 2.2.0 suffers from privilege escalation and remote shell upload vulnerabilities Exploit Title: Teradici Management Console 2.2.0 - Web Shell Upload and Privilege Escalation Date: February 22nd, 2017 Exploit Author: hantwister Vendor Homepage:...

Teradici Management Console 2.2.0 Shell Upload / Privilege Escalation

Exploit Title: Teradici Management Console 2.2.0 - Web Shell Upload and Privilege Escalation Date: February 22nd, 2017 Exploit Author: hantwister Vendor Homepage: http://www.teradici.com/products-and-solutions/pcoip-products/management-console Software Link:...

Teradici Management Console 2.2.0 - Privilege Escalation

Teradici Management Console 2.2.0 - Privilege Escalation Exploit Title: Teradici Management Console 2.2.0 - Web Shell Upload and Privilege Escalation Date: February 22nd, 2017 Exploit Author: hantwister Vendor Homepage:...

Wordpress dance studio 1.0.0 Themes - Arbitrary Shell Upload Vulnerbility

Exploit for php platform in category web applications Exploit Title : Wordpress Themes dance-studio - Arbitrary Shell Upload vulnerbility Author : xBADGIRL21 Google Dork: inurl:/wp-content/themes/dance-studio Date: 12-11-2017 Vendor Homepage: http://themes.cmsmasters.net/?theme=dance-studio by...

WordPress Dance Studio 1.0.0 Shell Upload

Exploit Title : Wordpress Themes dance-studio - Arbitrary Shell Upload vulnerbility Author : xBADGIRL21 Google Dork: inurl:/wp-content/themes/dance-studio Date: 12-11-2017 Vendor Homepage: http://themes.cmsmasters.net/?theme=dance-studio by looplava Version: 1.0.0 Tested on: Win 7 MyBlog :...

POSNIC 1.03 Shell Upload

0 echo "Return Code: " . $FILES"file""error" . ""; else $upload = $FILES"file""name"; $type = $FILES"file""type"; if fileexists"upload/" . $FILES"file""name" unlink$upload; $name = $FILES"file""name"; moveuploadedfile$FILES"file""tmpname", "upload/" . $name; //echo "Stored in: " . "upload/"...

Haraj v2 Script Shell Upload Vulnerability

Exploit for php platform in category web applications |----------------------------| | xBADGIRL21 | | N3W PUBLIC 3XPL0IT | | , | | 0day T == -- | | /-' | | // | | x21 | |----------------------------| | Exploit Title : Haraj v2 Script Shell Upload Vulnerability | Exploit Author : xBADGIRL21 | Dork...

Malware exploit: Xanity

Type: File Upload Author: Xiphos Research Ltd. TorCTPwn I was having a look at the C&C panel of the Xanity RAT for a bit of amusement, and noticed that it suffers an absurdly trivial shell upload vulnerability, outlined below. See: upload.php and note we can upload whatever the hell we want to a...

Airbnb Clone Script - Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Vulnerability:Profile Arbitrary Shell Upload Google Dork: Airbnb Clone Script Date:11.01.2017 Vendor Homepage: http://www.tibsolutions.com/airbnb-clone/ Script Name: Airbnb Clone Script Script Buy Now:...

ECommerce TIBSECART - Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Vulnerability:Profile Arbitrary Shell Upload Google Dork: ECommerce-TIBSECART Date:11.01.2017 Vendor Homepage: http://www.tibsolutions.com/tibs-ecart/ Script Name: ECommerce-TIBSECART Script Buy Now: http://www.tibsolutions.com/tibs-ecart/...

ECommerce Multi-Vendor Software - Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Vulnerability:Profile Arbitrary Shell Upload Google Dork: ECommerce-TIBSECART Date:11.01.2017 Vendor Homepage: http://www.tibsolutions.com/tibs-ecart/ Script Name: ECommerce-TIBSECART Script Buy Now: http://www.tibsolutions.com/tibs-ecart/...

Penny Auction Script - Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Vulnerability:Profile Arbitrary Shell Upload Google Dork: Penny Auction Script Date:11.01.2017 Vendor Homepage: http://www.tibsolutions.com/tibs-eauction/ Script Name: Penny Auction Script Script Buy Now:...