Joomla Hotornot2 Shell Upload

Title : Joomla comhotornot2 Remote Code Execution Author : DevilScreaM Date : 4 Desember 2013 Category : Web Applications Version : 2.0.0 Type : PHP Greetz : 0day-id.com | newbie-security.or.id | Borneo Security | Indonesian Security Indonesian Hacker | Indonesian Exploiter | Indonesian Cyber...

Imagam iFiles 1.16.0 File Inclusion / Shell Upload / Command Injection

Document Title: =============== Imagam iFiles v1.16.0 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1160 Release Date: ============= 2013-12-03 Vulnerability Laboratory ID VL-ID: ====================================...

Joomla JMultimedia Command Execution Exploit

Joomla JMultimedia component remote shell upload exploit. !/usr/bin/perl Exploit Title: comjmultimedia Remote Command Execution Author: Deepankar Arora and Rafay Baloch Vendor: http://joomlacode.org/gf/project/denvideo/ Enter the target in this form -- http://victim.com/ Change shell path to your...

Joomla Alphacontent phpThumb.php Shell Upload

Title : Joomla comalphacontent Remote Code Execution Author : DevilScreaM Date : 1 Desember 2013 Category : Web Applications Type : PHP Vendor : http://alphaplug.com/ Greetz : 0day-id.com | newbie-security.or.id | Borneo Security | Indonesian Security Indonesian Hacker | Indonesian Exploiter |...

Joomla Alphauserpoints phpThumb.php Shell Upload

Title : Joomla comalpahuserpoints Remote Code Execution Author : DevilScreaM Date : 1 Desember 2013 Category : Web Applications Type : PHP Vendor : http://alphaplug.com/ Greetz : 0day-id.com | newbie-security.or.id | Borneo Security | Indonesian Security Indonesian Hacker | Indonesian Exploiter |...

Joomla JMultimedia Command Execution

!/usr/bin/perl Exploit Title: comjmultimedia Remote Command Execution Author: Deepankar Arora and Rafay Baloch Vendor: http://joomlacode.org/gf/project/denvideo/ Enter the target in this form -- http://victim.com/ Change shell path to your own, if needed use LWP::UserAgent; use HTTP::Request;...

Elastix Voip system 2.x , Php code injection / Data dump Exploit

Elastix is famous asterisk voip system interface dist. it's vulnerable to php code injection vuln , which can be used to dump all data including - SIP Extention Data - Plain text admin password - Moderators passwords - All trunks data - shell upload Usage Info just add the ip list to "list.txt"...

WordPress Elemin Shell Upload

Exploit Title : Wordpress Themes Elemin Arbitrary File Upload Vulnerability Author : ReC0ded Vendor : http://themify.me/ Download : http://themify.me/themes/Elemin Date : 22, November 2013. Type : php, html, htm, asp, etc. Category : Web Applications Vulnerability : File Upload Tested On : Window...

WordPress Folo Shell Upload

Exploit Title : Wordpress Themes Folo Arbitrary File Upload Vulnerability Author : ReC0ded Vendor : http://themify.me/ Download : http://themify.me/themes/folo Date : 22, November 2013. Type : php, html, htm, asp, etc. Category : Web Applications Vulnerability : File Upload Tested On : Windows 7...

PineApp MailSecure - Remote Command Execution

----------------------------------------------------------------- It is possible execute any command bash as qmailq unprivilege user, sending only the following https request, without authentication...

webAsyst Plugins ImageManager Shell Upload Vulnerability

Exploit for windows platform in category web applications...

WordPress Highlight Premium Theme CSRF / Shell Upload

Title : Wordpress Highlight Premium Themes CSRF File Upload Vulnerability Author : DevilScreaM Date : 11/10/2013 - 10 November 2013 Category : Web Applications Type : PHP Vendor : http://themeforest.net Download : http://themeforest.net/item/highlight-powerful-premium-wordpress-theme/168424 Greet...

WordPress Theme Kernel Shell Upload

Exploit Title: WordPress themekernel-theme Themes Remote File Upload Vulnerability Author: iskorpitx Date: 6/11/2013 Vendor Homepage: http://www.wikmag.com/ Themes Link: http://themeforest.net/item/kernel-premium-wordpress-blog-magazine-theme-/857077 Infected File: upload-handler.php Category:...

WordPress ThisWay Shell Upload Vulnerability

WordPress ThisWay theme suffers from a remote shell upload vulnerability. Exploit title: WordPress ThisWay theme - Arbitrary File Upload Vulnerability Author: Bet0 Google Dork: inurl:"/wp-content/themes/ThisWay/" Date:1 November 2013 Vendor Homepage: http://themeforest.net/ Themes Link:...

TinyMCE 3.2.7 SQL Injection / Shell Upload

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

WordPress Think Responsive 1.0 Shell Upload

. . . \ \ | / \ \ \ | || / \ / / \ / |/ \ / | / \ / / /| | |/ \ \ \ // \ / / | \ /\ / | \ \ \ / \ //\ |\ | /\ // | /|\ / / / / / / / Exploit Title: WordPress Think Responsive Themes Arbitrary File Upload Vulnerability Author: Byakuya Date: 11/01/2013 Vendor Homepage:...

TinyMCE v3.2.x <= (AuthBypass/ShellUpload) Multiple Vulnerabilites

TinyMCE v3.2.7 or ..X is suffer from Multiple vuln's / bug :p Remote Attacker can bypassin auth and upload files , shell's etc... 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit...

Joomla Joomleague component Shell Upload Vulnerability

Joomla Joomleague component suffers from a remote shell upload vulnerability due to having Open Flash Chart included. Exploit Title: joomla comjoomleague execute arbitrary PHP code Exploit Google Dork: inurl:comjoomleague Date: 01-11-2013 Exploit Author: wantexz Vendor...

WordPress WP-Checkout Cross Site Scripting / Shell Upload

Title : Wordpress Plugin wp-checkout XSS / Arbitrary File Upload Author : DevilScreaM Date : 10/31/2013 Category : Web Applications Type : PHP Greetz : 0day-id.com | newbie-security.or.id | Borneo Security | Indonesian Security Indonesian Hacker | Indonesian Exploiter | Indonesian Cyber Thanks :...

WordPress GeoPlaces 4.x Shell Upload

Title : Wordpress GeoPlaces 4.x Themes Shell Upload Vulnerabillity Author : DevilScreaM Date : 10/24/2013 Category : Web Applications Type : PHP Version : 4.x Greetz : 0day-id.com | newbie-security.or.id | Borneo Security | Indonesian Security Indonesian Hacker | Indonesian Exploiter | Indonesian...