39 matches found
WordPress lote27 theme Arbitrary File Download Vulnerability
Exploit for php platform in category web applications +++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Title : WordPress lote27 theme Arbitrary File Download Vulnerability Author : alieye designer Homepage : http://hyattinforma.com.br/ Contact : email protected Risk : High Class: Remote...
Haraj Script Stored XSS and File Upload Vulnerability
You Can Upload file And make come Xss code ! at Once ,, in famous arabic scripth php Haraj script . ============================= 1: first enter to site of our target , and signup in the target site . 2: go to HTTP://TARGET.COM/home/add/ or HTTP://TARGET.COM/homeadd.html or or...
MoinMoin - Arbitrary Command Execution
!/usr/bin/env python -- coding: utf-8 -- ascii = '\x1b1;31m' ascii +=' \r\n' ascii +=' ██████████ ██████ ███ ███ ███ ██████████ ████████ ███ ███████ \r\n' ascii +=' ███████████ ████████ ███ ████ ███ ███████████ ████████ ███ ███████ \r\n' ascii +=' ██▒ ██▒ ██▒ ██▒ ███ ██▒ ██▒█▒███ ██▒ ██▒ ██▒ ██▒...
Opera Multiple Vulnerabilities-01 Jan13 (Linux)
The host is installed with Opera and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gboperamultvuln01jan13lin.nasl 6115 2017-05-12 09:03:25Z teissa $ Opera Multiple Vulnerabilities-01 Jan13 Linux Authors: Antu Sanadi Copyright: Copyright c 2013 Greenbone Networks GmbH,...
Repeated attempts to access a target site can trigger address field spoofing
The browser address field should always show the correct address for the page that is currently being displayed. By making repeated requests to load a target site in rapid succession, an attacking web site can cause Opera to display the target sites address while the attacking page is still being...
Carefully timed reloads and redirects can spoof the address field
The address field should always show the address of the page that is being displayed. In certain cases, if a target site responds slowly, reloading an attacking page and redirecting to the target page can cause the address field to show the target site's address, while the attacking site is still...
Carefully timed reloads and redirects can spoof the address field – Opera Security Advisories
The address field should always show the address of the page that is being displayed. In certain cases, if a target site responds slowly, reloading an attacking page and redirecting to the target page can cause the address field to show the target site’s address, while the attacking site is still...
Data URIs may be used to initiate cross site scripting against unrelated sites
Data URIs are supposed to inherit the security context from the page that created them. In some cases, Opera does not enforce this correctly, and will allow unrelated data URIs to interact both with each other, and their source pages. This can be used to enable cross site scripting against the...
Data URIs may be used to initiate cross site scripting against unrelated sites – Opera Security Advisories
Data URIs are supposed to inherit the security context from the page that created them. In some cases, Opera does not enforce this correctly, and will allow unrelated data URIs to interact both with each other, and their source pages. This can be used to enable cross site scripting against the...
wordpress plugins editormonkey remote upload vulnerability-vulnerability warning-the black bar safety net
editormonkey is wordpress a backend editor plug-in. Before many days in the inj3ct0r published on, are successively reproduced, the personal feel is not very perfect. Are uploaded directly to get an x. php. jpg the shell. Can use FCK 0day directly get a phpshell on. The GOOGLE dork is:...
Joomla Component com_track SQL Injection Vulnerability
Exploit for php platform in category web applications ====================================================== Joomla Component comtrack SQL Injection Vulnerability ====================================================== Exploit Title : Joomla Component comtrack SQL Injection Vulnerability Author :...
AspTR EXtended - Cross-Site Request Forgery
Target site : Password : E-Mail : Secret question : Reply : Name : Last Name : Dont Changing : Adana Profession : Msn : Web : Sex : Bay Bay Bayan Avatar : Crew : IMHATIMI.ORG MecTruy Dr.Ly0n Noxy FreWaL...
joomla-changepasswd.txt
Joomla 1.5.x Remote Admin Password Change Author: d3m0n [email protected] Greets: GregStar, gorion, d3d!k Polish "hackers" used this bug to deface turkish sites BUAHAHHA nice 0-day pff File : /components/comuser/controller.php Line : 379-399 function confirmreset // Check for request forgeries...
Picture Rating 1.0 - Blind SQL Injection
!/usr/bin/perl -- Picture Rating 1.0 Blind SQL Injection Exploit -- -Info/Instructions- After running this perl script, you will have admin details therefore you will be able to login to the admin area at http://site.com/control/ ok once you have logged in has admin you can upload a shell, click...
Affiliate Market Ver.0.1 BETA XSS / SQL Injection Exploit
Exploit for unknown platform in category web applications ========================================================= Affiliate Market Ver.0.1 BETA XSS / SQL Injection Exploit ========================================================= !/usr/bin/perl Affiliate Market Ver.0.1 BETA Multiple Remote...
security flaw
The 1 Password Manager in Mozilla Firefox 2.0, and 1.5.0.8 and earlier; and the 2 Passcard Manager in Netscape 8.1.2 and possibly other versions, do not properly verify that an ACTION URL in a FORM element containing a password INPUT element matches the web site for which the user stored a...
atutor153-xss-sql.txt
ATutor 1.5.3 http://www.atutor.ca -------------------------- Cross Site Scripting XSS -------------------------- http://target.xx/documentation/indexlist.php?lang="alert/EllipsisSecurityTest/ --- POST http://target.xx:80/registration.php?register=Register HTTP/1.0 Accept: / Content-Type:...
