8159 matches found
Proof Cast Design SQL Injection
Exploit Title: Proof Cast Design SQL Injection Vulnerability Date: 18/01/2012 - 04.13 Author: 3spi0n Software Website: http://proofcast.com/purplewebsites.php Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: Changer $ $ Demo Sites: www.onlyfineknives.com/knife.php?k=244859"...
PhpBridges Blog System SQL Injection
Exploit Title: PhpBridges Blog System SQL Injection Vulnerability Date: 18/01/2012 - 04.19 Author: 3spi0n Software Website: https://launchpad.net/phpbridges Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: members.php $ Demo Sites: fantasticas.odisseias.net/members.php?id=2...
CVE-2011-4360
MediaWiki before 1.17.1 allows remote attackers to obtain the page titles of all restricted pages via a series of requests involving the 1 curid or 2 oldid parameter...
CVE-2011-4360
MediaWiki before 1.17.1 allows remote attackers to obtain the page titles of all restricted pages via a series of requests involving the 1 curid or 2 oldid parameter...
2xPress Cross Site Scripting / SQL Injection
Exploit Title: 2xPress Web Multiple Vulnerability Date: 08/12/2011 - 23:32 Author: 3spi0n Software Website: http://www.2xpress.com/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Dorks: "Developed by 2xpress.com" Vulnerable File : All $ Demo Sites:...
YSD Web Design SQL Injection
Exploit Title: Ysd Web Design Sql Injection Vulnerability Date: 20/11/2011 - 03:18 Author: 3spi0n Software Website: http://www.ysd.hk/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: Changer $ Dorks: "Designed by YSD" $ Demo Sites:...
Thunder Kankan Player 4.8.3.840 - Stack Overflow Denial of Service
Thunder Kankan Player 4.8.3.840 - Stack Overflow Denial of Service !/usr/bin/env python print """ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /\ /\ \ /\ /\ /\ \ /\ 0 0 /:/ / /::\ \ /:/ / /:/ / /::\ \ /:/ / 1 1 /:// /:/:\ \ /:/ / /:/ / /:/:\ \ /:// 0 0...
Webistry CMS 1.0 SQL Injection
Exploit Title : Webistry v1.0 CMS SQL Injection Vulnerability Author : CoBRa21 E-Mail : uykucu at windowslive.com Google Dork : Powered by CMS : Webistry v1.0 Script Page : null Exploit http://127.0.0.1/ PATH /index.php?pid=14' SQL http://127.0.0.1/ PATH /index.php?pid=14 union select...
Web File Browser 0.4b14 File Download Vulnerability
Exploit for php platform in category web applications Exploit Title: Web File Browser 0.4b14 File Download Vulnerability Date: 2011/11/03 Author: Sangyun YOO Email: yoosy0302 at naver dot com Software Link:...
Mevin Productions SQL Injection
Exploit Title: mevin productions Sql Injection Vulnerability Date: 30/10/2011 - 23:00 Author: 3spi0n Software Website: http://www.mevin.com/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: Event.php $ Dorks: "Powered by: mevin productions" inurl:/event.php?id= $ Demo Sites...
Art Dimension SQL Injection
Exploit Title: Art Dimension Sql Injection Vulnerability Date: 25.10.2011 - 01:03 Author: 3spi0n Software Website: http://www.artdimension.ca/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: Page.php / Pages.php $ Dorks: "Designed by Art Dimension" $ Demo Sites:...
Opera 11.51 - Use-After-Free Crash (PoC)
Opera 11.51 - Use-After-Free Crash PoC Exploit Title: Opera Use After Free - Crash PoC Date: 20 October 2011 Author: Roberto Suggi Liverani Software Link: www.opera.com Version: 11.51 and previous versions Tested on: Windows XP and Windows 7 CVE : n/a Link:...
Pre Studio Business Cards Designer - SQL Injection
Pre Studio Business Cards Designer - SQL Injection =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Exploit Title: Pre Studio Business Cards Designer SQL Injection Vulnerability =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Author: drzig Date: 20-10-2011 Softwar...
Joomla NoNumber Framework Local File Inclusion / Shell Upload
Exploit Title: NoNumber Framework Joomla! Plugin Multiple Vulnerabilities Discovery Date: 10 October 2011 Reported Date: 11 October 2011 Patch Date: 17 October 2011 Release Date: 17 October 2011 Author: jdc Software Link: http://nonumber.nl The nnframework plugin by NoNumber! contains multiple...
MyBB MyStatus 3.1 SQL Injection
--------------------------------------------------------------------- Exploit Title : MyBB MyStatus 3.1 --------------------------------------------------------------------- Author : MarioVs Date : 10/10/2011 Site : http://mariovs.pl/ @ : mariovsato2.pl...
MyBB Advanced Forum Signatures 2.0.4 SQL Injection
--------------------------------------------------------------------- Exploit Title : MyBB Advanced Forum Signatures afsignatures-2.0.4 --------------------------------------------------------------------- Author : MarioVs Date : 10/10/2011 Site : http://mariovs.pl/ @ : mariovsato2.pl...
MyBB Advanced Forum Signatures - 'afsignatures-2.0.4' SQL Injection
--------------------------------------------------------------------- Exploit Title : MyBB Advanced Forum Signatures afsignatures-2.0.4 --------------------------------------------------------------------- Author : MarioVs Date : 10/10/2011 Site : http://mariovs.pl/ @ : mariovsato2.pl...
Linux pkexec / polkitd 0.96 Race Condition
!/bin/sh pid; if stat procbuf, &statbuf != 0 gseterror error, POLKITERROR, POLKITERRORFAILED, "stat failed for /proc/%d: %s", process-pid, gstrerror errno; goto out; where the code only rely on stat of the pseudo filesystem src/polkit/polkitsubject.c --------- there's not enough validation to run...
CVE-2011-3598
Multiple cross-site scripting XSS vulnerabilities in phpPgAdmin before 5.0.3 allow remote attackers to inject arbitrary web script or HTML via 1 a web page title, related to classes/Misc.php; or the 2 returnurl or 3 returndesc parameter to display.php...
