3873 matches found
WordPress Ultimate Membership Pro 3.3 SQL Injection
Vendor Homepage: http://wpindeed.com/ Software Link: http://codecanyon.net/item/ultimate-membership-pro-wordpress-plugin/12159253 Version: 3.3 Tested on: Debian 8, PHP 5.6.17-3 Type: Unauthenticated Blind SQLi, Unauthenticated Payment Bypass Time line: Found 07-Jun-2016, Vendor notified...
WordPress Ultimate Membership Pro Plugin 3.3 - SQL Injection
This WordPress Ultimate Membership Pro plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Update WordPress plugin to the newest stable and safe...
WordPress Plugin Ultimate Product Catalog 3.8.6 - Arbitrary File Upload
WordPress Plugin Ultimate Product Catalog 3.8.6 - Arbitrary File Upload Exploit Title: Wordpress Ultimate-Product-Catalog v3.8.6 Arbitrary file RCE Date: 2016-06-23 Google Dork: Index of /wp-content/plugins/ultimate-product-catalogue/ Exploit Author: Joaquin Ramirez Martinez i0akiN SEC-LABORATORY...
WordPress Ultimate Product Catalog Plugin 3.8.6 - Arbitrary File Upload
Because of this vulnerability, an attacker can upload arbitrary files to WordPress upload directory and manage this plugin with an especific account. Solution Upgrade the plugin...
WordPress Ultimate Product Catalog 3.8.6 Shell Upload
Exploit Title: Wordpress Ultimate-Product-Catalog v3.8.6 Arbitrary file RCE Date: 2016-06-23 Google Dork: Index of /wp-content/plugins/ultimate-product-catalogue/ Exploit Author: Joaquin Ramirez Martinez i0akiN SEC-LABORATORY Vendor Homepage: http://www.EtoileWebDesign.com/ plugin uri:...
WordPress Plugin Ultimate Product Catalog 3.8.1 - Privilege Escalation
WordPress Plugin Ultimate Product Catalog 3.8.1 - Privilege Escalation /Functions/UpdateAdmin-Databases.php file. Remote attackers are able to request crafted data of the POST method request with the vulnerable ´accesrole´ parameter. The security risk of the privilege scalation web vulnerability ...
WordPress Ultimate Product Catalog 3.8.1 Plugin - Privilege Escalation
Exploit for php platform in category web applications /Functions/UpdateAdmin-Databases.php file. Remote attackers are able to request crafted data of the POST method request with the vulnerable ´accesrole´ parameter. The security risk of the privilege scalation web vulnerability is estimated as...
WordPress Ultimate Product Catalog 3.8.1 Privilege Escalation
Exploit Title: Wordpress Ultimate-Product-Catalog /Functions/UpdateAdmin-Databases.php file. Remote attackers are able to request crafted data of the POST method request with the vulnerable ´accesrole´ parameter. The security risk of the privilege scalation web vulnerability is estimated as high...
NCH WavePad 6.48 DLL Hijacking
/ Exploit Title: NCH WavePad DLL Hijacking Exploit ehtrace.dll Vendor Homepage:http://www.nch.com.au/wavepad/ Author: Sachin Wagh @tigertigerboy Linkedin: https://in.linkedin.com/in/sachin-wagh-95b17555 Affected Version: WavePad 6.48 Tested on: Windows 7 Ultimate Vulnerable extension: .dvf /...
Micro Focus Rumba+ 9.4 - Multiple Stack Buffer Overflow Vulnerabilities
Micro Focus Rumba+ 9.4 - Multiple Stack Buffer Overflow Vulnerabilities Micro Focus Rumba+ v9.4 Multiple Stack Buffer Overflow Vulnerabilities Vendor: Micro Focus Product web page: https://www.microfocus.com Affected version: 9.4.4058.0 and 9.4.0 SP0 Patch0 Affected products/tools : Rumba Desktop...
Express Zip 2.40 - Directory Traversal
Exploit for windows platform in category local exploits !/usr/bin/python -w Title : Express Zip = 2.40 Path Traversal Date : 07/04/2016 Author : R-73eN Tested on : Windows Xp / Windows 7 Ultimate Software Link : http://www.nchsoftware.com/zip/ Download Link:...
Immunity Canvas: JENKINS_JRMP_DESERIALIZATION
Name| jenkinsjrmpdeserialization ---|--- CVE| CVE-2016-0788 Exploit Pack| CANVAS Description| jenkinsjrmpdeserialization Notes| CVE Name: CVE-2016-0788 VENDOR: Jenkins NOTES: Versions tested: Ubuntu Linux 14.04.3 Jenkins 1.598 - 6 / 7 / 8 Jenkins 1.649 - 7 / 8 Windows 7 Ultimate SP1 Jenkins 1.598...
Ultimate Member < 1.3.40 - Cross-Site Scripting (XSS)
The Ultimate Member – User Profile, User Registration, Login & Membership Plugin WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...
FIFA 15 Ultimate Team - Base64 encoded String, Customized SSL, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application FIFA 15 Ultimate Team published at the 'play' market has multiple vulnerabilities...
Ultimate Soccer - Football - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Ultimate Soccer - Football published at the 'play' market has multiple vulnerabilities...
Connect the Dots Ultimate HD - BSD license, External URLs, Suspicious files vulnerabilities
HackApp vulnerability scanner discovered that application Connect the Dots Ultimate HD published at the 'play' market has multiple vulnerabilities...
Word Search Ultimate - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Word Search Ultimate published at the 'play' market has multiple vulnerabilities...
Ultimate Team Quiz - Demo - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Ultimate Team Quiz - Demo published at the 'play' market has multiple vulnerabilities...
Logo Quiz Ultimate - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Logo Quiz Ultimate published at the 'play' market has multiple vulnerabilities...
Air Hockey Ultimate - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Air Hockey Ultimate published at the 'play' market has multiple vulnerabilities...