WordPress TheCotton Shell Upload

@@@ @@@@@@@@@@@ @@@@@ @@@@@@@@@@ @@@ @@@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@@@@@@@@@ @@@ @ @@@@@@@@@@ @@@ @@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@ @@@ @@@ @@ @@@...

WordPress Theme Dandelion - Arbitrary File Upload

Exploit Title: Wordpress Dandelion Themes Arbitry File Upload Google Dork: inurl:/wp-content/themes/dandelion/ Date: 31/01/2014 Exploit Author: TheBlackMonster Marouane Vendor Homepage: http://themeforest.net/item/dandelion-powerful-elegant-wordpress-theme/136628 Software Link: Not Available...

WordPress Theme Amplus - Cross-Site Request Forgery

Title : Wordpress Amplus Themes CSRF File Upload Vulnerability Author : DevilScreaM Date : 11/17/2013 - 17 November 2013 Category : Web Applications Type : PHP Vendor : http://themeforest.net Download : http://themeforest.net/item/amplus-responsive-multilingual-wordpress-theme/ Greetz : 0day-id.c...

WordPress Euclid Cross Site Request Forgery Vulnerability

WordPress Euclid theme suffers from a cross site request forgery vulnerability. Title : Wordpress Euclid V1 Themes CSRF File Upload Vulnerability Author : DevilScreaM Date : 11/17/2013 - 17 November 2013 Category : Web Applications Type : PHP Version : 1.x.x Vendor : http://freelancewp.com Downlo...

WordPress Dimension Cross Site Request Forgery

Title : Wordpress Dimension Themes CSRF File Upload Vulnerability Author : DevilScreaM Date : 11/17/2013 - 17 November 2013 Category : Web Applications Type : PHP Vendor : http://themeforest.net Download : http://themeforest.net/item/dimension-retina-responsive-multipurpose-theme/ Greetz :...

WordPress oxygen-theme Themes Remote File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress oxygen-theme Themes Remote File Upload Vulnerability Author: iskorpitx Date: 12/11/2013 Vendor Homepage: http://www.orange-themes.com/ Themes Link: http://www.orange-themes.com/portfolio/oxygen/ Infected File:...

WordPress radial-theme Themes Remote File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress radial-theme Themes Remote File Upload Vulnerability Author: iskorpitx Date: 12/11/2013 Vendor Homepage: http://www.orange-themes.com/ Themes Link: http://www.orange-themes.com/portfolio/radial/ Infected File:...

WordPress Theme Kernel - Arbitrary Code Execution Vulnerability

Exploit for php platform in category remote exploits -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= /' \ /'\ /\ \ /'\ /, \ /\/\ \ \ \ \ ,/\ /\ \ //\ \ /' \ /\ //\ Exploit database separated by exploit // type local, remote, DoS, etc. + Site : 1337day.com + Support...

WordPress Curvo Themes - Arbitrary Code Execution Vulnerability

http://cxsecurity.com/issue/WLB-2013110082 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= /' \ /'\ /\ \ /'\ /, \ /\/\ \ \ \ \ ,/\ /\ \ //\ \ /' \ /\ //\ Exploit database separated by exploit // type local, remote, DoS, etc. + Site : 1337day.com + Support e-mail :...

WordPress Theme Highlight Premium - Cross-Site Request Forgery / Arbitrary File Upload

Title : Wordpress Highlight Premium Themes CSRF File Upload Vulnerability Author : DevilScreaM Date : 11/10/2013 - 10 November 2013 Category : Web Applications Type : PHP Vendor : http://themeforest.net Download : http://themeforest.net/item/highlight-powerful-premium-wordpress-theme/168424 Greet...

WordPress Theme Highlight Premium - Cross-Site Request Forgery Arbitrary File Upload

WordPress Theme Highlight Premium - Cross-Site Request Forgery Arbitrary File Upload Title : Wordpress Highlight Premium Themes CSRF File Upload Vulnerability Author : DevilScreaM Date : 11/10/2013 - 10 November 2013 Category : Web Applications Type : PHP Vendor : http://themeforest.net Download ...

WordPress Army Knife CSRF File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress Army Knife CSRF File Upload Vulnerability Author: Bebyyers404 Date: 11/09/2013 Vendor Homepage: http://freelancewp.co Themes Link: http://freelancewp.com/wordpress-theme/army-knife/ Infected File: upload-handler.php...

WordPress Cubed Themes Remote File Upload Vulnerability

WordPress Cubed Themes suffers from remote file uplaod vulnerability . . . \ \ | / \ \ \ | || / \ / / \ / |/ \ / | / \ / / /| | |/ \ \ \ // \ / / | \ /\ / | \ \ \ / \ //\ |\ | /\ // | /|\ / / / / / / / Exploit Title: WordPress Cubed Themes Remote File Upload Vulnerability Author:...

WordPress Theme Kernel - Arbitrary File Upload

Exploit Title: WordPress themekernel-theme Themes Remote File Upload Vulnerability Author: iskorpitx Date: 6/11/2013 Vendor Homepage: http://www.wikmag.com/ Themes Link: http://themeforest.net/item/kernel-premium-wordpress-blog-magazine-theme-/857077 Infected File: upload-handler.php Category:...

WordPress Curvo Shell Upload

. . . \ \ | / \ \ \ | || / \ / / \ / |/ \ / | / \ / / /| | |/ \ \ \ // \ / / | \ /\ / | \ \ \ / \ //\ |\ | /\ // | /|\ / / / / / / / Exploit Title: WordPress Curvo Themes Arbitrary File Upload Vulnerability Author: Byakuya Date: 10/28/2013 Vendor Homepage: http://themeforest.net/...

WordPress Curvo Cross Site Request Forgery

. . . \ \ | / \ \ \ | || / \ / / \ / |/ \ / | / \ / / /| | |/ \ \ \ // \ / / | \ /\ / | \ \ \ / \ //\ |\ | /\ // | /|\ / / / / / / / Exploit Title: WordPress Curvo Themes CSRF File Upload Vulnerability Author: Byakuya Date: 10/26/2013 Vendor Homepage: http://themeforest.net/ Themes...

WordPress Theme Curvo - Cross-Site Request Forgery Arbitrary File Upload

WordPress Theme Curvo - Cross-Site Request Forgery Arbitrary File Upload . . . \ \ | / \ \ \ | || / \ / / \ / |/ \ / | / \ / / /| | |/ \ \ \ // \ / / | \ /\ / | \ \ \ / \ //\ |\ | /\ // | /|\ / / / / / / / Exploit Title: WordPress Curvo Themes CSRF File Upload Vulnerability Author:...

CVE-2011-2745

uploadhandler.php in the swfupload extension in Chyrp 2.0 and earlier relies on client-side JavaScript code to restrict the file extensions of uploaded files, which allows remote authenticated users to upload a .php file, and consequently execute arbitrary PHP code, via a writepost action to the...

CVE-2011-1654

Directory traversal vulnerability in the Heartbeat Web Service in CA.Itm.Server.ManagementWS.dll in the Management Server in CA Total Defense TD r12 before SE2 allows remote attackers to execute arbitrary code via directory traversal sequences in the GUID parameter in an upload request to...