Flatpress 1.0 - Remote Code Execution

!/usr/bin/perl Exploit Title: Flatpress remore code execution PoC NULLday Google Dork: This site is powered by FlatPress. Date: 17/10/2013 Exploit Author: Wireghoul Vendor Homepage: http://flatpress.org/home/ Software Link:...

Flatpress 1.0 - Remote Code Execution

Flatpress 1.0 - Remote Code Execution !/usr/bin/perl Exploit Title: Flatpress remore code execution PoC NULLday Google Dork: This site is powered by FlatPress. Date: 17/10/2013 Exploit Author: Wireghoul Vendor Homepage: http://flatpress.org/home/ Software Link:...

Flatpress 1.0 - Remote Code Execution Vulnerability

Exploit for php platform in category web applications !/usr/bin/perl Exploit Title: Flatpress remore code execution PoC NULLday Google Dork: This site is powered by FlatPress. Date: 17/10/2013 Exploit Author: Wireghoul Vendor Homepage: http://flatpress.org/home/ Software Link:...

Pirelli Discus DRG A125g - Password Disclosure

Pirelli Discus DRG A125g - Password Disclosure !/usr/bin/perl Author: Sebastián Magof Vulnerable file: wansinglecfg.cmd Bug: Password Disclosure / αlpha "" usage:perl exploit.pl use LWP::UserAgent; use HTTP::Request; begin print "\n\n\n"; print " Pirelli Discus ADSL DRG A125g password disclosure...

Broadkam PJ871 Authentication Bypass Vulnerability

Exploit for hardware platform in category web applications !/usr/bin/perl d3c0der use HTTP::Request; use LWP::UserAgent; print "= Target : "; $ip=; chomp $ip; print "= new password : "; $npass=; chomp $npass; if $ip ! /^http:/ $ip = 'http://' . $ip; if $ip ! //$/ $ip = $ip . '/'; print "\n"; prin...

Broadkam PJ871 - Authentication Bypass

!/usr/bin/perl d3c0der use HTTP::Request; use LWP::UserAgent; print "= Target : "; $ip=; chomp $ip; print "= new password : "; $npass=; chomp $npass; if $ip ! /^http:/ $ip = 'http://' . $ip; if $ip ! //$/ $ip = $ip . '/'; print "\n"; print "-attacking , plz wait ! : $ip\n";...

Broadkam PJ871 Authentication Bypass

!/usr/bin/perl d3c0der use HTTP::Request; use LWP::UserAgent; print "= Target : "; $ip=; chomp $ip; print "= new password : "; $npass=; chomp $npass; if $ip ! /^http:/ $ip = 'http://' . $ip; if $ip ! //$/ $ip = $ip . '/'; print "\n"; print "-attacking , plz wait ! : $ip\n";...

EspCMS 后台登录绕过漏洞再利用(再利用！)

简要描述： 声明下，此漏洞0413提交到360漏洞平台，之后0422官方修复了该漏洞。 现在提交到wooyun是绕过官方修复的方法，继续利用。 可以算是老漏洞提死回生，不应该算是同一个漏洞提交到两个地方，希望有关部门能够明白，尽管代码非常像。 详细说明：...

Perforce P4web 2011/2012 Web Client XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: Perforce P4web 2011/2012 Web Client XSS Vulnerability Date: 21 Jan 2013 Researcher: Christy Philip Mathew Email: email protected Vendor or Software Link: http://filehost.perforce.com/perforce/r11.1/bin.ntx86/p4webinst.exe...

SonicWALL GMS/VIEWPOINT 6.x Analyzer 7.x Remote Root/SYSTEM Exploit

Exploit for multiple platform in category web applications !/usr/bin/perl Title: SonicWALL GMS/VIEWPOINT 6.x Analyzer 7.x Remote Root/SYSTEM exploit Name: sgmsRCE.pl Author: Nikolas Sotiriu lofi Use it only for education or ethical pentesting! The author accepts no liability for damage caused by...

SonicWALL GMS/VIEWPOINT 6.x Analyzer 7.x - Remote Command Execution

!/usr/bin/perl Title: SonicWALL GMS/VIEWPOINT 6.x Analyzer 7.x Remote Root/SYSTEM exploit Name: sgmsRCE.pl Author: Nikolas Sotiriu lofi Use it only for education or ethical pentesting! The author accepts no liability for damage caused by this tool. use strict; use HTTP::Request::Common qwPOST; us...

XML-RPC PingBack API Remote DoS Exploit (through xmlrpc.php)

Exploit for php platform in category dos / poc Exploit Title: XML-RPC PingBack API Remote Denial of Service exploit through xmlrpc.php Date: 04/01/2013 Category: Remote Exploit Author: D35m0nd142 Tested on: Debian Linux !/usr/bin/perl use LWP::UserAgent; use HTTP::Request::Common; use...

WordPress - PICA Photo Gallery Automatic SQL Injection (perl)

Exploit for php platform in category web applications Exploit title: WordPress - PICA Photo Gallery Automatic SQL Injection perl Author: D35m0nd142 Software Link: http://www.apptha.com/category/extension/Wordpress/PICA-Photo-Gallery Google Dork: intext:"Powered by Apptha." inurl:gallery Thanks to...

Baar3 Database Disclosure Exploit

Exploit for php platform in category web applications !/usr/bin/perl 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS,...

Joomla! Component com_kunena - 'search' SQL Injection

!/usr/bin/perl Exploit title: Joomla Component comkunena SQL Injection exploit Google Dork: inurl:index.php?option=comkunena& Exploit Author: D35m0nd142 Screenshot : http://imageshack.us/f/155/comkunena2.png/ Vendor HomePage: http://www.joomla.org/ Special thanks to Taurusomar system"clear"; prin...

Joomla! Component com_commedia - 'task' SQL Injection

Exploit Title: Joomla commedia Remote Exploit dork: inurl:index.php?option=comcommedia Date: 18-10-2012 Author: Daniel Barragan "D4NB4R" Twitter: @D4NB4R Vendor: http://www.ecolora.org/ Version: 3.1 last update on Oct 7, 2012 and lowers License: Commercial and Non-Commercial, affects 2 versions...

Joomla! Component com_kunena - search SQL Injection

Joomla! Component comkunena - search SQL Injection !/usr/bin/perl Exploit title: Joomla Component comkunena SQL Injection exploit Google Dork: inurl:index.php?option=comkunena& Exploit Author: D35m0nd142 Screenshot : http://imageshack.us/f/155/comkunena2.png/ Vendor HomePage: http://www.joomla.or...

Joomla Commedia Plugin (index.php, task parameter) SQL Injection

Exploit for php platform in category web applications Exploit Title: Joomla commedia Remote Exploit dork: inurl:index.php?option=comcommedia Date: 18-10-2012 Author: Daniel Barragan "D4NB4R" Twitter: @D4NB4R Vendor: http://www.ecolora.org/ Version: 3.1 last update on Oct 7, 2012 and lowers Licens...

Joomla! Component com_tag - tag SQL Injection

Joomla! Component comtag - tag SQL Injection Exploit Title: Joomla tag Remote Sql Exploit dork: inurl:index.php?option=comtag Date: 18-10-2012 Author: Daniel Barragan "D4NB4R" Twitter: @D4NB4R Vendor: http://www.joomlatags.org Version: all License: Non-Commercial Download:...

Joomla! Component com_tag - 'tag' SQL Injection

Exploit Title: Joomla tag Remote Sql Exploit dork: inurl:index.php?option=comtag Date: 18-10-2012 Author: Daniel Barragan "D4NB4R" Twitter: @D4NB4R Vendor: http://www.joomlatags.org Version: all License: Non-Commercial Download: http://www.joomlatags.org/joomla-tag/joomla-tag-download.html Tested...