SOL15699 - Linux kernel vulnerability CVE-2014-0131

The affected versions ship with vulnerable code; however, the vulnerability is unlikely to be exploited as BIG-IP, BIG-IQ, and EM systems do not load the vhost-net drivers. Recommended Action If the previous table lists a version in the Versions known to be not vulnerable column, you can eliminat...

YourMembers Blind SQL Injection

Vulnerability title: Blind SQL Injection Vulnerability in YourMembers plugin CVE: N/A Vendor: YourMembers plugin Product: https://github.com/YourMembers/yourmembers/tree/master/ymtrunk Affected version: Version 3, 29 June 2007 https://github.com/YourMembers/yourmembers/blob/master/LICENSE Google...

Wordpress Huge-IT Image Gallery 1.0.1 Authenticated SQL Injection

No description provided by source. Exploit Title : Wordpress Huge-IT Image Gallery 1.0.1 Authenticated SQL Injection Exploit Author : Claudio Viviani Vendor Homepage : http://huge-it.com/ Software Link : http://downloads.wordpress.org/plugin/gallery-images.zip Mirror Link :...

WordPress Plugin Huge-IT Image Gallery 1.0.1 - (Authenticated) SQL Injection

Exploit Title : Wordpress Huge-IT Image Gallery 1.0.1 Authenticated SQL Injection Exploit Author : Claudio Viviani Vendor Homepage : http://huge-it.com/ Software Link : http://downloads.wordpress.org/plugin/gallery-images.zip Mirror Link :...

CMSimple 4.4.4 RFI / Code Execution / Default Password

Exploit Title : CMSimple 4.4.4 various security vulnerability Author : Govind Singh aka NullPort Vendor : http://cmsimple.org/ Download Link : http://www.cmsimple.org/downloadcounter/dlcount/count.php?id=31 Date : 26/07/2014 Discovered at : IHT Lab 1ND14N H4X0R5 T34M Love to : Manish Tanwar,...

Wordpress BSK PDF Manager 1.3.2 Authenticated SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title : Wordpress BSK PDF Manager 1.3.2 Authenticated SQL Injection Exploit Author : Claudio Viviani Vendor Homepage : http://www.bannersky.com/bsk-pdf-manager/ Software Link : http://downloads.wordpress.org/plugin/bsk-pdf-manager.zip...

WORK System E-Commerce <= 3.0.1 - Remote Include Vulnerability

No description provided by source. ============================================================================================ WORK System E-Commerce ginclude Remote File Inclusion Vulnerability ============================================================================================...

Family Connections CMS 2.5.0 & 2.7.1 - (less.php) Remote Command Execution

No description provided by source. ?php / Family connections CMS v2.5.0-v2.7.1 remote command execution exploit vendor: https://www.familycms.com/ software link: https://www.familycms.com/download.php author: mrme::rwx kru email: steventhomasseeley!gmail!com ----------------------------------...

Facebook Profile MyBB Plugin 2.4 - Persistant XSS

No description provided by source. Exploit Title: MyBB Facebook Profile Plugin Persistant XSS Date: 12/12/2012 Exploit Author: limb0 Vendor Homepage: http://www.collectiontricks.it/ Software Link: http://mods.mybb.com/view/facebook-profile-link-on-postbit-2-2 Version: 2.4 Tested on: Linux P-XSS...

impleo music collection 2.0 (sql/xss) Multiple Vulnerabilities

No description provided by source. + Impleo Music Collection 2.0 SQL/XSS Multiple Remote Vulnerabilities + Download: http://sappy.dk/impleo/download-impleo + Discovered By SirGod + www.mortal-team.org + SQL Injection Auth Bypass - Requirements : magicquotesgpc = off - Vulnerable code in...

orbis cms 1.0 (afd/adf/asu/sql) Multiple Vulnerabilities

No description provided by source. + Orbis CMS 1.0 AFD/ADF/ASU/SQL Multiple Remote Vulnerabilities + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Dork : Powered by Orbis CMS + Download script : http://www.novo-ws.com/orbis-cms/download.shtml + Arbitrary File Download + -...

jmd-cms - Multiple Vulnerabilities

No description provided by source. ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-19-jmd-cms-multiple-remote-vulnerabilities/ ''' Abysssec Inc Public Advisory Title : JMD-CMS Multiple Remote...

PhpMyLogon 2.0 - SQL Injection Vulnerability

No description provided by source. Exploit Title: PhpMyLogon SQL Injection Date: March 14, 2010 Author: Blake Software Link: http://sourceforge.net/projects/phpmylogon/files/PhpMyLogon/PhpMyLogon%202/phpmylogon2.zip/download Version: 2 Tested on: Windows XP SP3 Proof of Concept: Enter the followi...

WordPress WP-Filebase Download Manager plugin <= 0.2.9 - SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress WP-Filebase Download Manager plugin = 0.2.9 SQL Injection Vulnerability Date: 2011-09-09 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/wp-filebase.0.2.9.zip Version:...

Flux CMS <= 1.5.0 (loadsave.php) Remote Arbitrary File Overwrite Exploit

No description provided by source. ?php / ------------------------------------------------------------------------ Flux CMS = 1.5.0 loadsave.php Remote Arbitrary File Overwrite Exploit ------------------------------------------------------------------------ author...: EgiX mail.....:...

Connectix Boards <= 0.8.2 template_path Remote File Inclusion Exploit

No description provided by source. !/usr/bin/perl Author : HouSSaMix From H-T Team Script : Connectix Boards Tested in last version 0.8.2 & 0.8.1 Bug : Remote File Inclusion Vulnerable Code : ?php include $templatepath.'menulinks.php'; ? Dork : powered by connectix boards Risk : High Download :...

WordPress Eventify - Simple Events plugin <= 1.7.f SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress Eventify - Simple Events plugin = 1.7.f SQL Injection Vulnerability Date: 2011-09-07 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/eventify.zip Version: 1.7.f tested...

PHP Album <= 0.3.2.3 - Remote Command Execution Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo PHP Album = 0.3.2.3 remote cmmnds xctn\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n; echo - this works with magicquotesgpc=Off & registerglobals=On\r\n; echo dork: \powered by...

PHPDirector Game Edition 0.1 - Multiple Vulnerabilities (LFI/SQLi/Xss)

No description provided by source. Exploit Title: PHPDirector Game Edition Multiple Vulnerabilities LFI/SQLi/Xss Date: 2010-01-05 Author: Zer0 Thunder Site : http://www.play-online.bzh.be/forum/ Version: v0.1 Tested on: Windows XP sp2 WampServer 2.0i / LinuxBox Ubuntu Server 9.10 CVE : Code : Loc...

Wordpress Plugin Bannerize <= 2.8.6 - SQL Injection

No description provided by source. Exploit Title: WordPress WP Bannerize plugin = 2.8.6 SQL Injection Vulnerability Date: 2011-08-31 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/wp-bannerize.zip Version: 2.8.6 tested --- PoC -...