phpATM 1.32 - Multiple Vulnerabilities

Exploit for php platform in category web applications !-- Exploit Title : "phpATM = 1.32 Multiple CSRF Vulnerabilities & Full Path Disclosure Vulnerability" Date : 17/06/2016 Author : Paolo Massenio - pmassenioATgmail Vendor : phpATM - http://phpatm.org/ Version : = 1.32 Tested on : Windows 10 wi...

phpATM 1.32 Remote Command Execution / Shell Upload

?php / Exploit Title : "phpATM = 1.32 Remote Command Execution Shell Upload on Windows Servers" Date : 17/06/2016 Author : Paolo Massenio - pmassenioATgmail Vendor : phpATM - http://phpatm.org/ Version : = 1.32 Tested on : Windows 10 with XAMPP PoF "phpATM is the acronym for PHP Advanced Transfer...

phpATM 1.32 - Multiple Vulnerabilities

!-- Exploit Title : "phpATM = 1.32 Multiple CSRF Vulnerabilities & Full Path Disclosure Vulnerability" Date : 17/06/2016 Author : Paolo Massenio - pmassenioATgmail Vendor : phpATM - http://phpatm.org/ Version : = 1.32 Tested on : Windows 10 with XAMPP 1 CSRF in configure.php phpATM lets the...

Google Android 5.0.1 - Metaphor Stagefright (ASLR Bypass)

Source: https://github.com/NorthBit/Metaphor Metaphor - Stagefright with ASLR bypass By Hanan Be'er from NorthBit Ltd. Link to whitepaper: https://raw.githubusercontent.com/NorthBit/Public/master/NorthBit-Metaphor.pdf Twitter: https://twitter.com/HighByte Metaphor's source code is now released! T...

WordPress eBook Download 1.1 Plugin - Directory Traversal

Exploit for php platform in category web applications Exploit Title: Wordpress eBook Download 1.1 | Directory Traversal Exploit Author: Wadeek Website Author: https://github.com/Wad-Deek Software Link: https://downloads.wordpress.org/plugin/ebook-download.zip Version: 1.1 Tested on: Xampp on...

WordPress Import CSV 1.0 Plugin - Directory Traversal

Exploit for php platform in category web applications Exploit Title: Wordpress Import CSV | Directory Traversal Exploit Author: Wadeek Website Author: https://github.com/Wad-Deek Software Link: https://downloads.wordpress.org/plugin/xml-and-csv-import-in-article-content.zip Stable Tag: 1.1 Tested...

WordPress eBook Download 1.1 Directory Traversal

Exploit Title: Wordpress eBook Download 1.1 | Directory Traversal Exploit Author: Wadeek Website Author: https://github.com/Wad-Deek Software Link: https://downloads.wordpress.org/plugin/ebook-download.zip Version: 1.1 Tested on: Xampp on Windows7 Version Disclosure...

WordPress Plugin Import CSV 1.0 - Directory Traversal

WordPress Plugin Import CSV 1.0 - Directory Traversal Exploit Title: Wordpress Import CSV | Directory Traversal Exploit Author: Wadeek Website Author: https://github.com/Wad-Deek Software Link: https://downloads.wordpress.org/plugin/xml-and-csv-import-in-article-content.zip Stable Tag: 1.1 Tested...

WordPress Plugin eBook Download 1.1 - Directory Traversal

WordPress Plugin eBook Download 1.1 - Directory Traversal Exploit Title: Wordpress eBook Download 1.1 | Directory Traversal Exploit Author: Wadeek Website Author: https://github.com/Wad-Deek Software Link: https://downloads.wordpress.org/plugin/ebook-download.zip Version: 1.1 Tested on: Xampp on...

WordPress Plugin eBook Download 1.1 - Directory Traversal

Exploit Title: Wordpress eBook Download 1.1 | Directory Traversal Exploit Author: Wadeek Website Author: https://github.com/Wad-Deek Software Link: https://downloads.wordpress.org/plugin/ebook-download.zip Version: 1.1 Tested on: Xampp on Windows7 Version Disclosure...

WordPress Plugin Site Import 1.0.1 - LocalRemote File Inclusion

WordPress Plugin Site Import 1.0.1 - LocalRemote File Inclusion Exploit Title: Wordpress Site Import 1.0.1 | Local and Remote file inclusion Exploit Author: Wadeek Website Author: https://github.com/Wad-Deek Software Link: https://downloads.wordpress.org/plugin/site-import.1.0.1.zip Version: 1.0....

WordPress Site Import 1.0.1 Plugin - Local File Inclusion / Remote File Inclusion

Exploit for php platform in category web applications Exploit Title: Wordpress Site Import 1.0.1 | Local and Remote file inclusion Exploit Author: Wadeek Website Author: https://github.com/Wad-Deek Software Link: https://downloads.wordpress.org/plugin/site-import.1.0.1.zip Version: 1.0.1 Tested o...

WordPress Plugin Site Import 1.0.1 - Local/Remote File Inclusion

Exploit Title: Wordpress Site Import 1.0.1 | Local and Remote file inclusion Exploit Author: Wadeek Website Author: https://github.com/Wad-Deek Software Link: https://downloads.wordpress.org/plugin/site-import.1.0.1.zip Version: 1.0.1 Tested on: Xampp on Windows7 Version Disclosure...

Damn Vulnerable Web Services: DVWS

Damn Vulnerable Web Services is a vulnerable testing environment that can be used to learn real world web service vulnerabilities. The aim of this project is to aid security professionals in testing their skills and tools in a legal environment. This application is designed to understand the...

KLA10747 Obsolete PHP version in XAMPP & WAMP

Obsolete version of PHP was found in XAMPP & WAMP. Details about PHP vulnerabilities you can get at KLA10746. Original advisories - Related products PHP CVE list CVE-2016-1904 critical CVE-2016-1903 high CVE-2015-8617 critical CVE-2015-8616 critical CVE-2015-6836 critical CVE-2015-6833 warning...

Apache 2.4.17 - Denial of Service

Exploit for windows platform in category dos / poc Exploit Title: Apache 2.4.17 - Denial of Service Date: 17/12/2015 Exploit Author: rUnVirus Ahmed Atif Vendor Homepage: www.apache.org Software Link: https://www.apachefriends.org/download.html/ Version: 5.5.30 Tested on: windows 7 - XAMPP Version...

Apache 2.4.17 - Denial of Service

Apache 2.4.17 - Denial of Service Exploit Title: Apache 2.4.17 - Denial of Service Date: 17/12/2015 Exploit Author: rUnVirus Ahmed Atif Vendor Homepage: www.apache.org Software Link: https://www.apachefriends.org/download.html/ Version: 5.5.30 Tested on: windows 7 - XAMPP Version 5.5.30 Apache...

Apache 2.4.17 - Denial of Service

Exploit Title: Apache 2.4.17 - Denial of Service Date: 17/12/2015 Exploit Author: rUnVirus Ahmed Atif Vendor Homepage: www.apache.org Software Link: https://www.apachefriends.org/download.html/ Version: 5.5.30 Tested on: windows 7 - XAMPP Version 5.5.30 Apache 2.4.17 - PHP 5.5.30 "; $shellcode=...

Damn Vulnerable Web Application: DVWA

Damn Vulnerable Web Application DVWA is a PHP/MySQL web application that is damn vulnerable. Its main goals are to be an aid for security professionals to test their skills and tools in a legal environment, help web developers better understand the processes of securing web applications and aid...

Monsta FTP 1.6.2 - Multiple Vulnerabilities

Monsta FTP 1.6.2 - Multiple Vulnerabilities Exploit Title: CSRF XSS Monsta FTP Google Dork: intitle: Monsta FTP CSRF / XSS Date: 2015-09-11 Exploit Author: hyp3rlinx Website: hyp3rlinx.altervista.org Vendor Homepage: www.monstaftp.com Software Link: www.monstaftp.com Version: monstaftpv1.6.2 Test...