Categorizator 0.3.1 - SQL Injection

Exploit Title: Categorizator 0.3.1 | SQL Injection Date: 03/09/16 Exploit Author: Wad Deek Vendor Homepage: http://lelogiciellibre.net/telecharger/annuaire-web.php Software Link: ftp://ftp2.lelogiciellibre.net/lelogiciellibre/annu/categorizator031.zip Version: 0.3.1 Tested on: Xampp on Windows7...

phpATM 1.32 Remote Command Execution / Shell Upload

?php / Exploit Title : "phpATM = 1.32 Remote Command Execution Shell Upload on Windows Servers" Date : 17/06/2016 Author : Paolo Massenio - pmassenioATgmail Vendor : phpATM - http://phpatm.org/ Version : = 1.32 Tested on : Windows 10 with XAMPP PoF "phpATM is the acronym for PHP Advanced Transfer...

phpATM 1.32 - Multiple Vulnerabilities

Exploit for php platform in category web applications !-- Exploit Title : "phpATM = 1.32 Multiple CSRF Vulnerabilities & Full Path Disclosure Vulnerability" Date : 17/06/2016 Author : Paolo Massenio - pmassenioATgmail Vendor : phpATM - http://phpatm.org/ Version : = 1.32 Tested on : Windows 10 wi...

phpATM 1.32 - Multiple Vulnerabilities

phpATM 1.32 - Multiple Vulnerabilities !-- Exploit Title : "phpATM = 1.32 Multiple CSRF Vulnerabilities & Full Path Disclosure Vulnerability" Date : 17/06/2016 Author : Paolo Massenio - pmassenioATgmail Vendor : phpATM - http://phpatm.org/ Version : = 1.32 Tested on : Windows 10 with XAMPP 1 CSRF...

phpATM 1.32 - Multiple Vulnerabilities

!-- Exploit Title : "phpATM = 1.32 Multiple CSRF Vulnerabilities & Full Path Disclosure Vulnerability" Date : 17/06/2016 Author : Paolo Massenio - pmassenioATgmail Vendor : phpATM - http://phpatm.org/ Version : = 1.32 Tested on : Windows 10 with XAMPP 1 CSRF in configure.php phpATM lets the...

Google Android 5.0.1 - Metaphor Stagefright (ASLR Bypass)

Source: https://github.com/NorthBit/Metaphor Metaphor - Stagefright with ASLR bypass By Hanan Be'er from NorthBit Ltd. Link to whitepaper: https://raw.githubusercontent.com/NorthBit/Public/master/NorthBit-Metaphor.pdf Twitter: https://twitter.com/HighByte Metaphor's source code is now released! T...

WordPress eBook Download 1.1 Directory Traversal

Exploit Title: Wordpress eBook Download 1.1 | Directory Traversal Exploit Author: Wadeek Website Author: https://github.com/Wad-Deek Software Link: https://downloads.wordpress.org/plugin/ebook-download.zip Version: 1.1 Tested on: Xampp on Windows7 Version Disclosure...

WordPress Plugin Import CSV 1.0 - Directory Traversal

WordPress Plugin Import CSV 1.0 - Directory Traversal Exploit Title: Wordpress Import CSV | Directory Traversal Exploit Author: Wadeek Website Author: https://github.com/Wad-Deek Software Link: https://downloads.wordpress.org/plugin/xml-and-csv-import-in-article-content.zip Stable Tag: 1.1 Tested...

WordPress Plugin eBook Download 1.1 - Directory Traversal

WordPress Plugin eBook Download 1.1 - Directory Traversal Exploit Title: Wordpress eBook Download 1.1 | Directory Traversal Exploit Author: Wadeek Website Author: https://github.com/Wad-Deek Software Link: https://downloads.wordpress.org/plugin/ebook-download.zip Version: 1.1 Tested on: Xampp on...

WordPress Import CSV 1.0 Plugin - Directory Traversal

Exploit for php platform in category web applications Exploit Title: Wordpress Import CSV | Directory Traversal Exploit Author: Wadeek Website Author: https://github.com/Wad-Deek Software Link: https://downloads.wordpress.org/plugin/xml-and-csv-import-in-article-content.zip Stable Tag: 1.1 Tested...

WordPress eBook Download 1.1 Plugin - Directory Traversal

Exploit for php platform in category web applications Exploit Title: Wordpress eBook Download 1.1 | Directory Traversal Exploit Author: Wadeek Website Author: https://github.com/Wad-Deek Software Link: https://downloads.wordpress.org/plugin/ebook-download.zip Version: 1.1 Tested on: Xampp on...

WordPress Plugin eBook Download 1.1 - Directory Traversal

Exploit Title: Wordpress eBook Download 1.1 | Directory Traversal Exploit Author: Wadeek Website Author: https://github.com/Wad-Deek Software Link: https://downloads.wordpress.org/plugin/ebook-download.zip Version: 1.1 Tested on: Xampp on Windows7 Version Disclosure...

WordPress Plugin Site Import 1.0.1 - LocalRemote File Inclusion

WordPress Plugin Site Import 1.0.1 - LocalRemote File Inclusion Exploit Title: Wordpress Site Import 1.0.1 | Local and Remote file inclusion Exploit Author: Wadeek Website Author: https://github.com/Wad-Deek Software Link: https://downloads.wordpress.org/plugin/site-import.1.0.1.zip Version: 1.0....

WordPress Site Import 1.0.1 Plugin - Local File Inclusion / Remote File Inclusion

Exploit for php platform in category web applications Exploit Title: Wordpress Site Import 1.0.1 | Local and Remote file inclusion Exploit Author: Wadeek Website Author: https://github.com/Wad-Deek Software Link: https://downloads.wordpress.org/plugin/site-import.1.0.1.zip Version: 1.0.1 Tested o...

WordPress Plugin Site Import 1.0.1 - Local/Remote File Inclusion

Exploit Title: Wordpress Site Import 1.0.1 | Local and Remote file inclusion Exploit Author: Wadeek Website Author: https://github.com/Wad-Deek Software Link: https://downloads.wordpress.org/plugin/site-import.1.0.1.zip Version: 1.0.1 Tested on: Xampp on Windows7 Version Disclosure...

Damn Vulnerable Web Services: DVWS

Damn Vulnerable Web Services is a vulnerable testing environment that can be used to learn real world web service vulnerabilities. The aim of this project is to aid security professionals in testing their skills and tools in a legal environment. This application is designed to understand the...

KLA10747 Obsolete PHP version in XAMPP & WAMP

Obsolete version of PHP was found in XAMPP & WAMP. Details about PHP vulnerabilities you can get at KLA10746. Original advisories - Exploitation Public exploits exist for this vulnerability. CVE list CVE-2016-1904 high CVE-2016-1903 critical CVE-2015-8617 critical CVE-2015-8616 critical...

Apache 2.4.17 - Denial of Service

Exploit for windows platform in category dos / poc Exploit Title: Apache 2.4.17 - Denial of Service Date: 17/12/2015 Exploit Author: rUnVirus Ahmed Atif Vendor Homepage: www.apache.org Software Link: https://www.apachefriends.org/download.html/ Version: 5.5.30 Tested on: windows 7 - XAMPP Version...

Apache 2.4.17 - Denial of Service

Apache 2.4.17 - Denial of Service Exploit Title: Apache 2.4.17 - Denial of Service Date: 17/12/2015 Exploit Author: rUnVirus Ahmed Atif Vendor Homepage: www.apache.org Software Link: https://www.apachefriends.org/download.html/ Version: 5.5.30 Tested on: windows 7 - XAMPP Version 5.5.30 Apache...

Apache 2.4.17 - Denial of Service

Exploit Title: Apache 2.4.17 - Denial of Service Date: 17/12/2015 Exploit Author: rUnVirus Ahmed Atif Vendor Homepage: www.apache.org Software Link: https://www.apachefriends.org/download.html/ Version: 5.5.30 Tested on: windows 7 - XAMPP Version 5.5.30 Apache 2.4.17 - PHP 5.5.30 "; $shellcode=...