TomatoCart 1.1.8.2 LFI / Directory Traversal Vulnerabilities

TomatoCart version 1.1.8.2 suffers from local file inclusion and directory traversal vulnerabilities. Exploit Title: TomatoCart 1.1.8.2 - LFI / Directory Traversal Vulnerability Product: TomatoCart Official site: http://www.tomatocart.com/ Demo : http://demo.tomatocart.com/ Risk Level: High Explo...

WBR-3406 Wireless Broadband NAT Router - Web-Console Password Change Bypass Cross-Site Request Forgery

WBR-3406 Wireless Broadband NAT Router - Web-Console Password Change Bypass Cross-Site Request Forgery ----------------------------------------------------------- WBR-3406 Wireless Broadband NAT Router Web-Console Password Change Bypass & CSRF Vulnerability This PoC code should do two main things...

WBR-3406 Wireless Broadband NAT Router - Web-Console Password Change Bypass / Cross-Site Request Forgery

----------------------------------------------------------- WBR-3406 Wireless Broadband NAT Router Web-Console Password Change Bypass & CSRF Vulnerability This PoC code should do two main things: 1. Cross Site Request Forgery For more information, just google it. 2. This code change to new passwo...

Elastix 2.3 PHP Code Injection Vulnerability

Elastix versions prior to 2.4 php code injection exploit. ? / Exploit Title : Elastix 2.3 , Remote Command Execution Exploit Google Dork : WTF!!!! Version: Elastix All versions below 2.3 , Newer versions maybe affected as well ; Tested on: CentOS CVE : notyet Download Vuln software : elastix.org...

Security flaw in 3G could allow anyone to track your smartphone

New privacy threats have been uncovered by security researchers that could allow every device operating on 3G networks to be tracked, according to research from the University of Birmingham with collaboration from the Technical University of Berlin. Researchers said that standard off-the-shelf...

Recover MyFiles 3.8.4.3300 DLL Hijacking Exploit

Exploit for windows platform in category local exploits =============================================== Recover MyFiles 3.8.4.3300 DLL Hijacking Exploit =============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=0 0 1 1 | | | | | | | | | | | | \ \ / / 0 ...

Pwdsindh.gov.pk Hacked By Angel aka 4d0r4bl3 !

Pwdsindh.gov.pk Hacked By Angel aka 4d0r4bl3 ! Links :...

Quick.Cart Multiple Vulnerabilities

Exploit for php platform in category web applications =================================== Quick.Cart Multiple Vulnerabilities =================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1...

Pixel Post v1.7.3 persian Reinstall login Vulnerability

Exploit for php platform in category web applications ======================================================= Pixel Post v1.7.3 persian Reinstall login Vulnerability ======================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 ...

Dmx Ready v2 lite Database Disclosure Exploit

Exploit for perl platform in category web applications ============================================= Dmx Ready v2 lite Database Disclosure Exploit ============================================= !/usr/bin/perl -w Dmx Ready v2 lite Database Disclosure Exploit Found & Coded: indoushka Date: 25/07/201...

Microsoft Windows Based Script Host (Plugin.ocx) DLL Hijacking

Exploit for windows platform in category local exploits ============================================================== Microsoft Windows Based Script Host Plugin.ocx DLL Hijacking ==============================================================...

HHCTRLLib (hhctrl.ocx) Remote BOF Exploit (heap spray)

Exploit for windows platform in category remote exploits ====================================================== HHCTRLLib hhctrl.ocx Remote BOF Exploit heap spray ====================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 ...

Kleeja 1.0.0RC6 Database Disclosure

==================================================== kleeja1.0.0RC6 Database Disclosure Exploit ==================================================== Vendor: kleeja.com Date: 2010-05-27 Author : indoushka Contact : 00213771818860 Home : www.sec4ever.com Bug : Database Disclosure Exploit Tested on ...

EZ-Oscommerce 3.1 Cross Site Request Forgery / Shell Upload

==================================================== EZ-Oscommerce 3.1 Remote File Upload EZ-Oscommerce 3.1 Changer Login et Mot de Passe CSRF Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'...

3dl.am script mtxkl raidrush Multiple Vulnerabilty

Exploit for php platform in category web applications ============================================================== 3dl.am script mtxkl raidrush Directory Traversal Vulnerability ==============================================================...

Nullam Blog 0.1.2 LFI / XSS / SQL Injection

-- Salvatore Fresta aka drosophila CWNP444351 Salvatore "drosophila" Fresta + Application: Nullam Blog + Version: 0.1.2 + Website: http://nullam.net/ + Bugs: A Local File Inclusion B File Disclosure C Multiple Blind SQL Injection D SQL Injection E Reflected XSS + Exploitation: Remote + Date: 10 S...

SmartPPC Pay Per Click Script (idDirectory) Blind SQL Injection Vuln

Exploit for unknown platform in category web applications ==================================================================== SmartPPC Pay Per Click Script idDirectory Blind SQL Injection Vuln ====================================================================...

SmartPPC Pay Per Click Script - idDirectory Blind SQL Injection (1)

SmartPPC Pay Per Click Script - idDirectory Blind SQL Injection 1 +---------------------------------------+ | Blind SQL Injection Vulnerability | | in Pay Per Click Script | | found by Hamtaro aka CorVu5 | |there must be 50 ways to learn to hover| +---------------------------------------+ gdork:...

phpfaber-rfi.txt

/ \ @ /|\ /|\ |-| / | \ /|/\ / | \ @ | |--------------------/--|-voV---|'/--Vov-|-----------------------|-| |-| '^ o o '^ | | | | \Y/' |-| |-| | | | | -=ShAd0w-CrEw=- |-| |-| | | | | |-| ||| | @ l /\ / \ /\ l |-| l / V \ \ V \ l @ l/ \I \ /' ---------------------------------------------- GrEeTs...

phpnukeplat-rfi.txt

---------------------------------------------- GrEeTs To -=sHaDoW sEcUrItY TeAm=- GrEaTs To ---------------------------------------------- A2J, Chucks, The Pitbull, ICQBomber, str0ke ---------------------------------------------- BiG sHoUt OuT tO udplink.net & ascnet.biz :...