Prestige Software CMS File Disclosure

Exploit Title : Prestige Software CMS Local File Disclosure Author : IrIsT.Ir Discovered By : BeniVanda Home : http://IrIsT.Ir/en/ Software Link : http://www.prestijsoftware.com/tr/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu/BT/Fedora - win7 Dork : intext:Bu site...

[SECURITY] Fedora 18 Update: knavalbattle-4.10.4-1.fc18

Naval Battle is a ship sinking game for KDE. Ships are placed on a board which represents the sea. Players try to hit each others ships in turns without knowing where they are placed. The first player to destroy all ships wins the game...

Design/Logic Flaw

The remoteDispatchStoragePoolListAllVolumes function in the storage pool manager in libvirt 1.0.5 allows remote attackers to cause a denial of service file descriptor consumption via a large number of requests "to list all volumes for the particular pool."...

Dsl Router D-link BZ_1.06 Multiple Vulnerabilities

Exploit for hardware platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1...

CVE-2013-2696

Cross-site request forgery CSRF vulnerability in the All in One Webmaster plugin before 8.2.4 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the All in One Webmaster plugin before 8.2.4 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences...

CVE-2013-2696

CVE-2013-2696 affects the All in One Webmaster WordPress plugin prior to 8.2.4. A CSRF flaw lets remote attackers hijack authentication for requests that insert XSS sequences, potentially abusing an authenticated session. CVSS v2 base score 6.8 (Medium). Remediation: update the plugin to 8.2.4 or...

CVE-2013-2696

Cross-site request forgery CSRF vulnerability in the All in One Webmaster plugin before 8.2.4 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences...

GreenBrowser all Version Remote Code Excution Vulnerability

A security vulnerability in GreenBrowser, all versions, allows an attacker to excute a malcious code This is private exploit. You can buy it at https://0day.today...

Nmap NSE 6.01: p2p-conficker

Checks if a host is infected with Conficker.C or higher, based on Conficker's peer to peer communication. When Conficker.C or higher infects a system, it opens four ports: two TCP and two UDP. The ports are random, but are seeded with the current week and the IP of the infected host. By determini...

KMPlayer - Denial of Service

KMPlayer - Denial of Service Title : KMPlayer PlayList M3U Denial Of Service PoC All Versions Author : Jigsaw Abdelmorite Eljoaydi Date : 26-01-2013 E-mail : [email protected] Home : Morroco Facebook page : facebook.com/abdelmorit.alma platform : software Impact : Denial Of Service Tested on :...

WordPress Gallery 3.8.3 Arbitrary File Read

​ Exploit Title : Wordpress gallery-3.8.3 plugin Arbitrary File Read Vulnerability Author : IrIsT.Ir Discovered By : BeniVanda Home : http://IrIsT.Ir/forum/ Software Link : http://wordpress.org/extend/plugins/gallery-plugin/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu ...

Saggitarius CMS SQL Injection

Exploit Title : Saggitarius Cms Sql Injection Vulnerability Author : IrIsT.Ir Discovered By : BeniVanda Home : http://www.IrIsT.Ir/forum Software Link : http://www.saggitarius.pl/ Security Risk : High Version : All Version Tested on : win7,BT,Ubuntu Dork : intext:"design by Saggitarius" Expl0iTs ...

Oracle MySQL for Microsoft Windows FILE Privilege Abuse

This module takes advantage of a file privilege misconfiguration problem specifically against Windows MySQL servers. This module abuses the FILE privilege to write a payload to Microsoft's All Users Start Up directory which will execute every time a user logs in. The default All Users Start Up...

SmartCMS - index.php?menuitem SQL Injection Cross-Site Scripting

SmartCMS - index.php?menuitem SQL Injection Cross-Site Scripting SmartCMS SQL Injection & Cross Site Scripting Vulnerabilities Bug discovered by Yakir Wizman AKA Pr0T3cT10n, Date: 29/11/2012 Version: ALL Vendor Link: http://smartcms.nl/ ISRAEL Author will be not responsible for any damage. SQL...

[VSD] (Virtual Section Dumper) Just another Virtual Section Dumper for Windows Processes

What's VSD? VSD Virtual Section Dumper is intented to be a tool to visualize and dump the memory regions of a running 32 bits or a 64 bits process in many ways. For example, you can dump the entire process and fix the PE Header , dump a given range of memory or even list and dump every virtual...

friendsinwar FAQ Manager - 'view_faq.php?question' SQL Injection

Exploit Title: friendsinwar FAQ Manager SQL Injection URL Vulnerability Date: 16.11 2012 Exploit Author: unsuprise Vendor Homepage: http://www.friendsinwar.com Software Link:http://www.friendsinwar.com/scriptdemo/thefaqmanager/ Tested on: Windows 7, Xampp Blog : unsuprise.org Bug : viewfaq.php li...

Xen domain builder Out-of-memory due to malicious kernel/ramdisk

ISSUE DESCRIPTION The Xen PV domain builder contained no validation of the size of the supplied kernel or ramdisk either before or after decompression. This could cause the toolstack to consume all available RAM in the domain running the domain builder. CVE-2012-4544 Additionally, under similar...

A-PDF All To MP3 Converter 2.3.0 Buffer Overflow

!/usr/bin/python Exploit Title: A-PDF All to MP3 Converter v.2.3.0 buffer overflow Software Link: http://www.a-pdf.com/all-to-mp3/download.htm Version: = 2.3.0 Tested on: Win7 German Date: 12/11/2012 Author: metacom details: Open the app, drag the wav file, nc ip 4444 filename = "crash.wav" junk ...

A-PDF All to MP3 Converter v.2.3.0 buffer overflow

Exploit for windows platform in category dos / poc !/usr/bin/python Exploit Title: A-PDF All to MP3 Converter v.2.3.0 buffer overflow Software Link: http://www.a-pdf.com/all-to-mp3/download.htm Version: = 2.3.0 Tested on: Win7 German Date: 12/11/2012 Author: metacom details: Open the app, drag th...