WordPress Testimonial Slider 1.2.1 Cross Site Scripting

GhostMail Exploit : For Exploiting This Vulnerability Install Testimonial Slider Plugin Then Create New Slider In Slider Name Input Place Your JavaScript Code After Creating Slider JavaScript Code Will Be Executed . Image POC : Vulnerable Code : Slider ID = For Patching : Slider ID = This...

WordPress Responsive Thumbnail Slider 1.0 Shell Upload

POC : For Exploiting This Vulnerability : Go To Add Image Section And Upload File By Self Plugin Uploader Then Upload File With Double Extension Image And By Using A BurpSuite Or Tamper Data Change The File Name From Shell.php.jpg To Shell.php And Shell Is Uploaded . :...

WordPress Plugin Responsive Thumbnail Slider 1.0 - Arbitrary File Upload

Exploit Title: Wordpress Responsive Thumbnail Slider Arbitrary File Upload Date: 2015/8/29 Exploit Author: Arash Khazaei Vendor Homepage: https://wordpress.org/plugins/wp-responsive-thumbnail-slider/ Software Link: https://downloads.wordpress.org/plugin/wp-responsive-thumbnail-slider.zip Version:...

Pligg CMS 2.0.2 Cross Site Request Forgery

Admin input name="password" type="text" class="form-control" id="password" value="hacker123" onchange="ch...

Wolf CMS 0.8.2 Open Redirect

Exploit Title: Wolf CMS Open Redirect Vulnerability + Google Dork: N/A + Date: 10/8/2015 + Exploit Author: Arash Khazaei + Vendor Homepage: https://www.wolfcms.org/ + Software Link: https://bitbucket.org/wolfcms/wolf-cms-downloads/downloads/wolfcms-0.8.2.zip + Version: 0.8.2Last Version + Tested...

Tendoo CMS 1.3 - XSS Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Tendoo CMS Stored And Reflected Xss Vulnerability Google Dork: N/A Date: 28/7/2015 Exploit Author: Arash Khazaei Vendor Homepage: http://tendoo.org/ Software Link: http://sourceforge.net/projects/tendoo-cms/ Version: 1.3 Tested...

Tendoo CMS 1.3 - Cross-Site Scripting

Exploit Title: Tendoo CMS Stored And Reflected Xss Vulnerability Google Dork: N/A Date: 28/7/2015 Exploit Author: Arash Khazaei Vendor Homepage: http://tendoo.org/ Software Link: http://sourceforge.net/projects/tendoo-cms/ Version: 1.3 Tested on: Kali , Windows CVE : N/A Contact : [email protected]...

Seditio CMS 1.7.1 Open Redirect

Exploit Title: Seditio CMS Open Redirect + Google Dork: intext:"Powered by Seditio CMS" + Date: 27/7/2015 + Exploit Author: Arash Khazaei + Vendor Homepage: http://www.seditiocms.com/ + Software Link: http://www.seditiocms.com/page.php?id=20&a=dl + Version: 1.7.1Last Version + Tested on: Kali ,...

vBulletin 4.x.x visitormessage.php Remote Code Injection Vulnerability

you can get access from vbulletin forum, just inject php code in one file. + My Homepage: black-hg.org / nasirpour.info + Discovered By: Dariush Nasirpour Net.Edit0r + Greeting : Ali Razmjoo - Ehsan Nezami - Arash Shams - Ramin Shahkar and all my freinds bhg...

Schneider Electric PLC ETY Series Ethernet Controller - Denial of Service

No description provided by source. Telnet server of Schenider Electric ETY Series Controllers have a security problem. We noticed that while we are connected to the PLC through telnet, if we call telnet instance inside VxWorks again it can cause the device to crash. The telnet instance name is...

Fox Audio Player 0.8.0 .m3u Denial of Service Vulnerability

No description provided by source. Title: Fox Audio Player 0.8.0 .m3u Denial of Service Vulnerability Author: 4n0nym0us Arash Sa'adatfar Developer: Leandro Nini Software Link: http://www.softpedia.com/get/Multimedia/Audio/Audio-Players/Fox-Audio-Player.shtml Tested On: Windows XP Sp3 32-bit /...

FortKnox Personal Firewall 9.0.305.0 & 10.0.305.0 - Kernel Driver (fortknoxfw.sys) Memory Corruption Vulnerability

No description provided by source. / Exploit Title: 0day FortKnox Personal Firewall kernel driver fortknoxfw.sys memory corruption vulnerability Date: 25/10/2013 Author: Arash Allebrahim Contact : [email protected] Vendor Homepage: http://www.fortknox-firewall.com/ Vulnerable software :...

Discloser <= 0.0.4 (fileloc) Remote File Include Vulnerabilities

No description provided by source. | | | discloser 0.0.4 Remote File Inclusion Vulnerability | | Download: http://optusnet.dl.sourceforge.net/sourceforge/discloser/discloser-0.0.4.tar.gz | |Contact| | | Discoverd by: Arash RJ | | Team: PersianFox Digital Security Team | | URL:...

Softmaker Office 2012 - TextMaker Memory Corruption Vulnerability

No description provided by source. / Title : Softmaker Office 2012 TextMaker Memory Corruption Vulnerability 0day Version : 2012.12.20.654 Author : Arash Allebrahim Contact : [email protected] Date : 2013-10-30 Vendor : http://www.softmaker.com/english/ofen.htm tested : Win XP SP3 ENG &...

Ziggurat Farsi CMS SQL Injection Vulnerability

No description provided by source. Hello. Thank You For Your Perfect Web Site. Title : Ziggurat Farsi CMS SQL Injection Vulnerability Author: Arash Saadatfar InformatioN Title : Ziggurat Farsi CMS SQL Injection Vulnerability Author : Arash Saadatfar ExploiT Vulnerable File :...

MediaInSpot CMS LFI Vulnerability

No description provided by source. Title : MediaInSpot CMS LFI Vulnerability Author: Amoo Arash Date : 2010-04-10 InformatioN Title : MediaInSpot CMS LFI Vulnerability Author : Amoo Arash ExploiT Vulnerable File : http://127.0.0.1/view/lang/index.php?page=?page=LFI ExploiT :...

Unfixed XSS vulnerability at iranexam.net

Security researcher Arash Allebrahim, has submitted on 09/01/2012 a cross-site-scripting XSS vulnerability affecting iranexam.net, which at the time of submission ranked 2096346 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/01/2012. It is...

Unfixed XSS vulnerability at clibrary.um.ac.ir

Security researcher Arash Allebrahim, has submitted on 04/02/2011 a cross-site-scripting XSS vulnerability affecting clibrary.um.ac.ir, which at the time of submission ranked 19462 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It ...

Linksys Cisco Wag120N CSRF Vulnerability

---------------------------------------------------------------- Hardware : Linksys Cisco Wag120nAnd perhaps similar versions Type of vunlnerability : CSRF Change Admin Password And Add User Risk of use : High ---------------------------------------------------------------- Producer Website :...

Linksys Cisco WAG120N CSRF Vulnerability

Exploit for hardware platform in category web applications ---------------------------------------------------------------- Hardware : Linksys Cisco Wag120nAnd perhaps similar versions Type of vunlnerability : CSRF Change Admin Password And Add User Risk of use : High...