Dup Scout Enterprise 9.0.28 - Login Remote Buffer Overflow

Dup Scout Enterprise 9.0.28 - Login Remote Buffer Overflow !/usr/bin/python print "Dup Scout Enterprise 9.0.28 Buffer Overflow Exploit" print "Author: Tulpa / tulpaattulpa-securitydotcom" Author website: www.tulpa-security.com Author twitter: @tulpasecurity Exploit will land you NT AUTHORITY\SYST...

Disk Savvy Enterprise 9.0.32 - Buffer Overflow Exploit

Exploit for windows platform in category remote exploits !/usr/bin/python print "Disk Savvy Enterprise 9.0.32 Buffer Overflow Exploit" print "Author: Tulpa / tulpaattulpa-securitydotcom" Author website: www.tulpa-security.com Author twitter: @tulpasecurity Exploit will land you NT AUTHORITY\SYSTE...

WordPress Directory Themes Arbitrary Shell Upload Vulnerability

Exploit for php platform in category web applications Exploit Title : Wordpress Theme Directory Arbitrary Shell Upload Vulnerability Exploit Author : xBADGIRL21 Dork : inurl:/wp-content/themes/Directory/ Vendor Homepage : https://templatic.com/ version : 2.0.16 - 2.0.14 & maybe high or lower Test...

Disk Pulse Enterprise 9.0.34 - Login Remote Buffer Overflow

Disk Pulse Enterprise 9.0.34 - Login Remote Buffer Overflow !/usr/bin/python print "Disk Pulse Enterprise 9.0.34 Buffer Overflow Exploit" print "Author: Tulpa // tulpaattulpa-securitydotcom" Author website: www.tulpa-security.com Author twitter: @tulpa-security.com Exploit will land you NT...

Windows Firewall Control Unquoted Service Path Privilege Escalation Vulnerability

Exploit for windows platform in category local exploits Exploit Title: Windows Firewall Control Unquoted Service Path Privilege Escalation Date: 24/09/2016 Exploit Author: email protected Vendor Homepage: http://www.binisoft.org Version: 4.8.6.0 Tested on: Windows 7 32/64bit ====Description====...

Joomla DVFolderContent 1.0.2 Local File Disclosure

Exploit Title : Joomla DVFolderContent V1.0.2 Module - Local File Disclosure Exploit Author : Persian Hack Team Vendor Homepage : http://www.dvextensions.de/en/extensions/dvfoldercontent Category Webapps Tested on Win Version : V1.0.2 Date 2016/10/01 PoC The Vulnerable page is...

Matrimonial Website Script 1.0.2 SQL Injection

Application Name : Matrimonial Website Script v1.0.2 Google Dork : inurl:viewfullprofile1.php?id= Exploit Author : Cyber Warrior | Bug Researchers Group | N4TuraL Author Contact : https://twitter.com/byn4tural Vendor Homepage : http://www.i-netsolution.com/ Vulnerable Type : SQL Injection Date :...

Matrimonial Website Script 1.0.2 - SQL Injection

Matrimonial Website Script 1.0.2 - SQL Injection Application Name : Matrimonial Website Script v1.0.2 Google Dork : inurl:viewfullprofile1.php?id= Exploit Author : Cyber Warrior | Bug Researchers Group | N4TuraL Author Contact : https://twitter.com/byn4tural Vendor Homepage :...

Windows x86 - Password Protected TCP Bind Shell (637 bytes)

Windows x86 - Password Protected TCP Bind Shell 637 bytes. Shellcode exploit for Winx86 platform / Title : Windows x86 password protected bind shell tcp shellcode Date : 12-09-2016 Author : Roziul Hasan Khan Shifat size : 637 bytes Tested On : Windows 7 ultimate x86 x64 Email : [email protected]...

WordPress Plugin RB Agency 2.4.7 - Local File Disclosure

WordPress Plugin RB Agency 2.4.7 - Local File Disclosure Exploit Title : WordPress RB Agency 2.4.7 Plugin - Local File Disclosure Exploit Author : Persian Hack Team Vendor Homepage : http://rbplugin.com/ Category Webapps Tested on Win Version : 2.4.7 Date 2016/09/03 PoC The Vulnerable page is...

Goron Web Server 2.0 XSS / CSRF / Denial Of Service

Exploit Title: Goron Web Server 2.0 - Multiple Vulnerabilities Date: 26/08/2016 Exploit Author: Guillaume Kaddouch Twitter: @gkweb76 Blog: https://networkfilter.blogspot.com GitHub: https://github.com/gkweb76/exploits Vendor Homepage: https://sourceforge.net/projects/goron/ Software Link:...

TOPSEC Firewalls - 'ELIGIBLECANDIDATE' Remote Code Execution

Exploit for cgi platform in category web applications Exploit Title: TOPSEC Firewalls - Remote Code Execution ELIGIBLECANDIDATE Date: 19-08-2016 Exploit Author: Shadow Brokers Vendor Homepage: http://www.topsec.com.cn/ Full Exploit:...

OpenStego - Steganography Application (Data Hiding and Watermarking)

OpenStego is a steganography application that provides two functionalities: 1. Data Hiding: It can hide any data within a cover file e.g. images. 2. Watermarking: Watermarking files e.g. images with an invisible signature. It can be used to detect unauthorized file copying. Usage For GUI: java -j...

WordPress Yoast SEO Cross Site Scripting

Vulnerability: Stored XSS Vulnerability in Yoast SEO Plugin Impact: High Authors: Hammad Shamsi Company: RHAinfoSEC Website: http://rafayhackingarticles.net & http://blog.sh3ifu.com/ Introduction Yoast SEO formerly known as WordPress SEO by Yoast is the most complete WordPress SEO plugin that...

Halliburton LogView Pro 9.7.5 - '.cgm' / '.tif' / '.tiff' / &#0

Exploit for windows platform in category dos / poc Exploit Title: Haliburton LogView Pro v9.7.5 Exploit Author: Karn Ganeshen Download link: http://www.halliburton.com/public/lp/contents/InteractiveTools/web/Toolkits/lp/HalliburtonLogViewer.exe Version: Current version 9.7.5 Tested on: Windows...

Joomla Extra Search 2.2.8 SQL Injection

Exploit Title : Joomla comextrasearch SQL injection Vulnerability Exploit Author : howucan Website : http://howucan.gr Dork : inurl:/index.php?option=comextrasearch establename Software link : http://www.joomlaboat.com/extra-search Software version : 2.2.8 video : http://adf.ly/1cmGen Tested on:...

Linux/CRISv32 - Axis Communication Connect Back Shellcode (189 bytes)

Linux/CRISv32 - Axis Communication Connect Back Shellcode. Shellcode exploit for Linx86 platform / Title: Axis Communication Linux/CRISv32 - Connect Back Shellcode Author: bashis / 2016 / include char sc = //close0 "\x7a\x86" // clear.d r10 "\x5f\x9c\x06\x00" // movu.w 0x6,r9 "\x3d\xe9" // break ...

PHP Real Estate Script 3 Arbitrary File Disclosure

Exploit Title: php Real Estate Script Arbitrary File Disclosure Date: 2016-07-08 Exploit Author: Meisam Monsef [email protected] or [email protected] Vendor Homepage: http://www.realestatescript.eu/ Version: v.3 Download Link : http://www.realestatescript.eu/downloads/realestatescript-v3.zip...

InstantHMI 6.1 - Local Privilege Escalation

Title: InstantHMI - EoP: User to ADMIN CWE Class: CWE-276: Incorrect Default Permissions Date: 01/06/2016 Vendor: Software Horizons Product: InstantHMI Version: 6.1 Download link: http://www.instanthmi.com/ihmisoftware.htm Tested on: Windows 7 x86, fully patched Release mode: no bugbounty program...

InstantHMI 6.1 - Privilege Escalation

Exploit for windows platform in category local exploits Title: InstantHMI - EoP: User to ADMIN CWE Class: CWE-276: Incorrect Default Permissions Date: 01/06/2016 Vendor: Software Horizons Product: InstantHMI Version: 6.1 Download link: http://www.instanthmi.com/ihmisoftware.htm Tested on: Windows...