5800 matches found
E-Manage MySchool 7.02 SQL Injection Vulnerability
No description provided by source. Exploit Title: SQL Injection MySchool Version 7.02 Google Dork: MySchool Version 7.02 Date: 05-21-2011 Software Link: http://em.com.eg/ Version: Version 7.02 Author: az7rb Tested on : winxp sp3 Ar end bt5 Homepage : www.p0c.cc Greetz : p0c Team & Dr.NaNo & All M...
Bit Weaver 2.7 - Local File Inclusion Vulnerability
No description provided by source. ------------------------------------------------------------------------ Software................Bit Weaver 2.7 Vulnerability...........Local File Inclusion Download................http://www.bitweaver.org/ Release Date............7/1/2010 Tested...
PTC Site's RCE/XSS Vulnerability
No description provided by source. $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ @Title: PTC Site's RCE/XSS Vulnerability @Vendor: http://www.ptcsites4sale.info & and etc...:D @Author: CrazyMember @SPC Thanks: XroGuE 4 r3p0r7 :P @Dork:intext:Warning: passthru inurl:view=help...
PHP-Update <= 2.7 (admin/uploads.php) Remote Code Execution Exploit
No description provided by source. !/usr/bin/perl rgod u fucking little piece of shit faggot. way to ruin a private exploit, scumbag use strict; use IO::Socket; use MIME::Base64; use Getopt::Std; my $app = PHP-Update 2.7; my $type = Remote Code Execution; my $author = undefined1; my $date =...
WatchGuard Firewall XTM 11.7.4u1 - Remote Buffer Overflow
No description provided by source. !/usr/bin/perl -w Exploit Title: WatchGuard Firewall XTM version 11.7.4u1 - Remote buffer overflow exploit sessionid cookie Date: Oct 18 2013 Exploit Author: [email protected] a.k.a. [email protected] Vendor Homepage: http://www.watchguard.com Version: =...
AVS Media Player 4.1.11.100 (.ac3) - Denial of Service
No description provided by source. !/usr/bin/python print +Exploit Title:AVS Media Player.ac3Denial of Service Exploit +Vulnerable Product:4.1.11.100 +Download Product:http://www.avs4you.com/de/downloads.aspx +All AVS4YOU Software has problems with format .ac3 +Date: 29.06.2013 +Exploit Author:...
bitrix site manager 4.0.5 - Remote File Inclusion Vulnerability
No description provided by source. + Author : Don Tukulesto [email protected] + Date : November 13, 2009 + Homepage : http://www.indonesiancoder.com + Vendor : http://www.bitrixsoft.com/ + Method : Remote File Inclusion + Location : INDONESIA Notes : I know this is an old bugs, but i just...
PHP CGI Argument Injection Exploit
No description provided by source. Exploit Title: Cve-2012-1823 PHP CGI Argument Injection Exploit Date: May 4, 2012 Author: rayh4c0x4080sec0x2ecom Exploit Discovered by wofeiwo0x4080sec0x2ecom import socket import sys def cgiexploit: pwncode = ?php phpinfo;? postLength = lenpwncode httpraw=POST...
NeginGroup CMS Multiple Vulnerability
Sql Injection And Xss Vulnerability In NeginGroup Cms @@@ @@@@@@@@@@@ @@@@@ @@@@@@@@@@ @@@ @@@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@@@@@@@@@ @@@ @ @@@@@@@@@@ @@@ @@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@ @@...
Alleged BlackShades Malware Co-Author pleads not Guilty
A Swedish man accused of being involved in the creation of the malicious software used to infect over half a million systems in more than dozens of countries, has pleaded not guilty in New York on Thursday to computer hacking charges brought against him. Alex Yucel, 24, who is the co-author of th...
WordPress Conversion Ninja Cross Site Scripting Vulnerability
WordPress Conversion Ninja plugin suffers from a cross site scripting vulnerability. Note that this finding houses site-specific data. ++++++++++++++++++++++++ + + Exploit Title: Wordpress Plugin Conversionninja Cross Site Scripting + + Exploit Author: Ashiyane Digital Security Team + + Date:...
WordPress bib2html 0.9.3 Cross Site Scripting Vulnerability
WordPress bib2html plugin version 0.9.3 suffers from a cross site scripting vulnerability. Note that this finding houses site-specific data. |||||||||||||||||||||||||||||||||||||||||||||||||| |-------------------------------------------------------------------------| | Exploit Title: Wordpress...
CyberLink Power2Go Essential 9.0.1002.0 Overflow
!/usr/bin/perl Exploit Title: CyberLink Power2Go Essential 9.0.1002.0 - Registry SEH/Unicode Buffer Overflow Discovery date: 11-26-2013 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software/Version: CyberLink Power2Go 9 Essential 9.0.1002.0 Vendor Site: http://www.cyberlink.com...
InvisionPower CMS Links To Titles 3.0 Cross Site Scripting
InvisionPower cms Links to Titles utility Presistent XSS =========================================== Author: UmPire Version: 3.0 Full details for version 3.1 patch is not mentioned. It's suspicious to affect all versions. Vendor URL: http://invisionpower.com Product URL:...
WordPress Photo-Gallery Cross Site Request Forgery
Wordpress Cross Site Request Forgery in Plugin photo-gallery + Date: 07/05/2014 + Risk: HIGH + Author: Felipe Andrian Peixoto + Vendor Homepage: https://wordpress.org/plugins/photo-gallery/ + Contact: [email protected] + Tested on: Windows 7 and Linux + Vulnerable File: UploadHandler.php...
CMS HINTWEB Cross Site Scripting / SQL Injection
Cross Site Scripting on CMS HINTWEB + Date: 04/05/2014 + Risk: LOW + Author: Felipe Andrian Peixoto + Vendor Homepage: http://www.hintweb.com.br/ + Contact: [email protected] + Tested on: Windows 7 and Linux + Vulnerable File: index.php + Exploit : http://host//index.php?txtMSG=XSS + PoC...
WordPress thecotton Themes Remote File Upload Vulnerability
@@@ @@@@@@@@@@@ @@@@@ @@@@@@@@@@ @@@ @@@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@@@@@@@@@ @@@ @ @@@@@@@@@@ @@@ @@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@ @@@ @@@ @@ @@@...
E-Store (1.0 & 2.0) <= SQL Injection Vulnerability
Exploit Author: Nawaf Alkeraithe ====================================== for "E-store 1.0": Google Dork: "Powered by: PD" inurl:"page.php?id" Vulnerable page: http://target/page.php?id=SQL Injection ====================================== for "E-store 2.0": Google Dork: "Powered by: PD"...
WordPress WP-Affiliate Platform Cross Site Scripting
Wordpress XSS/HTML Injection in Plugin wp-affiliate-platform + Date: 30/04/2014 + Risk: HIGH + Author: Felipe Andrian Peixoto + Vendor Homepage: http://wpaffiliatemanager.com/ + Contact: [email protected] + Tested on: Windows 7 and Linux + Vulnerable File: login.php +...
LogiVert Webshop Software Cross Site Scripting
Cross Site Scripting on LogiVert Webshop Software Risk: Low CWE number: CWE-79 Date: 23/04/2014 Vendor: www.logivert.com Author: Felipe " Renzi " Gabriel Contact: [email protected] Tested on Windows 8 pro Vulnerable File: index.php Exploit: http:/host/index.php%3fitem=xss PoC: - Target:...