Trend Micro Control Manager 5.5/6.0 AdHocQuery BlindSQL Injection (post-auth)

Exploit for asp platform in category web applications !/usr/bin/env python Exploit Title: Trend Micro Control Manager 5.5/6.0 AdHocQuery BlindSQL Injection post-auth Disclosure Date: 09/27/2012 Author: otoy @otoyrood & modpr0be @modpr0be Contact: researchatspentera.com Platform: Windows Tested on...

Ez Cart - SQL Injection Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Arb Blog 0.1 CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: Arb Blog 0.1 CSRF Vulnerability Author: Mr.731MY Vendor or Software Link: http://www.dev-arb.com/uploads/Files/dev-arb.com1341094517.ZIP Version: 0.1 Category:: WebApp Google dork: intext:All Right Resrved For Dev-Arb.com And...

Jessica Rhaye Design Cross Site Scripting

---------------------------------------------------------------- Jessica Rhaye Design = Cross Site Scripting Vulnerabilities ---------------------------------------------------------------- Exploit Title : Jessica Rhaye Design = Cross Site Scripting VulnerabilitieS Author : Hack Center Security...

Manhali 1.8 Local File Inclusion

Exploit Title: Manhali v1.8 Local File Inclusion Vulnerability Date: 20/09/2012 Author: L0n3ly-H34rT Contact: [email protected] My Site: http://se3c.blogspot.com/ Vendor Link: http://www.manhali.com/ Software Link: http://sourceforge.net/projects/manhali/files/manhali1.8.zip/download Versio...

WordPress Author Name Disclosure

Exploit Title: Wordpress All Version Wp-Admin Username Vulnerability Google Dork: inurl:/?author=1 Date: 17/09/12 Exploit Author: PistqoN E-Mail: [email protected] Software Link: http://wordpress.org/download/ Version: All Tested on: Linux Ubuntu - Windows 7 - Windows Xp Video:...

Bullseye Creative => SQL injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Bullseye Creative = SQL injection Vulnerability Author: RaMeZ Libyan Darkness Storm - LDS Google dork : intext:powered by: Bullseye Creative "inurl:.php?id=" Date : 16-9-2012 Greets : LDS members poc: www.site.com/sick...

Joomla Component com_fabrik File Upload Vulnerability

Exploit for php platform in category web applications $ $ +================================================= ================+ | Joomla Component comFabrik Remote Shell Upload Vulnerability | +================================================= ================+ Google Dork :...

Knowledge Base Enterprise Edition 4.62.0 - SQL Injection

Knowledge Base Enterprise Edition 4.62.0 - SQL Injection Exploit Author: Vulnerability-Lab Title: ====== Knowledge Base EE v4.62.0 - SQL Injection Vulnerability Date: ===== 2012-09-11 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=702 VL-ID: ===== 702 Common...

Sitecom MD-25x - Multiple Vulnerabilities

Sitecom MD-25x - Multiple Vulnerabilities !/usr/bin/python Exploit Title: Sitecom MD-253 and MD-254 Network Storage Reverse Shell Exploit Date: 09/11/12 Exploit Author: Mattijs van Ommeren mattijs at alcyon dot nl Vendor Homepage: http://www.sitecom.com Software Link:...

BitraNet SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title = BitraNet - SQL Injection Vulnerability Google Dork = "Powered by : BitraNet" Exploit Author = Zikou-16 My Facebook = http://www.facebook.com/ZIkOou.16 Software Link = http://www.bitranet.com/ Exploit =...

CVE-2010-5205

Multiple untrusted search path vulnerabilities in e-press ONE Office Author allow local users to gain privileges via a Trojan horse 1 javamsci.dll or 2 mscijava.dll file in the current working directory, as demonstrated by a directory that contains a .psw file. NOTE: some of these details are...

Design/Logic Flaw

Multiple untrusted search path vulnerabilities in e-press ONE Office Author allow local users to gain privileges via a Trojan horse 1 javamsci.dll or 2 mscijava.dll file in the current working directory, as demonstrated by a directory that contains a .psw file. NOTE: some of these details are...

CVE-2010-5205

CVE-2010-5205 concerns untrusted search path vulnerabilities in e-press ONE Office Author, enabling local privilege escalation via Trojan horse DLLs (java_msci.dll or msci_java.dll) placed in the current working directory, demonstrated with a directory containing a .psw file. Connected records co...

CVE-2010-5205

Multiple untrusted search path vulnerabilities in e-press ONE Office Author allow local users to gain privileges via a Trojan horse 1 javamsci.dll or 2 mscijava.dll file in the current working directory, as demonstrated by a directory that contains a .psw file. NOTE: some of these details are...

Syracus CMS SQL Injection

Exploit Title : Syracuse Cms Sql Injection Vulnerability Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir/forum Software Link : http://www.lerentech.com/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : intext:"Syracuse Web Design...

Wordpress (chenpress Plugin) Arbitrary File Upload Vulnerability

a bug in Wordpress chenpress Plugin that allows to us to occur a File Upload on a Remote machin. Exploit Title : Wordpress chenpress Plugin Arbitrary File Upload Vulnerability Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir/forum Software Link : http://wordpress.org Security Risk :...

Douran Portal 3.9.8.25 SQL Injection

The last version of this portal which used by own company, have SQL Injection bug: http://www.douran.com/homepage.aspx?site=DouranPortal&tabid=1SQLi&lang=fa-IR Ver: DOURAN Portal V3.9.8.25 Exploit Title: Douran Portal SQLi Vulnerability Date: 08/31/2012 Author: Persia Security Group - Prince &...

CVE-2011-5134

Unrestricted file upload vulnerability in editor/extensions/browser/file.php in the JCE component before 2.0.18 for Joomla! allows remote authenticated users with the author privileges to execute arbitrary PHP code by uploading a file with a double extension, as demonstrated by .php.gif. NOTE: so...

Unrestricted file upload

Unrestricted file upload vulnerability in editor/extensions/browser/file.php in the JCE component before 2.0.18 for Joomla! allows remote authenticated users with the author privileges to execute arbitrary PHP code by uploading a file with a double extension, as demonstrated by .php.gif. NOTE: so...