CyberLink Power2Go Essential 9.0.1002.0 Overflow

!/usr/bin/perl Exploit Title: CyberLink Power2Go Essential 9.0.1002.0 - Registry SEH/Unicode Buffer Overflow Discovery date: 11-26-2013 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software/Version: CyberLink Power2Go 9 Essential 9.0.1002.0 Vendor Site: http://www.cyberlink.com...

InvisionPower CMS Links To Titles 3.0 Cross Site Scripting

InvisionPower cms Links to Titles utility Presistent XSS =========================================== Author: UmPire Version: 3.0 Full details for version 3.1 patch is not mentioned. It's suspicious to affect all versions. Vendor URL: http://invisionpower.com Product URL:...

WordPress Photo-Gallery Cross Site Request Forgery

Wordpress Cross Site Request Forgery in Plugin photo-gallery + Date: 07/05/2014 + Risk: HIGH + Author: Felipe Andrian Peixoto + Vendor Homepage: https://wordpress.org/plugins/photo-gallery/ + Contact: [email protected] + Tested on: Windows 7 and Linux + Vulnerable File: UploadHandler.php...

CMS HINTWEB Cross Site Scripting / SQL Injection

Cross Site Scripting on CMS HINTWEB + Date: 04/05/2014 + Risk: LOW + Author: Felipe Andrian Peixoto + Vendor Homepage: http://www.hintweb.com.br/ + Contact: [email protected] + Tested on: Windows 7 and Linux + Vulnerable File: index.php + Exploit : http://host//index.php?txtMSG=XSS + PoC...

E-Store (1.0 & 2.0) <= SQL Injection Vulnerability

Exploit Author: Nawaf Alkeraithe ====================================== for "E-store 1.0": Google Dork: "Powered by: PD" inurl:"page.php?id" Vulnerable page: http://target/page.php?id=SQL Injection ====================================== for "E-store 2.0": Google Dork: "Powered by: PD"...

WordPress thecotton Themes Remote File Upload Vulnerability

@@@ @@@@@@@@@@@ @@@@@ @@@@@@@@@@ @@@ @@@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@@@@@@@@@ @@@ @ @@@@@@@@@@ @@@ @@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@ @@@ @@@ @@ @@@...

WordPress WP-Affiliate Platform Cross Site Scripting

Wordpress XSS/HTML Injection in Plugin wp-affiliate-platform + Date: 30/04/2014 + Risk: HIGH + Author: Felipe Andrian Peixoto + Vendor Homepage: http://wpaffiliatemanager.com/ + Contact: [email protected] + Tested on: Windows 7 and Linux + Vulnerable File: login.php +...

LogiVert Webshop Software Cross Site Scripting

Cross Site Scripting on LogiVert Webshop Software Risk: Low CWE number: CWE-79 Date: 23/04/2014 Vendor: www.logivert.com Author: Felipe " Renzi " Gabriel Contact: [email protected] Tested on Windows 8 pro Vulnerable File: index.php Exploit: http:/host/index.php%3fitem=xss PoC: - Target:...

Acunetix 8 build 20120704 - Remote Stack Overflow

Acunetix 8 build 20120704 - Remote Stack Overflow !/usr/bin/python Title: Acunetix Web Vulnerability Scanner Buffer Overflow Exploit Version: 8 Build: 20120704 Tested on: Windows XP SP2 en Vendor: http://www.acunetix.com/ Original Advisory:...

Microsoft Internet Explorer 10 - CMarkup Use-After-Free (MS14-012)

Microsoft Internet Explorer 10 - CMarkup Use-After-Free MS14-012 mxmlc.exe AsXploit.as -o AsXploit.swf Exploit-DB Mirror: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/32851-AsXploit.as -- var garr = ; var arrLen = 0x250; function dword2datadword var d =...

Faceless: Blocking yourself

I dont know if it's eligible but it is a bug that you can block your self in Faceless. Procedure: I made a post then I comment in that post then I hold the comment I made and there's a new window prompted and I block myself and another prompt saying that "You will no longer recieve messages from...

MS14-017 Microsoft Word RTF Object Confusion Exploit

This Metasploit module creates a malicious RTF file that when opened in vulnerable versions of Microsoft Word will lead to code execution. The flaw exists in how a listoverridecount field can be modified to treat one structure as another. This bug was originally seen being exploited in the wild...

IBM Tealeaf CX 8.8 - Remote OS Command Injection Vulnerability

Exploit for php platform in category web applications IBM Tealeaf CX v8 release 8 Remote OS Command Injection Date: 11/08/2013 Exploit author: drone More information: http://www-01.ibm.com/support/docview.wss?uid=swg21667630 Vendor homepage: http://www-01.ibm.com/software/info/tealeaf/ Version:...

Immunity Debugger 1.85 - Stack Overflow (PoC)

/ Filename : CrashPOC.cpp Exploit Title: title Date: 20 March 2014 Exploit Author: Veysel HATAS [email protected] - Web Page : www.binarysniper.net Vendor Homepage: https://www.immunityinc.com/ Software Link: https://www.immunityinc.com/products-immdbg.shtml Version: 1.85 Tested on: WinXP, Win7 /...

MP3Info 0.8.5a - Local Buffer Overflow (SEH)

Exploit Title: mp3info SEH exploit Date: 18 March 2014 Exploit Author: Ayman Sagy Vendor Homepage: http://ibiblio.org/mp3info/ Software Link: https://www.exploit-db.com/apps/cb7b619a10a40aaac2113b87bb2b2ea2-mp3info-0.8.5a.tgz Version: MP3Info 0.8.5 Tested on: Windows 7 Ultimate 64 and 32 bit CVE ...

GNUPanel 0.3.5_R4 - Multiple Vulnerabilities

GNUPanel 0.3.5R4 - Multiple Vulnerabilities Exploit Title :GNUpanel 0.3.5R4 - Multiple Vulnerabilities Vendor Homepage :http://wp.geeklab.com.ar/gl-en/gnupanel/ GNUPanel Version :0.3.5R4 Server :Centos 6.4 Exploit Author :Necmettin COSKUN =@babayarisi Blog :http://www.ncoskun.com...

GNUpanel 0.3.5_R4 Cross Site Request Forgery / Cross Site Scripting

Exploit Title :GNUpanel 0.3.5R4 - Multiple Vulnerabilities Vendor Homepage :http://wp.geeklab.com.ar/gl-en/gnupanel/ GNUPanel Version :0.3.5R4 Server :Centos 6.4 Exploit Author :Necmettin COSKUN =@babayarisi Blog :http://www.ncoskun.com http://www.grisapka.org Discovery date :03/11/2014 CVE :N/A...

Et-Chat 3.0.7 Password Reset

IIIIIIII RRRRRRRRRRRR HHHHHHHH HHHHHHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRRRRRRRR HHHHHHHHHHHHHHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIIIIIII RRRRRRRR RRRRRR...

E-Store 1.0 / 2.0 SQL Injection

Exploit Author: Nawaf Alkeraithe ====================================== for "E-store 1.0": Google Dork: "Powered by: PD" inurl:"page.php?id" Vulnerable page: http://target/page.php?id=SQL Injection ====================================== for "E-store 2.0": Google Dork: "Powered by: PD"...

GDL 4.2 XSS / SQL Injection / Traversal

Title : GDL 4.2 Multiple Vulnerabilities - Down. Script : http://kmrg.itb.ac.id/ - http://kmrg.itb.ac.id/gdl42.zip - Author : ByEge - Home : http://byege.blogspot.com.tr/ - Tested : Apache/2.2.22 Win32 PHP/5.4.3 - Date : 26/02/2014 - Google Dork : "Powered by GDL 4.2" And "gdl.php?mod=browse" -...