Myrephp Business Directory - Multiple Vulnerabilities

Exploit Title: Myrephp Business Directory, Multiple Vulnerabilities Date: 13.10.201 Exploit Author: d3b4g Vendor Homepage:http://myrephp.com Software Link: http://myrephp.com/biz/ Tested on: Windows 7 Blog: d3b4g.me ---------------------------------------------------------------------------------...

WordPress Calendar-Script Blind SQL Injection

Exploit Title: Wordpress Calendar-Script Plugin Blind SQL Injection Vulnerability Google Dork: inurl:"/Calendar-Script/load.php?cid=1" or "intext:Copyright phpcalendarscripts.com ©" Exploit Author: Ashiyane Digital Security Team Vendor Homepage: http://phpcalendarscripts.com/ Tested on: Windows 7...

Joomla Component com_garyscookbook file upload Vulnerability

Exploit for php platform in category web applications Exploit Title: joomla comgaryscookbook file upload Author: Over-X email: email protected Vendor or Software Link: www.joomla.it Version: 242 Google dork: "inurl:comgaryscookbook" Tested on: win Xp...

BigAnt Server 2.52 Stack Overflow Vulnerability

BigAnt Server version 2.52 SP5 SEH stack overflow ROP-based exploit with ASLR and DEP bypass. Exploit Title: BigAnt Server 2.52 SP5 SEH Stack Overflow ROP-based exploit ASLR + DEP bypass Date: 03/11/2012 Exploit Author: Lorenzo Cantoni Vendor Homepage: http://www.bigantsoft.com/ Version: BigAnt...

AwAuctionScript (Aw Auction Script - Market Place for WebMasters) Multiple Vulnerabilities

========================================================================================== AwAuctionScript Aw Auction Script - Market Place for WebMasters Multiple Vulnerabilities ==========================================================================================...

WinRM Script Exec Remote Code Execution

This module uses valid credentials to login to the WinRM service and execute a payload. It has two available methods for payload delivery: Powershell 2 and above and VBS CmdStager. The module will check if Powershell is available, and if so uses that method. Otherwise it falls back to the VBS...

MyBB Profile Albums Plugin 0.9 - 'albums.php?album' SQL Injection

Exploit Title: Profile Albums MyBB plugin SQL Injection 0day Google Dork: inurl:albums.php intext:"powered by Mybb" Date: 14.10.2012 Exploit Author: Zixem Software Link: http://mods.mybb.com/view/profilealbums Version: 0.9 Tested on: Linux. ---------------------------------------------- The...

Heap overflow

Heap-based buffer overflow in the substr function in parsing.c in cgit 0.9.0.3 and earlier allows remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via an empty username in the "Author" field in a commit...

Trend Micro Control Manager 5.5/6.0 AdHocQuery BlindSQL Injection (post-auth)

Exploit for asp platform in category web applications !/usr/bin/env python Exploit Title: Trend Micro Control Manager 5.5/6.0 AdHocQuery BlindSQL Injection post-auth Disclosure Date: 09/27/2012 Author: otoy @otoyrood & modpr0be @modpr0be Contact: researchatspentera.com Platform: Windows Tested on...

Ez Cart - SQL Injection Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Arb Blog 0.1 CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: Arb Blog 0.1 CSRF Vulnerability Author: Mr.731MY Vendor or Software Link: http://www.dev-arb.com/uploads/Files/dev-arb.com1341094517.ZIP Version: 0.1 Category:: WebApp Google dork: intext:All Right Resrved For Dev-Arb.com And...

Manhali 1.8 Local File Inclusion

Exploit Title: Manhali v1.8 Local File Inclusion Vulnerability Date: 20/09/2012 Author: L0n3ly-H34rT Contact: [email protected] My Site: http://se3c.blogspot.com/ Vendor Link: http://www.manhali.com/ Software Link: http://sourceforge.net/projects/manhali/files/manhali1.8.zip/download Versio...

Jessica Rhaye Design Cross Site Scripting

---------------------------------------------------------------- Jessica Rhaye Design = Cross Site Scripting Vulnerabilities ---------------------------------------------------------------- Exploit Title : Jessica Rhaye Design = Cross Site Scripting VulnerabilitieS Author : Hack Center Security...

WordPress Author Name Disclosure

Exploit Title: Wordpress All Version Wp-Admin Username Vulnerability Google Dork: inurl:/?author=1 Date: 17/09/12 Exploit Author: PistqoN E-Mail: [email protected] Software Link: http://wordpress.org/download/ Version: All Tested on: Linux Ubuntu - Windows 7 - Windows Xp Video:...

Bullseye Creative => SQL injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Bullseye Creative = SQL injection Vulnerability Author: RaMeZ Libyan Darkness Storm - LDS Google dork : intext:powered by: Bullseye Creative "inurl:.php?id=" Date : 16-9-2012 Greets : LDS members poc: www.site.com/sick...

Joomla Component com_fabrik File Upload Vulnerability

Exploit for php platform in category web applications $ $ +================================================= ================+ | Joomla Component comFabrik Remote Shell Upload Vulnerability | +================================================= ================+ Google Dork :...

Knowledge Base Enterprise Edition 4.62.0 - SQL Injection

Knowledge Base Enterprise Edition 4.62.0 - SQL Injection Exploit Author: Vulnerability-Lab Title: ====== Knowledge Base EE v4.62.0 - SQL Injection Vulnerability Date: ===== 2012-09-11 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=702 VL-ID: ===== 702 Common...

Sitecom MD-25x - Multiple Vulnerabilities

Sitecom MD-25x - Multiple Vulnerabilities !/usr/bin/python Exploit Title: Sitecom MD-253 and MD-254 Network Storage Reverse Shell Exploit Date: 09/11/12 Exploit Author: Mattijs van Ommeren mattijs at alcyon dot nl Vendor Homepage: http://www.sitecom.com Software Link:...

BitraNet SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title = BitraNet - SQL Injection Vulnerability Google Dork = "Powered by : BitraNet" Exploit Author = Zikou-16 My Facebook = http://www.facebook.com/ZIkOou.16 Software Link = http://www.bitranet.com/ Exploit =...

CVE-2010-5205

Multiple untrusted search path vulnerabilities in e-press ONE Office Author allow local users to gain privileges via a Trojan horse 1 javamsci.dll or 2 mscijava.dll file in the current working directory, as demonstrated by a directory that contains a .psw file. NOTE: some of these details are...