Roxy File Manager 1.4.4 Shell Upload

Exploit Title: Roxy Fileman = 1.4.4 Forbidden File Upload Vulnerability Google Dork: intitle:"Roxy file manager" Date: 15-06-2016 Exploit Author: Tyrell Sassen Vendor Homepage: http://www.roxyfileman.com/ Software Link: http://www.roxyfileman.com/download.php?f=1.4.4-php Version: 1.4.4 Tested on:...

Armadito Antimalware Backdoor / Bypass

/ Exploit Title : Armadito antimalware - Backdoor/Bypass Date : 07-06-2016 DD-MM-YYYY Exploit Author : Ax. Vendor Homepage : http://www.teclib-edition.com/teclib-products/armadito-antivirus/ Software Link : https://github.com/41434944/armadito-av Version : No version specified. Fixed 07-06-2016...

Armadito Antimalware - Backdoor Access/Bypass

/ Exploit Title : Armadito antimalware - Backdoor/Bypass Date : 07-06-2016 DD-MM-YYYY Exploit Author : Ax. Vendor Homepage : http://www.teclib-edition.com/teclib-products/armadito-antivirus/ Software Link : https://github.com/41434944/armadito-av Version : No version specified. Fixed 07-06-2016...

Armadito Antimalware - Backdoor AccessBypass

Armadito Antimalware - Backdoor AccessBypass / Exploit Title : Armadito antimalware - Backdoor/Bypass Date : 07-06-2016 DD-MM-YYYY Exploit Author : Ax. Vendor Homepage : http://www.teclib-edition.com/teclib-products/armadito-antivirus/ Software Link : https://github.com/41434944/armadito-av Versi...

WordPress EWWW Image Optimizer Plugin <= 2.8.3 - Remote Code Execution

Because of this vulnerability, attackers can create a backdoor or take a site down altogether. Solution Upgrade this plugin...

Valve Steam 3.42.16.13 Local Privilege Escalation

Exploit Title: Valve Steam 3.42.16.13 Local Privilege Escalation CVE-ID: CVE-2016-5237 Date: 5/11/52016 Exploit Author: gsX Contact: [email protected] Vendor Homepage: http://www.valvesoftware.com/ Software Link: http://store.steampowered.com/about/ Version: File Version 3.42.16.13, Built: Apr ...

WordPress Mobile Detector plug-in vulnerability had been used to attack-vulnerability warning-the black bar safety net

! Update:WordPress Mobile Detector plugin have been patched,the vulnerability has been resolved. Please update as soon as possible,a patched version is 3. 6,the latest version is 3. 7 in. In the past few days,we have noticed the problem sites number linear growth,and did not find these sites the...

WordPress Levo-Slideshow 2.3 Shell Upload

Exploit Name: Wordpress Levo-Slideshow 2.3 Shell Upload by Unprivileged user Exploit Date: 5/6/2016 Author: Aaditya Purani Author Blog: https://aadityapurani.com Vendor: https://wordpress.org/plugins/wp-levoslideshow Version: 2.3 Tested on: Wordpress 4.5.2 Hi This is Aaditya Purani, Let's have lo...

WordPress Patches WP Mobile Detector Plugin Zero Day

A WordPress plugin was patched Thursday night, close to a week after reports began to surface of public attacks against a zero-day vulnerability. WP Mobile Detector was pulled from the WordPress Plugin Directory once the attacks went public. It was restored last night and users are urged to updat...

Microsoft Windows Forced Firewall Bypass

/ A Proof of Concept how bypass windows firewall Tested at windows 7 Author: Antonio Costa aka Cooler, CoolerVoid [email protected] Greetz: M0nad, I4K, Slyfunky, Sigsegv, RaphaelSC, MMxM, F-117, Clandestine, LoganBr, Welias, Luanzeiro, Alan JUmpi... This bypass the windows firewall, Search...

Arbitrary File Upload Vulnerability in PatrolFlow Multi-service Security Gateway Intelligent Management Platform of Beijing Byzoro Network Technology Co.

PatrolFlow is a multi-service security gateway intelligent management platform of Beijing Byzoro Network Technology Co. An arbitrary file upload vulnerability exists in the PatrolFlow multi-service security gateway intelligent management platform of Beijing Byzoro Network Technology Co. The...

PHP CRUD 1.4 Backdoor Accounts

======================================================================== | Title : PHP CRUD V1.4 Backdoor Account Vulnerability | Author : indoushka | email : [email protected] | Tested on: windows 8.1 Français V.Pro | Vendor : http://demo.code-abc.com/scrudv1.4/...

Tuninfoforyou 2 / 2.5 Backdoor Account

Exploit Title : Tuninfoforyou - Weak Password Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : http://www.tuninfoforyou.com/ Category: Webapps Tested on: Win Version: 2 And 2.5 Date: 2016/05/20 PoC: Login Page : /reservation/admin/ And /b2b/admin/ User and Password = admin Demo ...

Python Based Windows Backdoor with Gmail C&C: gDog

A stealthy Python based Windows backdoor that uses Gmail as a command and control server Gdog is a stealthy Python Windows backdoor that uses Gmail as a command and control server. It is mostly inspired by Gcat with which it shares code base but it adds additional options and features and goes...

Kernel Backdoor found in Gadgets Powered by Popular Chinese ARM Maker

How to Hack an Android device? It is possibly one of the most frequently asked questions on the Internet. Although it's not pretty simple to hack Android devices and gadgets, sometimes you just get lucky to find a backdoor access. Thanks to Allwinner, a Chinese ARM system-on-a-chip maker, which h...

Cisco found a million PCS there is a backdoor spying program-vulnerability warning-the black bar safety net

Security expert to remind the majority of PC users: France Tuto4PC company quietly on your PC the binding of adware and spyware. ! Cisco's Talos Group of security researchers says: the French company of some of the other tools, including OneSoftPerDay and the System Healer, etc., are the presence...

Allwinner 3.4 Legacy Kernel Local Privilege Escalation

This module attempts to exploit a debug backdoor privilege escalation in Allwinner SoC based devices. Vulnerable Allwinner SoC chips: H3, A83T or H8 which rely on Kernel 3.4. Vulnerable OS: all OS images available for Orange Pis, any for FriendlyARM's NanoPi M1, SinoVoip's M2+ and M3, Cuebietech'...

Hacker Installed a Secret Backdoor On Facebook Server to Steal Passwords

How to Hack Facebook? That’s the most commonly asked question during this decade. It’s a hacker dream to hack Facebook website for earning bug bounty or for any malicious purpose. Facebook security team recently found that someone, probably a blackhat hacker with malicious intent, has breached in...

PoS Attack Net Crooks 20 Million Bank Cards, Up to $400 Million

In a storyline that rivals an episode of The Sopranos, researchers at FireEye documented the heist of bank card data from 20 million individuals that involved a complex web of crooks that may have netted hackers more than $100 million since 2014. In conjunction with recently acquired Isight...

Safety warning: JBoss application platform, the back door leads to about 3 2 0 million Server threats with detection and the use of tools-vulnerability warning-the black bar safety net

The cause of the incident is that the recent ransomware event a large number of diffusion caused by Cisco security researchers noted that, after its security researchers survey analysis found that, among a large number of cases because the attacker uses the JBoss Java application platform...