WordPress Plugin dzs-zoomsounds 2.0 - Arbitrary File Upload

Exploit Title: WordPress dzs-zoomsounds Plugins Remote File Upload Vulnerability Vendor : http://digitalzoomstudio.net/docs/wpzoomsounds/ Author: bl4ck-dz Date: 28/05/2015 Infected File: upload.php Category: webapps Google dork:inurl:/wp-content/plugins/dzs-zoomsounds/ Tested on : Linux | Windows...

WebBoard CMS Cross Site Scripting

. ,;' / . ,'/ .' . X /.' .-;--''--.. .' / , IeDb.ir ' Q ' , , . \ ,.| ' -.;' : . ; --,..; ' , .' . , ' / ; ,''-,;' - -..-- Exploit Title : WebBoard CMS Multiple Vulnerability Author : IeDb Security Team Discovered By : Bl4ck M4n Home : http://www.iedb.ir/acc Security Risk : High...

Mybb All Version Denial of Service Vulnerability

Mybb All Version Denial of Service Vulnerability !/usr/bin/perl @@@ @@@@@@@@@@@ @@@@@ @@@@@@@@@@ @@@ @@@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@@@@@@@@@ @@@ @ @@@@@@@@@@ @@@ @@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@...

Integrated CMS - SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================================================================== /Exploit Title : Integrated CMS Saudi SQL Injection \ /Exploit Author : DSST \ /Vendor Home Page : in2sol.com \ /Tested on: Windows...

Joomla (makedown.php) Local File Inclusion/download

Exploit for php platform in category web applications Exploit Title: Joomla /Makedown.php Local File Inclusion/download Author: Th3 Bl4Ck H4Ck3R Facebook Page: http://www.fb.com/Mr.googl E-mail: email protected Category:: webapps !! File makedown.php ------------------------------...

HostAdmin 3.* Remote File Include Vulnerabilities

Dear securityfocus moderator, a bug in HostAdmin that allows to us to occur a Remote File Include on a Remote machin. this bug tested with the Vulnerable Software 3.1.1. A Full Description Can be found in the attached document. Islamic Republic Of Iran Security Team Www.IrIsT.Ir HostAdmin == 3.1....

hostadmin-rfi.txt

Islamic Republic Of Iran Security Team Www.IrIsT.Ir HostAdmin == 3.1.1 Remote File Include Vulnerabilities Download......: http://dreamcost.com/?page=hostadmin Bug Found.....: IrIsT™ discovery.....: Am!r IrIsT™ contact.......: AdminatIrIsT.ir Exploit.......: http://site/path/index.php?path=Site?...

wpdownload-sql.txt

Wordpress Plugin Download file Remote SQL Injection Vulnerability Author: BL4CK Mail: [email protected] Dork: inurl:"wp-download.php?dlid=" Example: http://localhost/path/path/path/wp-download.php?dlid=SQL SQL: null//union//all//select//concatuserlogin,0x3a,userpass//from//wpusers/ Greetz: ZioN,...

Unfixed XSS vulnerability at www.republic.co.uk

Security researcher BL4CK, has submitted on 21/02/2008 a cross-site-scripting XSS vulnerability affecting www.republic.co.uk, which at the time of submission ranked 46395 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/03/2008. It is current...

Unfixed XSS vulnerability at www3.unicatt.it

Security researcher Bl4cK M4g1c, has submitted on 29/08/2007 a cross-site-scripting XSS vulnerability affecting www3.unicatt.it, which at the time of submission ranked 44570 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/08/2007. It is...

jboss-xss.txt

hey .. Vulnerable : JBoss Portal web : http://jboss.org XSS : 1- http://labs.example.org/portal/community?noproject="alert'BLacKZeRo' Discovered By BLacK ZeRo [email protected] Best regards ,,...

XSS in Rainbow with Rainbow.Zen

hey ,, Vulnerable : rainbowportal web : http://rainbowportal.net/ XSS : 1- http://example.net/jira/secure/BrowseProject.jspa?id="scriptalert'BLacKZeRo'/script Discovered By BLacK ZeRo [email protected] Best regards ,,...