Debian Security Advisory DSA 2798-1 (curl - unchecked ssl certificate host name)

Scott Cantor discovered that curl, a file retrieval tool, would disable the CURLOPTSSLVERIFYHOST check when the CURLOPTSSLVERIFYPEER setting was disabled. This would also disable ssl certificate host name checks when it should have only disabled verification of the certificate trust chain. The...

Debian: Security Advisory (DSA-2798-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress oxygen-theme Themes Remote File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress oxygen-theme Themes Remote File Upload Vulnerability Author: iskorpitx Date: 12/11/2013 Vendor Homepage: http://www.orange-themes.com/ Themes Link: http://www.orange-themes.com/portfolio/oxygen/ Infected File:...

WordPress rayoflight-theme Themes Remote File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress rayoflight-theme Themes Remote File Upload Vulnerability Author: iskorpitx Date: 12/11/2013 Vendor Homepage: http://www.orange-themes.com/ Themes Link: http://www.orange-themes.com/portfolio/ray-of-light/ Infected File...

WordPress Theme Kernel - Arbitrary File Upload

WordPress Theme Kernel - Arbitrary File Upload Exploit Title: WordPress themekernel-theme Themes Remote File Upload Vulnerability Author: iskorpitx Date: 6/11/2013 Vendor Homepage: http://www.wikmag.com/ Themes Link: http://themeforest.net/item/kernel-premium-wordpress-blog-magazine-theme-/857077...

WordPress Theme Kernel - Arbitrary File Upload

Exploit Title: WordPress themekernel-theme Themes Remote File Upload Vulnerability Author: iskorpitx Date: 6/11/2013 Vendor Homepage: http://www.wikmag.com/ Themes Link: http://themeforest.net/item/kernel-premium-wordpress-blog-magazine-theme-/857077 Infected File: upload-handler.php Category:...

WordPress ThisWay Shell Upload Vulnerability

WordPress ThisWay theme suffers from a remote shell upload vulnerability. Exploit title: WordPress ThisWay theme - Arbitrary File Upload Vulnerability Author: Bet0 Google Dork: inurl:"/wp-content/themes/ThisWay/" Date:1 November 2013 Vendor Homepage: http://themeforest.net/ Themes Link:...

WordPress ThisWay Shell Upload

. . / / | // | | .. / \ \ \ \ \ / ||| \ | | / \ / |/ | |/ | / | | // | | | | \ / //|| /\ \ ||| / | /\ /// \ \ //|| | / /|| /| ||/|| / / / / || // / / / / || / / Exploit title: WordPress ThisWay theme - Arbitrary File Upload Vulnerability Author: Bet0 Google Dork:...

WordPress Chameleon theme - Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Joomla Joomleague component Shell Upload Vulnerability

Joomla Joomleague component suffers from a remote shell upload vulnerability due to having Open Flash Chart included. Exploit Title: joomla comjoomleague execute arbitrary PHP code Exploit Google Dork: inurl:comjoomleague Date: 01-11-2013 Exploit Author: wantexz Vendor...

WordPress Right Now theme - Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress Right Now theme - Arbitrary File Upload Vulnerability Author: Smail Max Date: 10/31/2013 Vendor Homepage: http://themeforest.net/ Themes Link: http://themeforest.net/item/right-now-wp-full-video-image-with-audio/157599...

Wordpress plugins wp-mailinglist Arbitrary File Upload

Exploit for php platform in category web applications Exploit Title:Wordpress plugins wp-mailinglist Arbitrary File Upload Google Dork: "inurl:/wp-content/plugins/wp-mailinglist/" Exploit Author: Index Php Tested on: Windows, PHP 5.2 exploit "@$uf", 'folder'='/'; curlsetopt$c,...

PHP Point Of Sale 'ofc_upload_image.php'远程代码执行漏洞

BUGTRAQ ID: 63219 PHP Point Of Sale是在线销售点解决方案。 PHP Point Of Sale 10.x, 11.x, 12.x版本没有正确验证ofcuploadimage.php脚本的输入，可使远程攻击者以提升的权限执行任意代码。 0 PHP Point Of Sale PHP Point Of Sale 12.x PHP Point Of Sale PHP Point Of Sale 11.x PHP Point Of Sale PHP Point Of Sale 10.x 厂商补丁： PHP Point Of Sale...

Avira Internet Security avipbb.sys Filter Bypass and Privilege Escalation

Exploit for php platform in category web applications . . . \ \ | / \ \ \ | || / \ / / \ / |/ \ / | / \ / / /| | |/ \ \ \ // \ / / | \ /\ / | \ \ \ / \ //\ |\ | /\ // | /|\ / / / / / / / Exploit Title: WordPress Area53 theme Arbitrary File Upload Vulnerability Author: Byakuya Date:...

Mac OS X 10.x < 10.9 Multiple Vulnerabilities (BEAST)

The remote host is running a version of Mac OS X 10.x that is prior to version 10.9. The newer version contains multiple security-related fixes for the following components : - Application Firewall - App Sandbox - Bluetooth - CFNetwork - CFNetwork SSL - Console - CoreGraphics - curl - dyld -...

ZonPHP 2.25 - Remote Code Execution

ZonPHP 2.25 - Remote Code Execution Exploit Title: ZonPHP V2.25 RCE Vulnerability Google Dork: intext:"Made by SLAPER" Date: 21-10-2013 Exploit Author: Halim Cruzito Vendor Homepage: http://www.slaper.be Software Link: http://www.slaper.be/zonPHPv225.zip Version: v2.25 Tested on: Windows 7 PoC: "...

ZonPHP 2.25 - Remote Code Execution

Exploit Title: ZonPHP V2.25 RCE Vulnerability Google Dork: intext:"Made by SLAPER" Date: 21-10-2013 Exploit Author: Halim Cruzito Vendor Homepage: http://www.slaper.be Software Link: http://www.slaper.be/zonPHPv225.zip Version: v2.25 Tested on: Windows 7 PoC: "; $headers = array"User-Agent:...

ZonPHP V2.25 Remote Code Execute Vulnerability

Exploit for php platform in category web applications "; $headers = array"User-Agent: Mozilla/5.0 Windows NT 6.0; WOW64; rv:24.0 Gecko/20100101 Firefox/24.0", "Content-Type: text/plain"; $rc = curlinit; curlsetopt$rc, CURLOPTURL, $url.$path.$filename; curlsetopt$rc, CURLOPTHTTPHEADER, $headers;...

WordPress Theme Area53 - Arbitrary File Upload

. . . \ \ | / \ \ \ | || / \ / / \ / |/ \ / | / \ / / /| | |/ \ \ \ // \ / / | \ /\ / | \ \ \ / \ //\ |\ | /\ // | /|\ / / / / / / / Exploit Title: WordPress Area53 theme Arbitrary File Upload Vulnerability Author: Byakuya Date: 10/19/2013 Vendor Homepage: http://themeforest.net/...

PHP Point Of Sale 10.x / 11.x / 12.x Remote Code Execution

​ . \ /| | \ \ \ \ | | | | / \ / \ /\ / \ / / / / / \ /\ / \ / / / | | | Y \ / \ | | \ /\ \ \ | | /\ /\ / || || /\ \ /|| / /// \ /|| \ // / / / / / / http://thecrowscrew.org ​ Exploit title : PHP Point Of Sale 10.x - 11.x - 12.x Remote Code Execution Vulnerability Author :...