PrestaShop PM_AdvancedTopMenu 1.4.6.2 Database Disclosure / SQL Injection

Exploit Title : PrestaShop PMAdvancedTopMenu 1.4.6.2 Database Disclosure and SQL Injection Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 24/12/2018 Vendor Homepage : prestashop.com Software Download Link :...

PrestaShop PM_AdvancedSearch4 1.6.1.18 Database Disclosure

Exploit Title : PrestaShop PMAdvancedSearch4 Modules 1.6.1.18 Database Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 24/12/2018 Vendor Homepage : prestashop.com Software Download Link :...

PrestaShop Google GSnippetsReviews 1.6.1.4 Database Disclosure

Exploit Title : PrestaShop Google GSnippetsReviews Modules 1.6.1.4 Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 24/12/2018 Vendor Homepage : prestashop.com Software Download Link :...

WordPress WP-Ajax-Form-Pro 5.0.2 Shell Upload

Exploit Title : WordPress WP-Ajax-Form-Pro Plugins 5.0.2 Remote Shell Upload Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 22/12/2018 Vendor Homepage : wordpress.org ajaxformpro.com Software Download Link : ajaxformpro.com Software Script Owner and...

WordPress Cvp-Adegrontec 4.8.3 Shell Upload

Exploit Title : WordPress Cvp-Adegrontec Themes 4.8.3 Remote Shell Upload Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 22/12/2018 Vendor Homepage : wordpress.org Software Download Link : N/A Tested On : Windows and Linux Category : WebApps Version...

WordPress Share-Buttons 4.9.9 Shell Upload

Exploit Title : WordPress Share-Buttons Plugins 4.9.9 Remote Shell Upload Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 22/12/2018 Vendor Homepage : wordpress.org sbuttons.ru Software Download Link : atwebresults.com/phpajaximageupload/ +...

JVN#13199224: PgpoolAdmin fails to restrict access permissions

PgpoolAdmin provided by PgPool Global Development Group fails to restrict access permissions CWE-264. Impact A remote attacker may bypass the login authentication and obtain the administrative privilege of the PostgreSQL database. Solution Update the Software Update to the latest version accordin...

WordPress ChenPress 3.1.1 Shell Upload

Exploit Title : WordPress ChenPress Plugins 3.1.1 Remote Shell Upload Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 20/12/2018 Vendor Homepage : wordpress.org groups-beta.google.com/group/ChenPress Software Download Link :...

WordPress Sem-Wysiwyg 1.0 Shell Upload

Exploit Title : WordPress Sem-Wysiwyg Plugins 1.0 Remote Shell Upload Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 20/12/2018 Vendor Homepage : wordpress.org Software Download Link : N/A Tested On : Windows and Linux Category : WebApps Version...

WordPress Monsters-Editor-10-For-WP-Super-Edit 2.3.1 Shell Upload

Exploit Title : WordPress Monsters-Editor-10-For-WP-Super-Edit Plugins 2.3.1 Remote Shell Upload Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 20/12/2018 Vendor Homepage : thedevcouple.com wordpress.org/plugins/monsters-editor-10-for-wp-super-edit/...

WordPress FCKEditor-For-Wordpress-Plugin 3.3.1 Shell Upload

Exploit Title : WordPress FCKEditor-For-Wordpress-Plugin 3.3.1 Remote Shell Upload Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 20/12/2018 Vendor Homepage : wordpress.org/support/plugin/fckeditor-for-wordpress-plugin Software Download Link :...

WordPress Dev-Custom-Management VerzDesign 1.0 Database Disclosure / Shell Upload

Exploit Title : WordPress Dev-Custom-Management Plugins VerzDesign 1.0 Database Backup Disclosure and Arbitrary File Upload Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 17/12/2018 Vendor Homepage : wordpress.org verzdesign.com Software Download Link : N/A Teste...

WordPress Mirrorwp-Backups 4.8 Database Disclosure

Exploit Title : WordPress Mirrorwp-Backups 4.8 Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 17/12/2018 Vendor Homepage : wordpress.org codecanyon.net/tags/wpmirror wpmirrorobj.com Software Download Link : N/A Tested On : Windows and...

Simple CMS PHPJabbers Stivasoft 4.0 Database Disclosure

Exploit Title : Simple CMS PHPJabbers Stivasoft 4.0 Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 17/12/2018 Vendor Homepage : phpjabbers.com stivasoft.com racingriverwebs.com Software Download Link : phpjabbers.com/simple-cms/ Demo...

WordPress Ithemes-BackupBuddy Amazon WP-S3 2.9 Database Disclosure

Exploit Title : WordPress Ithemes-BackupBuddy Amazon WP-S3 Plugins 2.9 Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 17/12/2018 Vendor Homepage : ithemes.com/purchase/backupbuddy/ wordpress.org/plugins/wp-s3/ Software Download Link :...

WordPress MagicMembers 1.0 Database Disclosure

Exploit Title : WordPress MagicMembers Plugins 1.0 Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 08/12/2018 Vendor Homepage : wordpress.org magicmembers.com github.com/jervy-ez/magic-members-test Software Download Link :...

WordPress JoeBooking 6.6.5 Database Disclosure

Exploit Title : WordPress JoeBooking Plugins 6.6.5 Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 08/12/2018 Vendor Homepage : joebooking.com wordpress.org/plugins/joebooking/ Software Download Link :...

WordPress Wysija-Newsletters 2.10.2 Database Disclosure

Exploit Title : WordPress Wysija-Newsletters 2.10.2 Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 08/12/2018 Vendor Homepage : mailpoet.com wordpress.org/plugins/wysija-newsletters/ Software Download Link :...

WordPress Total-Child-Theme-Master 1.0 Arbitrary File Disclosure

Exploit Title : WordPress Total-Child-Theme-Master Themes 1.0 Arbitrary File Download Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 08/12/2018 Vendor Homepage : wordpress.org wpexplorer-themes.com/total/docs/child-theme/ Software Download Link :...

Joomal Migrator 1.5 Database Disclosure

Exploit Title : Joomla ComMigrator Components 1.5 Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 08/12/2018 Vendor Homepage : extensions.joomla.org/category/joomla-migration/ Software Download Link : docs.joomla.org/Migration Tested On ...