Nagios XI Network Monitor 2011R1.9 OS Command Injection

======= Summary ======= Name: Nagios XI Network Monitor - OS Command Injection Release Date: 30 November 2012 Reference: NGS00196 Discoverer: Daniel Compton Vendor: Nagios Vendor Reference: 0000283 Systems Affected: Nagios XI Network Monitor 2011R1.9 Risk: High Status: Published ======== TimeLine...

SA-CONTRIB-2012-160 - OM Maximenu - Cross Site Scripting (XSS)

This module enables you to create custom menus with effects and integrate module blocks as it's menu item content. The module doesn't sufficiently state the risk of giving permission to create OM Maximenus. This vulnerability is mitigated by the fact that an attacker must have a role with the...

WordPress Plugin Spider Catalog 1.1 - HTML Code Injection / Cross-Site Scripting

1 1 0 I'm D4NB4R member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Exploit Title: Wordpress Plugin Catalog HTML Code Injection and Cross-site scripting Dork: N/A Date: 31-10-2012 Author: Daniel Barragan "D4NB4R" Twitter: @D4NB4R Version: 1.1...

Joomla Component com_quiz SQL Injection / XSS Vulnerabilities

Software for online quiz 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 +...

Joomla Commedia Plugin (index.php, task parameter) SQL Injection

Exploit for php platform in category web applications Exploit Title: Joomla commedia Remote Exploit dork: inurl:index.php?option=comcommedia Date: 18-10-2012 Author: Daniel Barragan "D4NB4R" Twitter: @D4NB4R Vendor: http://www.ecolora.org/ Version: 3.1 last update on Oct 7, 2012 and lowers Licens...

Joomla Freestyle Support 1.9 SQL Injection

Exploit Title: Joomla Freestyle Support comfss sqli Dork: N/A Date: 17-10-2012 Author: Daniel Barragan "D4NB4R" Twitter: @D4NB4R Vendor: http://freestyle-joomla.com Version: Version 1.9.1.1447 last update on Oct 15, 2012 License: Commercial Demo: http://freestyle-joomla.com/demo Download:...

Joomla Tag SQL Injection

Exploit Title: Joomla tag Remote Sql Exploit dork: inurl:index.php?option=comtag Date: 18-10-2012 Author: Daniel Barragan "D4NB4R" Twitter: @D4NB4R Vendor: http://www.joomlatags.org Version: all License: Non-Commercial Demo: http://www.joomlatags.org/ Download:...

Joomla! Component com_tag - tag SQL Injection

Joomla! Component comtag - tag SQL Injection Exploit Title: Joomla tag Remote Sql Exploit dork: inurl:index.php?option=comtag Date: 18-10-2012 Author: Daniel Barragan "D4NB4R" Twitter: @D4NB4R Vendor: http://www.joomlatags.org Version: all License: Non-Commercial Download:...

Joomla! Component com_fss 1.9.1.1447 - SQL Injection

Joomla! Component comfss 1.9.1.1447 - SQL Injection Exploit Title: Joomla Freestyle Support comfss sqli Dork: N/A Date: 17-10-2012 Author: Daniel Barragan "D4NB4R" Twitter: @D4NB4R Vendor: http://freestyle-joomla.com Version: Version 1.9.1.1447 last update on Oct 15, 2012 License: Commercial...

Joomla Component com_commedia SQL Injection Exploit

Commedia - a component and content plugin that allows you to create a content table containing all of the MP3's that are present in any directory of your site, a FTP-server folder, single path to ftp-file or a HTTPS-server DROPBOX, folder, single path to http-file or http-radio Exploit Title:...

WordPress Plugin spider Calendar - Multiple Vulnerabilities

WordPress Plugin spider Calendar - Multiple Vulnerabilities Exploit Title: Wordpress spider calendar Plugin Multiple Vulnerabilities Dork: N/A Date: 02-10-2012 Author: Daniel Barragan "D4NB4R" Twitter: @D4NB4R Vendor: http://wordpress.org/extend/plugins/spider-calendar/ Version: 1.0.1 License:...

WordPress Spider 1.0.1 SQL Injection / XSS

Exploit Title: Wordpress spider calendar Plugin Multiple Vulnerabilities Dork: N/A Date: 02-10-2012 Author: Daniel Barragan "D4NB4R" Twitter: @D4NB4R Vendor: http://wordpress.org/extend/plugins/spider-calendar/ Version: 1.0.1 License: Non-Commercial Demo:...

Joomla! Component Spider Calendar - SQL Injection

Joomla! Component Spider Calendar - SQL Injection Exploit Title: Joomla spider calendar lite Remote Exploit dork: inurl:comspidercalendar Date: 29-08-2012 Author: Daniel Barragan "D4NB4R" Twitter: @D4NB4R site: http://poisonsecurity.wordpress.com/ Vendor:...

Joomla! Component Spider Calendar - SQL Injection

Exploit Title: Joomla spider calendar lite Remote Exploit dork: inurl:comspidercalendar Date: 29-08-2012 Author: Daniel Barragan "D4NB4R" Twitter: @D4NB4R site: http://poisonsecurity.wordpress.com/ Vendor: http://web-dorado.com/products/spider-calendar-lite.html Version: Last License:...

Joomla Component com_spidercalendar Remote Exploit

Exploit for php platform in category web applications Exploit Title: Joomla spider calendar lite Remote Exploit dork: inurl:comspidercalendar Date: 29-08-2012 Author: Daniel Barragan "D4NB4R" Twitter: @D4NB4R site: http://poisonsecurity.wordpress.com/ Vendor:...

Joomla Component joomgalaxy v1.2.0.5 Remote File Upload

Exploit for php platform in category web applications Exploit Title: Joomgalaxy Remote File Upload v1.2.0.5 dork: inurl:comjoomgalaxy Date: 21-08-2012 Author: Daniel Barragan "D4NB4R" Twitter: @D4NB4R site: http://poisonsecurity.wordpress.com/ Vendor: http://www.joomgalaxy.com/ Version: 1.2.0.5...

Joomla! Component com_enmasse 1.2.0.4 - SQL Injection

Joomla! Component comenmasse 1.2.0.4 - SQL Injection Exploit Title: Joomla comenmasse Remote Exploit Author: Daniel Barragan "D4NB4R" Español hola, este exploit afecta sitios de ecommerce por lo cual el exploit solo dara una muestra de la extraccion posible de datos, No me hago responsable del us...

Dir2web3 3.0 SQL Injection / Information Disclosure

Title: ====== Dir2web3 Multiple Vulnerabilities Date: ===== 05/08/2012 Author: ======= Daniel Correa http://www.sinfocol.org/ Vulnerable software: ==================== Dir2web v3.0 http://www.dir2web.it/ CVE: ==== CVE-2012-4069 CVE-2012-4070 Details: ======== There are two vulnerabilities...

Joomla Joomgalaxy 1.2.0.4 Shell Upload / SQL Injection

Exploit Title: Joomla joomgalaxy 1.2.0.4 Multiple Vulnerabilites dork: inurl:comjoomgalaxy Date: 01-08-2012 Author: Daniel Barragan "D4NB4R" Twitter: @D4NB4R site: http://poisonsecurity.wordpress.com/ Vendor: http://www.joomgalaxy.com/ Version: 1.2.0.4 last update on Jul 27, 2012 License:...

Joomla Movm 1.0 SQL Injection

Exploit Title: Joomla commovm SQL Injection Date: 31-07-2012 Author: Daniel Barragan "D4NB4R" Twitter: @D4NB4R site: http://poisonsecurity.wordpress.com/ Vendor: http://www.movm.net/ Version: 1.0 Date Added 28 July 2012 License: Commercial $ 49.99 us Demo:...