eBrigade ERP 4.5 - Arbitrary File Download

!/usr/bin/python import mechanize, sys, cookielib, requests import colorama, urllib, re, random, urllib2 import wget from colorama import Fore from tqdm import tqdm from pathlib import Path def bannerche: print ''' @-------------------------------------------------------------@ | eBrigade ERP "...

WordPress Plugin WP-Syntax Download Extension Database Backup Leakage Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A database backup disclosure vulnerability exists in WordPress plugin WP-Syntax Download Extension. An attacker can exploit t...

WordPress Mirrorwp-Backups Information Disclosure Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. An information disclosure vulnerability exists in WordPress Mirrorwp-Backups. An attacker can exploit the vulnerability to...

WordPress Plugin TimeTable Responsive Schedule Information Disclosure Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. An information disclosure vulnerability exists in the WordPress plugin TimeTable Responsive Schedule. An attacker can exploit...

WordPress Plugin JoeBooking Information Disclosure Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. An information disclosure vulnerability exists in the WordPress plugin JoeBooking. An attacker can exploit the vulnerability ...

WordPress MagicMembers 1.0 Database Disclosure

Exploit Title : WordPress MagicMembers Plugins 1.0 Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 08/12/2018 Vendor Homepage : wordpress.org magicmembers.com github.com/jervy-ez/magic-members-test Software Download Link :...

Symfony 1.4.17 Database Disclosure

Exploit Title : Symfony 1.4.17 sfDoctrinePlugin sfPropelPlugin Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 09/12/2018 Vendor Homepage : symfony-project.com symfony.com Software Download Link : symfony.com/legacy Tested On : Windows a...

WordPress CodeCanyon-5293356-Ajax-Store-Locator-Wordpress 1.2.0 Disclosure

Exploit Title : WordPress CodeCanyon-5293356-Ajax-Store-Locator-Wordpress Plugins 1.2.0 Multiple Vulnerabilities Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 10/12/2018 Vendor Homepage : wordpress.org codecanyon.net/item/ajax-store-locator-v-20/4106209?srank=1 ...

CSS & JavaScript Toolbox <= 8.4.1 - Database backup Disclosure

The CSS & JavaScript Toolbox WordPress plugin was affected by a Database backup Disclosure security vulnerability...

Joomla Content Editor Com_JCE Component Information Disclosure Vulnerability

Joomla is an open source content management system CMS. An information disclosure vulnerability exists in the Joomla Content Editor ComJCE component. An attacker can exploit the vulnerability to obtain database backup information...

WordPress BatchMove 1.5 Database Disclosure

Exploit Title : WordPress BatchMove Plugins 1.5 Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 06/12/2018 Vendor Homepage : wordpress.org/plugins/batchmove/ Software Download Link : github.com/wp-plugins/batchmove/archive/master.zip +...

WordPress BackWpUP 3.6.6 Database Disclosure

Exploit Title : WordPress BackWpUP Plugins 3.6.6 Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 02/12/2018 Vendor Homepage : wordpress.org/plugins/backwpup/ Software Download Link : downloads.wordpress.org/plugin/backwpup.3.6.6.zip...

UKCMS has an information leakage vulnerability

UKcms is a web content management system based on PHP7 and mysql technology. UKCMS is vulnerable to information leakage. An attacker can obtain information about database backup files through constructed links...

Joomla JCE 2.6.33 Database Backup Disclosure

Exploit Title : Joomla Content Editor ComJCE Components 2.5.24 Database Backup Disclosure Information Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 30/11/2018 Vendor Homepage : joomlacontenteditor.net Software Download Links :...

WordPress universal-post-manager plugin database backup information leakage vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. An information disclosure vulnerability exists in the WordPress universal-post-manager plugin database backup. An attacker ca...

WordPress wpmu-dev-post-votes plugin database backup arbitrary file download vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. An arbitrary file download vulnerability exists in the WordPress wpmu-dev-post-votes plugin database backup. An attacker can...

WordPress Jazzy Forms 1.1.1 Database Backup Disclosure

Exploit Title : WordPress jazzy-forms Plugins 1.1.1 Database Backup Information Disclosure Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 30/11/2018 Vendor Homepage : wordpress.org/plugins/jazzy-forms/ Software Download Link :...

WordPress pm_market 1.0 Database Backup Disclosure

Exploit Title : WordPress pmmarket Plugins 1.0 Database Backup Information Disclosure Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 30/11/2018 Vendor Homepage : wordpress.org power.com.pl Tested On : Windows and Linux Category : WebApps Version...

WordPress HitAppoint Plugin Database Backup Information Disclosure Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. An information disclosure vulnerability exists in the WordPress HitAppoint plugin Database Backup. An attacker can exploit th...

Wordpress Database Backup Information Disclosure Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. An information disclosure vulnerability exists in Wordpress Database Backup. An attacker can exploit the vulnerability to...