WordPress Recommend Cross Site Scripting

Exploit Title : Wordpress Recommend to a friend plugin Cross site scripting Exploit Author : Ashiyane Digital Security Team Vendor Homepage : http://wordpress.org/plugins/recommend-a-friend/ Software Link : http://downloads.wordpress.org/plugin/recommend-a-friend.2.0.2.zip Google Dork :...

Wordpress Formcraft Plugin - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title : Wordpress formcraft Plugin Sql Injection Exploit Author : Ashiyane Digital Security Team Google Dork : inurl:/wp-content/plugins/formcraft Software Link : www.wordpress.org Tested on: Windows , Linux Date: 2013/12/2 Exploit : S...

WordPress TDO-Mini-Forms Shell Upload

Exploit Title: Wordpress TDO-Mini-Forms Plugin Arbitrary File Upload Vulnerability Author: Ashiyane Digital Security Team Date: 12/09/2013 Vendor Homepage: http://thedeadone.net Software Link : http://cznic.dl.sourceforge.net/project/filip/wordpress/tdo-mini-forms.0.13.9.zip Google dork:...

WordPress Spider Video Player 2.1 Cross Site Scripting

==================================================================== Exploit Title : WordPress Spider Video Player 2.1 Cross site scripting Vulnerability Exploit Author : Ashiyane Digital Security Team Vendor Homepage : http://web-dorado.com/ Google Dork :...

WordPress Husker-Portfolio Shell Upload

Exploit Title: Wordpress Husker-Portfolio plugins CSRF File Upload Vulnerability Author: Ashiyane Digital Security Team Date: 12/09/2013 Vendor : http://www.huskerinfotech.com/ Software Link : http://downloads.wordpress.org/plugin/huskerportfolio.0.3.zip Google dork:...

WordPress FormCraft Premium SQL Injection

Exploit Title : Wordpress FormCraft - Premium Sql Injection Vulnerability Exploit Author : Ashiyane Digital Security Team Google Dork : inurl:/wp-content/plugins/formcraft Software Link : http://prefiles.com/15c9u57aupu2/codecanyon-formcraft-premium-wordpress-form-builder-5335056.zip Vender Home ...

Wordpress page-flip-image-gallery plugins Remote File Upload

Exploit for php platform in category web applications Exploit Title: Wordpress page-flip-image-gallery plugins Remote File Upload Vulnerability Author: Ashiyane Digital Security Team Date: 12/06/2013 Vendor Homepage: http://pageflipgallery.com Software Link :...

WordPress Page Flip Image Gallery Shell Upload

Exploit Title: Wordpress page-flip-image-gallery plugins Remote File Upload Vulnerability Author: Ashiyane Digital Security Team Date: 12/06/2013 Vendor Homepage: http://pageflipgallery.com Software Link : http://downloads.wordpress.org/plugin/page-flip-image-gallery.zip Google dork:...

WordPress Plugin page-flip-image-gallery - Arbitrary File Upload

Exploit Title: Wordpress page-flip-image-gallery plugins Remote File Upload Vulnerability Author: Ashiyane Digital Security Team Date: 12/06/2013 Vendor Homepage: http://pageflipgallery.com Software Link : http://downloads.wordpress.org/plugin/page-flip-image-gallery.zip Google dork:...

WordPress Plugin Formcraft - SQL Injection

Exploit Title : Wordpress formcraft Plugin Sql Injection Exploit Author : Ashiyane Digital Security Team Google Dork : inurl:/wp-content/plugins/formcraft Software Link : www.wordpress.org Tested on: Windows , Linux Date: 2013/12/2 Exploit : Sql Injection Location1:...

WordPress Js-Multi-Hotel 2.2.1 Cross Site Scripting

Exploit Title : Wordpress Js-Multi-Hotel Plugin Cross site scripting Exploit Author : Ashiyane Digital Security Team Google Dork : inurl:wp-content//plugins/js-multihotel/ Date: 2013-11-30 Vendor Homepage : http://wordpress.org Plugin Name : Js Multi Hotel Version : 2.2.1 Tested on: Windows , Lin...

Testa Online Test Management SQL Injection Vulnerability

Testa Online Test Management suffers from a remote SQL injection vulnerability that allows for login bypass. Note that this advisory has site-specific information. Exploit Title : Testa Online Test Management Sql Injection / Login page Bypass Exploit Author : Ashiyane Digital Security Team Vendor...

Testa Online Test Management SQL Injection

Exploit Title : Testa Online Test Management Sql Injection / Login page Bypass Exploit Author : Ashiyane Digital Security Team Vendor Homepage : http://testa.cc/ Software Link Download : http://download.aftab.cc/products/testa/Testawos2.0.0.2.zip Google Dork : intitle:Testa Online Test Management...

MIRcon 2013 – Day 2 Highlights

Thanks for another wonderful MIRcon®, everyone! It's been an honor to bring together so many leading minds in cybersecurity, and to foster conversations about what we can all do to safeguard the information and innovationson which so much of us rely on. The second and final day of MIRcon 2013...

Threat Outbreak Alert: Fake Faxed Document Notification Email Messages on October 21, 2013

Medium Alert ID: 31386 First Published: 2013 October 21 13:29 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a fax notification for the recipient. The text in the email message attempts to convince the recipient to open...

WordPress dhtmlxspreadsheet Cross Site Scripting

Exploit Title : Wordpress spreadsheet Plugin Cross site scripting Exploit Author : Ashiyane Digital Security Team Vendor Homepage : http://wordpress.org Software Link : http://downloads.wordpress.org/plugin/dhtmlxspreadsheet.2.0.zip Google Dork : inurl :wp-content/plugins/dhtmlxspreadsheet Date:...

WordPress Image Resizer Cross Site Scripting

Exploit Title : Wordpress wp-image-resizer Plugin Cross site scripting Exploit Author : Ashiyane Digital Security Team Google Dork : inurl:wp-content/plugins/wp-image-resizer/ Software Link : www.wordpress.org Tested on: Windows , Linux Date: 2013/10/16 Exploit : Cross site scripting Location1:...

Anya Web Solutions SQL Injection Bypass

Exploit Title : Anya Web Solutions Login Page Bypass Exploit Author : Ashiyane Digital Security Team Vendor Homepage : http://www.anyawebsolutions.com Google Dork : intext:"Powered by Anya Web Solutions" inurl:asp Date: 2013/10/14 Tested on: Windows 7 , Linux...

WordPress LBG Zoominoutslider Cross Site Scripting

Exploit Title : Wordpress lbg zoominoutslider Plugin Cross site scripting Vulnerability Exploit Author : Ashiyane Digital Security Team Google Dork: : inurl:/wp-content/plugins/lbgzoominoutslider Date: 2013/09/24 Vendor Homepage : http://wordpress.org Tested on: Windows Location:...

WordPress Miniaudioplayer Cross Site Scripting

Exploit Title : Wordpress wp miniaudioplayer Cross site scripting Vulnerability Exploit Author : Ashiyane Digital Security Team Google Dork: : inurl:/wp-content/plugins/wp-miniaudioplayer Date: 2013/09/24 all Version Vendor Homepage : http://wordpress.org Software link :...