WordPress Authentic Arbitrary File Download Vulnerability

WordPress Authentic theme suffers from an arbitrary file download vulnerability. Note that this finding houses site-specific data. |||||||||||||||||||||||||||||||||||||||||||||||||| |-------------------------------------------------------------------------| | Exploit Title: Wordpress Authentic...

WordPress Urban City Arbitrary File Download Vulnerability

WordPress Urban City theme suffers from an arbitrary file download vulnerability. Note that this finding houses site-specific data. |||||||||||||||||||||||||||||||||||||||||||||||||| |-------------------------------------------------------------------------| | Exploit Title: Wordpress urban city...

WordPress Antioch Arbitrary File Download

|||||||||||||||||||||||||||||||||||||||||||||||||| |-------------------------------------------------------------------------| | Exploit Title: Wordpress Antioch Theme Arbitrary File Download Vulnerability | | Google Dork: inurl:wp-content/themes/antioch | | Date : Date: 2014-09-07 | | Exploit...

WordPress Urban City Arbitrary File Download

|||||||||||||||||||||||||||||||||||||||||||||||||| |-------------------------------------------------------------------------| | Exploit Title: Wordpress urban city Arbitrary File Download Vulnerability | | Google Dork: inurl:wp-content/themes/urbancity | | Date : Date: 2014-09-07 | | Exploit...

WordPress WPSS 0.62 SQL Injection

|||||||||||||||||||||||||||||||||||||||||||||||||| |-------------------------------------------------------------------------| | Exploit Title: Wordpress WPSS V 0.62 Plugin Sql injection | | Exploit Author: Ashiyane Digital Security Team | | Date : Date: 2014-08-05 | | Vendor Homepage :...

Alteon OS BBI (Nortell) - Multiple Vulnerabilities XSS and CSRF

No description provided by source. Exploit Title: Alteon OS BBI Nortell - Multiple Vulnerabilities Date: 16 Nov 09 Author: Sintsov Alexey Software Link: downoad link if available Version: = 21.0.8.3 and may be higher =25.1.0.0 Tested on: relevant os Code : exploit code From: DSecRG research dsecr...

ALSCO CMS SQL Injection Vulnerabilities

No description provided by source. x Tybe: SQL Injection Vulnerabilities x Vendor: http://www.alscosoftware.com/ x Script Name: ALSCO CMS x author: PrinceofHacking x Team: Ashiyane Digital Security Team x Mail : PrincedotH4ck@gmaildotcom D0rk: inurl:move.php? site:.iq Exploit:...

Heaven Soft CMS 4.7 - SQL Injection Vulnerability

No description provided by source. x Tybe: SQL Injection Vulnerabilities x Vendor: http://www.newyorkindoorcricket.com/ x Script Name: Heaven Soft, CMS Version: 4.7 x author: PrinceofHacking x Team: Ashiyane Digital Security Team x Mail : PrincedotH4ck@gmaildotcom D0rk:photogalleryshow.php?id...

Wordpress Lazy SEO plugin 1.1.9 - Shell Upload Vulnerability

No description provided by source. Exploit Title : Wordpress Lazy SEO plugin Shell Upload Vulnerability Exploit Author : Ashiyane Digital Security Team Google Dork: : inurl:/wp-content/plugins/lazy-seo/ Date: 2013/09/21 Vendor Homepage : http://wordpress.org/plugins/lazy-seo Software Link :...

Woodall Creative SQL Injection Vulnerability

No description provided by source. ========================================================= Woodall Creative SQL Injection Vulnerability ========================================================= Name: Woodall Creative SQL Injection Vulnerability Date: 2010-05-11 vendor:...

SQL Injection Vulnerabilities Green Shop

No description provided by source. x Tybe: SQL Injection Vulnerabilities x Vendor: egreen.ir x Script Name: Green Shop x author: Ashiyane Digital Security Team x Thanks To N4H ? Submit By PrinceofHacking ^^ x Mail : PrincedotH4ck@gmaildotcom D0rk: egreen.ir Exploit:...

Free Advertisment cms (user_info.php) SQL Injection Vulnerability

No description provided by source. ========================================================= Free Advertisment cms userinfo.php SQL Injection Vulnerability ========================================================= Name: Free Advertisment cms userinfo.php SQL Injection Vulnerability Date: 2010-05-...

MMA Creative Design SQL Injection Vulnerability

No description provided by source. ========================================================= MMA Creative Design SQL Injection Vulnerability ========================================================= Name: MMA Creative Design SQL Injection Vulnerability Date: 2010-05-23 vendor: www.mmacreative.com...

Apple Quicktime plugin - Windows 4.1.2 (Japanese) Remote Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2328/info Apple Quicktime plugin for Windows is vulnerable to a remote buffer overflow. A maliciously-constructed web link statement in a remote HTML document, which contains excess data argumenting an EMBED tag, could...

SAP GUI VSFlexGrid.VSFlexGridL sp <= 14 - Buffer Overflow

No description provided by source. Application: SAP GUI VSFlexGrid.VSFlexGridL Part of SAP GUI, SAP BO 2005, SAP BO 2007 Versions Affected: SAP GUI VSFlexGrid Activex Control sp=14 Vendor URL: http://SAP.com Bugs: Buffer Overflovw Exploits: YES Reported: 26.11.2008 Vendor response: 27.11.208 Publ...

Pluck CMS 4.5.2 - Multiple Local File Inclusion Vulnerabilities

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-08-037 Application: Pluck CMS Versions Affected: 4.5.2 Vendor URL: http://www.pluck-cms.org/ Bug: Multiple Local File Include Exploits: YES Reported: 28.07.2008 Vendor Response: 03.08.2008 Solution: YES Date...

IBM BladeCenter Management Module - DoS vulnerability

No description provided by source. DSECRG-09-049 IBM BladeCenter Management Module - DoS vulnerability Source: http://www.dsecrg.com/pages/vul/show.php?id=149 This device can be remotely rebooted by sending a malformed TCP packets Digital Security Research Group DSecRG Advisory DSECRG-09-049...

Safari 4.0.5 - parent.close() Memory Corruption exploit (ASLR and DEP bypass)

No description provided by source. Download: http://www.exploit-db.com/sploits/safariparentclosesintsov.zip Unzip and run START.htm This exploit use JIT-SPRAY for DEP and ASLR bypass. jit-shellcode: systemnotepad 0day.html - use 0x09090101 address for CALL JITed shellcode. START.htm - iff.htm -...

Safari JS JITed shellcode - exec calc (ASLR/DEP bypass)

No description provided by source. !-- JIT-SPRAY for Safari 4.0.5 - 5.0.0 JavaScript JIT SHELLCODE and spray for ASLR / DEP bypass Win x32 By Alexey Sintsov from Digital Security Research Group Special for Hack In The Box 2010 Amsterdam PAYLOAD - exec calc Tested on Windows7 and Windows XP. Sorry...

blogcms 4.2.1b (sql/xss) Multiple Vulnerabilities

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-08-003 Application: Blogcms Versions Affected: Blogcms 4.2.1b Vendor URL: http://blogcms.com/ Bugs: SQL Injestions, SiXSS, XSS Exploits: YES Reported: 15.01.2008 Vendor response: 16.01.2008 Date of Public...