Hive 2.0 RC2 XSS / Code Execution / SQL Injection

| Title : Hive v2.0 RC2 Multi Vulnerability | Author : indoushka | email : [email protected] | Dork : "Powered by DigitalHive" | Tested on: windows 8.1 Français V.Pro | Bug : Stop Script | Download : http:///www.digitalhive.com ======================================= Stop SCript working :...

QuickTalk 1.5 Password Hash Disclosure

| Title : QuickTalk 1.5 Reinstall Script Vulnerability | Author : indoushka | email : [email protected] | Dork : powered by QT-cute | Tested on: windows 8.1 Français V.Pro | Bug : Reinstall Script | Download : http://www.scriptmafia.org ======================================= 1 -...

WordPress Plugin dzs-zoomsounds 2.0 - Arbitrary File Upload

Exploit Title: WordPress dzs-zoomsounds Plugins Remote File Upload Vulnerability Vendor : http://digitalzoomstudio.net/docs/wpzoomsounds/ Author: bl4ck-dz Date: 28/05/2015 Infected File: upload.php Category: webapps Google dork:inurl:/wp-content/plugins/dzs-zoomsounds/ Tested on : Linux | Windows...

WordPress Plugin MiwoFTP 1.0.5 - Arbitrary File Download (2)

WordPress Plugin MiwoFTP 1.0.5 - Arbitrary File Download 2 Exploit Title : WordPress MiwoFTP Plugin 1.0.5 = Arbitrary File Download Exploit Author : Dadou Dz Software Link : Premium Dork Google: inurl:commiwoftp Affected version: 1.0.5 Vendor Homepage:...

WordPress Plugin MiwoFTP 1.0.5 - Arbitrary File Download (2)

Exploit Title : WordPress MiwoFTP Plugin 1.0.5 = Arbitrary File Download Exploit Author : Dadou Dz Software Link : Premium Dork Google: inurl:commiwoftp Affected version: 1.0.5 Vendor Homepage: http://miwisoft.com/wordpress-plugins/miwoftp-wordpress-file-managerchangelog Date : 2015-04-20 Tested ...

Ckeditor 4.4.7 Shell Upload / Cross Site Scripting

----------------------------------------- 0-DAY Aint DIE | No Priv8 | KedAns-Dz ----------------------------------------- ---------------------------- K |................| . h |.......................| A a |.......................| N l |.....................| S E |.......................| e D...

对康盛创想一服务商的测试过程

简要描述： 对康盛创想的一次渗透，真是给力，好像走路掉坑里去了，起身发现竟然是掉钱坑里去了。那么问题来了，能给闪电？ 详细说明： 闲来没事逛了逛discuz的主站，随便点了点点进了购买服务里面去了， 发现了一个邮箱[email protected]，作为对邮箱比狗还敏感的我顺手打了mail.comsenz-service.com，跳出来了腾讯企业邮箱的登陆口，看来康盛就是用的企鹅的企业邮箱，然后我又习惯性的把域名放到demon里面去了，尼玛，恶习啊，扫出来了一个二级域名pm.comsenz-service.com 访问了一下，是个dz 3.1的论坛...

ecshop_dz论坛注入可以绕过WAF

简要描述： 注入不是亮点，亮点在于绕过waf，专业绕waf，30年。 详细说明： 利用DZ本漏洞的特性，拆开sql语句。 http://bbs.ecshop.com/faq.php?action=grouppermission&gids99=%27&gids1000= and 1=updatexml1,concat0x5e24,/ &gids1010=/select user/ &gids1020=/,0x5e24,1%23 漏洞证明：...

Easy Media Script SQL Injection Vulnerability

No description provided by source. ?php if!$argv1 die Usage : php exploit.php site Example : php exploit.php http://site.tld/PATH/ ; printr Tilte......: Easy Media Script SQL Injection Author.....: Lagripe-Dz Date.......: 27-o5-2o11 Location ..: ALGERIA HoMe ......: Sec4Ever.com & Lagripe-Dz.org...

SelectSurvey CMS (ASP.NET) Arbitrary File Upload

No description provided by source. ============================================================= SelectSurvey CMS ASP.NET Shell Upload Vulnerability ============================================================= Exploit Title: SelectSurvey.NETv4 CMS ASP.NET Shell Upload Vulnerability DDate:...

Upload-Point 1.6 Beta - Upload Shell Vulnerability

No description provided by source. ======================================================================================== $ | Title : Upload-Point 1.6 Beta pload Shell Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Alger...

cardinalCms 1.2 (fckeditor) Arbitrary File Upload Exploit.

No description provided by source. ========================================================== cardinalCms 1.2 fckeditor Arbitrary File Upload Exploit. ========================================================== Date....................: 21-05-2010 Author..................: Ma3sTr0-Dz Location...

oscommerce <= 2.2rc2a Bypass/Create and Download Backup Vulnerability

No description provided by source. ======================================================================================== $ | Title : osCommerce online SHop Backup Vulnerability $ | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria...

Subdreamer 3.0.1 - CMS upload Vulnerability

No description provided by source. ======================================================================================== | Title : Subdreamer.v3.0.1 cms upload Vulnerability | Author : indoushka | email : [email protected] | Home : www.h4kz.com | Web Site : | Dork : Website powered by...

WordPress SermonBrowser Plugin 0.43 SQL Injection

No description provided by source. ?php if!$argv1 die Usage : php exploit.php site Example : php exploit.php http://site.com/wp/ ; printr Tilte......: WordPress SermonBrowser Plugin 0.43 SQL Injection Author.....: Ma3sTr0-Dz Date.......: 25-o4-2o11 Location ..: ALGERIA HoMe ......: wWw.sEc4EvEr.C...

2DayBiz photo sharing script SQL injection Vulnerability

No description provided by source. Exploit Title: photo sharing script SQL injection Vulnerability Date: 24/06/2010 Author: JaMbA Script url: http://www.2daybiz.com/photosharingscript.html Version: N/A Tested on: Windows CVE : ::::::::::::::::::::::::: :::::::::::::::::::::::::...

Asp VevoCart Control System 3.0.4 - DB Download Vulnerability

No description provided by source. ======================================================================================== | Title : Asp VevoCart Control System Version 3.0.4 DB Download Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El...

ExtCalendar 2 (calendar.php) SQL Injection Vulnerability

No description provided by source. Title : ExtCalendar 2 calendar.php SQL Injection Vulnerability Author : Lagripe-Dz Product: ExtCalendar 2 Download : http://sourceforge.net/projects/extcal/ Date: 10/01/2011 Dork : inurl:calendar.php?mode=cat...

Absolute Form Processor XE-V 1.5 - (Auth Bypass) SQL Injection Vulnerability

No description provided by source. ----------------------------------------------------- ----------------------------------------------------- Absolute Form Processor XE-V 1.5 auth Bypass Remote Sql Injecion ----------------------------------------------------- Founder: ThE g0bL!NDz Home:...

PHP-Fusion 4.01 - SQL Injection Vulnerability

No description provided by source. Exploit Title: PHP-Fusion v4.01 SQL INJECTION Vulnerabilities Date: 17/05/2010 Author: Ma3sTr0-Dz Software Link: http://www.php-fusion.co.uk Version: 4.01 CVE : N/A Code : exploit code =======================================================PHP-Fusion v4.01 SQL...