WordPress sourceAFRICA 0.1.3 Cross Site Scripting

Exploit Title : Wordpress sourceAFRICA Plugin Cross Site Scripting Exploit Author : Ashiyane Digital Security Team Vendor Homepage : https://wordpress.org/plugins/sourceafrica/ Date: 2015-08-29 Tested On : Elementary Os - Firefox Software Link :...

WordPress Googmonify 0.8.1 Cross Site Request Forgery / Cross Site Scripting

Exploit Title : Wordpress Googmonify Plug-in XSS/CSRF + Exploit Author : Ehsan Hosseini + Date: 2015-08-21 + Vendor Homepage : https://wordpress.org/plugins/googmonify/ + Software Link : https://downloads.wordpress.org/plugin/googmonify.zip + Version : 0.8.1 + Tested On : Windows FireFox + CVE :...

WordPress Googmonify 0.8.1 Cross Site Request Forgery / Cross Site Scripting Vulnerabilities

WordPress Googmonify plugin version 0.8.1 suffers from cross site request forgery and cross site scripting vulnerabilities. + Exploit Title : Wordpress Googmonify Plug-in XSS/CSRF + Exploit Author : Ehsan Hosseini + Date: 2015-08-21 + Vendor Homepage : https://wordpress.org/plugins/googmonify/ +...

WordPress Plugin Googmonify 0.8.1 - Cross-Site Scripting Cross-Site Request Forgery

WordPress Plugin Googmonify 0.8.1 - Cross-Site Scripting Cross-Site Request Forgery + Exploit Title : Wordpress Googmonify Plug-in XSS/CSRF + Exploit Author : Ehsan Hosseini + Date: 2015-08-21 + Vendor Homepage : https://wordpress.org/plugins/googmonify/ + Software Link :...

Wordpress Amazonify Plug-in XSS/CSRF Vulnerabilities

Exploit for php platform in category web applications Exploit Title : Wordpress Amazonify Plug-in XSS/CSRF Exploit Author : Ashiyane Digital Security Team Vendor Homepage : https://wordpress.org/plugins/amazonify/ Date: 2015-08-20 Tested On : Windows7 Software Link :...

WordPress Plugin Googmonify 0.8.1 - Cross-Site Scripting / Cross-Site Request Forgery

Exploit Title : Wordpress Googmonify Plug-in XSS/CSRF + Exploit Author : Ehsan Hosseini + Date: 2015-08-21 + Vendor Homepage : https://wordpress.org/plugins/googmonify/ + Software Link : https://downloads.wordpress.org/plugin/googmonify.zip + Version : 0.8.1 + Tested On : Windows FireFox + CVE :...

Coppermine Photo Gallery 1.5.36 Cross Site Scripting

Exploit Title: Coppermine Photo Gallery 1.5.36 Cross Site Scripting + Exploit Author: Ehsan Hosseini + Date: 27/7/2015 + Vendor Homepage: http://coppermine-gallery.net/ + Software Link: http://sourceforge.net/projects/coppermine/files/Coppermine/1.5.x/cpg1.5.36.zip/download + Version: 1.5.36 +...

Fixed XSS vulnerability at web.glcollaboration.com

Security researcher Ehsan Ice, has submitted on 05/03/2015 a cross-site-scripting XSS vulnerability affecting web.glcollaboration.com, which at the time of submission ranked 8504671 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/03/2015. It...

Unfixed XSS vulnerability at webinars.snm.org

Security researcher Ehsan Ice, has submitted on 05/03/2015 a cross-site-scripting XSS vulnerability affecting webinars.snm.org, which at the time of submission ranked 1073431 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/03/2015. It is...

vBulletin 4.x.x visitormessage.php Remote Code Injection Vulnerability

you can get access from vbulletin forum, just inject php code in one file. + My Homepage: black-hg.org / nasirpour.info + Discovered By: Dariush Nasirpour Net.Edit0r + Greeting : Ali Razmjoo - Ehsan Nezami - Arash Shams - Ramin Shahkar and all my freinds bhg...

Obfuscated Shellcode Windows x86 - 1218 Bytes Add Administrator User/Pass ALI/ALI & Add ALI To RDP Group & Enable RDP From Registry & STOP Firewall & Auto Start Terminal Service

Obfuscated Shellcode Windows x86 - 1218 Bytes Add Administrator User/Pass ALI/ALI & Add ALI To RDP Group & Enable RDP From Registry & STOP Fire... Author: Ali Razmjoo ​​Title: ​Obfuscated Shellcode Windows x86 1218 Bytes Add Administrator User/Pass ALI/ALI & Add ALI to RDP Group & Enable RDP From...

SmarterTools Smarter Track 6-10 - Information Disclosure Vulnerability

Document Title: =============== SmarterTools Smarter Track 6-10 - Information Disclosure References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1298 Tracking ID: 088-1B879F0C-0A22 Release Date: ============= 2014-09-22 Vulnerability Laboratory ID VL-ID:...

Spoofing attack on WebRTC permission prompt — Mozilla

Mozilla developer Ehsan Akhgari reported a spoofing attack where the permission prompt for a WebRTC session can appear to be from a different site than its actual originating site if a timed navigation occurs during the prompt generation. This allows an attacker to potentially gain access to the...

OMNITEC (prodotto.php?id_prodotto) Remote SQL injection Vulnerability

IRANIAN THE BEST HACKERS IN THE WORLD Remote SQL injection Vulnerability OMNITEC prodotto.php?idprodotto AuTh0r : EhsanHp200 H0ME : www.ehsanhp.blogsky.com Email : [email protected] Persian Gulf 4 Ever! Dork : "design e realizzazione by OMNITEC" Exploite:...

Web Fusion Nepal (tour.php?category) XSS Vulnerability

IRANIAN THE BEST HACKERS IN THE WORLD XSS Vulnerability Web Fusion Nepal tour.php?category AuTh0r : EhsanHp200 H0ME : www.ehsanhp.blogsky.com Email : [email protected] Vendor : http://webfusion.com.np/ Persian Gulf 4 Ever! Dork : "Powered by: Web Fusion Nepal" "inurl:tour.php?category="...

Who are PakBugs Hackers ? Introduction Report by The Hacker News

Report "Who are PakBugs Hackers" by THE HACKER NEWS 1 Jawad Ehsan, nickname - Humza, still at large in Riyadh, Saudi Arabia. Jawad uses codename ZombiEKsa, and is the founder of PakBugs and probably the most famous of all the PakBugs hackers. An Article already posted on him at CBI was actually...

eXtropia Shopping Cart web_store.cgi Remote Exploit

Exploit for cgi platform in category web applications =================================================== eXtropia Shopping Cart webstore.cgi Remote Exploit =================================================== !/usr/bin/perl -w Remote Command Execution Vulnerability In Webstore.cgi SegmentationFau...