Newsletter 4.3 SQL Injection

------------------------ Exploit Title : Newsletter 4.3 SQL Injection Vulnerability Exploit Author : Ashiyane Digital Security Team Vendor Homepage: www.conpresso.de - www.conpresso4.de Google Dork ONE: intext:Module Newsletter 4.3 Google Dork TWO: Module Newsletter 4.3 by www.conpresso4.de Date ...

VideoCharge Express 3.16.3.04 - Local Buffer Overflow

VideoCharge Express 3.16.3.04 - Local Buffer Overflow !/usr/bin/python Exploit Title: VideoCharge Vanilla BOF Exploit v3.16.3.04 Date: 10/May/2015 Author: @evilcomrade IRC freenode: vulnhub or offsec or corelan email: kwiha2003 at yahoo dot com Version: v3.16.3.04 Tested on: Win XP3 Software...

VideoCharge Vanilla 3.16.4.06 - BOF Exploit

Exploit for windows platform in category local exploits !/usr/bin/python Exploit Title: VideoCharge v3.16.4.06 Date: 10/May/2015 Author: @evilcomrade IRC freenode: vulnhub or offsec or corelan email: kwiha2003 at yahoo dot com=20 Version: 3.16.4.06 Tested on: Win XP3 Software link:...

codeigniter -- multiple vulnerabilities

The CodeIgniter changelog reports: Security: Added HTTP "Host" header character validation to prevent cache poisoning attacks when baseurl auto-detection is used. Security: Added FSCommand and seekSegmentTime to the "evil attributes" list in CISecurity::xssclean...

Zhone GPON 2520 R4.0.2.566b - Crash PoC

Exploit for hardware platform in category dos / poc from httplib2 import Http from urllib import urlencode import sys,time main function if name == "main": iflensys.argv != 2: print '' print ' GPON Zhone R4.0.2.566b D.O.S.' print ' Tested on' print ' GPON Zhone 2520' print ' Hardware: 0040-48-02'...

Zhone GPON 2520 R4.0.2.566b - Crash (PoC)

from httplib2 import Http from urllib import urlencode import sys,time main function if name == "main": iflensys.argv != 2: print '' print ' GPON Zhone R4.0.2.566b D.O.S.' print ' Tested on' print ' GPON Zhone 2520' print ' Hardware: 0040-48-02' print ' Software: R4.0.2.566b' print ' ' print '...

Kali Linux NetHunter - Android penetration testing platform

NetHunter is a Android penetration testing platform for Nexus and OnePlus devices built on top of Kali Linux, which includes some special and unique features. Of course, you have all the usual Kali tools in NetHunter as well as the ability to get a full VNC session from your phone to a graphical...

WiFiPhisher — Automated Phishing Attacks Against Wi-Fi Networks

A Greek security researcher, named George Chatzisofroniou, has developed a WiFi social engineering tool that is designed to steal credentials from users of secure Wi-Fi networks. The tool, dubbed WiFiPhisher, has been released on the software development website GitHub on Sunday and is freely...

WordPress Plugin Download Manager 2.7.4 - Remote Code Execution

!/usr/bin/python Exploit Name: Wordpress Download Manager 2.7.0-2.7.4 Remote Command Execution Vulnerability discovered by SUCURI TEAM http://blog.sucuri.net/2014/12/security-advisory-high-severity-wordpress-download-manager.html Exploit written by Claudio Viviani 2014-12-03: Discovered...

ASPPlayground.NET 3.2 SR1 Remote Arbitrary File Upload Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14070/info ASPPlayground.NET is prone to a remote arbitrary file-upload vulnerability. Exploiting this issue may allow remote attackers to upload arbitrary files including malicious scripts and possibly execute the script...

PgMarket <= 2.2.3 (CFG[libdir]) Remote File Inclusion Vulnerability

No description provided by source. C Y B E R - W A R R i O R T I M PgMarket 2.2.3 CFGlibdir Remote File Inclusion Vulnerabilities Author: xoron Class : Remote cont@ct: x0r0nathotmaildotcom Code: include $CFGlibdir . stdlib.inc.php; Exploit:...

MS Internet Explorer GDI+ - Proof of Concept (MS08-052)

No description provided by source. html head STYLE ef: behavior: urldefaultVML; /STYLE /head body pre ================================================ MS08-052: GDI+ Vulnerability ------------------------------------------------ Operating System: XP SP2 Internet Explorer Version: 6.0.2900.2180...

Oracle 9i/10g Evil Views - Change Passwords Exploit

No description provided by source. -- -- bunkerview.sql -- -- Oracle 9i/10g - evil view exploit CVE-2007-3855 -- Uses evil view to perform unauthorized password update -- -- by Andrea bunker Purificato - http://rawlab.mindcreations.com -- 37F1 A7A1 BB94 89DB A920 3105 9F74 7349 AF4C BFA2 -- -- Th...

Magician Blog <= 1.0 (Auth Bypass) SQL injection Vulnerability

No description provided by source. ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ==============================================================================...

Magician Blog <= 1.0 (ids) Remote SQL Injection Vulnerability

No description provided by source. ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ==============================================================================...

PHP Forge <= 3 beta 2 (cfg_racine) Remote File Inclusion Vulnerability

No description provided by source. \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ phpforge3b2cfgracine Remote File Inclusion Vulnerability ------------------------ Virangar Security Team www.virangar.org public www.virangar.net priv8 -------- Discoverd By : Snake...

Dolphin 7.0.3 - Multiple Vulnerabilities

No description provided by source. Exploit Title: Dolphin Mullti Vulnerability Date : 29-10-2010 Author : anT!-Tr0J4n Version : 7.0.3 DorK : Powered by Dolphin Greetz : Dev-PoinT.com inj3ct0r.com All Dev-poinT members and my friends Home : www.Dev-PoinT.com : http://inj3ct0r.com Email :...

Enterprise Payroll Systems <= 1.1 (footer) Remote Include Vulnerability

No description provided by source. $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ Enterprise TimeSheet and Payroll EPS = v.1.1 Remote File Include Vulnerability $$ Script site: http://epayroll.sourceforge.net/ $$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$...

Mediacoder 0.7.5.4710 "Universal" SEH Buffer Overflow Exploit

No description provided by source. !/usr/bin/env python Mediacoder 0.7.5.4710 Universal SEH Buffer Overflow Exploit Coded By: DrIDE Found By: abhishek lyall Usage: Load the evil .m3u file and click on it. Download: http://www.exploit-db.com/application/14612 Tested On: Windows XPSP3 windows/exec ...

PHP Turbulence 0.0.1 Turbulence.PHP Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/23580/info PHP Turbulence is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the...