WordPress InBoundio Marketing 2.0 Shell Upload

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Wordpress InBoundio Marketing PHP Upload Vulnerability', 'Description' = %q This module exploits an arbitrary file upload in the...

WordPress WPshop eCommerce 1.3.9.5 Shell Upload

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'WordPress WPshop eCommerce Arbitrary File Upload Vulnerability', 'Description' = %q This module exploits an arbitrary file upload in...

WordPress Plugin Creative Contact Form - Arbitrary File Upload (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Wordpress Creative Contact Form Upload Vulnerability', 'Description' = %q This module exploits an arbitrary PHP code upload in the...

WordPress Plugin Reflex Gallery - Arbitrary File Upload (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Wordpress Reflex Gallery Upload Vulnerability', 'Description' = %q This module exploits an arbitrary PHP code upload in the WordPres...

WordPress Plugin Work The Flow - Arbitrary File Upload (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Wordpress Work The Flow Upload Vulnerability', 'Description' = %q This module exploits an arbitrary PHP code upload in the WordPress...

GoAutoDial 3.3 Authentication Bypass / Command Injection

This module exploits a SQL injection flaw in the login functionality for GoAutoDial version 3.3-1406088000 and below, and attempts to perform command injection. This also attempts to retrieve the admin user details, including the cleartext password stored in the underlying database. Command...

WordPress SlideShow Gallery Authenticated File Upload Exploit

The WordPress SlideShow Gallery plugin contains an authenticated file upload vulnerability. You can upload arbitrary files to the upload folder, because the plugin also uses it's own file upload mechanism instead of the WordPress API it's possible to upload any file type. This module requires...

WordPress SlideShow Gallery Authenticated File Upload

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Wordpress SlideShow Gallery Authenticated File Upload', 'Description' = %q The Wordpress SlideShow Gallery plugin contains an...

WordPress Creative Contact Form Upload

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Wordpress Creative Contact Form Upload Vulnerability', 'Description' = %q This module exploits an arbitrary PHP code upload in the...

WordPress N-Media Website Contact Form Upload

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Wordpress N-Media Website Contact Form Upload Vulnerability', 'Description' = %q This module exploits an arbitrary PHP code upload i...

WordPress Creative Contact Form Upload Exploit

This Metasploit module exploits an arbitrary PHP code upload in the WordPress Creative Contact Form version 0.9.7. The vulnerability allows for arbitrary file upload and remote code execution. This module requires Metasploit: http://metasploit.com/download Current source:...

Adobe Flash Player copyPixelsToByteArray Integer Overflow Exploit

This Metasploit module exploits an integer overflow in Adobe Flash Player. The vulnerability occurs in the copyPixelsToByteArray method from the BitmapData object. The position field of the destination ByteArray can be used to cause an integer overflow and write contents out of the ByteArray...

Wordpress Plugin Reflex Gallery arbitrary file upload Exploit

This Metasploit module exploits an arbitrary PHP code upload in the WordPress Reflex Gallery version 3.1.3. The vulnerability allows for arbitrary file upload and remote code execution. This module requires Metasploit: http://metasploit.com/download Current source:...

WordPress Reflex Gallery Upload

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Wordpress Reflex Gallery Upload Vulnerability', 'Description' = %q This module exploits an arbitrary PHP code upload in the WordPres...

WordPress Work The Flow Upload

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Wordpress Work The Flow Upload Vulnerability', 'Description' = %q This module exploits an arbitrary PHP code upload in the WordPress...

WordPress DukaPress Plugin File Read Vulnerability

This module exploits a directory traversal vulnerability in WordPress Plugin "DukaPress" version 'WordPress DukaPress Plugin File Read Vulnerability', 'Description' = %q This module exploits a directory traversal vulnerability in WordPress Plugin "DukaPress" version 'EDB', '35346', 'CVE',...

D-Link/TRENDnet NCC Service Command Injection Exploit

This Metasploit module exploits a remote command injection vulnerability on several routers. The vulnerability exists in the ncc service, while handling ping commands. This Metasploit module has been tested on a DIR-626L emulated environment only. Several D-Link and TRENDnet devices are reported ...

D-Link/TRENDnet NCC Service Command Injection

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'D-Link/TRENDnet NCC Service Command Injection', 'Description' = %q This module exploits a remote command injection vulnerability on...

WordPress Mobile Edition File Read Vulnerability

This module exploits a directory traversal vulnerability in WordPress Plugin "WP Mobile Edition" version 2.2.7, allowing to read arbitrary files with the web server privileges. This module requires Metasploit: https://metasploit.com/download Current source:...

BSD x64 Shell Bind TCP

Bind an arbitrary command to an arbitrary port This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 136 include Msf::Payload::Single include Msf::Payload::Bsd include...