LibrettoCMS 2.2.2 Malicious File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title : LibrettoCMS 2.2.2 Malicious File Upload Date : 14 June 2013 Exploit Author : CWH Underground Site : www.2600.in.th Vendor Homepage : http://libretto.artwebonline.com/ Software Link :...

Libretto CMS 2.2.2 Shell Upload

Exploit Title : LibrettoCMS 2.2.2 Malicious File Upload Date : 14 June 2013 Exploit Author : CWH Underground Site : www.2600.in.th Vendor Homepage : http://libretto.artwebonline.com/ Software Link : http://jaist.dl.sourceforge.net/project/librettocms/librettoCMSv.2.2.2.zip Version : 2.2.2 Tested ...

osCommerce 2.3.3 Cross Site Request Forgery

your shell should be here: catalog/includes/languages/english/download.php?cmd=id...

NASA 'Space your Face' domain hacked

Another basic security loop-hole in NASA website lead to a Hack. This time hacker going by name "p0ison-r00t" deface a sub domain of NASA https://spaceyourface.nasa.gov/. The hacked sub domain running a web application using flash, that allow visitors to create some funny videos of Space using...

UNESCO Etxea website hacked by #NullCrew

Hacking group NullCrew deface UNESCO Etxea website unescoetxea.org, which is an internationally oriented NGOs working for the culture of peace, sustainable human development and human rights, at local and global levels. Deface page reads, "Welcome to the new front page of unesco etxea You have be...

Xoops 2.3.2 Remote Code Execution

!/usr/bin/env python Title: Xoops 2.3.2 "mydirname" Remote Code Execution Exploit CVE: ????-???? Reference: http://secunia.com/advisories/33435/ Author: infodox Site: http://insecurety.net/ Twitter: @infodox Old news, just practicin' my python :3 import requests import sys vulnurl =...

Reliance Communications Server Compromised with Information disclosure Vulnerability

Hacker with nickname "mr.hack3r420" has successfully compromise the web server of Reliance Communications rcom.co.in as shown in image screenshot taken by THN team and we make link hidden to save site from further misuse of damage. Hacker most probably get this access because of Information...

qdPM 7 - Arbitrary File upload

Exploit qdPM v.7 Arbitrary File upload Date: June 13th 2012 Author: loneferret Version: 7 Vendor Url: http://qdpm.net/ Tested on: Winddows XP / XAMPP Discovered by: loneferret Software description: Free project management tool for small team qdPM is a free web-based project management tool suitab...

phpAcounts v. 0. 5. 3 SQL injection and fix-vulnerability warning-the black bar safety net

Author: loneferret Affected version: 0.5.3 Developer address: http://phpaccounts.com/ Test platform: Ubuntu Server 11.10 Old app, still fun. Auth. Bypass: http://www.xxx.com /phpaccounts/index.php Username: x' or '1'='1' Password: whatever Upload php shell in preferences Letterhead image upload...

MM Forms & MM Forms Community 2.2.6 - Unauthenticated Arbitrary File Upload

Attackers have been seen probing for the "/wp-content/plugins/mm-forms/includes/doajaxfileupload.php" file. PostShell.php "@$uploadfile"; curlsetopt$ch, CURLOPTRETURNTRANSFER, 1; $postResult = curlexec$ch; curlclose$ch; print "$postResult"; ? Shell Access :...

Rootdabitch version 0.1 - Multithreaded Linux root password Bruteforcer

Rootdabitch version 0.1 - Multithreaded Linux root password Bruteforcer r00tw0rm hacker "th3breacher!" release Rootdabitch v0.1 ,which is a Multithreaded Linux/UNIX tool to brute-force cracking local root through su using sucrack. sucrack is a multithreaded Linux/UNIX tool for brute-force crackin...

Wordpress SB Uploader Plugin Shell Upload Vulnerability

No description provided by source. ================================================================= Title: Wordpress SB Uploader Plugin Shell Upload Vulnerability Author: JingoBD Category: webapps Team: Bangladesh Cyber Army Greetz: Bedu33n,N!1L,Rex0Man & All Member of BCA...

WordPress SB Uploader Shell Upload

================================================================= Title: Wordpress SB Uploader Plugin Shell Upload Vulnerability Author: JingoBD Category: webapps Team: Bangladesh Cyber Army Greetz: Bedu33n,N!1L,Rex0Man & All Member of BCA. http://facebook.com/life.is.code Plugin URI:...

CVE-2012-1083

Cross-site request forgery CSRF vulnerability in the Terminal PHP Shell terminal extension 0.3.2 and earlier for TYPO3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2012-1082

Cross-site scripting XSS vulnerability in the Terminal PHP Shell terminal extension 0.3.2 and earlier for TYPO3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Terminal PHP Shell terminal extension 0.3.2 and earlier for TYPO3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2012-1082

Cross-site scripting XSS vulnerability in the Terminal PHP Shell terminal extension 0.3.2 and earlier for TYPO3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-1082

The CVE-2012-1082 issue affects the TYPO3 Terminal PHP Shell (terminal) extension up to version 0.3.2 and earlier, where a Cross-site scripting (XSS) flaw could allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. This vulnerability arises in the Termin...

CVE-2012-1083

Cross-site request forgery CSRF vulnerability in the Terminal PHP Shell terminal extension 0.3.2 and earlier for TYPO3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2012-1083

This CVE concerns the TYPO3 ecosystem: the Terminal PHP Shell (terminal) extension, versions 0.3.2 and earlier, containing a Cross-Site Request Forgery (CSRF) vulnerability. The underlying issue allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. The p...