Auto ThickBox Plus <= 1.9 - Reflected Cross-Site Scripting (XSS)

The auto-thickbox-plus WordPress plugin was affected by a Reflected Cross-Site Scripting XSS security vulnerability. http://www.example.com/wp-content/plugins/auto-thickbox-plus/download.min.php?file=%3Cscript%3Ealert%281%29%3C/script%3E...

WordPress Plugin WP-Client 3.8.7 - Persistent Cross-Site Scripting

Application: WP-Client Version: 3.8.7 Author: Pier-Luc Maltais from COSIG Twitter: @COSIG 1 Introduction 2 Report Timeline 3 Technical details 4 POC =============== 1 Introduction =============== One plugin configures multiple areas of your WordPress installation and allows the site Administrator...

ZTE ZXHN H108N R1A任意文件读取漏洞

No description provided by source...

Wireshark /wiretap/pcapng.c 远程拒绝服务漏洞

No description provided by source...

x64 Linux egghunter in 24 bytes

x64 Linux egghunter in 24 bytes. Shellcode exploit for linx86-64 platform / ;Title: x64 Linux egghunter in 24 bytes ;Author: David Velรกzquez a.k.a d4sh&r ;Contact: https://mx.linkedin.com/in/d4v1dvc ;Description: x64 Linux egghunter that looks for the string "h@ckh@ck" ; and then execute the...

foobar2000 1.3.9 - '.pls' / '.m3u' / '.m3u8' Local Crash (PoC)

Exploit Title: foobar2000 1.3.9 .pls; .m3u; .m3u8 Local Crash PoC Date: 11-15-2015 Exploit Author: Antonio Z. Vendor Homepage: http://www.foobar2000.org/ Software Link: http://www.foobar2000.org/getfile/036be51abc909653ad44d664f0ce3668/foobar2000v1.3.9.exe Version: 1.3.9 Tested on: Windows XP SP3...

PHP Server Monitor 3.1.1 Privilege Escalation

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-PHPSRVMONITOR-PRIV-ESCALATE.txt Vendor: ================================ www.phpservermonitor.org...

Hitron Router CGN3ACSMR 4.5.8.16 - Arbitrary Code Execution

Hitron Router CGN3ACSMR 4.5.8.16 - Arbitrary Code Execution Exploit title: Hitron Router CGN3ACSMR - Remote Code Execution Author: Dolev Farhi dolevf at protonmail.ch Date: 29-10-2015 Vendor homepage: http://www.hitrontech.com/en/index.php Software version: 4.5.8.16 Hardware version: 1A Details:...

通达OA集团最新版一处盲注漏洞demo测试（需登录）

简要描述： 集团OA最新版，未过滤'，然后再绕过过滤函数，root权限 详细说明： 厂商官网：http://.../ 集团demo地址：.../ SQL漏洞地址： .../general/document/index.php/send/sendlist/sendfor/?tid=&title=1 参数title可注入 这个点竟然没有过滤单引号' 爆SQL语句： 提交： .../general/document/index.php/send/sendlist/sendfor/?tid=&title=1%' and 1=2 union select 返回： 不安全的SQL语句：联合查询...

iGENUS系统某处任意文件遍历

简要描述： RT 详细说明： 开始提交的是看到http://.../bugs/wooyun-2010-0136712。还以为是重复了。仔细看看原来不是重复的。同样的是Lang存在遍历，%00截断 http://...//sys/login.php?Lang=../../../../../../../../../../etc/passwd%00.jpeg&cmd=form 谷歌搜索关键字:iGENUS-系统管理中心 ...:8090/sys/login.php?cmd=form 部分案例 http://...:8090/sys/login.php?cmd=form...

Vtiger CRM < = 6.3.0 远程代码执行

No description provided by source...

齐普生协同办公OA系统存在SQL注入漏洞

No description provided by source...

74cms jobs-list.php接口sql注入

首页 招聘信息 点击搜索 http://demo.74cms.com/jobs/jobs-list.php?sort=wage&page=1&jobcategory=&education=&citycategory=&experience=&settr=3&trade=&wage=&nature= 参数sort存在SQL注入...

phpwind v8.7 /goto.php 跨站脚本漏洞

No description provided by source...

WinRAR 5.21 - (Expired Notification) OLE Remote Command Execution Exploit

Exploit for windows platform in category local exploits !/usr/bin/python -w Title : WinRar Expired Notification - OLE Remote Command Execution Date : 30/09/2015 Author : R-73eN Tested on : Windows Xp SP3 with WinRAR 5.21 This exploits a vulnerability in the implementation of showing ads. When a...

w3tw0rk / Pitbul IRC Bot 远程命令执行

No description provided by source. This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'w3tw0rk / Pitbul IRC Bot Remote Code Execution', 'Description' = %q This module allows remote...

工作易(workyi) 3.0 SQL注入漏洞

No description provided by source...

MASM32 11R - Crash POC Exploit

Exploit for windows platform in category dos / poc EXPLOIT TITLE: Masm32v11r Buffer OverflowSEH overwrite crash POC AUTHOR: VIKRAMADITYA "-OPTIMUS" Date of Testing: 22nd September 2015 Download Link : http://www.masm32.com/masmdl.htm Tested On : Windows 10 Steps to Crash :- Step 1: Execute this...

Total Commander 8.52 (Windows 10) - Local Buffer Overflow

Total Commander 8.52 Windows 10 - Local Buffer Overflow !/usr/bin/python EXPLOIT TITLE: Total Commander 8.52 Buffer Overflow AUTHOR: VIKRAMADITYA "-OPTIMUS" Credits: UnN0n Date of Testing: 19th September 2015 Download Link : http://tcmd852.s3-us-west-1.amazonaws.com/tc852x32b1.exe Tested On :...

Aol account hijack sessions 0day

hijacking sessions replaying information, to gain access to other account details. Usage Info you will need firefox live http headers FIXED for replay and the method below. This is private exploit. You can buy it at https://0day.today...