MyBB Uploader 1.1.2 Shell Upload

IIIIIIII RRRRRRRRRRRR HHHHHHHH HHHHHHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRRRRRRRR HHHHHHHHHHHHHHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIIIIIII RRRRRRRR RRRRRR...

WordPress Premium Gallery Manager Shell Upload

Wordpress Plugins Premium Gallery Manager Arbitrary File Upload Author : eX-Sh1Ne Facebook : www.fb.me/ShiNe.gov Google Dork = inurl:"wp-content/plugins/PremiumGalleryManager" Vuln : wp-content/plugins/PremiumGalleryManager/uploadify/uploadify.php Exploit : "@$uploadfile",...

Upload vulnerability science[2]-js validation-vulnerability warning-the black bar safety net

On the file upload vulnerability, presumably to play the web safety of the students comes in contact with, before the station also published an article to introduce file upload vulnerabilities of the various bypass methods, but just have the document but there is no demo code, recently gave the...

djbdns超长消息处理拒绝服务漏洞

Bugtraq ID:65586 djbdns TinyDNS是一个由Qmail 的作者所设计的一个轻量级DNS服务器。 djbdns在读取TCP连接的超长消息时，会触发多个Read2调用，消耗大量CPU，造成拒绝服务攻击。 0 djbdns 厂商补丁： djbdns ----- 用户可参考厂商的GIT库以获得补丁修复此漏洞： https://github.com/pjps/ndjbdns/commit/a67293ce12832b55ec4271536282290ed17863f6 / dnscache reads incoming TCP connections one byte a...

VNC Server (Reflective Injection), Reverse Hop HTTP/HTTPS Stager

Inject a VNC Dll via a reflective loader staged. Tunnel communication over an HTTP or HTTPS hop point. Note that you must first upload data/hop/hop.php to the PHP server you wish to use as a hop. This module requires Metasploit: https://metasploit.com/download Current source:...

Microsoft Internet Explorer Use-After-Free Vulnerability

Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via vectors involving crafted JavaScript code, CMarkup, and the onpropertychange attribute of a script element, as exploited in the wild in January and February 2014. Recent...

Kloxo SQL注入和远程代码执行漏洞

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote include Msf::Exploit::Remote::HttpClient include Msf::Exploit::FileDropper Ran...

metinfo multiple vulnerabilities(getshell)-vulnerability warning-the black bar safety net

1, The Audit code, I generally like to look at the core file. Download download.txt define'MAGICQUOTESGPC', getmagicquotesgpc; isset$REQUEST'GLOBALS' && exit'Access Error'; requireonce ROOTPATH.'include/global.func.php'; foreacharray'COOKIE', 'POST', 'GET' as $request foreach$$request as $ key =...

Plogger 1.0 RC1 Cross Site Request Forgery / Cross Site Scripting

Exploit Title: Multiply vulnerabilites in plogger 1.0 RC1 Date: 03/02/2014 Exploit Author: [email protected] Vendor Homepage: http://www.plogger.org/ Software Link: http://www.plogger.org/download/ Version: 1.0 RC1 Tested on: Virtualbox debian and Apache REFLECTED XSS: 1...

Plogger 1.0 (RC1) - Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Multiply vulnerabilites in plogger 1.0 RC1 Date: 03/02/2014 Exploit Author: email protected Vendor Homepage: http://www.plogger.org/ Software Link: http://www.plogger.org/download/ Version: 1.0 RC1 Tested on: Virtualbox debian a...

Plogger 1.0 (RC1) - Multiple Vulnerabilities

Plogger 1.0 RC1 - Multiple Vulnerabilities Exploit Title: Multiply vulnerabilites in plogger 1.0 RC1 Date: 03/02/2014 Exploit Author: [email protected] Vendor Homepage: http://www.plogger.org/ Software Link: http://www.plogger.org/download/ Version: 1.0 RC1 Tested on: Virtualbox debian and Apach...

Plogger 1.0 (RC1) - Multiple Vulnerabilities

Exploit Title: Multiply vulnerabilites in plogger 1.0 RC1 Date: 03/02/2014 Exploit Author: [email protected] Vendor Homepage: http://www.plogger.org/ Software Link: http://www.plogger.org/download/ Version: 1.0 RC1 Tested on: Virtualbox debian and Apache REFLECTED XSS: 1...

Eventy Online Scheduler 1.8 - Multiple Vulnerabilities

Eventy Online Scheduler V1.8 - Multiple Vulnerabilties =================================================================== .:. Author : AtT4CKxT3rR0r1ST .:. Contact : [email protected] , [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script :...

ImpressCMS 1.3.5 XSS / File Deletion

Hi, I have discovered two vulnerabilities in ImpressCMS. These have been fixed in the new 1.3.6 version, which you can get at https://sourceforge.net/projects/impresscms/files/ImpressCMS%20Official%20Releases/ImpressCMS%201.3%20Branch/ImpressCMS%201.3.6/. One is an arbitrary file deletion and the...

Pixie 1.04 CMS - Multiple XSS Vulnerabilities

Latest Pixie CMS suffers on multiple cross site scripting because of poor content and variables filtration. Title: Pixie 1.04 CMS - Multiple XSS Version: 1.04 Latest ATM Vendor: getpixie.co.uk Demo: demo.getpixie.co.uk Date: 01.26.2014 Contact: smashatdevilteam.pl 1. Cross Site Scripting - GET 'm...

Easy POS System SQL Injection

Exploit: Easy POS System - SQL Injection + Author: vinicius777 + Contact: vinicius777 AT gmail @vinicius777 + Vendor Homepage: http://sourceforge.net/projects/easypossystem/ 1 Sql Injection POST Time Based Blind Note: Time based Injection on POST requests using burp, as output indicated. You...

Easy POS System - 'login.php' SQL Injection

Exploit: Easy POS System - SQL Injection + Author: vinicius777 + Contact: vinicius777 AT gmail @vinicius777 + Vendor Homepage: http://sourceforge.net/projects/easypossystem/ 1 Sql Injection POST Time Based Blind Note: Time based Injection on POST requests using burp, as output indicated. You...

GoToMeeting for Android - Multiple Local Information Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/65123/info GoToMeeting for Android is prone to multiple local information-disclosure vulnerabilities. Local attackers can exploit these issues to obtain sensitive information, which may aid in further attacks. GoToMeeting 5.0.799.1238 is vulnerable; other...

XAMPP 3.2.1 Cross Site Scripting

Title : XAMPP 3.2.1 Cross Site Scripting Author : DevilScreaM Date : 15 January 2014 Category : Web Applications Vendor : http://sourceforge.net/projects/xampp Version : 3.2.1 Type : PHP Greetz : 0day-id.com | newbie-security.or.id | Borneo Security | Indonesian Security Indonesian Hacker |...

Hotel Booking System 3.0 CSRF / XSS / File Disclosure

Hotel Booking System V3.0 - Multiple Vulnerabilties ==================================================================== .:. Author : HackXBack .:. Contact : [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script : http://www.phpjabbers.com/hotels-booking-system/ .:. Tested On Demo :...