IT-Grundschutz M4.106: Aktivieren der Systemprotokollierung

IT-Grundschutz M4.106: Aktivieren der Systemprotokollierung. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94214 Stand: 13. Ergänzungslieferung 13. EL. OpenVAS...

WordPress Suco Shell Upload

Title : Wordpress Suco Themes Arbitrary File Upload Author : DevilScreaM Date : 11/20/2013 - 20 November 2013 Category : Web Applications Type : PHP Vendor : http://themify.me/ Link : http://themify.me/themes/suco Greetz : 0day-id.com | newbie-security.or.id | Borneo Security | Indonesian Securit...

IT-Grundschutz M4.368: Regelmäßige Audits der Terminalserver-Umgebung

IT-Grundschutz M4.368: Regelmäßige Audits der Terminalserver-Umgebung. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94250 Stand: 13. Ergänzungslieferung 13. EL...

IT-Grundschutz M4.368: Regelmaessige Audits der Terminalserver-Umgebung

IT-Grundschutz M4.368: Regelmaessige Audits der Terminalserver-Umgebung. ACHTUNG: Dieser Test wird nicht mehr unterstuetzt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94250 Stand: 13. Ergaenzungslieferung 13. EL...

WordPress iThemes2 Shell Upload

Title : Wordpress iThemes2 Themes Arbitrary File Upload Author : DevilScreaM Date : 11/20/2013 - 20 November 2013 Category : Web Applications Type : PHP Vendor : http://themify.me/ Link : http://themify.me/themes/ithemes2 Greetz : 0day-id.com | newbie-security.or.id | Borneo Security | Indonesian...

phpmps_v2. 3 the latest version of the two SQL injection vulnerabilities-vulnerability warning-the black bar safety net

Brief description: PHPMPS on user-submitted parameters improper handling, leading to multipleSQL injectionvulnerabilities. Detailed description: member.php 4 2 2 - 4 5 5 ============================================================================================ case 'exchange': $units =...

WordPress Dimension Cross Site Request Forgery Vulnerability

WordPress Dimension theme suffers from a cross site request forgery vulnerability. Title : Wordpress Dimension Themes CSRF File Upload Vulnerability Author : DevilScreaM Date : 11/17/2013 - 17 November 2013 Category : Web Applications Type : PHP Vendor : http://themeforest.net Download :...

D-Link Router 2760N Cross Site Scripting Vulnerability

D-Link Router 2760N suffers from multiple persistent and reflective cross site scripting vulnerabilities. Advisory: D-Link Router 2760N DSL-2760U-BN Multiple XSS Author: Liad Mizrachi Vendor URL: http://www.dlink.com Status: Fixed CVE-ID: CVE-2013-5223 ========================== Vulnerability...

HackerOne: Privilege escalation..., or not?!

I just created the admin profile, go check it out: https://hackerone.com/nimda Or see attached image! This is very much related! svg/onload=alert1// Free iPad Here! This is Unrela...

Attachmate Verastream Host Integrator (VHI) allows arbitrary file upload and execution

Overview The Attachmate Verastream Host Integrator VHI is vulnerable to arbitrary file uploads and execution. Description CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' - CVE-2013-3626The Attachmate VHI Session Server, on all platforms, allows unauthenticated...

VideoCharge Studio SEH Buffer Overflow Vulnerability

Exploit for windows platform in category local exploits !/usr/bin/python Exploit Title: VideoCharge Studio SEH Buffer Overflow Date found: 27.10.2013 Exploit Author: metacom URL: http://www.videocharge.com/download.php Software Link: www.videocharge.com/download/VideoChargeStudioInstall.exe...

VideoCharge Studio 2.12.3.685 Buffer Overflow

!/usr/bin/python Exploit Title: VideoCharge Studio SEH Buffer Overflow Date found: 27.10.2013 Exploit Author: metacom URL: http://www.videocharge.com/download.php Software Link: www.videocharge.com/download/VideoChargeStudioInstall.exe Version: 2.12.3.685 Tested on: Windows XP SP2 Poc...

MNET Solution XSS / SQL Injection / File Upload

Title : MNET Solution Multiple Vulnerabilities Author : DevilScreaM Date : 10/19/2013 Category : Web Applications Type : PHP Vendor : http://mnet.co.th Greetz : 0day-id.com | newbie-security.or.id | Borneo Security | Indonesian Security Indonesian Hacker | Indonesian Exploiter | Indonesian Cyber...

Dolibarr ERP/CRM 3.4.0 - 'exportcsv.php?sondage' SQL Injection

Exploit Title: Dolibarr 3.4.0 SQLi Date: 10/7/2013 Exploit author: drone @dronesec More information: http://forelsec.blogspot.com/2013/10/dolibarr-340-multiple-vulnerabilities.html Vendor homepage: http://www.dolibarr.org/ Software link: Version: 3.4.0 Fixed in: 3.4.1 Tested on: Ubuntu 12.04...

Internet Haut Debit Mobile PCW_MATMARV1.0.0B03 - Local Buffer Overflow (SEH)

Internet Haut Debit Mobile PCWMATMARV1.0.0B03 - Local Buffer Overflow SEH !/usr/bin/python Exploit Title:Internet Haut Debit Mobile Buffer Overflow SEH Software Link:https://app.box.com/s/4h9cm20hp5iiask8rwrm Poc video demo :http://www.youtube.com/watch?v=sAHfjmNHiow&feature=youtu.be...

WordPress Plugin Cart66 1.5.1.14 - Multiple Vulnerabilities

WordPress Plugin Cart66 1.5.1.14 - Multiple Vulnerabilities Exploit Title: Wordpress Cart66 Plugin 1.5.1.14 Multiple Vulnerabilities Exploit Author: absane Blog: http://blog.noobroot.com Discovery date: September 29th 2013 Vendor notified: September 29th 2013 Vendor fixed: October 2 2013 Vendor...

Multi Gather Resolve Hosts

Resolves hostnames to either IPv4 or IPv6 addresses from the perspective of the remote host. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Multi Gather Resolve Hosts', 'Description' = %q...

WordPress Woopra Remote Code Execution

WordPress Woopra plugin remote PHP arbitrary code execution exploit. Exploit Title: woopra plugins execute arbitrary PHP code Exploit Google Dork: inurl:/plugins/woopra/inc/php-ofc-library , inurl:wp-content/plugins/woopra/inc/ Date: 06-10-2013 Exploit Author: wantexz Vendor...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-0189, CVE-2013-0191. Reason: this identifier was intended for one issue, but it was inadvertently associated with multiple issues. Notes: All CVE users should consult CVE-2013-0189 and CVE-2013-0191 to determine which ID is...

CKFinder 1.4.3 arbitrary file upload vulnerability-vulnerability warning-the black bar safety net

CKFinder is abroad a very popular WYSIWYG text editor,which 1. 4. 3 asp. net version the presence of arbitrary file upload vulnerability attackers can exploit the vulnerability to upload arbitrary files. CKFinder Upload File,force the file name, excluding the suffix, midpoint number, etc. other...