11989 matches found
PayPal Cross Site Scripting
Title: ====== PayPal Bug Bounty 26 - Persistent Web Vulnerabilities Date: ===== 2013-01-26 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=703 PayPal UID: wam19c8kxn VL-ID: ===== 703 Common Vulnerability Scoring System: ==================================== 4.5...
SiteGo Local File Inclusion / Cross Site Scripting
Exploit Title: SiteGo Multiple Vulnerabilities Date: 02/07/2013 Author: L0n3ly-H34rT Contact: [email protected] My Site: http://se3c.blogspot.com/ Vendor Link: http://site-go.com/ Software Link: http://site-go.com/free/site-go.zip Tested on: Linux/Windows Multiple Local File Inclusion :...
Hiverr 2.2 - Multiple Vulnerabilities
Exploit Title: Hiverr v2.2 Multiple Vulnerabilities Date: 05.02.2013 Author: xStarCode Exploit Author: xStarCode Version: 2.2 Category: webapps Google Dork: Tested on: Linux Exploit: -----Index Vulnerabilities: == SQL Injections...
D-Link Devices Unauthenticated Remote Command Execution
Various D-Link Routers are vulnerable to OS command injection via the web interface. The vulnerability exists in command.php, which is accessible without authentication. This module has been tested with the versions DIR-600 2.14b01, DIR-300 rev B 2.13. Module Options msf use...
RHEL 5 : java-1.4.2-ibm (RHSA-2012:0702)
The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0702 advisory. - OpenJDK: JavaSound incorrect bounds check Sound, 7088367 CVE-2011-3563 - Oracle JDK: unspecified vulnerability fixed in 6u31 and 7u3 2D...
Allwin URLDownloadToFile + WinExec + ExitProcess Shellcode
Allwin URLDownloadToFile + WinExec + ExitProcess Shellcode. Shellcode exploit for windows platform / Title: Allwin URLDownloadToFile + WinExec + ExitProcess Shellcode Date: 2013-22-01 Author: RubberDuck Web: http://bflow.security-portal.cz http://www.security-portal.cz Tested on: Win 2k, Win XP...
Treetextbox editor to traverse the directory+upload vulnerability(with fix)-bug warning-the black bar safety net
Vulnerability file: ftb. imagegallery. aspx Vulnerability: directory traversal ftb. imagegallery. aspx? frame=1&rif=images&cif=../ No, filtered by/ ftb. imagegallery. aspx? frame=1&rif=images&cif=..\ Can!! Filter\symbols Hey Hey, do your know the chant. ftb. imagegallery. aspx?...
CMS snews - SQL Injection
/ | / \ / / \ / /\ \ / / \ | \ / \ \ | | | | /\ /\ / /|| /\ | | || \ \ / / / / / Exploit Title : CMS snews SQL Injection Vulnerability Author : By onestree Software Link : http://snewscms.com/ tested : ubuntu 12.10 / win 7 Dork : inurl:"tanyakan pada rumput yang bergoyang" SQL poc:...
Movable Type 4.2x/4.3x - Web Upgrade Remote Code Execution (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit4 'Movable Type 4.2x, 4.3x Web Upgrade...
Elastix 2.3 PHP Code Injection
? / Exploit Title : Elastix 2.3 , Remote Command Execution Exploit Google Dork : WTF!!!! Version: Elastix All versions below 2.3 , Newer versions maybe affected as well ; Tested on: CentOS CVE : notyet Download Vuln software : elastix.org Author : Faris AKA i-Hmx Mail : [email protected] Home :...
Local root exploit for Centrify Deployment Manager < v2.1.0.283 local root
/Local root exploit for Centrify Deployment Manager v2.1.0.283 local root, Centrify released a fix very quickly - nice vendor response. http://vapid.dhs.org/exploits/centrifylocalr00t.c CVE-2012-6348 12/17/2012 http://vapid.dhs.org/advisories/centrifydeploymentmanagerinsecuretmp2.html Greetings...
Linux/x86 - Read /etc/passwd file + Null-Free Shellcode (51 bytes)
Linux/x86 - Read /etc/passwd file + Null-Free Shellcode 51 bytes. Shellcode exploit for Linuxx86 platform / Tiny Read File Shellcode - C Language - Linux/x86 Copyright C 2013 Geyslan G. Bem, Hacking bits http://hackingbits.com [email protected] This program is free software: you can redistribute ...
Linux/x86 - Egghunter (0x50905090) + Null-Free Shellcode (38 bytes)
Linux/x86 - Egghunter 0x50905090 + Null-Free Shellcode 38 bytes. Shellcode exploit for Linuxx86 platform / Egg Hunter Shellcode - C Language - Linux/x86 Copyright C 2013 Geyslan G. Bem, Hacking bits http://hackingbits.com [email protected] This program is free software: you can redistribute it...
Guru Auction 2.0 SQL Injection
/ / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID ----------------------------------------------------------------------- Guru...
MyBB Facebook Profile 2.4 Cross Site Scripting
Exploit Title: MyBB Facebook Profile Plugin Persistant XSS Date: 12/12/2012 Exploit Author: limb0 Vendor Homepage: http://www.collectiontricks.it/ Software Link: http://mods.mybb.com/view/facebook-profile-link-on-postbit-2-2 Version: 2.4 Tested on: Linux P-XSS Installation: 1. Upload all folder t...
Facebook Profile MyBB Plugin 2.4 - Persistent Cross-Site Scripting
Facebook Profile MyBB Plugin 2.4 - Persistent Cross-Site Scripting Exploit Title: MyBB Facebook Profile Plugin Persistant XSS Date: 12/12/2012 Exploit Author: limb0 Vendor Homepage: http://www.collectiontricks.it/ Software Link: http://mods.mybb.com/view/facebook-profile-link-on-postbit-2-2...
TipsOfTheDay MyBB Plugin - Multiple Vulnerabilities
Exploit Title: TipsOfTheDay mybb plugin stored XSS and SQL injection vulnerabilitys. Date: 12.12.2012 Exploit Author: VipVince Vendor Homepage: http://www.mybb.com/ Software Link: http://mods.mybb.com/view/tips-of-the-day Version: 1.0 Tested on: Windows The tipsoftheday.php file is vulnerable to...
FreeVimager 4.1.0 <= WriteAV Arbitrary Code Execution
!/usr/bin/perl FreeVimager 4.1.0 = WriteAV Arbitrary Code Execution Author: Jean Pascal Pereira [email protected] Vendor URI: http://www.contaware.com Vendor Decription: This is a Free & Fast Image Viewer and Editor for Windows. It can as well play avi video files, ordinary audio files and audio...
Mysql provide the right to exploit the expanded applications-vulnerability warning-the black bar safety net
This: MySQL Windows Remote System Level Exploit Stuxnet technique 0day http://www.exploit-db.com/exploits/23083/ Roughly looked at, the original is in the export file when the out of the question, specifically how out of the question, showing look at the mysql source code than I can see to...