CVE-2021-25059

The Download Plugin WordPress plugin before 2.0.0 does not properly validate a user has the required privileges to access a backup's nonce identifier, which may allow any users with an account on the site such as subscriber to download a full copy of the website...

CVE-2022-1585

The Project Source Code Download WordPress plugin through 1.0.0 does not protect its backup generation and download functionalities, which may allow any visitors on the site to download the entire site, including sensitive files like wp-config.php...

Ocean12 Poll Manager Pro - Database Disclosure

Ocean12 Poll Manager Pro - Database Disclosure --------------------------------------------------------- Portal Name: Ocean12 Poll Manager Pro Version: 1.00 Vendor : http://ocean12tech.com/products/poll Dork: Maintained with the Ocean12 Poll Manager Pro v1.00 Author : PouyaServer ,...

EasyNews 40tr - SQL Injection / Cross-Site Scripting / Local File Inclusion

!/usr/bin/perl EasyNews-40tr Multiple Remote Vulnerabilities SQL Injection Exploit/XSS/LFI Discovered by : IRCRASH By Dr.Crash Exploited By : Dr.Crash IRCRASH Team Members : Dr.Crash - Malc0de - R3d.w0rm Script Download : http://myiosoft.com/download/EasyNews/easynews-40tr.zip XSS Address :...

ablog-sqlxss.txt

!/usr/bin/perl A-Blog V.2 Multiple Remote Vulnerabilities SQL Injection Exploit/XSS AUTHOR : IRCRASH Discovered by : Dr.Crash Exploited By : Dr.Crash IRCRASH Team Members : Dr.Crash - Malc0de - R3d.w0rm Script Download : http://heanet.dl.sourceforge.net/sourceforge/a-blog/A-BlogV2.rar XSS Address...

A-Blog V.2 (id) XSS / Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================== A-Blog V.2 id XSS / Remote SQL Injection Exploit ================================================== !/usr/bin/perl A-Blog V.2 Multiple Remote Vulnerabilities SQL Injection Exploit/XSS AUTH...

BlogPHP v.2 (id) XSS / Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =================================================== BlogPHP v.2 id XSS / Remote SQL Injection Exploit =================================================== !/usr/bin/perl BlogPHP V.2 Multiple Remote Vulnerabilities SQL Injection Exploit/XSS...

dev_wms => 1.5 Remote File Include Vulnerabilities

""""""""""""""""""""""""""""""""""""""""""""""" """ :: :: ::::: :::: """ """ :: :: :: : :: """ """ :::: :: :: ::::: ::::: :::: """ """ :: :: ::: ::: :: :: :: :: :: """ """ :: :: :: : : ::::: :: :: :::: """ """ """ """"""""""""""""""""""""""""""""""""""""""""""" Xmor$ DigitaL Hacking TeaM devwms =...