Yet Another Hotmail, AOL and Yahoo Password Reset 0Day Vulnerabilities

Yesterday we Reported a 0-Day Vulnerability in Hotmail, which allowed hackers to reset account passwords and lock out the account's real owners. Tamper Data add-on allowed hackers to siphon off the outgoing HTTP request from the browser in real time and then modify the data.When they hit a passwo...

Simple Image Hosting script Arbitrary File Upload

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

NextBBS 0.6.0 Authentication Bypass / SQL Injection / XSS

waraxe-2012-SA080 - Multiple Vulnerabilities in NextBBS 0.6.0 =============================================================================== Author: Janek Vind "waraxe" Date: 27. March 2012 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-80.html Description of vulnerable software:...

Joomla Jesubmit Shell Upload

Exploit Title: Joomla Component comjesubmit Arbitrary File Upload Date: 1/24/2012 Author: Robert Cooper Robert.Cooper at areyousecure.net Tested on: Linux/Windows 7 Exploit: Visit the website Navigate to index.php?option=comjesubmit&view=jesubmit&Itemid=id&lang=en or...

MangosWeb - SQL Injection

MangosWeb - SQL Injection EXPLOIT TITLE: MangosWeb SQL Vulnerability DATE: 1/7/2012 BY Hood3dRob1n AFFECTED PRODUCTS: MangosWeb Enhanced Version 3.0.3 SW LINK: http://code.google.com/p/mwenhanced/ CATEGORY: WebApp 0day DORK: intext:MangosWeb ENhanced Version 3.0.3 @2009-2011, KeysWow Dev Team...

Ajax Script Cross Site Scripting / SQL Injection

Exploit Title: Ajax Script SQL Injection and XSS Vulnerability Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability Web Site: www.eyupcelik.com.tr ISSUE SQL Injection and XSS can be done using the POST method. Tamper data is available. Vulnerable Page:...

Netgear VMDG480 Cross Site Scripting

Persistent HTML Injection/XSS in Netgear VMDG480 Routers ---------------------------------------------------------- This vulnerability requires the user to be logged in as the administrator. The vulnerability exists in the RgFirewallEL.asp page of the router and is typically accessible within a L...

PHP-Nuke Shell Upload

PHP-Nuke Shell Upload Vulnerability By : h311 c0d3 Contact : [email protected] Home : Black-Hat.cc Dork : inurl:modules.php?name=Upload Exploit : 1- you should first install Tamper Data from here https://addons.mozilla.org/en-us/firefox/addon/tamper-data/ 2- start tamper then, upload your shell as...

Duhok Forum 1.1 Remote Shell Upload

============================================== Duhok Forum Remot upload Vulnerability ============================================== Exploit Title: Duhok Forum Remot upload Shell Vulnerability Date: 30-11-2010 Author: BrOx-Dz email : [email protected] Software Link: http://www.duhoktimes.com/df/...

Duhok Forum 1.1 - Arbitrary File Upload

============================================== Duhok Forum Remot upload Vulnerability ============================================== Exploit Title: Duhok Forum Remot upload Shell Vulnerability Date: 30-11-2010 Author: BrOx-Dz email : [email protected] Software Link: http://www.duhoktimes.com/df/...

PHP-Quick-Arcade 3.0.21 Cross Site Scripting / SQL Injection

PHP Quick Arcade 3.0.21 Multiple Vulnerabilites ----------------------------------------------------------- Title: PHP-Quick-Arcade 3.0.21 Multiple Vulnerabilites Vendor: http://quickarcade.jcink.com/ ----------------------------------------------------------- AUTHOR: ITSecTeam Email:...

Joomla Component com_caddy - Vulnerability

Vulnerability in Joomla Component comcaddy. Webapps exploit for php platform Exploit Title: Vulnerability in Joomla Component comcaddy Date: 2010-04-22 Author: SuBz3r0 Software Link: Joomla Component: comcaddy Tested on: CVE : if exists Code : Just use for example the firefox addon tamper data...

Magic Uploader Mini - Arbitrary File Upload

======================================================================================== | Title : Magic Uploader Mini Upload Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Web Site : http://dl.p30vel.ir/scripts/miniuploader.zip | Tested on: windo...

Magic Uploader Mini Upload Vulnerability

Exploit for php platform in category web applications ======================================== Magic Uploader Mini Upload Vulnerability ======================================== ======================================================================================== | Title : Magic Uploader Mini...

Mihalism Multi Host V 4.0.0 Upload Vulnerability

Exploit for php platform in category web applications ================================================ Mihalism Multi Host V 4.0.0 Upload Vulnerability ================================================ ======================================================================================== | Title...

Magic Uploader Mini Shell Upload

======================================================================================== | Title : Magic Uploader Mini Upload Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Web Site : http://dl.p30vel.ir/scripts/miniuploader.zip | Tested on: windo...

Free Image and File Hosting Shell Upload

======================================================================================== | Title : Free Image & File Hosting Upload Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Web Site : http://dl.p30vel.ir/scripts/velfileuploaderv1.1.zip | Dor...

Wazzum Dating Software remote shell upload Vulnerability

Exploit for unknown platform in category web applications ======================================================== Wazzum Dating Software remote shell upload Vulnerability ========================================================...

FreeHost 1.00 - Arbitrary File Upload

FreeHost 1.00 - Arbitrary File Upload ======================================================================================== | Title : FreeHost Version 1.00 Upload Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria...

Subdreamer.v3.0.1 cms upload Vulnerability

Exploit for unknown platform in category web applications ========================================== Subdreamer.v3.0.1 cms upload Vulnerability ========================================== ======================================================================================== | Title :...