WordPress Amoveo Themes Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications . . . \ \ | / \ \ \ | || / \ / / \ / |/ \ / | / \ / / /| | |/ \ \ \ // \ / / | \ /\ / | \ \ \ / \ //\ |\ | /\ // | /|\ / / / / / / / Exploit Title: WordPress Amoveo Themes Arbitrary File Upload Vulnerability Author: Byakuya...

WordPress GeoPlaces 4.x Shell Upload

Title : Wordpress GeoPlaces 4.x Themes Shell Upload Vulnerabillity Author : DevilScreaM Date : 10/24/2013 Category : Web Applications Type : PHP Version : 4.x Greetz : 0day-id.com | newbie-security.or.id | Borneo Security | Indonesian Security Indonesian Hacker | Indonesian Exploiter | Indonesian...

SMB File Delete Utility

This module deletes a file from a target share and path. The usual reason to use this module is to work around limitations in an existing SMB client that may not be able to take advantage of pass-the-hash style authentication. This module requires Metasploit: https://metasploit.com/download Curre...

HP Intelligent Management Center BIMS bimsDownload Information Disclosure (CVE-2013-4823)

An information disclosure vulnerability has been reported in the BIMS add-in module of HP Intelligent Management Center.The vulnerability is due to lack of authentication and insufficient input validation in the bimsDownload servlet when processing HTTP request parameters. Remote attackers can...

WordPress Finalist Cross Site Scripting

Exploit Title : Wordpress finalist Plugin Cross site scripting Exploit Author : Ashiyane Digital Security Team Google Dork : inurl:wp-content/plugins/finalist Software Link : www.wordpress.org Tested on: Windows , Linux Date: 2013/10/14 Exploit : Cross site scripting Location1:...

Apache Struts XWork Error Page Multiple Cross-Site Scripting (CVE-2011-1772)

A Cross-Site Scripting vulnerability has been reported in Apache Struts. The vulnerabilities are due to unsanitized parameters in various automatically generated error pages. A remote attacker can exploit these vulnerabilities by enticing a victim to follow a specially crafted link. Successful...

WordPress Woopra plugin remote PHP arbitrary code execution exploit.

No description provided by source. Exploit Title: woopra plugins execute arbitrary PHP code Exploit Google Dork: inurl:/plugins/woopra/inc/php-ofc-library , inurl:wp-content/plugins/woopra/inc/ Date: 06-10-2013 Exploit Author: wantexz Vendor Homepage:wordpress.org/plugins/woopra/ Software Link:...

Foreman Red Hat OpenStack bookmarks Code Injection (CVE-2013-2121)

A remote code execution vulnerability has been reported in ForemanRed Hat OpenStack. The vulnerability is due to improper sanitization of certain parameters. A remote attacker can exploit this issue by sending a specially crafted packet to the target server. Successful exploitation would allow an...

kernel: iscsi-target: heap buffer overflow on large key error

Heap-based buffer overflow in the iscsiaddnotunderstoodresponse function in drivers/target/iscsi/iscsitargetparameters.c in the iSCSI target subsystem in the Linux kernel through 3.9.4 allows remote attackers to cause a denial of service memory corruption and OOPS or possibly execute arbitrary co...

Target Longlife Media Player 2.0.2.0 - '.wav' Crash (PoC)

Exploit Title : Target Longlife Media Player Version 2.0.2.0 - .wav - Crash POC Date : 11-09-2013 Exploit Author : gunslinger - http://www.cr0security.com Software Link : http://download.cnet.com/Target-Longlife-Media-Player/3000-21394-10417975.html Version : 2.0.2.0 Probably old version of...

Interalp Touristik SQL Injection

Exploit Title : Interalp Touristik Sql injection Vulnerabilites Exploit Author : Ashiyane Digital Security Team Software Link : http://interalp-touristik.com Tested on: Windows 7 , Linux Google Dork : intext:"powered by Interalp Touristik" Date: 2013/09/10...

CIS Manager SQL Injection

Exploit Title : CIS Manager SQL Injection Vulnerabilites Exploit Author : Ashiyane Digital Security Team Software Link : http://www.construtiva.com.br Tested on: Windows 7 , Linux Google Dork : intext:"Powered by CIS Manager" Date: 2013/09/10...

Target Longlife Media Player 2.0.2.0 Crash Proof Of Concept

Exploit Title : Target Longlife Media Player Version 2.0.2.0 - .wav - Crash POC Date : 11-09-2013 Exploit Author : gunslinger - http://www.cr0security.com Software Link : http://download.cnet.com/Target-Longlife-Media-Player/3000-21394-10417975.html Version : 2.0.2.0 Probably old version of...

Infoideias Cross Site Scripting / SQL Injection

Exploit Title : Infoideias Multiple Vulnerabilites Exploit Author : Ashiyane Digital Security Team Software Link : http://www.infoideias.com.br Tested on: Windows 7 , Linux Google Dork : intext:"Powered by Infoideias" Date: 2013/09/10...

Microsoft Windows SMB Response Handling Buffer Overflow (CVE-2005-0045)

A remote code execution vulnerability has been reported in the Microsoft Windows Server Message Block SMB client component. A remote attacker can exploit this vulnerability by sending a specially crafted message to an affected system. Successful exploitation would allow an attacker to take comple...

CommonMan SQL Injection

Exploit Title : CommonMan Sql injection Vulnerabilites Software link : http://www.cmiti.com Exploit Author : Ashiyane Digital Security Team Tested on: Windows 7 , Linux Google Dork : intext:"Site Powered by CommonMan Technologies" Date: 2013/09/07...

dBlog CMS SQL Injection

Exploit Title : dBlog CMS Sql injection vulnerability + Software link : www.dblog.it + Exploit Author : Ashiyane Digital Security Team + Tested on: Windows 7 , Linux + Google Dork : intext:"powered by dBlog CMS" + Date: 2013/09/01...

Flo CMS SQL Injection

Exploit Title : Flo cms Sql injection vulnerability + Software link : http://www.flocms.ie + Designer link : http://www.flowebdesign.ie + Exploit Author : Ashiyane Digital Security Team + Tested on: Windows 7 , Linux + Google Dork : intext:"Design by Flo Web Design & powered by Flo CMS" + Date:...

PK-CMS SQL Injection

Exploit Title : PK-CMS Sql injection vulnerability + Software link : www.passoft-webdev.nl + Exploit Author : Ashiyane Digital Security Team + Tested on: Windows 7 , Linux + Google Dork : intext:"Powered by PK-CMS" + Date: 2013/09/01...

Researchers Reverse Engineer Dropbox

Researchers have cracked open cloud storage service Dropbox, reverse engineering the encryption protecting the client in order to open it up to further security analysis. The engineers, Dhiru Kholia of Openwall and Przemyslaw Wegrzyn of CodePainters, also managed to demonstrate how to use...