WordPress Plugin Ajax Store Locator 1.2 - SQL Injection

WordPress Plugin Ajax Store Locator 1.2 - SQL Injection Exploit Title : Wordpress Ajax Store Locator = 5.0.12 AND time-based blind SELECT' injectable for the remaining tests, do you want to include all tests for 'MySQ...

WebGate eDVR Manager 2.6.4 - AudioOnlySiteChannel Stack Buffer Overflow

WebGate eDVR Manager 2.6.4 - AudioOnlySiteChannel Stack Buffer Overflow var arg1 = ""; var arg2 = 1; var arg3 = 1; var nops = ""; var shellcode = ""; var buff2 = ""; for i=0; i128; i++ arg1 += "B"; var nseh = "\xeb\x10PD"; var seh = "\xa0\xf2\x07\x10"; for i=0;i80; i++ nops += "\x90"; shellcode =...

WordPress Plugin aspose-doc-exporter 1.0 - Arbitrary File Download

WordPress Plugin aspose-doc-exporter 1.0 - Arbitrary File Download |||||||||||||||||||||||||||||||||||||||||||||||||| |-------------------------------------------------------------------------| | + Exploit Title:Wordpress aspose-doc-exporter Plugin Arbitrary File Download Vulnerability | | +...

WebGate Control Center 4.8.7 - GetThumbnail Stack Overflow

WebGate Control Center 4.8.7 - GetThumbnail Stack Overflow var buff1 = ""; var arg2=1; var arg3=1; var arg4=1; var nops = ""; var buff2 = ""; for i=0;i24; i++ buff1 += "B"; // jump over seh to shellcode nseh = "\xeb\x08PD"; // pop pop ret var seh = "\xa0\xf2\x07\x10"; for i=0;i80; i++ nops +=...

WebGate WinRDS 2.0.8 - StopSiteAllChannel Stack Overflow

WebGate WinRDS 2.0.8 - StopSiteAllChannel Stack Overflow WebGate WinRDS WESPPlayback.WESPPlaybackCtrl.1 StopSiteAllChannel Stack Buffer Overflow Vulnerability 0Day var buff1 = ""; var nops = ""; var buff2 = ""; for i=0;i128; i++ buff1 += "B"; nseh = "\xeb\x08PD"; //pop pop ret = 1007f2a0 0x1007f2...

HostingTakip 3.0 Cross Site Scripting

HostingTakip v3.0 - Stored XSS Vulnerability My + Discovered by: KnocKout Contact : [email protected] HomePage : http://h4x0resec.blogspot.com Love to UnDeRTaKeR & BARCOD3 & Septemb0x & ZoRLu milw00rm.com Software info |Web App. : HostingTakip |Affected Version : v3.0 |Software :...

phpBugTracker 1.6.0 - Multiple Vulnerabilities

Advisory: Multiple SQLi, stored/reflecting XSS- and CSRF-vulnerabilities in phpBugTracker v.1.6.0 Advisory ID: SROEADV-2015-16 Author: Steffen Rösemann Affected Software: phpBugTracker v.1.6.0 Vendor URL: https://github.com/a-v-k/phpBugTracker Vendor Status: patched CVE-ID: will asked to be...

phpBugTracker 1.6.0 - Multiple Vulnerabilities

phpBugTracker 1.6.0 - Multiple Vulnerabilities Advisory: Multiple SQLi, stored/reflecting XSS- and CSRF-vulnerabilities in phpBugTracker v.1.6.0 Advisory ID: SROEADV-2015-16 Author: Steffen Rösemann Affected Software: phpBugTracker v.1.6.0 Vendor URL: https://github.com/a-v-k/phpBugTracker Vendor...

D-Link DCS-931L File Upload

This module exploits a file upload vulnerability in D-Link DCS-931L network cameras. The setFileUpload functionality allows authenticated users to upload files to anywhere on the file system, allowing system files to be overwritten, resulting in execution of arbitrary commands. This module has be...

Netgear Unauthenticated SOAP Password Extractor

This module exploits an authentication bypass vulnerability in different Netgear devices. It allows to extract the password for the remote management interface. This module has been tested on a Netgear WNDR3700v4 - V1.0.1.42, but other devices are reported as vulnerable: NetGear WNDR3700v4 -...

ElasticSearch Search Groovy Sandbox Bypass

This module exploits a remote command execution RCE vulnerability in ElasticSearch, exploitable by default on ElasticSearch prior to 1.4.3. The bug is found in the REST API, which does not require authentication, where the search function allows groovy code execution and its sandbox can be bypass...

MooPlayer 1.3.0 - 'm3u' Buffer Overflow (SEH) (PoC)

!/usr/bin/env python Exploit Title: MooPlayer 1.3.0 'm3u' SEH Buffer Overflow POC Date Discovered: 09-02-2015 Exploit Author: Samandeep Singh SaMaN - @samanL33T Vulnerable Software: Moo player 1.3.0 Software Link: https://mooplayer.jaleco.com/ Vendor site: https://mooplayer.jaleco.com/ Version:...

Iconium Nexus Theme - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title:Iconium Nexus Theme - SQL İnjection vulnerability Google Dork: intext:Powered by İconium Mühendislik Date: 03.02.2015 Exploit Author: Herdem Vendor Homepage: http://iconiummuhendislik.com Version: All Versions Tested on: Windows ...

Sefrengo CMS 1.6.1 - Multiple SQL Injection Vulnerabilities

Sefrengo CMS version 1.6.1 suffers from multiple remote SQL injection vulnerabilities. Exploit Title: Sefrengo CMS v1.6.1 - Multiple SQL Injection Vulnerabilities Google Dork: N/A Date: 01/26/2015 Exploit Author: Nguyen Hung Tuan email protected & ITAS Team www.itas.vn Vendor Homepage:...

SWFupload 2.5.0 - Cross Frame Scripting (XFS)

SWFupload 2.5.0 - Cross Frame Scripting XFS Exploit Title: SWFupload All Version XSF Vulnerability Date: 25/01/2014 Exploit Author: MindCracker - Team MaDLeeTs Contact : [email protected] - [email protected] | https://twitter.com/MindCrackerKhan Verion : All Tested on: Linux / Window...

WordPress RedSteel Theme File Disclosure

|||||||||||||||||||||||||||||||||||||||||||||||||| |-------------------------------------------------------------------------| | Exploit Title: Wordpress RedSteel Theme Arbitrary File Download Vulnerability | | Google Dork: inurl:wp-content/themes/RedSteel | | Date : Date: 2015-01-25 | | Exploit...

PHP Webquest 2.6 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: sql injection Google Dork: inurl:webquest/soportehorizontalw.php?idactividad= Date: 24/01/2015 Exploit Author: jord4nroo7 email protected Vendor Homepage: http://phpwebquest.org Software Link: http://phpwebquest.org/?pageid=14...

PHP Webquest 2.6 - SQL Injection

Exploit Title: sql injection Google Dork: inurl:webquest/soportehorizontalw.php?idactividad= Date: 24/01/2015 Exploit Author: jord4nroo7 [email protected] Vendor Homepage: http://phpwebquest.org Software Link: http://phpwebquest.org/?pageid=14 Version: phpwebquest-2.6 Tested on: windows 8.1 Exploit:...

win64/7 Obfuscated Shellcode Download And Execute [Dynamic Lenth]

Title: Obfuscated Shellcode Windows x64 Download And Execute Use PowerShell - Generator length: Dynamic ! depend on url and filename Date: 20 January 2015 Author: Ali Razmjoo tested On: Windows 7 x64 ultimate WinExec = 0x769e2c91 ExitProcess = 0x769679f8 ==================================== Execu...

Congstar Internet Manager - Local Buffer Overflow (SEH)

Congstar Internet Manager - Local Buffer Overflow SEH !/usr/bin/python Exploit Title:Congstar Internet-Manager SEH Buffer Overflow Software for usb Wireless:Congstar Prepaid Internet-Stick MF100 Homepage:www.congstar.de/downloads/prepaid-internet-stick/ Software...