2104 matches found
eCardMAX 10.5 - Multiple Vulnerabilities
eCardMAX 10.5 - Multiple Vulnerabilities Advisory ID: ZSL-2016-5336 Advisory URL: http://www.zeroscience.mk/en/vulnerabilities/ZSL-2016-5336.php eCardMAX 10.5 SQL Injection and XSS Vulnerabilities Software - eCardMAX 10.5 Vendor - eCardMAX.COM - http://www.ecardmax.com/ Vendor Product Description...
Mediacoder 0.8.43.5830 - '.m3u' Buffer Overflow SEH Exploit
Exploit for windows platform in category local exploits !/usr/bin/python Exploit Title: Mediacoder 0.8.43.5830 - Buffer Overflow SEH Exploit .m3u Date: 25-June-2016 Exploit Author: Sibusiso Sishi Email: sibusiso at IronSky dot co.za Vendor Homepage: http://www.mediacoderhq.com/ Software Link:...
XuezhuLi FileSharing Cross Site Request Forgery
document.forms.csrfpoc.submit; cat /srv/userlists.txt aaaa csrftest --...
Airia Cross Site Request Forgery
document.forms.csrfpoc.submit;...
w2wiki - Multiple Cross-Site Scripting Vulnerabilities
w2wiki - Multiple Cross-Site Scripting Vulnerabilities Exploit Title: w2wiki - Multiple XSSStored/Reflected Date: 2016-06-14 Exploit Author: HaHwul Exploit Author Blog: www.hahwul.com Vendor Homepage: https://github.com/panicsteve/w2wiki , http://groups.google.com/group/w2wiki Software Link:...
Ultrabenosaurus ChatBoard - Persistent Cross-Site Scripting
Exploit Title: Ultrabenosaurus ChatBoard - Stored XSS Date: 2016-06-14 Exploit Author: HaHwul Exploit Author Blog: www.hahwul.com Vendor Homepage: http://ultrabenosaurus.ninja/ Software Link: https://github.com/Ultrabenosaurus/ChatBoard/archive/master.zip Tested on: Debian wheezy Vulnerability...
Ruby pack_pack Use After Free Vulnerability
Talos Vulnerability Report TALOS-2016-0033 Ruby packpack Use After Free Vulnerability June 14, 2016 CVE Number CVE-2016-2338 DESCRIPTION An exploitable User After Free vulnerability exists in the packpack function of Ruby. In packpack function each element of array which should be “pack”, based o...
TCPDump 4.5.1 Crash Proof Of Concept
Exploit Title: tcpdump 4.5.1 Access Violation Crash Date: 31st May 2016 Exploit Author: David Silveiro Vendor Homepage: http://www.tcpdump.org Software Link: http://www.tcpdump.org/release/tcpdump-4.5.1.tar.gz Version: 4.5.1 Tested on: Ubuntu 14 LTS from subprocess import call from shlex import...
SOL35424631 - OpenSSH vulnerability CVE-2016-1907
Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...
7zip UDF CInArchive::ReadFileItem Code Execution Vulnerability
Summary An out of bound read vulnerability exists in the CInArchive::ReadFileItem method functionality of 7zip for handling UDF files that can lead to denial of service or code execution. Tested Versions 7-Zip 32 15.05 beta 7-Zip 64 9.20 Product URLs http://www.7-zip.org/ Details...
ZeewaysCMS - Multiple Vulnerabilities
Exploit for php platform in category web applications ZeewaysCMS Multiple Vulnerabilities Software - ZeewaysCMS Vendor Product Description - ZeewaysCMS is a Content Management System and a complete Web & Mobile Solution developed by Zeeways for Corporates, Individuals or any kind of Business need...
Windows - Primitive Keylogger to File Null Free Shellcode (431 (0x01AF) bytes)
/ ; Exploit Title: All windows null free shellcode - primitave keylogger to file - 431 0x01AF bytes ; Date: Sat Apr 23 18:34:25 GMT 2016 ; Exploit Author: Fugu ; Vendor Homepage: www.microsoft.com ; Version: all afaik ; Tested on: Win7 im guessing it will work on others ; Note: it will write to...
Oracle Application Testing Suite (ATS) 12.4.0.2.0 - Authentication Bypass Arbitrary File Upload
Oracle Application Testing Suite ATS 12.4.0.2.0 - Authentication Bypass Arbitrary File Upload Exploit Title: Oracle Application Testing Suite Authentication Bypass and Arbitrary File Upload Remote Exploit Exploit Author: Zhou Yu Vendor Homepage: http://www.oracle.com/ Software Link:...
ManageEngine Firewall Analyzer Multiple XSS
The ManageEngine Firewall Analyzer running on the remote web server is affected by multiple cross-site scripting XSS vulnerabilities due to improper validation of user-supplied input. A remote attacker can exploit these vulnerabilities to execute arbitrary script code in a user's browser session...
Apple Intel HD 3000 Graphics Driver 10.0.0 - Local Privilege Escalation
Apple Intel HD 3000 Graphics Driver 10.0.0 - Local Privilege Escalation / ░▀█▀░█▀█░█░░░█▀█░█▀▀░░░█░█░█░█░█░░░█▀█░█▀▄░█▀▀░█░█░ ░░█░░█▀█░█░░░█░█░▀▀█░░░▀▄▀░█░█░█░░░█░█░█░█░█▀▀░▀▄▀░ ░░▀░░▀░▀░▀▀▀░▀▀▀░▀▀▀░░░░▀░░▀▀▀░▀▀▀░▀░▀░▀▀░░▀▀▀░░▀░░ T A L O S V U L N D E V Proof-of-Concept Exploit Advisory:...
PHP 5.5.33 - Invalid Memory Write
Exploit for php platform in category dos / poc Exploit Title: Invalid memory write in phar on filename with \0 in name Date: 2016-03-19 Exploit Author: @vah13 Vendor Homepage: https://secure.php.net/ Software Link: https://github.com/php/php-src Version: 5.5.33 Tested on: Linux Test script:...
WordPress Plugin Import CSV 1.0 - Directory Traversal
WordPress Plugin Import CSV 1.0 - Directory Traversal Exploit Title: Wordpress Import CSV | Directory Traversal Exploit Author: Wadeek Website Author: https://github.com/Wad-Deek Software Link: https://downloads.wordpress.org/plugin/xml-and-csv-import-in-article-content.zip Stable Tag: 1.1 Tested...
Cerberus Helpdesk (Cerb5) 5 < 6.7 - Password Hash Disclosure
Exploit for php platform in category web applications !/bin/bash Exploit Title: Cerberus Helpdesk Cerb5 Password Hash Grabbing Date: 04.02.2016 Exploit Author: asdizzle Vendor Homepage: http://www.cerberusweb.com/ Software Link: http://www.cerberusweb.com/downloads/cerb5/archive/cerb5-544.zip...
WordPress Plugin Bulk Delete 5.5.3 - Privilege Escalation
WordPress Plugin Bulk Delete 5.5.3 - Privilege Escalation ''' Exploit Title: WordPress Bulk Delete Plugin Privilege Escalation Discovery Date: 2016-02-10 Exploit Author: Panagiotis Vagenas Author Link: https://twitter.com/panVagenas Vendor Homepage: http://bulkwp.com/ Software Link:...
