WordPress SEO Watcher Remote Code Execution Vulnerability

WordPress SEO Watcher plugin remote code execution exploit. Exploit Title: seo-watcher plugins execute arbitrary PHP code Exploit Google Dork: inurl:/wp-content/plugins/seo-watcher/ inurl:wp-content/plugins/seo-watcher/ Date: 03-10-2013 Exploit Author: wantexz Vendor Homepage:http://wordpress.org...

Hewlett-Packard (HP) 2620 Switch Series. Edit Admin Account - Cross-Site Request Forgery

Hewlett-Packard HP 2620 Switch Series. Edit Admin Account - Cross-Site Request Forgery Exploit Title: Hewlett-Packard 2620 Switch Series. Edit Admin Account - CSRF Vulnerability Date: 26.09.2013r. Exploit Author: Hubert GrÄ…dek PL Software Link: download link if available Tested on: HP-E2620...

VoltEdit CMS SQL Injection Admin Login Bypass & Shell Upload Vulnerability

========================================================================================== VoltEdit CMS SQL Injection Admin Login Bypass & Shell Upload Vulnerability ==========================================================================================...

Wordpress post-gallery Plugin Xss vulnerabilities

The Wordpress post-gallery Plugin suffers from a Cross-Site Scripting vulnerability. Iranian Exploit DataBase Forum http://iedb.ir/acc http://iedb.ir Exploit Title : Wordpress post-gallery Plugin Xss vulnerabilities Author : Iranian Exploit DataBase Discovered By : IeDb Email : [email protected]...

myBusinessAdmin SQL Injection

Exploit Title : myBusinessAdmin imagepopup.php SQL Injection Vulnerability Author : DevilScreaM Date : 22/08/2013 Category : Web Applications Vendor : http://mybusinessadmin.com/ Product Link : http://www.redcow.ca/products/mybusinessadmin/ Dork intext:Powered by myBusinessAdmin & Red Cow...

Cross site scripting

Cross-site scripting XSS vulnerability in the Monster Menus module 7.x-1.x before 7.x-1.12 for Drupal allows remote authenticated users with permissions to add pages to inject arbitrary web script or HTML via a title in the page settings...

CVE-2013-4229

Cross-site scripting XSS vulnerability in the Monster Menus module 7.x-1.x before 7.x-1.12 for Drupal allows remote authenticated users with permissions to add pages to inject arbitrary web script or HTML via a title in the page settings...

VoltEdit CMS SQL Injection / Shell Upload

========================================================================================== VoltEdit CMS SQL Injection Admin Login Bypass & Shell Upload Vulnerability ==========================================================================================...

StarUML WinGraphviz.dll - ActiveX Buffer Overflow Vulnerability

Exploit for windows platform in category dos / poc Exploit Title: StarUML WinGraphviz.dll ActiveX buffer overflow vulnerability Date: 03.8.2013 Exploit Author: d3b4g Vendor Homepage:http://staruml.sourceforge.net/en/ Software Link: http://staruml.sourceforge.net/en/ Tested on: Windows XP SP3 Abou...

Rite CMS 1.0.0 Cross Site Request Forgery / Cross Site Scripting

Exploit Title: RiteCMS multiple vulnerabilities Date: 2013 30 July Exploit Author: Yashar shahinzadeh Credit goes for: ha.cker.ir Vendor Homepage: http://ritecms.com/ Tested on: Linux & Windows, PHP 5.2.9 Affected Version : 1.0.0 Contacts: http://Twitter.com/YShahinzadeh , http://y-shahinzadeh.ir...

Agnitum Outpost Security Suite 8.1 - Local Privilege Escalation

Agnitum Outpost Security Suite 8.1 - Local Privilege Escalation Exploit Title: Agnitum Outpost security suite privilege escalation - 0Day Date: 2013-08-02 Exploit Author: Ahmad Moghimi http://mallocat.com , https://twitter.com/mall0cat Vendor Homepage: http://www.agnitum.com/ Software Link:...

DEBIAN-CVE-2013-4997

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 3.5.x before 3.5.8.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving a JavaScript event in 1 an anchor identifier to setup/index.php or 2 a chartTitle aka chart title value...

CVE-2013-4997

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 3.5.x before 3.5.8.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving a JavaScript event in 1 an anchor identifier to setup/index.php or 2 a chartTitle aka chart title value...

phpVibe 3.1 Disclosure / Remote File Inclusion

Exploit Title: phpVibe 3.1 Multiple Vulnerability Date: 2013-05-07 Author: indoushka Software Link: http://phprevolution.com/ Category: webapps/php Version: 3.1 Price: 40€ Google dork: "Powered by phpVibe v3.1" installation Application error message :...

MediaCoder PMP Edition 0.8.17 Buffer Overflow

print """ +Exploit Title: MediaCoder PMP Edition 0.8.17 Buffer Overflow Exploit SEH +Download link: http://www.mediacoderhq.com/device/mpx.htm +Vulnerable Product: MediaCoder Personal Media Player Edition +Date found: 21.06.2013 +Date publish: 21.06.2013 +Founder: metacom +RST +Tested on: Windows...

imacs CMS 0.3.0 Shell Upload

?php / ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team .. +---------------------------^----------| ,-------, | / XXXXXX /| / / XXXXXX / \ / / XXXXXX /\ / XXXXXX / / XXXXXX / ------' Exploit Title : imacs CMS Unrestricted File Upload Exploit Date...

CVE-2012-6555

Cross-site scripting XSS vulnerability in the LatestComment plugin 1.1 for Vanilla Forums allows remote attackers to inject arbitrary web script or HTML via the discussion title...

CVE-2012-6555

Cross-site scripting XSS vulnerability in the LatestComment plugin 1.1 for Vanilla Forums allows remote attackers to inject arbitrary web script or HTML via the discussion title...

nginx 1.3.9-1.4.0 DoS PoC

Exploit for linux platform in category dos / poc Exploit Title: nginx v1.3.9-1.4.0 DOS POC CVE-2013-2070 Google Dork: CVE-2013-2070 Date: 16.05.2013 Exploit Author: Mert SARICA - mert . sarica @ gmail . com - http://www.mertsarica.com Vendor Homepage: http://nginx.org/ Software Link:...

Lan Messenger - sending PM 'UNICODE' Overwrite Buffer Overflow (SEH)

Exploit Title: Lan Messenger Version 1.2 Buffer Overflow vulnerability - UNICODEPOC Date: 09-05-2013 Exploit Author: ariarat Vendor Homepage: http://lmadhavan.com Software Link: http://lmadhavan.com/software/archive/lanmsg12.zip Version: 1.2 & may be old versions! Tested on: Windows 7 & windows X...