WordPress Wow Forms 2.1 Plugin - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Wow Forms v2.1 WordPress Plugin SQL Injection Date: 29/03/2017 Exploit Author: TAD GROUP Vendor Homepage: http://wow-company.com/ Software Link: https://wordpress.org/plugins/mwp-forms/ Version: 2.1 Contact: email protected...

tandridge-today.co.uk XSS vulnerability

Vulnerable URL: http://www.tandridge-today.co.uk/search.cfm?sectionIs=search=LocalNews=2011="= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 9384735 VIP website status:| No...

aberaeron-today.co.uk XSS vulnerability

Vulnerable URL: http://www.aberaeron-today.co.uk/search.cfm?sectionIs=search=LocalNews=2011="= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7232259 VIP website status:| No...

lingfield-today.co.uk XSS vulnerability

Vulnerable URL: http://www.lingfield-today.co.uk/search.cfm?sectionIs=search=LocalNews=2011="--!"= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP websi...

enfield-today.co.uk XSS vulnerability

Vulnerable URL: http://www.enfield-today.co.uk/search.cfm?sectionIs=search=Energy=2013="--!"=KNOXSS Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1325325 VIP website status:| No...

SpiceWorks 7.5 TFTP - Remote File Overwrite / Upload Vulnerability

Exploit for windows platform in category remote exploits + Credits: John Page AKA HYP3RLINX Vendor: ================== www.spiceworks.com Product: ================= Spiceworks - 7.5 Provides network inventory and monitoring of all the devices on the network by discovering IP-addressable devices. ...

JOB TODAY – jobs in 24hrs - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application JOB TODAY – jobs in 24hrs published at the 'play' market has multiple vulnerabilities...

Adobe Flash - Metadata Parsing Out-of-Bounds Read Exploit

Exploit for multiple platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1005 The attached file causes an out-of-bounds read when its metadata is parsed Proof of Concept:...

WordPress Apptha Slider Gallery 1.0 Plugin - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress Plugin Apptha Slider Gallery v1.0 - SQL Injection Google Dork: N/A Date: 09.03.2017 Vendor Homepage: https://www.apptha.com/ Software: https://www.apptha.com/category/extension/Wordpress/apptha-slider-gallery Demo:...

Laravel 5.4 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Laravel non-presistent XSS in validation of arrays Date: 06/03/2017 Exploit Author: MaHDyfo mahdyfofthe at signgmail.com Vendor Homepage: laravel.com Version: 5.4 In Laravel validation rules, assume that you set a rule to get an...

Joomla JomSocial Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component JomSocial - SQL Injection Google Dork: N/A Date: 25.02.2017 Vendor Homepage: https://www.cmsplugin.com/ Software : http://extensions.cmsplugin.com/extensions/j3demo/jomsocial Demo:...

Linux Kernel 4.4.0 (Ubuntu) - DCCP Double-Free PoC Exploit

Exploit for linux platform in category dos / poc // // EDB Note: More information http://seclists.org/oss-sec/2017/q1/471 // // A trigger for CVE-2017-6074, crashes kernel. // Tested on 4.4.0-62-generic 83-Ubuntu kernel. // https://github.com/xairy/kernel-exploits/tree/master/CVE-2017-6074 // //...

Joomla JE QuoteForm SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component JE QuoteForm - SQL Injection Google Dork: inurl:index.php?option=comjequoteform Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy:...

Microsoft Edge - TypedArray.sort Use-After-Free (MS16-145) Exploit

Exploit for windows platform in category dos / poc !-- Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=983 There is a use-after-free in TypedArray.sort. In TypedArrayCompareElementsHelper...

Joomla com_joominaflileselling 2.2 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title : Joomla comjoominaflileselling 2.2 SQL injection Vulnerability Exploit Author : xBADGIRL21 Dork : inurl:index.php?option=comjoominaflileselling Vendor Homepage : http://www.joomina.ir by amirrezatehrani Link :...

Posnic 1.03 Unauthorized Password Recovery Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------- + Posnic 1.03 forgetpass.php Unauthorized Password Recovery ------------------------------------------------------------------------ Discovered by Juri Gianni -...

My Photo Gallery 1.0 SQL Injection / Unauthorized Login Vulnerabilities

Exploit for php platform in category web applications ------------------------------------------------------------------------- + My Photo Gallery 1.0 SQL Injection / Unauthorized Login ------------------------------------------------------------------------ Discovered by Juri Gianni - Turin,Ital...

Google Chrome - HTMLKeygenElement::shadowSelect() Type Confusion Exploit

Exploit for multiple platform in category dos / poc var range = document.caretRangeFromPoint50, 50; var shadowtreecontainer = range.commonAncestorContainer; shadowtreecontainer.prepend"foo"; keygenelement.disabled = true; 0day.today 2018-03-09...

WordPress Google Forms Plugin unauthenticated PHP Object injection vulnerability

Exploit for php platform in category web applications Abstract A PHP Object injection vulnerability was found in the Google Forms WordPress Plugin, which can be used by an unauthenticated user to instantiate arbitrary PHP Objects. Using this vulnerability it is possible to execute arbitrary PHP...

WD My Cloud Mirror 2.11.153 RCE and Authentication Bypass Vulnerabilities

Exploit for hardware platform in category web applications Exploit Title: WD My Cloud Mirror 2.11.153 RCE and Authentication Bypass Date: 24.01.2017 Software Link: https://www.wdc.com Exploit Author: Kacper Szurek Contact: https://twitter.com/KacperSzurek Website: https://security.szurek.pl/...