Russia Today (RT) Hacked, "Russian" replaced with "Nazi" in News Headlines

'Russia Today', Moscow based Russia's biggest news channel website RT.com has been hacked and defaced by an unknown group of hackers. Hackers have replaced “Russia” or “Russians” with “Nazi” or “Nazis” word from the headlines, as shown. "RT website has been hacked, we are working to resolve the...

Java 7 Update 11 vulnerability to download and execute

Java 7 Update 11 vulnerability to download and execute. With this applet you can boot from a remote host and execute the file, bypassing pisochnitsy java, also affected and older. Usage Info All material is provided with source code, and you will be able to easily assemble ready exploit replacing...

phpMyBackupPro-2.4 Cross-Site Scripting vulnerability

phpMyBackupPro-2.4 Xss vulnerability phpmybackuppro Cross-Site Scripting vulnerability @@@ @@@@@@@@@@@ @@@@@ @@@@@@@@@@ @@@ @@@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@@@@@@@@@ @@@ @ @@@@@@@@@@ @@@ @@@@@@ @@@...

NCH Software Inventoria 3.45 Cross Site Scripting Vulnerability

NCH Software Inventoria version 3.45 suffers from a cross site scripting vulnerability. NCH Software Inventoria 3.45 id param Reflected Cross-Site Scripting Vulnerability Vendor: NCH Software Product web page: http://www.nchsoftware.com Affected version: 3.45 Summary: Inventoria is a business...

EasyFTP Server Remote Exploit

Exploit for multiple platform in category remote exploits This is private exploit. You can buy it at https://0day.today...

Wordpress Persuasion Theme - Arbitrary File Download and File Deletion Exploit

Exploit for php platform in category web applications Exploit Title: Persuasion Wordpress Theme - Arbitrary File Download and File Deletion Exploit Date: 19 December 2013 Exploit Author: Interference Security Vendor Homepage: http://mysitemyway.com/ Software Link:...

PotPlayer 1.5.42509 Beta - DOS (Integer Division by Zero Exploit)

Exploit for windows platform in category local exploits !/usr/bin/python rawinput"Hit Enter to create a malicious file" f = open"victim.wav","w" header="\x2E\x73\x6E\x64\x00\x00\x01\x18\x00\x00\x42\xDC\x00\x00\x00\x01" "\x00\x00\x1F\x40\x00\x00\x00\x00\x69\x61\x70\x65\x74\x75\x73\x2E"...

Wordpress page-flip-image-gallery plugins Remote File Upload

Exploit for php platform in category web applications Exploit Title: Wordpress page-flip-image-gallery plugins Remote File Upload Vulnerability Author: Ashiyane Digital Security Team Date: 12/06/2013 Vendor Homepage: http://pageflipgallery.com Software Link :...

Elastix Voip system 2.x , Php code injection / Data dump Exploit

Elastix is famous asterisk voip system interface dist. it's vulnerable to php code injection vuln , which can be used to dump all data including - SIP Extention Data - Plain text admin password - Moderators passwords - All trunks data - shell upload Usage Info just add the ip list to "list.txt"...

TomatoCart 1.1.8.2 LFI / Directory Traversal Vulnerabilities

TomatoCart version 1.1.8.2 suffers from local file inclusion and directory traversal vulnerabilities. Exploit Title: TomatoCart 1.1.8.2 - LFI / Directory Traversal Vulnerability Product: TomatoCart Official site: http://www.tomatocart.com/ Demo : http://demo.tomatocart.com/ Risk Level: High Explo...

WordPress bordeaux-theme Themes Remote File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress bordeaux-theme Themes Remote File Upload Vulnerability Author: iskorpitx Date: 12/11/2013 Vendor Homepage: http://www.orange-themes.com/ Themes Link: http://www.orange-themes.com/portfolio/bordeaux/ Infected File:...

WordPress Army Knife CSRF File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress Army Knife CSRF File Upload Vulnerability Author: Bebyyers404 Date: 11/09/2013 Vendor Homepage: http://freelancewp.co Themes Link: http://freelancewp.com/wordpress-theme/army-knife/ Infected File: upload-handler.php...

Linksys WRT110 Remote Command Execution Vulnerability

Exploit for hardware platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core...

ClipBucket 2.6 Multi Exploits(Arbitrary File Uploader and XSS)

Exploit for php platform in category web applications This is private exploit. You can buy it at https://0day.today...

FlashChat File Upload Vulnerability

Exploit Title: FlashChat File Upload Vulnerability Google Dork: intitle:FlashChat v6.0.8 Date: 02.10.2013 Exploit Author: x-hayben21 Vendor Homepage: www.punish3r.com Software Link: http://www.tufat.com/script2.htm Version: v6.0.8, v6.0.2, v6.0.4, v6.0.5, v6.0.6, v6.0.7, Tested on: Windows, PHP 5...

Facebook Account Reset Hijack Trick

Title : Hack Any Facebook Account Without User Name And Password + Discovered By : Prince Cyber-Boss + Site : Cyber-Boss.Net | blog.Cyber-Boss.Net + Facebook Page : http://fb.com/cyberboss.net + Geetz : YasH , Code Injector, Arafat, Kunal :p With A Bit Social Eng. And A Smart Hack You Can Access...

KingView 6.53 - Insecure ActiveX Control (SuperGrid)

Exploit for windows platform in category local exploits KingView Insecure ActiveX Control Proof of Concept - SuperGrid.ocx This proof of concept will copy any arbritrary file from one location to a second location. A malicious user may be able to use this to copy a file from an attacker controlle...

VoltEdit CMS SQL Injection / Shell Upload Vulnerabilities

VoltEdit CMS suffers from administrative login bypass due to remote SQL injection and allows for PHP shells to be uploaded. Note that this finding houses site-specific data. ========================================================================================== VoltEdit CMS SQL Injection Admin...

WordPress Trafficanalyzer Plugin XSS Vulnerability

WordPress Trafficanalyzer Plugin is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the...

Omnistar Affiliate Software - XSS Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...