ZineBasic 1.1 - Arbitrary File Disclosure Exploit

Exploit for php platform in category web applications Title: ZineBasic 1.1 Remote File Disclosure Exploit Author: bd0rk || East Germany former GDR Tested on: Ubuntu-Linux Vendor: http://w2scripts.com/news-publishing/ Download:...

ZineBasic 1.1 Remote File Disclosure

Title: ZineBasic 1.1 Remote File Disclosure Exploit Author: bd0rk || East Germany former GDR Tested on: Ubuntu-Linux Vendor: http://w2scripts.com/news-publishing/ Download:...

CactuShop 7 Database Disclosure

======================================================================== | Title : CactuShop v7 Database Disclosure Exploit | Author : indoushka | email : [email protected] | Tested on : windows 8.1 FranASSais V.Pro | Version : v7 | Vendor : http://www.venshop.com/down/venshop2010.rar...

Investors Application - Client Side Cross Site Vulnerability

Document Title: =============== Investors Application - Client Side Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1540 Facebook Security ID: 246414938 Release Date: ============= 2016-02-12 Vulnerability Laboratory ID VL-ID:...

趋势科技杀毒软件任意命令执行漏洞

当用户安装Windows版的趋势科技杀软，默认安装的组件包括了一个密码管理器，安装后会自动启动，密码管理器用JavaScript开发，内置监听localhost的node.js HTTP服务器，会打开多个HTTP RPC端口处理API 请求， 它存在一个任意命令执行漏洞，也就是任何网站都可以在安装趋势科技的电脑上执行命令。 比如运行计算器（https://localhost:49155/api/openUrlInDefaultBrowser?url=c:/windows/system32/calc.exe）。 漏洞发现者说，趋势的软件会关闭 Chromium 41 的沙盒，然后侮辱性的在...

Ovidentia Widgets 1.0.61 - Remote Command Execution

Ovidentia Widgets 1.0.61 - Remote Command Execution Title: Ovidentia Widgets 1.0.61 Remote Command Execution Exploit Author: bd0rk eMail: bd0rkathackermail.com Twitter: twitter.com/bd0rk Tested on: Ubuntu-Linux Download:...

Ovidentia Widgets 1.0.61 - Remote Command Execution

Title: Ovidentia Widgets 1.0.61 Remote Command Execution Exploit Author: bd0rk eMail: bd0rkathackermail.com Twitter: twitter.com/bd0rk Tested on: Ubuntu-Linux Download:...

Ovidentia NewsLetter Module 2.2 - 'admin.php' Remote File Inclusion

Title: Ovidentia Module newsletter 2.2 admin.php Remote File Inclusion Exploit Author: bd0rk eMail: bd0rkathackermail.com Twitter: twitter.com/bd0rk Tested on: Ubuntu-Linux Download:...

vBulletin 5.x - Remote Code Execution

Title: Vbulletin 5.x - Remote Code Execution Exploit + Product: vbulletin + Vendor: http://vbulletin.com + Vulnerable Versions: Vbulletin 5.x Author : Mohammad Reza Espargham Linkedin : https://ir.linkedin.com/in/rezasp E-Mail : meatrezadotes , reza.esparghamatgmaildotcom Website : www.reza.es...

vBulletin 5.x - Remote Code Execution Exploit

Exploit for php platform in category web applications + Title: Vbulletin 5.x - Remote Code Execution Exploit + Product: vbulletin + Vendor: http://vbulletin.com + Vulnerable Versions: Vbulletin 5.x Author : Mohammad Reza Espargham Linkedin : https://ir.linkedin.com/in/rezasp E-Mail : meatrezadote...

vBulletin 5.x Remote Code Execution

Title: Vbulletin 5.x - Remote Code Execution Exploit + Product: vbulletin + Vendor: http://vbulletin.com + Vulnerable Versions: Vbulletin 5.x Author : Mohammad Reza Espargham Linkedin : https://ir.linkedin.com/in/rezasp E-Mail : meatrezadotes , reza.esparghamatgmaildotcom Website : www.reza.es...

IntelBras WRN 340 Unauthenticated Remote DNS Changer

!/usr/bin/perl IntelBras WRN 340 ADSL Modem-Router - Unauthenticated Remote DNS Change Exploit Discovered by: Gabriel P. Lipski - gpDOTlipskiATgmailDOTcom Brazil, sept. 2015. AVISO: Este codigo foi feito apenas para fins educacionais. NAO USE SEM A PERMISSAO DO DONO DA REDE-ALVO. Use por sua cont...

Empire: a PowerShell post-exploitation Agent tools-vulnerability warning-the black bar safety net

Empire is a purely PowerShell post-exploitation Agent tools, it is built on cryptography, secure communications and flexible architecture. Empire realize the need to powershell. exe you can run a PowerShell proxy function. Rapid deployment post-exploit module, from the keyboard recorder to...

Image Transfer IOS - Remote Crash Proof Of Concept Exploit

Exploit for iOS platform in category dos / poc !/usr/bin/perl -w Title : Image Transfer IOS - Remote Crash Proof Of Concept Affected Versions: All Version Tested on IOS 8.4 12h143 / 2.0 Itunes link : https://itunes.apple.com/us/app/image-transfer-photo-video/id588696602?mt=8 EDB note: Might requi...

Image Transfer IOS - Remote Crash (PoC)

!/usr/bin/perl -w Title : Image Transfer IOS - Remote Crash Proof Of Concept Affected Versions: All Version Tested on IOS 8.4 12h143 / 2.0 Itunes link : https://itunes.apple.com/us/app/image-transfer-photo-video/id588696602?mt=8 EDB note: Might require to be run multiple times to cause DoS Author...

Wordpress S3Bubble Cloud Video With Adverts & Analytics 0.7 - Arbitrary File Download Vulnerabil

Exploit for php platform in category web applications Exploit Title: Wordpress S3Bubble Cloud Video With Adverts & Analytics - Arbitrary File Download Google Dork: inurl:/plugins/s3bubble-amazon-s3-html-5-video-with-adverts/ Date: 04/07/2015 Exploit Author: CrashBandicot @DosPerl Vendor Homepage:...

GWC CMS 1.0 SQL Injection

Exploit Title: GWC CMS SQL Injection Vulnerability Exploit Author: nopesled Google Dork: "inurl:?langid=1 inurl:topmenuid=" Date: 08/07/2015 Version: 1.0 Tested on: Linux !/usr/bin/perl use LWP::UserAgent; use HTTP::Request::Common qwGET; print " == Exploit by nopesled == \n"; if @ARGV new;...

WordPress S3Bubble Cloud Video With Adverts / Analytics Arbitrary File Download

Exploit Title: Wordpress S3Bubble Cloud Video With Adverts & Analytics - Arbitrary File Download Google Dork: inurl:/plugins/s3bubble-amazon-s3-html-5-video-with-adverts/ Date: 04/07/2015 Exploit Author: CrashBandicot @DosPerl Vendor Homepage: https://s3bubble.com Software Link:...

Apexis IP CAM - Information Disclosure

Exploit Title: Apexis IP CAM - Full Info Disclosure Google Dork: inurl:"getstatus.cgi"cgi-bin/ Date: 01/06/2015 Exploit Author: Sunplace Solutions - Soluciones Informáticas - RE Remoteexecution.net Vendor Homepage: http://www.apexis.com.cn/ Tested on: Linux Models Afected : APM-H602-MPC...

CmyDocument CMS Database Disclosure

!/usr/bin/perl -w CmyDocument Content Management Database Disclosure Exploit Author : indoushka Vondor : http://sourceforge.net/projects/cmydocument/ use LWP::Simple; use LWP::UserAgent; system'cls'; system'CmyDocument Content Management Database Disclosure Exploit'; system'color a'; if@ARGV new;...