SonicWALL GMS/VIEWPOINT 6.x Analyzer 7.x - Remote Command Execution

!/usr/bin/perl Title: SonicWALL GMS/VIEWPOINT 6.x Analyzer 7.x Remote Root/SYSTEM exploit Name: sgmsRCE.pl Author: Nikolas Sotiriu lofi Use it only for education or ethical pentesting! The author accepts no liability for damage caused by this tool. use strict; use HTTP::Request::Common qwPOST; us...

XML-RPC PingBack API Remote DoS Exploit (through xmlrpc.php)

Exploit for php platform in category dos / poc Exploit Title: XML-RPC PingBack API Remote Denial of Service exploit through xmlrpc.php Date: 04/01/2013 Category: Remote Exploit Author: D35m0nd142 Tested on: Debian Linux !/usr/bin/perl use LWP::UserAgent; use HTTP::Request::Common; use...

WordPress - PICA Photo Gallery Automatic SQL Injection (perl)

Exploit for php platform in category web applications Exploit title: WordPress - PICA Photo Gallery Automatic SQL Injection perl Author: D35m0nd142 Software Link: http://www.apptha.com/category/extension/Wordpress/PICA-Photo-Gallery Google Dork: intext:"Powered by Apptha." inurl:gallery Thanks to...

Baar3 Database Disclosure Exploit

Exploit for php platform in category web applications !/usr/bin/perl 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS,...

Joomla! Component com_kunena - 'search' SQL Injection

!/usr/bin/perl Exploit title: Joomla Component comkunena SQL Injection exploit Google Dork: inurl:index.php?option=comkunena& Exploit Author: D35m0nd142 Screenshot : http://imageshack.us/f/155/comkunena2.png/ Vendor HomePage: http://www.joomla.org/ Special thanks to Taurusomar system"clear"; prin...

Joomla! Component com_commedia - 'task' SQL Injection

Exploit Title: Joomla commedia Remote Exploit dork: inurl:index.php?option=comcommedia Date: 18-10-2012 Author: Daniel Barragan "D4NB4R" Twitter: @D4NB4R Vendor: http://www.ecolora.org/ Version: 3.1 last update on Oct 7, 2012 and lowers License: Commercial and Non-Commercial, affects 2 versions...

Joomla! Component com_kunena - search SQL Injection

Joomla! Component comkunena - search SQL Injection !/usr/bin/perl Exploit title: Joomla Component comkunena SQL Injection exploit Google Dork: inurl:index.php?option=comkunena& Exploit Author: D35m0nd142 Screenshot : http://imageshack.us/f/155/comkunena2.png/ Vendor HomePage: http://www.joomla.or...

Joomla Commedia Plugin (index.php, task parameter) SQL Injection

Exploit for php platform in category web applications Exploit Title: Joomla commedia Remote Exploit dork: inurl:index.php?option=comcommedia Date: 18-10-2012 Author: Daniel Barragan "D4NB4R" Twitter: @D4NB4R Vendor: http://www.ecolora.org/ Version: 3.1 last update on Oct 7, 2012 and lowers Licens...

Joomla! Component com_tag - tag SQL Injection

Joomla! Component comtag - tag SQL Injection Exploit Title: Joomla tag Remote Sql Exploit dork: inurl:index.php?option=comtag Date: 18-10-2012 Author: Daniel Barragan "D4NB4R" Twitter: @D4NB4R Vendor: http://www.joomlatags.org Version: all License: Non-Commercial Download:...

Joomla! Component com_tag - 'tag' SQL Injection

Exploit Title: Joomla tag Remote Sql Exploit dork: inurl:index.php?option=comtag Date: 18-10-2012 Author: Daniel Barragan "D4NB4R" Twitter: @D4NB4R Vendor: http://www.joomlatags.org Version: all License: Non-Commercial Download: http://www.joomlatags.org/joomla-tag/joomla-tag-download.html Tested...

Joomla Component com_commedia SQL Injection Exploit

Commedia - a component and content plugin that allows you to create a content table containing all of the MP3's that are present in any directory of your site, a FTP-server folder, single path to ftp-file or a HTTPS-server DROPBOX, folder, single path to http-file or http-radio Exploit Title:...

Cims empdata.mdb Database Disclosure Exploit

Exploit for php platform in category web applications !/usr/bin/perl -w Title : Cims empdata.mdb Database Disclosure Exploit Facebook Page: http://www.facebook.com/Algerian.Cyber.Army E-mail: islambabiaathotmail.com Category:: WebApps Security Risk : High Vendor: http://www.simwebsol.com Download...

Joomla Component com_huruhelpdesk Remote SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla Component comhuruhelpdesk Remote SQL Injection Google Dork: "inurl:option=comhuruhelpdesk" Date: 04/10/2012 Exploit Author: D35m0nd142 Vendor Homepage: http://www.huruhelpdesk.net/ Tested on Joomla 1.5 CVE: 2010-2907...

Joomla! Component Spider Calendar - SQL Injection

Joomla! Component Spider Calendar - SQL Injection Exploit Title: Joomla spider calendar lite Remote Exploit dork: inurl:comspidercalendar Date: 29-08-2012 Author: Daniel Barragan "D4NB4R" Twitter: @D4NB4R site: http://poisonsecurity.wordpress.com/ Vendor:...

Joomla! Component com_enmasse 1.2.0.4 - SQL Injection

Joomla! Component comenmasse 1.2.0.4 - SQL Injection Exploit Title: Joomla comenmasse Remote Exploit Author: Daniel Barragan "D4NB4R" Español hola, este exploit afecta sitios de ecommerce por lo cual el exploit solo dara una muestra de la extraccion posible de datos, No me hago responsable del us...

wordpress Diary/Notebook theme email spoofing vulnerability-vulnerability warning-the black bar safety net

WordPress this Diary/Notebook theme is to have site5 design of a personal Journal blog system theme. The recent burst of the email spoofing vulnerability. Attach the perl script Exp: !/ usr/bin/perl Exploit Title: Diary/Notebook Site5 WordPress Theme - Email Spoofing Date: 15.07.2012 Exploit...

WordPress Theme DiaryNotebook Site5 - Email Spoofing

WordPress Theme DiaryNotebook Site5 - Email Spoofing !/usr/bin/perl Exploit Title: Diary/Notebook Site5 Wordpress Theme - Email Spoofing Date: 15.07.2012 Exploit Author: @bwallHatesTwits Discovered by: @xxDigiPxx...

Site5 WordPress Theme Email Spoofing

!/usr/bin/perl Exploit Title: Site5 Wordpress Themes - Email Spoofing Date: 15.07.2012 Exploit Author: @bwallHatesTwits Discovered by: @xxDigiPxx http://www.ticktockcomputers.com/wordpress/site5-wordpress-theme-diary-sendmail-php-spoofing/ Software Link: http://www.wpdiarytheme.com/ Vendor...

BoutikOne CSRF Add User Vulnerability

Exploit for php platform in category web applications !/usr/bin/perl -w Exploit Title: BoutikOne CSRF Add User Exploit Author: GarA Vendor Homepage: www.boutikone.com Tested on: Win Xp sp3 system "color a"; system "cls"; $numargs = $ARGV + 1; if $numargs != 4 print " :MM:....:HMMM .MMMMMMMMMM. \n...

ASP Content Management Database Disclosure

=========================================== ASP Content Management Mullti Vulnerability =========================================== Vendor: http://www.aspcontentmanagement.com/aspcontentmanagement.zip Date: 2012-06-06 Author : indoushka Tested on : windows SP2 Francais V.Pnx2 2.0 Exploit By...