iScripts Multicart <= 2.4.1.1 Remote Command Execution

Exploit for php platform in category web applications This is private exploit. You can buy it at https://0day.today...

WordPress Folo Shell Upload

Exploit Title : Wordpress Themes Folo Arbitrary File Upload Vulnerability Author : ReC0ded Vendor : http://themify.me/ Download : http://themify.me/themes/folo Date : 22, November 2013. Type : php, html, htm, asp, etc. Category : Web Applications Vulnerability : File Upload Tested On : Windows 7...

WordPress Pinboard Shell Upload

Exploit Title : Wordpress Themes Pinboard Arbitrary File Upload Vulnerability Author : ReC0ded Vendor : http://themify.me/ Download : http://themify.me/themes/Pinboard Date : 22, November 2013. Type : php, html, htm, asp, etc. Category : Web Applications Vulnerability : File Upload Tested On :...

WordPress iThemes2 Shell Upload

Title : Wordpress iThemes2 Themes Arbitrary File Upload Author : DevilScreaM Date : 11/20/2013 - 20 November 2013 Category : Web Applications Type : PHP Vendor : http://themify.me/ Link : http://themify.me/themes/ithemes2 Greetz : 0day-id.com | newbie-security.or.id | Borneo Security | Indonesian...

WordPress Suco Shell Upload

Title : Wordpress Suco Themes Arbitrary File Upload Author : DevilScreaM Date : 11/20/2013 - 20 November 2013 Category : Web Applications Type : PHP Vendor : http://themify.me/ Link : http://themify.me/themes/suco Greetz : 0day-id.com | newbie-security.or.id | Borneo Security | Indonesian Securit...

WordPress Theme Dimension - Cross-Site Request Forgery

WordPress Theme Dimension - Cross-Site Request Forgery Title : Wordpress Dimension Themes CSRF File Upload Vulnerability Author : DevilScreaM Date : 11/17/2013 - 17 November 2013 Category : Web Applications Type : PHP Vendor : http://themeforest.net Download :...

WordPress Theme Amplus - Cross-Site Request Forgery

Title : Wordpress Amplus Themes CSRF File Upload Vulnerability Author : DevilScreaM Date : 11/17/2013 - 17 November 2013 Category : Web Applications Type : PHP Vendor : http://themeforest.net Download : http://themeforest.net/item/amplus-responsive-multilingual-wordpress-theme/ Greetz : 0day-id.c...

WordPress Theme Make A Statement (MaS) - Cross-Site Request Forgery

WordPress Theme Make A Statement MaS - Cross-Site Request Forgery Title : Wordpress Make A Statement Themes CSRF File Upload Vulnerability Author : DevilScreaM Date : 11/17/2013 - 17 November 2013 Category : Web Applications Type : PHP Version : 1.x.x Vendor : http://themes.mas.gambit.ph/ Greetz ...

WordPress Theme Amplus - Cross-Site Request Forgery

WordPress Theme Amplus - Cross-Site Request Forgery Title : Wordpress Amplus Themes CSRF File Upload Vulnerability Author : DevilScreaM Date : 11/17/2013 - 17 November 2013 Category : Web Applications Type : PHP Vendor : http://themeforest.net Download :...

WordPress Theme Euclid 1.x - Cross-Site Request Forgery

WordPress Theme Euclid 1.x - Cross-Site Request Forgery Title : Wordpress Euclid V1 Themes CSRF File Upload Vulnerability Author : DevilScreaM Date : 11/17/2013 - 17 November 2013 Category : Web Applications Type : PHP Version : 1.x.x Vendor : http://freelancewp.com Download :...

WordPress Theme Euclid 1.x - Cross-Site Request Forgery

Title : Wordpress Euclid V1 Themes CSRF File Upload Vulnerability Author : DevilScreaM Date : 11/17/2013 - 17 November 2013 Category : Web Applications Type : PHP Version : 1.x.x Vendor : http://freelancewp.com Download : http://freelancewp.com/wordpress-theme/euclid/ Greetz : 0day-id.com |...

WordPress Dimension Cross Site Request Forgery Vulnerability

WordPress Dimension theme suffers from a cross site request forgery vulnerability. Title : Wordpress Dimension Themes CSRF File Upload Vulnerability Author : DevilScreaM Date : 11/17/2013 - 17 November 2013 Category : Web Applications Type : PHP Vendor : http://themeforest.net Download :...

WordPress Euclid Cross Site Request Forgery Vulnerability

WordPress Euclid theme suffers from a cross site request forgery vulnerability. Title : Wordpress Euclid V1 Themes CSRF File Upload Vulnerability Author : DevilScreaM Date : 11/17/2013 - 17 November 2013 Category : Web Applications Type : PHP Version : 1.x.x Vendor : http://freelancewp.com Downlo...

WordPress Euclid Cross Site Request Forgery

Title : Wordpress Euclid V1 Themes CSRF File Upload Vulnerability Author : DevilScreaM Date : 11/17/2013 - 17 November 2013 Category : Web Applications Type : PHP Version : 1.x.x Vendor : http://freelancewp.com Download : http://freelancewp.com/wordpress-theme/euclid/ Greetz : 0day-id.com |...

WordPress Make A Statement Cross Site Request Forgery Vulnerability

WordPress Make A Statement theme suffers from a cross site request forgery vulnerability. Title : Wordpress Make A Statement Themes CSRF File Upload Vulnerability Author : DevilScreaM Date : 11/17/2013 - 17 November 2013 Category : Web Applications Type : PHP Version : 1.x.x Vendor :...

WordPress Amplus Cross Site Request Forgery

Title : Wordpress Amplus Themes CSRF File Upload Vulnerability Author : DevilScreaM Date : 11/17/2013 - 17 November 2013 Category : Web Applications Type : PHP Vendor : http://themeforest.net Download : http://themeforest.net/item/amplus-responsive-multilingual-wordpress-theme/ Greetz : 0day-id.c...

[WebSurgery] Web application security testing suite

WebSurgery is a suite of tools for security testing of web applications. It was designed for security auditors to help them with web application planning and exploitation. Suite currently contains a spectrum of efficient, fast and stable web tools Crawler, Bruteforcer, Fuzzer, Proxy, Editor and...

USN-2029-1: Apache Commons FileUpload vulnerability

It was discovered that Apache Commons FileUpload incorrectly handled file names with NULL bytes in serialized instances. An attacker could use this issue to possibly write to arbitrary files...

[SECURITY] Fedora 20 Update: rubygem-ruby-openid-2.3.0-3.fc20

The Ruby OpenID library, with batteries included. A Ruby library for verifying and serving OpenID identities. Ruby OpenID makes it easy to add OpenID authentication to your web applications...

WordPress Highlight Premium Theme CSRF / Shell Upload

Title : Wordpress Highlight Premium Themes CSRF File Upload Vulnerability Author : DevilScreaM Date : 11/10/2013 - 10 November 2013 Category : Web Applications Type : PHP Vendor : http://themeforest.net Download : http://themeforest.net/item/highlight-powerful-premium-wordpress-theme/168424 Greet...