webAsyst Plugins ImageManager Shell Upload Vulnerability

Exploit for windows platform in category web applications...

WordPress Theme Highlight Premium - Cross-Site Request Forgery / Arbitrary File Upload

Title : Wordpress Highlight Premium Themes CSRF File Upload Vulnerability Author : DevilScreaM Date : 11/10/2013 - 10 November 2013 Category : Web Applications Type : PHP Vendor : http://themeforest.net Download : http://themeforest.net/item/highlight-powerful-premium-wordpress-theme/168424 Greet...

WordPress Theme Highlight Premium - Cross-Site Request Forgery Arbitrary File Upload

WordPress Theme Highlight Premium - Cross-Site Request Forgery Arbitrary File Upload Title : Wordpress Highlight Premium Themes CSRF File Upload Vulnerability Author : DevilScreaM Date : 11/10/2013 - 10 November 2013 Category : Web Applications Type : PHP Vendor : http://themeforest.net Download ...

[SECURITY] Fedora 19 Update: rubygem-ruby-openid-2.3.0-3.fc19

The Ruby OpenID library, with batteries included. A Ruby library for verifying and serving OpenID identities. Ruby OpenID makes it easy to add OpenID authentication to your web applications...

Aol.com XSS | Cookie Stealer (0day)

Exploit for multiple platform in category web applications This is private exploit. You can buy it at https://0day.today...

Practico 13.9 Multiple Vulnerabilities

Summary Practico is a free CMS software project released under license GNU GPL v2.0 for creating web applications in a completely visual and fast fashion. Without programming knowledge. Description Practico suffers from multiple vulnerabilities including Cross-Site Scripting XSS, SQL Injection SQ...

Practico 13.9 - Multiple Vulnerabilities

Practico 13.9 Multiple Vulnerabilities Vendor: Practico Product web page: http://www.codigoabierto.org Affected version: 13.9 Summary: Practico is a free CMS software project released under license GNU GPL v2.0 for creating web applications in a completely visual and fast fashion. Without...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Updated python-oauth2 packages fix CVE-2013-4347

It was found that in python-oauth2, an application for authorization flows for web applications, the nonce value generated isn't sufficiently random. While doing bulk operations the nonce might be repeated, so there is a chance of predictability. This could allow MITM attackers to conduct replay...

WordPress GeoPlaces 4.x Shell Upload

Title : Wordpress GeoPlaces 4.x Themes Shell Upload Vulnerabillity Author : DevilScreaM Date : 10/24/2013 Category : Web Applications Type : PHP Version : 4.x Greetz : 0day-id.com | newbie-security.or.id | Borneo Security | Indonesian Security Indonesian Hacker | Indonesian Exploiter | Indonesian...

WordPress DailyDeal Theme Shell Upload

Title : WordPress DailyDeal Themes Shell Upload Vulnerabillity Author : DevilScreaM Date : 10/23/2013 Category : Web Applications Type : PHP Greetz : 0day-id.com | newbie-security.or.id | Borneo Security | Indonesian Security Indonesian Hacker | Indonesian Exploiter | Indonesian Cyber Thanks :...

LiveCart 1.4 Shell Upload

Title : LiveCart 1.4 Remote Code Execution Author : DevilScreaM Date : 10/23/2013 Category : Web Applications Type : PHP Vendor : http://livecart.com Download : http://livecart.com/download Greetz : 0day-id.com | newbie-security.or.id | Borneo Security | Indonesian Security Indonesian Hacker |...

MNET Solution XSS / SQL Injection / File Upload

Title : MNET Solution Multiple Vulnerabilities Author : DevilScreaM Date : 10/19/2013 Category : Web Applications Type : PHP Vendor : http://mnet.co.th Greetz : 0day-id.com | newbie-security.or.id | Borneo Security | Indonesian Security Indonesian Hacker | Indonesian Exploiter | Indonesian Cyber...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Chiangraientersoft HTML Injection

Exploit Title : Chiangraientersoft HTML Injection Author : DevilScreaM Date : 05/10/2013 Category : Web Applications Vendor : http://chiangraientersoft.com/ Dork inurl:Qread.php?idques= inurl:webboard/Qread.php?idques= Vulnerability : HTML Injection Tested On : Windows 7, Ubuntu Mozila & Chrome...

ClipBucket 2.6 Multi Exploits(Arbitrary File Uploader and XSS)

Exploit for php platform in category web applications This is private exploit. You can buy it at https://0day.today...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

[ANN] Struts 2.3.15.2 GA release available - security fix

The Apache Struts group is pleased to announce that Struts 2.3.15.2 is available as a "General Availability" release.The GA designation is our highest quality grade. Apache Struts 2 is an elegant, extensible framework for creating enterprise-ready Java web applications. The framework is designed ...