Multiple WordPress Plugins - timthumb.php File Upload

Multiple WordPress Plugins - timthumb.php File Upload Exploit Title: Multiple Wordpress timthumb.php reuse vulnerabilities Date: 09/19/2011 Author: Ben Schmidt supernothing AT spareclockcycles.org @supernothing --- Description --- The following Wordpress plugins reuse a vulnerable version of the...

Sunway ForceControl WebServer 'httpsvr.exe' Buffer Overflow Vulnerability

Sunway ForceControl is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress 1 Flash Gallery Plugin - Arbitrary File Upload Exploit (Metasploit)

WordPress 1 Flash Gallery plugin is prone to a vulnerability which allows attackers to upload arbitrary files. This is because it fails to adequately clean up user-supplied input. In this way, the attackers can use this vulnerability to upload an arbitrary code and then run it in the context of t...

Pluck CMS 4.7 - Multiple Local File Inclusion File Disclosure Vulnerabilities

Pluck CMS 4.7 - Multiple Local File Inclusion File Disclosure Vulnerabilities source: https://www.securityfocus.com/bid/49525/info Pluck is prone to multiple file-include and a file-disclosure vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit the...

TinyWebGallery 1.8.4 - Local File Inclusion SQL Injection

TinyWebGallery 1.8.4 - Local File Inclusion SQL Injection source: https://www.securityfocus.com/bid/49393/info TinyWebGallery is prone to multiple local file-include and SQL-injection vulnerabilities. An attacker can exploit these issues to compromise the application, access or modify data, explo...

TinyWebGallery 1.8.4 - Local File Inclusion / SQL Injection

source: https://www.securityfocus.com/bid/49393/info TinyWebGallery is prone to multiple local file-include and SQL-injection vulnerabilities. An attacker can exploit these issues to compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database, and...

Zazavi 1.2.1 - FileManagerController.php Arbitrary File Upload

Zazavi 1.2.1 - FileManagerController.php Arbitrary File Upload source: https://www.securityfocus.com/bid/49309/info Zazavi is prone to an arbitrary-file-upload vulnerability because the application fails to adequately sanitize user-supplied input. An attacker can exploit this issue to upload...

Joomla! JoomTouch Component 'controller' Parameter Local File Include Vulnerability

The JoomTouch component for Joomla! is prone to a local file- include vulnerability because it fails to properly sanitize user- supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserve...

Simple HTTPd 1.42 PUT Buffer Overflow

!/usr/bin/env python part of femtocell research by TU-Berlin only for educational purposes Exploit Title: remote root on sfr/ubiquisys femtocell webserver wsal/shttpd/mongoose Date: 2011-08-02 Author: nion Software: http://code.google.com/p/mongoose/ http://sourceforge.net/projects/shttpd/ Versio...

Simple HTTPd 1.42 PUT Request Remote Buffer Overflow Vulnerability

Exploit for windows platform in category remote exploits !/usr/bin/env python part of femtocell research by TU-Berlin only for educational purposes Exploit Title: remote root on sfr/ubiquisys femtocell webserver wsal/shttpd/mongoose Author: nion Software: http://code.google.com/p/mongoose/...

awiki 20100125 - Multiple Local File Inclusions

awiki 20100125 - Multiple Local File Inclusions source: https://www.securityfocus.com/bid/49187/info awiki is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive...

awiki 20100125 - Multiple Local File Inclusions

source: https://www.securityfocus.com/bid/49187/info awiki is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts ...

Simple HTTPd 1.42 - PUT Remote Buffer Overflow

Simple HTTPd 1.42 - PUT Remote Buffer Overflow !/usr/bin/env python part of femtocell research by TU-Berlin only for educational purposes Exploit Title: remote root on sfr/ubiquisys femtocell webserver wsal/shttpd/mongoose Date: 2011-08-02 Author: nion Software: http://code.google.com/p/mongoose/...

VSploit Web PII

This module emulates a webserver leaking PII data This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'VSploit Web PII', 'Description' = 'This module emulates a webserver leaking PII data', 'License...

Chyrp 2.x - '/includes/lib/gz.php?File' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/48672/info Chyrp is prone to multiple cross-site scripting vulnerabilities, a local file-include vulnerability, an arbitrary file-upload vulnerability, and a directory-traversal vulnerability. An attacker may leverage these issues to execute arbitrary...

Chyrp 2.x - 'action' Traversal Local File Inclusion

source: https://www.securityfocus.com/bid/48672/info Chyrp is prone to multiple cross-site scripting vulnerabilities, a local file-include vulnerability, an arbitrary file-upload vulnerability, and a directory-traversal vulnerability. An attacker may leverage these issues to execute arbitrary...

Chyrp 2.x - includeslibgz.php?File Traversal Arbitrary File Access

Chyrp 2.x - includeslibgz.php?File Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/48672/info Chyrp is prone to multiple cross-site scripting vulnerabilities, a local file-include vulnerability, an arbitrary file-upload vulnerability, and a directory-traversal...

MinaliC Webserver Cross Site Scripting

============================================================= / \ 0-Exploit Zer0 Thunder \ \ ,, / /-------------------------------------------- '-./.-' =========================== .--' '--. MinaliC Webserver SCD & XSS Vulnerbilty / / /\ \ \ Tested on : Windows XP /sp3 | | | | Date : 28/07/2011 \ ...

MinaliC Webserver v2.0 Remote Source Disclosure

Exploit for windows platform in category remote exploits Exploit Title : MinaliC Webserver v2.0 Remote Source Disclosure Software link : http://sourceforge.net/projects/minalic/ Version : 2.0 Tested on : Windows 7 Home Premium Date : 27/07/2011 Author : X-h4ck Website : http://www.pirate.al ,...

MinaliC Webserver 2.0 Source Disclosure

Exploit Title : MinaliC Webserver v2.0 Remote Source Disclosure Software link : http://sourceforge.net/projects/minalic/ Version : 2.0 Tested on : Windows 7 Home Premium Date : 27/07/2011 Author : X-h4ck Website : http://www.pirate.al , http://theflashcrew.blogspot.com Email : [email protected]...