RockLoader SQL Injection / Shell Upload

Exploit Title: RockLoader aka Bart Malware SQLi and shell file upload Date: 27-06-2016 Software Link Leak: https://github.com/colocation/RockLoader-source Exploit Author: Danail Velev Contact: ICQ: 209030 / [email protected] Website: http://colocation.bg/ Category: webapps / malware / private...

Diaspora Native WebApp - External URLs, WebView JavaScript enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Diaspora Native WebApp published at the 'play' market has multiple vulnerabilities...

DigiKala Of Iran Cross Site Scripting

+++++++++++++++++++++++++ + + Exploit Title : DigiKala Of Iran XSS Vulnerability + + Exploit Author : 4TT4CK3R + + Tested on : Firefox , Windows + + Discovered by : 4TT4CK3R + + Category : WebApp + + HomePage : https://digikala.com + +++++++++++++++++++++++++ + + About DigiKala : + DigiKala bigge...

Pinger Remote Code Execution Vulnerability

Pinger suffers from a remote code execution vulnerability. ================================================================================ Pinger - Simple Pinging Webapp Remote Code Execution ================================================================================ Vendor Homepage:...

Pinger Remote Code Execution

================================================================================ Pinger - Simple Pinging Webapp Remote Code Execution ================================================================================ Vendor Homepage: https://github.com/wcchandler/pinger Date: 17/12/2015 Software...

WordPress Plugin Advanced uploader 2.10 - Multiple Vulnerabilities

WordPress Plugin Advanced uploader 2.10 - Multiple Vulnerabilities ----------------------------------------- 0-DAY Aint DIE | No Priv8 | KedAns-Dz ----------------------------------------- ---------------------------- K |................| . h |.......................| A a |..........................

WordPress Sell Download 1.0.16 Local File Disclosure

----------------------------------------- 0-DAY Aint DIE | No Priv8 | KedAns-Dz ----------------------------------------- ---------------------------- K |................| . h |.......................| A a |.......................| N l |.....................| S E |.......................| e D...

WordPress Plugin Sell Download 1.0.16 - Local File Disclosure

----------------------------------------- 0-DAY Aint DIE | No Priv8 | KedAns-Dz ----------------------------------------- ---------------------------- K |................| . h |.......................| A a |.......................| N l |.....................| S E |.......................| e D...

WordPress Advanced Uploader 2.10 Shell Upload

----------------------------------------- 0-DAY Aint DIE | No Priv8 | KedAns-Dz ----------------------------------------- ---------------------------- K |................| . h |.......................| A a |.......................| N l |.....................| S E |.......................| e D...

WordPress TheCartPress 1.4.7 Code Execution / Local File Disclosure

----------------------------------------- 0-DAY Aint DIE | No Priv8 | KedAns-Dz ----------------------------------------- ---------------------------- K |................| . h |.......................| A a |.......................| N l |.....................| S E |.......................| e D...

WordPress Plugin TheCartPress 1.4.7 - Multiple Vulnerabilities

WordPress Plugin TheCartPress 1.4.7 - Multiple Vulnerabilities ----------------------------------------- 0-DAY Aint DIE | No Priv8 | KedAns-Dz ----------------------------------------- ---------------------------- K |................| . h |.......................| A a |.......................| N ...

WordPress Plugin Advanced uploader 2.10 - Multiple Vulnerabilities

----------------------------------------- 0-DAY Aint DIE | No Priv8 | KedAns-Dz ----------------------------------------- ---------------------------- K |................| . h |.......................| A a |.......................| N l |.....................| S E |.......................| e D...

Wordpress Sell Download v1.0.16 Plugin Local File Disclosure Vulnerability

Exploit for php platform in category web applications Dx . Made In Algeria . xZ Title : Wordpress Plugin Sell Download v1.0.16 Local File Disclosure Vulnerability Author : KedAns-Dz + E-mail : ked-h @hotmail.com + FaCeb0ok : fb.me/K3d.Dz + TwiTter : @kedans Platform : PHP / WebApp + Cat/Tag : Fil...

Wordpress Advanced uploader v2.10 Plugin Multiple Vulnerabilities

Exploit for php platform in category web applications Dx . Made In Algeria . xZ Title : Wordpress Plugin Advanced uploader v2.10 Multiple Vulnerabilities Author : KedAns-Dz + E-mail : ked-h @hotmail.com + FaCeb0ok : fb.me/K3d.Dz + TwiTter : @kedans Platform : PHP / WebApp + Cat/Tag : File Upload ...

Scuolabook purchased e-books on .pdf format Download Exploit

This script allows you to download 'scuolabook.it' purchased ebooks via-webapp and save them on .pdf format and read/edit with every pdf-editor Usage Info 1 Login to your account on scuolabook.it; 2 Copy 'turnersession' session key; 3 Run exploit python exploit.py; 4 Follow the on-screen...

Insecure Direct Object Reference

The following URL is vulnerable to Insecure Direct Object Reference, allowing any authenticated user to read configuration files from the application such as the content of webapp directory in confluence. http:///spaces/viewdefaultdecorator.action?decoratorName=...

Monsta FTP 1.6.2 - Multiple Vulnerabilities

Monsta FTP 1.6.2 - Multiple Vulnerabilities Exploit Title: CSRF XSS Monsta FTP Google Dork: intitle: Monsta FTP CSRF / XSS Date: 2015-09-11 Exploit Author: hyp3rlinx Website: hyp3rlinx.altervista.org Vendor Homepage: www.monstaftp.com Software Link: www.monstaftp.com Version: monstaftpv1.6.2 Test...

WordPress Plugin ACF Frontend Display 2.0.5 - Arbitrary File Upload

+---------------------------------------------------------------------------+ + Author: TUNISIAN CYBER + Title: WP Plugin Free ACF Frontend Display File Upload Vulnerability + Date: 3-07-2015 + Type: WebAPP + Download Plugin: https://downloads.wordpress.org/plugin/acf-frontend-display.2.0.5.zip +...

elFinder 2 Remote Command Execution

Author: TUNISIAN CYBER + Title: elFinder 2 Remote Command Execution Via File Creation Vulnerability + Date: 06-05-2015 + Vendor: https://github.com/Studio-42/elFinder + Type: WebAPP + Tested on: KaliLinux Debian + Twitter: @TCYB3R + Time Line: 03-05-2015:Vulnerability Discovered...

elFinder 2 Remote Command Execution (Via File Creation) Vulnerability

Exploit for php platform in category web applications + Author: TUNISIAN CYBER + Title: elFinder 2 Remote Command Execution Via File Creation Vulnerability + Date: 06-05-2015 + Vendor: https://github.com/Studio-42/elFinder + Type: WebAPP + Tested on: KaliLinux Debian + Twitter: @TCYB3R + Time Lin...