Fleetco Fleet Maintenance Management 1.2 - Remote Code Execution

Exploit Title: Fleetco Fleet Maintenance Management 1.2 - Remote Code Execution Date: 2018-11-23 Exploit Author: Özkan Mustafa Akkuş AkkuS Contact: https://pentest.com.tr Vendor Homepage: https://www.fleetco.space Software Link: http://www.fleetco.space/download/215/ Version: v1.2 Category: Webap...

Tarantella Enterprise Directory Traversal Vulnerability

Exploit for cgi platform in category web applications !-- Exploit Title: Directory Traversal in Tarantella Enterprise before 3.11 Exploit Author: Rafael Pedrero Vendor Homepage: Homepage: http://www.sun.com/ & http://www.oracle.com/ Software Link: the product is discontinued vulnerability found i...

Joomla JCE 2.6.33 Database Backup Disclosure

Exploit Title : Joomla Content Editor ComJCE Components 2.5.24 Database Backup Disclosure Information Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 30/11/2018 Vendor Homepage : joomlacontenteditor.net Software Download Links :...

Tarantella Enterprise Directory Traversal

Vulnerability found in 2009. !-- Exploit Title: Directory Traversal in Tarantella Enterprise before 3.11 Date: 30-11-2018 Exploit Author: Rafael Pedrero Vendor Homepage: Homepage: http://www.sun.com/ & http://www.oracle.com/ Software Link: the product is discontinued vulnerability found in 2009...

WordPress sermon-shortcodes 1.0 Arbitrary File Download

Exploit Title : WordPress sermon-shortcodes 1.0 Plugins Arbitrary File Download Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 27/11/2018 Vendor Homepage : wordpress.org sermonmanager.pro...

Joomla Event Booking 3.8.3 Database Disclosure

Exploit Title : Joomla comeventbooking 3.8.3 Components Database Backup Arbitrary File Download Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 29/11/2018 Vendor Homepage : extensions.joomla.org/extension/event-booking/ +...

Joomla Fabrik 3.9 CSRF / LFI / Shell Upload

Exploit Title : Joomla ComFabrik 3.9 pluginAjax importcsv advancedsearch getprodimg controller LFI with htaccess CSRF Shell Access Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 29/11/2018 Vendor Homepage : extensions.joomla.org/extension/fabrik/...

WordPress Events Calendar Premium 1.0 Database Disclosure

Exploit Title : WordPress events-calendar-premium Plugins 1.0 Database Backup Information Disclosure Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 30/11/2018 Vendor Homepage : wordpress.org Tested On : Windows and Linux Category : WebApps Version...

WordPress Delme 3.0 Database Disclosure

Exploit Title : WordPress Delme Plugins 3.0 Database Backup Information Disclosure Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 28/11/2018 Vendor Homepage : wordpress.org Tested On : Windows and Linux Category : WebApps Version Information : 3.0...

WordPress user-spam-remover 1.0 Database Disclosure

Exploit Title : WordPress user-spam-remover 1.0 Plugins Database Backup Information Disclosure Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 28/11/2018 Vendor Homepage : wordpress.org/plugins/user-spam-remover/ + lyncd.com/user-spam-remover/ Tested...

WordPress hwm_board 1.0 Arbitrary File Disclosure

Exploit Title : WordPress hwmboard 1.0 Plugins Korea Arbitrary File Download Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 28/11/2018 Vendor Homepage : wordpress.org Tested On : Windows and Linux Category : WebApps Version Information : All Current...

WordPress uploadingdownloading-non-latin-filename 1.1.5 Arbitrary File Download

Exploit Title : WordPress uploadingdownloading-non-latin-filename Plugins 1.1.5 Arbitrary File Download Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 29/11/2018 Vendor Homepage : wordpress.org/plugins/uploadingdownloading-non-latin-filename/ Softwa...

BMC Remedy 7.1 User Impersonation

...

BMC Remedy 7.1 User Impersonation Vulnerability

Exploit for jsp platform in category web applications !-- Exploit Title: Impersonation may lead to incorrect user context in Remedy AR System Server in BMC Remedy 7.1 Exploit Author: Rafael Pedrero Vendor Homepage: http://www.bmc.com/ Software Link: http://www.bmc.com/ Version: Impersonation may...

Oracle Secure Global Desktop Administration Console 4.4 Cross Site Scripting Vulnerability

Oracle Secure Global Desktop Administration Console version 4.4 build 20080807152602 suffers from cross site scripting vulnerabilities. alert"XSS" helpFile=concepts.html&pageTitle=Administrator Help&mastheadUrl=/images/productNameSecondaryMasthead.png&mastheadDescription=Sun Secure Global Desktop...

Cory Support 1.0 SQL Injection Vulnerability

Cory Support version 1.0 suffers from a remote time-based SQL injection vulnerability. ============================================================ Cory Support v1.0 - Time-Based SQL Injection in 'signin.php' ============================================================ Exploit Title: Cory Support...

Joomla Admin 3.7.4 Database Disclosure Vulnerability

Joomla comadmin component versions 2.5.4 through 3.7.4 suffer from a database disclosure vulnerability. Exploit Title : Joomla comadmin Components from V2.5.4 to V3.7.4 Database Backup Arbitrary File Download Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army...

WordPress Pods 2.7.9 Database Disclosure Vulnerability

WordPress Pods plugin version 2.7.9 suffers from a database disclosure vulnerability. Exploit Title : WordPress Pods Plugins 2.7.9 Database Backup Arbitrary File Download Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Vendor Homepage : +...

WordPress Universal Post Manager 1.5.0 Database Disclosure Vulnerability

WordPress Universal Post Manager plugin version 1.5.0 suffers from a database disclosure vulnerability. Exploit Title : WordPress universal-post-manager 1.5.0 Plugins Database Backup Information Disclosure Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army...

WordPress Absolutely Glamorous Custom Admin 6.4.1 Database Disclosure Vulnerability

WordPress Absolutely Glamorous Custom Admin plugin version 6.4.1 suffers from a database disclosure vulnerability. Exploit Title : WordPress Absolutely Glamorous Custom Admin ag-custom-admin Plugin Database Backup Arbitrary File Download Vulnerability Author Discovered By : KingSkrupellos from...