Quack Chat 1.0 - Multiple Vulnerabilities

Quack Chat 1.0 - Multiple Vulnerabilities Exploit Title: Quack Chat 1.0 - XSS / SQL Injection / Path Diclosure Date: 15 de Agosto del 2013 Exploit Author: Dylan Irzi Credit goes for: websecuritydev.com Vendor Homepage: http://www.quack-chat.com/ Tested on: Win8 & Linux Mint Affected Version : 1.0...

Quark Chat 1.0 XSS / SQL Injection / Path Disclosure

Exploit Title: Quark Chat 1.0 - XSS / SQL Injection / Path Diclosure Date: 15 de Agosto del 2013 Exploit Author: Dylan Irzi Credit goes for: websecuritydev.com Vendor Homepage: http://www.quack-chat.com/ Tested on: Win8 & Linux Mint Affected Version : 1.0 Contacts: https://twitter.com/Dylanirzi11...

Wordpress Booking Calendar 4.1.4 - CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: CSRF Plugin Booking Calendar 4.1.4 � WordPress Date: 04 de Agosto del 2013 Exploit Author: Dylan Irzi Credit goes for: websecuritydev.com Vendor Homepage: http://wpbookingcalendar.com/ Tested on: Win8 & Linux Mint Affected Versi...

WordPress Plugin Booking Calendar 4.1.4 - Cross-Site Request Forgery

WordPress Plugin Booking Calendar 4.1.4 - Cross-Site Request Forgery Exploit Title: CSRF Plugin Booking Calendar 4.1.4 � WordPress Date: 04 de Agosto del 2013 Exploit Author: Dylan Irzi Credit goes for: websecuritydev.com Vendor Homepage: http://wpbookingcalendar.com/ Tested on: Win8 & Linux Mint...

WordPress Plugin Booking Calendar 4.1.4 - Cross-Site Request Forgery

Exploit Title: CSRF Plugin Booking Calendar 4.1.4 � WordPress Date: 04 de Agosto del 2013 Exploit Author: Dylan Irzi Credit goes for: websecuritydev.com Vendor Homepage: http://wpbookingcalendar.com/ Tested on: Win8 & Linux Mint Affected Version : 4.1.4 Contacts: https://twitter.com/Dylanirzi11 ,...

Booking Calendar 4.1.4 Cross Site Request Forgery

Exploit Title: CSRF Plugin Booking Calendar 4.1.4 – WordPress Date: 04 de Agosto del 2013 Exploit Author: Dylan Irzi Credit goes for: websecuritydev.com Vendor Homepage: http://wpbookingcalendar.com/ Tested on: Win8 & Linux Mint Affected Version : 4.1.4 Contacts: https://twitter.com/Dylanirzi11 ,...

Novell Client 2 SP3 Privilege Escalation Exploit

Exploit for windows platform in category local exploits Novell Client 2 SP3 Privilege escalation exploit Tested on Windows 7 and 8 x86 / nicm.sys 3.1.11.0 Thanks to Master Ryujin : The first public information I have seen about this bug was from Nikita Tarakanov @NTarakanov I am not sure weather...

Novell Client 2 SP3 - 'nicm.sys 3.1.11.0' Local Privilege Escalation

Novell Client 2 SP3 Privilege escalation exploit Tested on Windows 7 and 8 x86 / nicm.sys 3.1.11.0 Thanks to Master Ryujin : The first public information I have seen about this bug was from Nikita Tarakanov @NTarakanov I am not sure weather there was anything else public Exploit for DEMO purposes...

Researchers Uncover PinkStats APT Toolkit

The arsenal of tools that attack groups use to do their business is seemingly endless, and many of them remain unknown for years before they’re discovered. Often, it’s not until a tool has been compromised or sold on the open market that researchers get a close look at it, but that’s been changin...

EggBlog 4.1.2 - Arbitrary File Upload

EggBlog 4.1.2 - Arbitrary File Upload Exploit Title: eggBlog Arbitrary File Upload Vulnerability Google Dork:"powered by eggBlog.net" Date: 28/04/2013 Exploit Author: Pokk3rs Vendor Homepage: http://eggblog.net/ Software Link: http://sourceforge.net/projects/eggblog/files/eggBlog%204/v4.1.2/ Test...

EggBlog 4.1.2 - Arbitrary File Upload

Exploit Title: eggBlog Arbitrary File Upload Vulnerability Google Dork:"powered by eggBlog.net" Date: 28/04/2013 Exploit Author: Pokk3rs Vendor Homepage: http://eggblog.net/ Software Link: http://sourceforge.net/projects/eggblog/files/eggBlog%204/v4.1.2/ Tested on: Win8 Pro x64 Expl0itation 1 -...

Joomla! Component com_civicrm 4.2.2 - Remote Code Injection

Joomla! Component comcivicrm 4.2.2 - Remote Code Injection Exploit Title: joomla component comcivicrm remode code injection exploit Google Dork:"Index of /joomla/administrator/components/comcivicrm/civicrm/packages/OpenFlashChart" Date: 20/04/2013 Exploit Author: iskorpitx Vendor Homepage:...

IShang CMS 5.0 / 7.0 SQL Injection

Exploit Title : IShang CMS Login Page Bypass Vulnerability Exploit Author : Adrian Vendor Homepage : http://www.ishang.net/ Google Dork : Use Your Brain Date: 2013/12/28 Tested On : Win8 Software Link : http://www.ishang.net/ Version : 7.0 / 5.0 1 http://site.com/path/admin/ 2...

[Hydra v 7.4] Fast Network cracker

One of the biggest security holes are passwords, as every password security study shows. A very fast network logon cracker which support many different services, THC-Hydra is now updated to 7.4 version. Hydra available for Linux, Windows/Cygwin, Solaris 11, FreeBSD 8.1 and OSX, Currently supports...

Fast Network cracker Hydra v 7.4 updated version download

One of the biggest security holes are passwords, as every password security study shows. A very fast network logon cracker which support many different services, THC-Hydra is now updated to 7.4 version. Hydra available for Linux, Windows/Cygwin, Solaris 11, FreeBSD 8.1 and OSX, Currently supports...

Win8 Remote Desktop vulnerabilities: the use of QQ Pinyin pure version achieve to mention the right-vulnerability warning-the black bar safety net

Foreword The discovery of this vulnerability, the author is the room class. Are looking to With 3 3 8 9 Remote Desktop to control the hostel computer all the time, because to redo the system to forget its own IP address, and therefore can readily scan a bit in the IP section of the opening 3 3 8 ...

IKE and AuthIP IPsec Keyring Modules Service (IKEEXT) Missing DLL

This module exploits a missing DLL loaded by the 'IKE and AuthIP Keyring Modules' IKEEXT service which runs as SYSTEM, and starts automatically in default installations of Vista-Win8. It requires an insecure bin path to plant the DLL payload. Module Options msf use...