Joomla Face Gallery 1.0 SQL Injection / File Download

Exploit Title : Joomla Face Gallery 1.0 Multiple Vulnerabilities Exploit Author : Claudio Viviani Vendor Homepage : https://www.apptha.com Software Link : https://www.apptha.com/downloadable/download/sample/sampleid/150 Dork Google: inurl:option=comfacegallery Date : 2014-09-17 Tested on : Window...

Wordpress Theme Strange File Upload / File Deletion

Exploit for php platform in category web applications Exploit Title : Wordpress Theme Strange File Upload / File Deletion Exploit Author : NULLPointer Contact : https://www.facebook.com/xenith.gianni Date : 21/09/2014 Github Mirror :...

Joomla Face Gallery 1.0 Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title : Joomla Face Gallery 1.0 Multiple Vulnerabilities Exploit Author : Claudio Viviani Vendor Homepage : https://www.apptha.com Software Link : https://www.apptha.com/downloadable/download/sample/sampleid/150 Dork Google:...

Wordpress Plugin CSSJockey Membership Modules Code Execution Vulnerability

Exploit for php platform in category web applications Exploit Title : Wordpress Plugin CSSJockey Membership Modules Code Execution Vulnerability Exploit Author : NULLPointer Contact : https://www.facebook.com/xenith.gianni Date : 20/09/2014 Vendor Homepage :...

Seafile-server 3.1.5 - Remote Denial of Service

Exploit Title: ccnet-server remote DoS assert seafile-server = 3.1.5 Date: Sep 4, 2014 Exploit Author: retset Vendor Homepage: seafile.com Software Link: https://bitbucket.org/haiwen/seafile/downloads/seafile-server3.1.4win32.tar.gz Version: seafile-server 3.1.4 Tested on: Windows 7/seafile-serve...

Seafile-server 3.1.5 - Remote Denial of Service

Seafile-server 3.1.5 - Remote Denial of Service Exploit Title: ccnet-server remote DoS assert seafile-server = 3.1.5 Date: Sep 4, 2014 Exploit Author: retset Vendor Homepage: seafile.com Software Link: https://bitbucket.org/haiwen/seafile/downloads/seafile-server3.1.4win32.tar.gz Version:...

Jenkins 1.578 - Multiple Vulnerabilities

No description provided by source. Affected Vendor: http://jenkins-ci.org/ Date: 03/09/2014 Discovered by: JoeV Type of vulnerability: CSRF and Command Execution Tested on: Windows 7 Version : 1.578 Description: Jenkins is susceptible to CSRF attack and command execution. Using groovy one can fir...

Wordpress Plugins Premium Gallery Manager Unauthenticated Configuration Access Vulnerability

No description provided by source. Exploit Title : Wordpress Plugins Premium Gallery Manager Unauthenticated Configuration Access Vulnerability Author : Hannaichi @dntkun Date : February 5th, 2014 Type : php, html, htm, asp, etc. Category : Web Applications Vulnerability : Unauthenticated...

WordPress Plugin Max Banner Ads XSS Vulnerablity

Exploit for php platform in category web applications Exploit Title : WordPress Plugin Max Banner Ads XSS Vulnerablity Exploit Author : NULLPointer Date : 18/09/2014 Vendor Homepage : http://www.maxblogpress.com/plugins/mba/ Version: 1.9 Google Dork : inurl:/wp-content/plugins/max-banner-ads/...

WordPress 0day - Hades Plus Framework Add Administrator

Exploit for php platform in category web applications Exploit Title : WordPress 0day - Hades Plus Framework Add Administrator Exploit Author : NULLPointer Date : 18/09/2014 Version: 6.2 Tested on : Linux, Windows 7 -------------------------------------------------------------- WordPress Hades...

Wordpress Plugin FormCraft Premium Arbitrary File Deletion

The FormCraft v2.0.5 is a feature rich WordPress plug-in that provides you the perfect platform for creating the multiple forms with so many specific fields that supports retina graphics. It incorporates tons of styling options, Form validation, GUI form builder, custom widgets; support multiple...

Wordpress Webcam 2Way Videochat Plagin XSS Vulnerability

The VideoWhisper 2 Way Video Chat is a web based video application designed for instant 1 on 1 private online video conferencing. Exploit Title : Wordpress Plugin Webcam 2Way Videochat XSS Vulnerability Exploit Author : NULLPointer Date : 17/09/2014 Download Link :...

WordPress Theme LaBomba Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Exploit Title : WordPress Theme LaBomba Arbitrary File Download Vulnerability Exploit Author : NULLPointer Date : 17/09/2014 Vendor Homepage : http://themeforest.net/item/labomba-responsive-multipurpose-wordpress-theme/6106367 Version: 1.7...

Safari SVGPathSegList Use-After-Free Exploit

Remote command execution exploit works on Windows XP/Vista/7 and MacOSX Snow Leopard. This is private exploit. You can buy it at https://0day.today...

WordPress Theme Marble Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Exploit Title : WordPress Theme Marble Arbitrary File Download Vulnerability Exploit Author : NULLPointer Date : 17/09/2014 Vendor Homepage : http://themeforest.net/item/marble-flat-responsive-creative-wordpress-theme/5896650 Version: 1.1.2...

Rejetto HTTP File Server (HFS) 2.3.x - Remote Command Execution (1)

Rejetto HTTP File Server HFS 2.3.x - Remote Command Execution 1 Exploit Title: HttpFileServer 2.3.x Remote Command Execution Google Dork: intext:"httpfileserver 2.3" Date: 11-09-2014 Remote: Yes Exploit Author: Daniele Linguaglossa Vendor Homepage: http://rejetto.com/ Software Link:...

Rejetto HTTP File Server (HFS) 2.3.x - Remote Command Execution (1)

Exploit Title: HttpFileServer 2.3.x Remote Command Execution Google Dork: intext:"httpfileserver 2.3" Date: 11-09-2014 Remote: Yes Exploit Author: Daniele Linguaglossa Vendor Homepage: http://rejetto.com/ Software Link: http://sourceforge.net/projects/hfs/ Version: 2.3.x Tested on: Windows Server...

Ammyy Admin 3.5 - Remote Code Execution (Metasploit)

Mirror: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/34647.zip aa0day.zip The Revenge of the Scammers This exploit is an 0day in Ammyy Admin http://www.ammyy.com/en/ a remote desktop type software that is well known for being the software that many fake tech...

Internet Explorer 11 Remote Code Execution 0day Exploit

The target of the attack focuses on IE 11 with Adobe Flash Player, on which the rest of the attack is coordinated. The security bug is a bug in use after free use-after-free that gives the attacker direct access to memory in an arbitrary direction, a corrupt file using Adobe Flash. Use-after-free...

Rejetto HttpFileServer Remote Command Execution

Rejetto HttpFileServer HFS is vulnerable to remote command execution attack due to a poor regex in the file ParserLib.pas. This module exploits the HFS scripting commands by using '%00' to bypass the filtering. This module has been tested successfully on HFS 2.3b over Windows XP SP3, Windows 7 SP...