WordPress felis theme Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Date: 2014-09-11 Google Dork : inurl:/wp-content/themes/felis/ Exploit Author: Mr.Doel Vendor Homepage: http://themeforest.net/item/felis-flexible-multipurpose-wordpress-theme/1596339 Tested on: Windows 7 & Linux POC :...

WordPress MichaelCanthony theme Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Date: 2014-09-11 Google Dork : inurl:/wp-content/themes/MichaelCanthony/ Exploit Author: Mr.Doel Vendor Homepage: http://michaelcanthony.com Tested on: Windows 7 & Linux POC :...

WordPress Trinity theme Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress Trinity theme Arbitrary File Download Vulnerability Date: 9/10/2014 Google Dork : inurl:/wp-content/themes/trinity/lib Exploit Author: Mr.Doel Vendor Homepage: https://churchthemes.net/themes/trinity/ Tested on: Window...

WordPress Authentic Arbitrary File Download Vulnerability

WordPress Authentic theme suffers from an arbitrary file download vulnerability. Note that this finding houses site-specific data. |||||||||||||||||||||||||||||||||||||||||||||||||| |-------------------------------------------------------------------------| | Exploit Title: Wordpress Authentic...

WordPress Epic Arbitrary File Download Vulnerability

WordPress Epic theme suffers from an arbitrary file download vulnerability. Note that this finding houses site-specific data. |||||||||||||||||||||||||||||||||||||||||||||||||| |-------------------------------------------------------------------------| | Exploit Title: Wordpress epic theme...

WordPress Trinity Theme Arbitrary File Download

Exploit Title: Wordpress Trinity theme Arbitrary File Download Vulnerability Date: 9/10/2014 Google Dork : inurl:/wp-content/themes/trinity/lib Exploit Author: Mr.Doel Vendor Homepage: https://churchthemes.net/themes/trinity/ Tested on: Windows 7 POC :...

WordPress Urban City Arbitrary File Download Vulnerability

WordPress Urban City theme suffers from an arbitrary file download vulnerability. Note that this finding houses site-specific data. |||||||||||||||||||||||||||||||||||||||||||||||||| |-------------------------------------------------------------------------| | Exploit Title: Wordpress urban city...

Jenkins 1.578 - Multiple Vulnerabilities

Affected Vendor: http://jenkins-ci.org/ Date: 03/09/2014 Discovered by: JoeV Type of vulnerability: CSRF and Command Execution Tested on: Windows 7 Version : 1.578 Description: Jenkins is susceptible to CSRF attack and command execution. Using groovy one can fire any command and get it executed b...

WordPress Epic Arbitrary File Download

|||||||||||||||||||||||||||||||||||||||||||||||||| |-------------------------------------------------------------------------| | Exploit Title: Wordpress epic theme Arbitrary File Download Vulnerability | | Google Dork: inurl:wp-content/themes/epic | | Date : Date: 2014-09-07 | | Exploit Author:...

WordPress Urban City Arbitrary File Download

|||||||||||||||||||||||||||||||||||||||||||||||||| |-------------------------------------------------------------------------| | Exploit Title: Wordpress urban city Arbitrary File Download Vulnerability | | Google Dork: inurl:wp-content/themes/urbancity | | Date : Date: 2014-09-07 | | Exploit...

Jenkins 1.578 - Multiple Vulnerabilities

Jenkins 1.578 - Multiple Vulnerabilities Affected Vendor: http://jenkins-ci.org/ Date: 03/09/2014 Discovered by: JoeV Type of vulnerability: CSRF and Command Execution Tested on: Windows 7 Version : 1.578 Description: Jenkins is susceptible to CSRF attack and command execution. Using groovy one c...

PHP Stock Management System 1.02 - Multiple Persistent Cross Site Scripting Vulnerabilities

Exploit for php platform in category web applications ​ Exploit Title: Multiple Persistent Cross Site Scripting Vulnerabilities in PHP Stock Management System 1.02 Date: 25 Aug 2014 Exploit Author: ​Ragha Deepthi K R Vendor Homepage: ​http://www.posnic.com/​ Software Link:​...

WordPress Antioch Arbitrary File Download

|||||||||||||||||||||||||||||||||||||||||||||||||| |-------------------------------------------------------------------------| | Exploit Title: Wordpress Antioch Theme Arbitrary File Download Vulnerability | | Google Dork: inurl:wp-content/themes/antioch | | Date : Date: 2014-09-07 | | Exploit...

WordPress Spider Facebook 1.0.8 SQL Injection

Exploit Title : Wordpress Spider Facebook 1.0.8 Authenticated SQL Injection Exploit Author : Claudio Viviani Vendor Homepage : http://web-dorado.com/ Software Link : http://downloads.wordpress.org/plugin/spider-facebook.1.0.8.zip Date : 2014-08-25 Tested on : Windows 7 / Mozilla Firefox Linux /...

Wordpress Plugins Premium Gallery Manager Unauthenticated Configuration Access Vulnerability

Exploit for php platform in category web applications Exploit Title : Wordpress Plugins Premium Gallery Manager Unauthenticated Configuration Access Vulnerability Author : Hannaichi @dntkun Date : February 5th, 2014 Type : php, html, htm, asp, etc. Category : Web Applications Vulnerability :...

WordPress Plugin Premium Gallery Manager - Configuration Access

WordPress Plugin Premium Gallery Manager - Configuration Access Exploit Title : Wordpress Plugins Premium Gallery Manager Unauthenticated Configuration Access Vulnerability Author : Hannaichi @dntkun Date : February 5th, 2014 Type : php, html, htm, asp, etc. Category : Web Applications...

Jenkins 1.578 Cross Site Request Forgery / Command Execution

Jenkins version 1.578 suffers from cross site request forgery and command execution vulnerabilities. Affected Vendor: http://jenkins-ci.org/ Date: 03/09/2014 Discovered by: JoeV Type of vulnerability: CSRF and Command Execution Tested on: Windows 7 Version : 1.578 Description: Jenkins is...

Wordpress Huge-IT Image Gallery 1.0.1 Authenticated SQL Injection

No description provided by source. Exploit Title : Wordpress Huge-IT Image Gallery 1.0.1 Authenticated SQL Injection Exploit Author : Claudio Viviani Vendor Homepage : http://huge-it.com/ Software Link : http://downloads.wordpress.org/plugin/gallery-images.zip Mirror Link :...

HTML Help Workshop 1.4 - (SEH) Buffer Overflow

No description provided by source. ---------------------------------------------------------------------------------------------------- Exploit Title: HTML Help Workshop - SEH Buffer Overflow Date: August 24 2014 Exploit Author: Moroccan Kingdom MKD Software Link:...

Impress CMS 1.3.7 Open Redirect

Affected Vendor: http://www.impresscms.org/ Date: 03/09/2014 Discovered by: JoeV Type of vulnerability: URL Redirection Tested on: Windows 7 Version : 1.3.7 Description: Impress CMS is susceptible to URL direction attack. When a malicious user sends a payload as...