WordPress Zingiri Web Shop 2.5.0 Shell Upload

|| | || || | | | | 0 | In the name of GOD | -|- | | | ||||| Exploit Title: Wordpress Zingiri-web-shop 2.5.0 Plugin | Arbitrary File Upload Vulnerability | Version: 2.5.0 Software Link: www.zingiri.com/plugins-and-addons/web-shop/ Google Dork: inurl:"/wp-content/plugins/zingiri-web-shop/" Exploit...

WordPress Madebymilk SQL Injection

|| | || || | | | | 0 | In the name of GOD | -|- | | | ||||| Exploit Title: Wordpress madebymilk Theme SQL Injection | Google Dork: inurl:/madebymilk/voting-popup.php | Exploit Author: Ashiyane Digital Security Team Category: Web Application Tested on: Windows 7 | | Location:...

Microsoft Windows Kernel 'Win32k.sys' TrueType字体解析远程代码执行漏洞(MS12-075)

BUGTRAQ ID: 56457 CVE ID: CVE-2012-2897 Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows 7内核处理特制的TrueType字体文件时存在远程代码执行漏洞，如果用户打开特制的TrueType字体文件，此漏洞可允许远程代码执行。 0 Microsoft Windows 8 Microsoft Windows 7 Microsoft Windows XP Professional Microsoft Windows XP Home Edition Microsoft Windows Vista...

Microsoft Windows Kernel 'Win32k.sys' 本地权限提升漏洞(CVE-2012-2553) (MS12-075)

BUGTRAQ ID: 56448 CVE ID: CVE-2012-2553 Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows XP SP3、Windows Server 2003 SP2、Windows Vista SP2、Windows Server 2008 SP2、Windows 7 Gold/SP1内核模式驱动程序内的win32k.sys存在释放后重新漏洞，通过特制的应用，可允许本地用户获取权限。 0 Microsoft Windows 8 Microsoft Windows 7 Microsoft Windows XP...

WordPress ArribaLaEsteban SQL Injection

|| | || || | | | | 0 | In the name of GOD | -|- | | | ||||| Exploit Title:Wordpress | ArribaLaEsteban theme SQL Injection Vulnerability | Google Dork: inurl:/estadisticas/fichajugador.php Exploit Author: Ashiyane Digital Security Team Category: Web Application Tested on: Windows 7 | | Location:...

WordPress List Communities SQL Injection

|| | || || | | | | 0 | In the name of GOD | -|- | | | ||||| Exploit Title: Wordpress listcommunities SQL Injection | Google Dork: inurl:/listcommunities/communityprofile.php| Exploit Author: Ashiyane Digital Security Team Category: Web Application Tested on: Windows 7 | | Location:...

SafeNet PrivAgent.ocx ActiveX control ChooseFilePath buffer overflow

Added: 11/16/2012 BID: 56297 OSVDB: 86723 Background SafeNet Hardware Against Software Piracy HASP solutions include the PrivAgent.ocx ActiveX control. Problem A buffer overflow vulnerability in the ChooseFilePath method of the PrivAgent.ocx ActiveX control allows command execution when a user...

Friends In War Make Or Break 1.3 SQL Injection

Exploit Title: friendsinwar Make or break V1.3 SQL Injection authbypass Vulnerability Date: 13.10.201 Exploit Author: d3b4g Vendor Homepage: http://www.friendsinwar.com Software Link: http://www.friendsinwar.com/scriptdemo/makeorbreak/admin/login.php Tested on: Windows 7 Blog: d3b4g.me...

friendsinwar FAQ Manager (view_faq.php, question param) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: friendsinwar FAQ Manager SQL Injection URL Vulnerability Date: 16.11 2012 Exploit Author: unsuprise Vendor Homepage: http://www.friendsinwar.com Software Link:http://www.friendsinwar.com/scriptdemo/thefaqmanager/ Tested on:...

SafeNet PrivAgent.ocx ActiveX control ChooseFilePath buffer overflow

Added: 11/16/2012 BID: 56297 OSVDB: 86723 Background SafeNet Hardware Against Software Piracy HASP solutions include the PrivAgent.ocx ActiveX control. Problem A buffer overflow vulnerability in the ChooseFilePath method of the PrivAgent.ocx ActiveX control allows command execution when a user...

friendsinwar FAQ Manager - 'view_faq.php?question' SQL Injection

Exploit Title: friendsinwar FAQ Manager SQL Injection URL Vulnerability Date: 16.11 2012 Exploit Author: unsuprise Vendor Homepage: http://www.friendsinwar.com Software Link:http://www.friendsinwar.com/scriptdemo/thefaqmanager/ Tested on: Windows 7, Xampp Blog : unsuprise.org Bug : viewfaq.php li...

Friends in War Make or Break 1.3 - Authentication Bypass

Exploit Title: friendsinwar Make or break V1.3 SQL Injection authbypass Vulnerability Date: 13.10.201 Exploit Author: d3b4g Vendor Homepage: http://www.friendsinwar.com Software Link: http://www.friendsinwar.com/scriptdemo/makeorbreak/admin/login.php Tested on: Windows 7 Blog: d3b4g.me...

Friendsinwar FAQ Manager XSS / SQL Injection

Exploit Title: friendsinwar FAQ Manager SQL Injection authbypass Vulnerability Date: 13.10.201 Exploit Author: d3b4g Vendor Homepage: http://www.friendsinwar.com Software Link: http://www.friendsinwar.com/scriptdemo/thefaqmanager/ Tested on: Windows 7 Blog: d3b4g.me...

MYRE Realty Manager XSS / SQL Injection

Exploit Title:MYRE Realty Manager Multiple Vulnerabilities Date: 13.10.201 Exploit Author: d3b4g Vendor Homepage:http://myrephp.com Software Link: http://myrephp.com/demo2/ Tested on: Windows 7 Blog: d3b4g.me ---------------------------------------------------------------------------------- SQL...

CVE-2012-2530

Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application, aka "Win32k U...

Design/Logic Flaw

Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application, aka "Win32k Use After Free...

Design/Logic Flaw

Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application, aka "Win32k U...

MYREphp Vacation Rental Software Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: MYREphp Vacation Rental Software Multiple Vulnerabilities Date: 13.10.201 Exploit Author: d3b4g Vendor Homepage:http://myrephp.com Software Link: http://myrephp.com/vacation/ Tested on: Windows 7 Blog: d3b4g.me...

Myrephp Business Directory Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Myrephp Business Directory, Multiple Vulnerabilities Date: 13.10.201 Exploit Author: d3b4g Vendor Homepage:http://myrephp.com Software Link: http://myrephp.com/biz/ Tested on: Windows 7 Blog: d3b4g.me...

MYREphp Vacation Rental Software - Multiple Vulnerabilities

MYREphp Vacation Rental Software - Multiple Vulnerabilities Exploit Title: MYREphp Vacation Rental Software Multiple Vulnerabilities Date: 13.10.201 Exploit Author: d3b4g Vendor Homepage:http://myrephp.com Software Link: http://myrephp.com/vacation/ Tested on: Windows 7 Blog: d3b4g.me...