WordPress Theme Highlight Premium – Cross-Site Request Forgery / Arbitrary File Upload
#Title : Wordpress Highlight Premium Themes CSRF File Upload Vulnerability
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 291
RASPcalendar 1.01 (ASP) – Admin Login
---------------------------------------------------
Vanilla Forums 2.0 < 2.0.18.5 - 'class.utilitycontroller.php' PHP Object Injection
-------------------------------------------------------------------------------------------
Flatpress 1.0 – Remote Code Execution
#!/usr/bin/perl
appRain 3.0.2 – Blind SQL Injection
Advisory ID: HTB23177
Vivotek IP Cameras – RTSP Authentication Bypass
Core Security - Corelabs Advisory
Project’Or RIA 3.4.0 – ‘objectDetail.php?objectId’ SQL Injection
=============================================
Sagemcom F@st 3184 2.1.11 – Multiple Vulnerabilities
+------------------------------------------------------------------------------+
Horde Groupware Web Mail Edition 5.1.2 – Cross-Site Request Forgery (2)
#############################
Microweber 0.905 – Error-Based SQL Injection
===============================================================================
WordPress Theme Kernel – Arbitrary File Upload
###################################################################################################
Hanso Player 2.5.0 – ‘m3u’ Buffer Overflow (Denial of Service)
#!/usr/bin/env ruby
Apache Tomcat 5.5.25 – Cross-Site Request Forgery
+--------------------------------------------------------------------------------------------------------------------...
Google Android – Signature Verification Security Bypass
source: https://www.securityfocus.com/bid/63547/info
Plogue Sforzando 1.665 – Buffer Overflow (SEH) (PoC)
#!/usr/bin/perl
Practico 13.9 – Multiple Vulnerabilities
Practico 13.9 Multiple Vulnerabilities
Watermark Master 2.2.23 – Local Buffer Overflow (SEH)
#!/usr/bin/python
ImpressPages CMS 3.6 – Arbitrary File Deletion
ImpressPages CMS v3.6 Remote Arbitrary File Deletion Vulnerability
WordPress Theme Switchblade 1.3 – Arbitrary File Upload
###################################################################################################
ImpressPages CMS 3.6 – ‘manage()’ Remote Code Execution
#!/usr/bin/python
WordPress Theme Think Responsive 1.0 – Arbitrary File Upload
###################################################################################################
pdirl PHP Directory Listing 1.0.4 – Cross-Site Scripting
Document Title:
WordPress Theme This Way – ‘upload_settings_image.php’ Arbitrary File Upload
source: https://www.securityfocus.com/bid/63523/info
Apache + PHP < 5.3.12 / < 5.4.2 - Remote Code Execution + Scanner
#!/usr/bin/env python
ImpressPages CMS 3.6 – Multiple Cross-Site Scripting / SQL Injection Vulnerabilities
ImpressPages CMS v3.6 Multiple XSS/SQLi Vulnerabilities
Opsview pre 4.4.1 – Blind SQL Injection
CVE-2013-5694 Blind SQL Injection in Ops View
SoftMaker Office 2012 – TextMaker Memory Corruption
Title : Softmaker Office 2012 TextMaker Memory Corruption Vulnerability (0day)
AudioCoder 0.8.22 – ‘.m3u’ Local Buffer Overflow (SEH)
#!/usr/bin/perl
Unicorn Router WB-3300NR – Cross-Site Request Forgery (Factory Reset/DNS Change)
# Exploit Title: Unicorn Router WB-3300NR CSRF (Factory Reset/DNS Change)
Openbravo ERP – XML External Entity Information Disclosure
source: https://www.securityfocus.com/bid/63431/info
Stem Innovation – ‘IZON’ Hard-Coded Credentials
Stem Innovation ‘IZON’ Hard-coded Credentials (CVE-2013-6236)
Watchguard Firewall XTM 11.7.4u1 – Remote Buffer Overflow
#!/usr/bin/perl -w
Horde Groupware Web Mail Edition 5.1.2 – Cross-Site Request Forgery (1)
#############################
Olat CMS 7.8.0.1 – Persistent Cross-Site Scripting
Document Title:
GTX CMS 2013 Optima – SQL Injection
Document Title:
Apache + PHP < 5.3.12 / < 5.4.2 - cgi-bin Remote Code Execution
On Debian and Ubuntu the vulnerability is present in the default install
XAMPP for Windows 1.8.2 – Blind SQL Injection
# Exploit Title: XAMPP for Windows 1.8.2 Blind Sql Injection
PHP RSS Reader 2010 – SQL Injection
# Exploit Title: [PHP RSS READER 2010 SQLI]
Pirelli Discus DRG A125g – Password Disclosure
#!/usr/bin/perl
BlazeDVD 6.2 – ‘.plf’ Local Buffer Overflow (SEH)
#!/usr/bin/perl
Onpub CMS 1.4/1.5 – Multiple SQL Injections
Document Title: