exploit the possibilities

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 2 of 2

Files from Paul

Atlassian Crowd pdkinstall Remote Code Execution

Posted Aug 12, 2021

Authored by Paul, Corben Leo, Grant Willcox | Site metasploit.com

This Metasploit module can be used to upload a plugin on Atlassian Cloud via the pdkinstall development plugin as an unauthenticated attacker. The payload is uploaded as a JAR archive containing a servlet using a POST request to /crowd/admin/uploadplugin.action. The check command will check that the /crowd/admin/uploadplugin.action page exists and that it responds appropriately to determine if the target is vulnerable or not.

tags | exploit

advisories | CVE-2019-11580

SHA-256 | 3e45d1541858eca07bdf958f9f224a9b488c705ba65f4fdb0909d25e3d5eb68f

Download | Favorite | View

youtube-js.txt

Posted Dec 28, 2006

Authored by Paul

YouTube.com has a flaw that allows for arbitrary javascript execution.

tags | exploit, arbitrary, javascript

SHA-256 | f13cd7d75067b0ec8bcd4a8f9b7c93954b23f993fd2eeac563f81586602707db

Download | Favorite | View