what you don't know can hurt you
Home Files News &[SERVICES_TAB]About Contact Add New
Showing 26 - 50 of 57 RSS Feed

Files from Tom Adams

First Active2014-02-19
Last Active2018-06-12
Watu PRO 4.8.8.4 Cross Site Scripting
Posted Sep 1, 2015
Authored by Tom Adams

Watu PRO version 4.8.8.4 suffers from a stored cross site scripting vulnerability.

tags | exploit, xss
SHA-256 | 720722e6007782ede3707fb5ce01ddfaf1a95e702e90393cf7603916016c0b30
Download | Favorite | View
WordPress Private Only 3.5.1 CSRF / Cross Site Scripting
Posted Aug 27, 2015
Authored by Tom Adams

WordPress Private Only plugin version 3.5.1 suffers from cross site request forgery and cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss, csrf
advisories | CVE-2015-5483
SHA-256 | dab9719c8bbda7fbb1bd873063f790d3b7aeb28984b3a0ff28b38002c26621b1
Download | Favorite | View
WordPress OAuth2 Complete 3.1.3 Insecure Random
Posted Aug 12, 2015
Authored by Tom Adams

OAuth Complete for WordPress version 3.1.3 uses a pseudorandom number generator which is non-cryptographically secure.

tags | advisory
SHA-256 | ccfcafdacba8b2d81d2bd3c376141e4d320efff33fafc4ebcfbea1b96d247dc9
Download | Favorite | View
WordPress iframe 3.0 Stored Cross Site Scripting
Posted Aug 10, 2015
Authored by Tom Adams

WordPress iframe plugin version 3.0 suffers from a stored cross site scripting vulnerability.

tags | exploit, xss
SHA-256 | e1c0096846f05588c5c54423834ef3075b290b167dc1dac3c8e73c3ca44a1706
Download | Favorite | View
WordPress iframe 3.0 Reflective Cross Site Scripting
Posted Aug 10, 2015
Authored by Tom Adams

WordPress iframe plugin version 3.0 suffers from a reflective cross site scripting vulnerability.

tags | exploit, xss
SHA-256 | 8e9311f769baf052389aa118740fd7ecc03cfc381229836797f134d88da03189
Download | Favorite | View
Google Analytics By Yoast Premium 5.4.4 Cross Site Scripting
Posted Aug 10, 2015
Authored by Tom Adams

Google Analytics by Yoast Premium version 5.4.4 suffers from a stored cross site scripting vulnerability.

tags | exploit, xss
SHA-256 | c0163ebe83b5d4c6dcaea3d2ad3c2581e8e147f06e227869bce5efa31c905550
Download | Favorite | View
WordPress 3.8.1 / 3.8.2 / 4.2.2 Cross Site Request Forgery
Posted Aug 6, 2015
Authored by Tom Adams

A cross site request forgery vulnerability in the comment form of WordPress versions 3.8.1, 3.8.2, and 4.2.2 allows for administrative impersonation.

tags | exploit, csrf
SHA-256 | 09bde7dbd69e0407c983900deddc0b9dca95ac73b0615577e5ae18fe9eb615ce
Download | Favorite | View
WordPress Flickr Justified Gallery 3.3.6 Cross Site Scripting
Posted Jul 28, 2015
Authored by Tom Adams

WordPress Flickr Justified Gallery plugin version 3.3.6 suffers from a cross site scripting vulnerability.

tags | exploit, xss
SHA-256 | 976c6087ecb03d8b8cae5e43e9e600acaa4392bab73a3bae21e132826b40bada
Download | Favorite | View
WordPress BuddyPress Activity Plus 1.5 CSRF / File Deletion
Posted Jul 15, 2015
Authored by Tom Adams

WordPress BuddyPress Activity Plus plugin version 1.5 suffers from cross site request forgery and arbitrary file deletion vulnerabilities.

tags | exploit, arbitrary, vulnerability, info disclosure, csrf
SHA-256 | 61aad3a7f270847cbbf9e3c63259099d37595b528db86f197368bc0673bdaad6
Download | Favorite | View
WordPress Subscribe To Comments 2.1.2 LFI / Code Execution
Posted Jul 15, 2015
Authored by Tom Adams

WordPress Subscribe to Comments plugin version 2.1.2 suffers from code execution and local file inclusion vulnerabilities.

tags | exploit, local, vulnerability, code execution, file inclusion
SHA-256 | 4c5f361d4f71da927a1ede8b63f1aebbdf421dbdd9ffd77d4020a51acdca545b
Download | Favorite | View
WordPress Plotly 1.0.2 Cross Site Scripting
Posted Jul 14, 2015
Authored by Tom Adams

WordPress Plotly plugin version 1.0.2 suffers from a persistent cross site scripting vulnerability.

tags | exploit, xss
advisories | CVE-2015-5484
SHA-256 | 8c8ecc962a319c7bfa3171c85e8bd93531f424c4f1101eaddd89bbe50f29c468
Download | Favorite | View
The Events Calender: Eventbrite Tickets 3.9.6 Cross Site Scripting
Posted Jul 14, 2015
Authored by Tom Adams

The WordPress Eventbrite Tickets plugin from The Events Calendar version 3.9.6 suffers from a cross site scripting vulnerability.

tags | exploit, xss
advisories | CVE-2015-5485
SHA-256 | 9d007e52a0aca85109b108602e13c60f95a5b63d24894f873375bcaaa6a3c02f
Download | Favorite | View
WordPress GD bbPress Attachments 2.1 Cross Site Scripting
Posted Jul 12, 2015
Authored by Tom Adams

WordPress GD bbPress Attachments plugin version 2.1 suffers from a cross site scripting vulnerability.

tags | exploit, xss
SHA-256 | 910aec15623881f8a6ea0df0172bf7e2424b9a95dcbe4b3d22a8a0a635673419
Download | Favorite | View
WordPress GD bbPress Attachments 2.1 Local File Inclusion
Posted Jul 12, 2015
Authored by Tom Adams

WordPress GD bbPress Attachments plugin version 2.1 suffers from a local file inclusion vulnerability.

tags | exploit, local, file inclusion
SHA-256 | d78cab793427b060a48099ccdb29ae7c0a9ea2b454b2029c55de9650174d00c4
Download | Favorite | View
WordPress Content Slide 1.4.2 CSRF / Cross Site Scripting
Posted Apr 19, 2015
Authored by Tom Adams

WordPress Content Slide plugin version 1.4.2 suffers from cross site request forgery and stored cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss, csrf
SHA-256 | 4766ca76e4e167f91e8d6586e49ab8b197c4767255485e74d57daa27c79079ed
Download | Favorite | View
WordPress Contact Form DB 2.8.29 Cross Site Request Forgery
Posted Mar 4, 2015
Authored by Tom Adams

WordPress Contact Form DB plugin version 2.8.29 suffers from a cross site request forgery vulnerability.

tags | exploit, csrf
advisories | CVE-2015-1874
SHA-256 | 17c045c565a5964067be268befbffcced1479a51cc769949b62b5c8feece37c7
Download | Favorite | View
WordPress Content Audit 1.6 Blind SQL Injection
Posted Oct 2, 2014
Authored by Tom Adams

WordPress Content Audit plugin version 1.6 suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection
advisories | CVE-2014-5389
SHA-256 | 6d1bb6dd85f2116cd4554ec0396d40bab0f7320fa84b6159add034a733189115
Download | Favorite | View
WordPress WP-Ban 1.62 Bypass
Posted Sep 17, 2014
Authored by Tom Adams

WordPress WP-Ban plugin version 1.62 suffers from a bypass vulnerability when a properly minted X-Forwarded-For header is used.

tags | exploit, bypass
advisories | CVE-2014-6230
SHA-256 | 993efa6dd07b224e9bb5b8fdab33d68bb547334c234e6e0ca083f1086bcc1733
Download | Favorite | View
WordPress Login Widget With Shortcode 3.1.1 CSRF / XSS
Posted Sep 17, 2014
Authored by Tom Adams

WordPress Login Widget With Shortcode plugin version 3.1.1 suffers from cross site request forgery and cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss, csrf
SHA-256 | 53f460ac91c7d419b8bcb368ddda31921d0dbe302556c55c904f552f999c5396
Download | Favorite | View
WordPress Advanced Access Manager 2.8.2 File Write / Code Execution
Posted Sep 3, 2014
Authored by Tom Adams

WordPress Advanced Access Manager plugin version 2.8.2 suffers from arbitrary file write and code execution vulnerabilities.

tags | exploit, arbitrary, vulnerability, code execution
advisories | CVE-2014-6059
SHA-256 | 003e5940849ab6a302ac199a8b2d726fb390bc112f79728c3bd20e043f321df8
Download | Favorite | View
WordPress Mobile Pack 2.0.1 Information Disclosure
Posted Aug 20, 2014
Authored by Tom Adams

WordPress Mobile Pack version 2.0.1 suffers from an information disclosure vulnerability that allows anybody the ability to read password protected posts.

tags | advisory, info disclosure
SHA-256 | dff0a420e3f4d47e4e4afa42f423edf9c2e1f5d2a86e892ebba2995540b9076f
Download | Favorite | View
WordPress Theme My Login 6.3.9 Local File Inclusion
Posted Jun 30, 2014
Authored by Tom Adams

WordPress Theme My Login plugin version 6.3.9 provides access to arbitrary files and could facilitate arbitrary code execution.

tags | exploit, arbitrary, code execution, file inclusion
SHA-256 | 4c53920b98114515bc1f2346def95625fb01546704b44a6a30f469a4f29a1dea
Download | Favorite | View
WordPress JW Player 2.1.2 Cross Site Request Forgery
Posted Jun 10, 2014
Authored by Tom Adams

WordPress JW Player plugin for Flash and HTML5 video version 2.1.2 suffers from a cross site request forgery vulnerability.

tags | exploit, csrf
SHA-256 | cdad1816681799d29e33dcf89e7fae83ab2ea38a2b1dc10c7013fdde5171470e
Download | Favorite | View
WordPress Member Approval Cross Site Request Forgery
Posted Jun 10, 2014
Authored by Tom Adams

WordPress Member Approval plugin suffers from a cross site request forgery vulnerability.

tags | exploit, csrf
advisories | CVE-2014-3850
SHA-256 | cf0e211277b3af8f29f890eaee047abd87d67ab49da7b4f8644f2926c3e15974
Download | Favorite | View
WordPress Featured Comments 1.2.1 Cross Site Request Forgery
Posted Jun 10, 2014
Authored by Tom Adams

WordPress Featured Comments plugin version 1.2.1 suffers from a cross site request forgery vulnerability.

tags | exploit, csrf
SHA-256 | d55e12b29bb097aaa69cddaf0f0966990c52d8ce0e2c0f13e9ce04ea64081b96
Download | Favorite | View
Page 2 of 3
Back123Next

File Archive:

April 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Apr 1st
    10 Files
  • 2
    Apr 2nd
    26 Files
  • 3
    Apr 3rd
    40 Files
  • 4
    Apr 4th
    6 Files
  • 5
    Apr 5th
    26 Files
  • 6
    Apr 6th
    0 Files
  • 7
    Apr 7th
    0 Files
  • 8
    Apr 8th
    22 Files
  • 9
    Apr 9th
    14 Files
  • 10
    Apr 10th
    10 Files
  • 11
    Apr 11th
    13 Files
  • 12
    Apr 12th
    14 Files
  • 13
    Apr 13th
    0 Files
  • 14
    Apr 14th
    0 Files
  • 15
    Apr 15th
    30 Files
  • 16
    Apr 16th
    10 Files
  • 17
    Apr 17th
    22 Files
  • 18
    Apr 18th
    0 Files
  • 19
    Apr 19th
    0 Files
  • 20
    Apr 20th
    0 Files
  • 21
    Apr 21st
    0 Files
  • 22
    Apr 22nd
    0 Files
  • 23
    Apr 23rd
    0 Files
  • 24
    Apr 24th
    0 Files
  • 25
    Apr 25th
    0 Files
  • 26
    Apr 26th
    0 Files
  • 27
    Apr 27th
    0 Files
  • 28
    Apr 28th
    0 Files
  • 29
    Apr 29th
    0 Files
  • 30
    Apr 30th
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Site Links
News by Month
News Tags
Files by Month
File Tags
File Directory
About Us
History & Purpose
Contact Information
Terms of Service
Privacy Statement
Copyright Information
Services
Security Services
Hosting By
Rokasec
close