what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 126 - 150 of 290

Files from MustLive

IBM Lotus Domino 8.5.3 XSS / CSRF / Redirection

Posted Feb 15, 2013

Authored by MustLive

IBM Lotus Domino version 8.5.3 suffers from cross site request forgery, cross site scripting, and redirection vulnerabilities.

tags | exploit, vulnerability, xss, csrf

SHA-256 | 1130fe93667cda489b3f670cc5b50a599e490b92326bc69ca5a9d3e2a7a7cdbe

Download | Favorite | View

WordPress Flash News XSS / DoS / Path Disclosure / Shell Upload

Posted Feb 2, 2013

Authored by MustLive

The WordPress Flash News theme suffers from cross site scripting, denial of service, path disclosure, abuse of functionality, and remote shell upload vulnerabilities.

tags | exploit, remote, denial of service, shell, vulnerability, xss, info disclosure

SHA-256 | 1ac281bb3a53ce04e90aed1ef3e8ae9f688dadce3a18924247fb39aa0095c0a6

Download | Favorite | View

WordPress Chocolate Theme XSS / Denial Of Service / Shell Upload

Posted Jan 23, 2013

Authored by MustLive

The WordPress Chocolate theme suffers from cross site scripting, denial of service, path disclosure, abuse of functionality, and remote shell upload vulnerabilities.

tags | exploit, remote, denial of service, shell, vulnerability, xss, info disclosure

SHA-256 | 0a3fbe3735d9d16287a5efb8d639939ce812da95e23a71e2a0731c6b0b790dcb

Download | Favorite | View

WordPress Daily Edition Mouss XSS / Disclosure / Shell Upload

Posted Jan 14, 2013

Authored by MustLive

The WordPress Daily Edition Mouss theme suffers from denial of service, abuse of functionality, cross site scripting, information disclosure, and remote shell upload vulnerabilities.

tags | exploit, remote, denial of service, shell, vulnerability, xss, info disclosure

SHA-256 | 335a5efd918ad47de67d9346c79676913e0a6826499a0695731fbd09eb8af336

Download | Favorite | View

WordPress Floating Tweets 1.0.1 XSS / Directory Traversal

Posted Jan 12, 2013

Authored by MustLive

WordPress Floating Tweets versions 1.0.1 and below suffer from cross site scripting, path disclosure, and directory traversal vulnerabilities.

tags | exploit, vulnerability, xss, file inclusion

SHA-256 | 66b5159581cff7c6e7158f2d4d68344064f524235219abbacb8b3267adfcbb35

Download | Favorite | View

WordPress RocketTheme Content Spoofing / Cross Site Scripting

Posted Dec 30, 2012

Authored by MustLive

33 new themes for WordPress that are made by RocketTheme suffer from cross site scripting, path disclosure, and content spoofing vulnerabilities.

tags | exploit, spoof, vulnerability, xss

SHA-256 | b113d5f193f4f8045548d75e1c1eb2e88da81e01e5f5af92b4d2a24021042799

Download | Favorite | View

WordPress Rokbox Themes Content Spoofing / XSS

Posted Dec 24, 2012

Authored by MustLive

Multiple WordPress themes by RocketTheme suffer from cross site scripting, path disclosure, and content spoofing vulnerabilities.

tags | exploit, spoof, vulnerability, xss

SHA-256 | b64d5ae444d8cc1bf39555f4b065ea716c63e9ea02efe5949842af75d06a8ff8

Download | Favorite | View

WordPress BuddyPress Cross Site Scripting / Content Spoofing

Posted Dec 21, 2012

Authored by MustLive

WordPress BuddyPress plugin suffers from cross site scripting and content spoofing vulnerabilities.

tags | exploit, spoof, vulnerability, xss

SHA-256 | a2a973b41ca8cc4e4212a323806b5d414908948989341121167117923b861155

Download | Favorite | View

WordPress Rokbox 2.13 XSS / DoS / File Upload / Path Disclosure

Posted Dec 17, 2012

Authored by MustLive

Rokbox version 2.13 for WordPress suffers from content spoofing, cross site scripting, denial of service, path disclosure, and various other vulnerabilities.

tags | exploit, denial of service, spoof, vulnerability, xss

SHA-256 | 51a81a8d051d242f2a2efc2c318db1e018963bd4d73085533099aba88545bf32

Download | Favorite | View

Microsoft Internet Explorer 7 Denial Of Service

Posted Dec 6, 2012

Authored by MustLive

Microsoft Internet Explorer version 7.00.5730.13 suffers from a redirector denial of service vulnerability.

tags | advisory, denial of service

SHA-256 | 2798ded16a038d33c58d85f9d5836a22910c532d41a00d477762754385d4cbe6

Download | Favorite | View

Libsyn Cross Site Scripting

Posted Dec 2, 2012

Authored by MustLive

Libsyn suffers from a cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | 9bc6ae565d65dd1448fc6f4b7ebde35b08e70b4fa211001f0d3101fd370ce4c1

Download | Favorite | View

MODx 1.0.6 XSS / Abuse Functionality / Denial Of Service

Posted Nov 29, 2012

Authored by MustLive

MODx versions 1.0.6 and below suffer from cross site request forgery, abuse of functionality, and denial of service vulnerabilities.

tags | exploit, denial of service, vulnerability, csrf

SHA-256 | 06e2431993e324f2e749b37a6e7c7e00a479836f6dfc847e0cea7aa9db329961

Download | Favorite | View

SWF Upload f10 / f11 Cross Site Scripting

Posted Nov 25, 2012

Authored by MustLive

swfupload_f10.swf and swfupload_f11.swf both suffer from a cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | a064f09576b12ab9d5a45fe75c0226e749c3b0025cd2959f6177a48202d94b92

Download | Favorite | View

swfupload_f8.swf Cross Site Scripting

Posted Nov 21, 2012

Authored by MustLive

swfupload_f8.swf suffers from a cross site scripting vulnerability. Affected systems are TinyMCE, Squeeze Documents for SPIP, Upload Manager for Radiant CMS, AionWeb, Liferay Portal (Community Edition, which earlier was called Standard Edition, and Enterprise Edition), SurgeMail, and symfony.

tags | exploit, xss

SHA-256 | 7cb01fdd1e05d212be9f91472666f74a1a2ccbefb7f0261aa01eccfa4a976751

Download | Favorite | View

MODx 1.0.6 Brute Force / Path Disclosure

Posted Nov 20, 2012

Authored by MustLive

MODx versions 1.0.6 and below suffer from brute force and path disclosure vulnerabilities.

tags | advisory, cracker, vulnerability, info disclosure

SHA-256 | 3fcdf4269d467ee8f82d84c5299a488fa4bfb70f46049f9d3f6361fd6aa59922

Download | Favorite | View

SWF Upload Cross Site Scripting

Posted Nov 13, 2012

Authored by MustLive

Dotclear, InstantCMS, AionWeb, and Dolphin all include a version of swfupload.swf that suffers from a cross site scripting vulnerability.

tags | exploit, xss

advisories | CVE-2012-3414

SHA-256 | a2a158397ae79c78e46a0c4935d002352662c55b69f1181ce13b4acd1f39d885

Download | Favorite | View

WordPress 3.3.1 swfupload.swf Cross Site Scripting

Posted Nov 9, 2012

Authored by MustLive

WordPress versions 2.5 through 3.3.1 suffer from a cross site scripting vulnerability in swfupload.swf.

tags | exploit, xss

SHA-256 | 3416c49055bebf361d1b122069bea5e7c90603b251960c5d38d0e202bb70d922

Download | Favorite | View

Bitrix Site Manager 11.5 XSS / Content Spoofing

Posted Oct 22, 2012

Authored by MustLive

Bitrix Site Manager versions 11.5 and below suffers from bypass, cross site scripting, and content spoofing vulnerabilities.

tags | exploit, spoof, vulnerability, xss

SHA-256 | b3009b004cfde8791d37b7bf011a32476fa5f90ea5bc092b19347929193a8371

Download | Favorite | View

WordPress Wordfence Security 3.3.5 Cross Site Scripting

Posted Oct 21, 2012

Authored by MustLive

WordPress Wordfence Security plugin version 3.3.5 suffers from a cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | 4bf6e63e563ff09b68d12fcb993db84a808459650088a6ce63814d719dcb0e72

Download | Favorite | View

Megapolis.Portal Manager Cross Site Scripting

Posted Oct 7, 2012

Authored by MustLive

Megapolis.Portal Manager suffers from multiple cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss

SHA-256 | e126ebb4ed51569934075ffa29804b50742b9235b045862315c576e058de3226

Download | Favorite | View

IBM Lotus Notes Traveler 8.5.3 XSS / CSRF / Brute Force

Posted Oct 2, 2012

Authored by MustLive

IBM Lotus Notes Traveler versions 8.5.3 and below suffer from cross site request forgery, cross site scripting, brute force, and redirection vulnerabilities.

tags | exploit, vulnerability, xss, csrf

SHA-256 | 95514a5e1a4429bebd982e1837c3801ea2f7ce55bc98c72e1145cda686b8a99e

Download | Favorite | View

IFOBS Cross Site Request Forgery / Cross Site Scripting

Posted Sep 24, 2012

Authored by MustLive

IFOBS suffers from cross site scripting and cross site request forgery vulnerabilities.

tags | exploit, vulnerability, xss, csrf

SHA-256 | 63668d72bd95647224efbfb7997f0b4e6709fb1a368273a9d0dcb1e4586bb573

Download | Favorite | View

IFOBS Cross Site Scripting / Brute Force

Posted Sep 15, 2012

Authored by MustLive

IFOBS suffers from cross site scripting and brute forcing vulnerabilities.

tags | exploit, vulnerability, xss

SHA-256 | 065d53ba03513e5662ef8b879522b39ede97e028bf86ca1db8b8b6aa9679f634

Download | Favorite | View

IBM Lotus Domino 8.5.3 XSS / HTTP Response Splitting

Posted Aug 31, 2012

Authored by MustLive

IBM Lotus Domino versions 8.5.3 and below suffer from multiple cross site scripting and HTTP response splitting vulnerabilities.

tags | advisory, web, vulnerability, xss

advisories | CVE-2012-3301, CVE-2012-3302

SHA-256 | e2ec2801a6a71f9e656e6e8e9c3558c183a1fde77382ccb0d88a933208ed501c

Download | Favorite | View

Drupal CAPTCHA 6.x Access Bypass

Posted Aug 30, 2012

Authored by MustLive, LeeSai | Site drupal.org

The Drupal CAPTCHA third party module version 6.x suffers from an access bypass vulnerability.

tags | advisory, bypass

SHA-256 | a9ecadeb7880d395b503ef8de23d0b45db4b244be4b2badcc51a41b8806d0e77

Download | Favorite | View