what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 26 - 50 of 254

Files from KedAns-Dz

Uploadify jQuery Generic File Upload

Posted Dec 24, 2012

Authored by KedAns-Dz

This Metasploit module an arbitrary file upload and code execution vulnerability in Uploadify.

tags | exploit, arbitrary, code execution, file upload

SHA-256 | a6f12738518c4ce18f38b79ba62f721ae6a586c334e491f20b73787b6ac9b356

Download | Favorite | View

Feindura CMS 2.0.4 Shell Upload

Posted Dec 24, 2012

Authored by KedAns-Dz

Feindura CMS version 2.0.4 suffers from a remote PHP shell upload vulnerability.

tags | exploit, remote, shell, php

SHA-256 | ecdc36ddddd1f08e0556a367db6dfb88df06cfe8bcf67905c47bfa7040e0a29b

Download | Favorite | View

Havalite 1.1.7 Cross Site Scripting / Shell Upload

Posted Dec 10, 2012

Authored by KedAns-Dz

Havalite version 1.1.7 suffers from cross site scripting and shell upload vulnerabilities. Some of these are known issues but the author has included a Metasploit module that demonstrates the shell upload vulnerability.

tags | exploit, shell, vulnerability, xss

advisories | CVE-2012-5892, CVE-2012-5893, CVE-2012-5894, OSVDB-80770, OSVDB-80769, OSVDB-80768

SHA-256 | b16f36dc19e8d0743633a1a4d99736d1d3e32acb6b946225ecccce25b7379ade

Download | Favorite | View

Web@All CMS 2.0 Shell Upload / Local File Inclusion

Posted Sep 6, 2012

Authored by KedAns-Dz

Web@All CMS version 2.0 suffers from remote shell upload and local file inclusion vulnerabilities.

tags | exploit, remote, web, shell, local, vulnerability, file inclusion

SHA-256 | 89fe4d72c6e0633b4f99cb3605416a0313e9dc5ff6be7db1ec4dabe98a5e2d72

Download | Favorite | View

Reverse Shell Shellcode

Posted Jul 13, 2012

Authored by KedAns-Dz

61 bytes small Unix/x86 reverse shell TCP port 30 shellcode.

tags | shell, x86, tcp, shellcode

systems | unix

SHA-256 | a9c4dce2bac819a7c3727dbb9373b2ad7d3a42ec3a4b4326b3d68c91e79d8c9d

Download | Favorite | View

Xoops Extgallery 1.0.8 Shell Upload / File Download

Posted Jul 13, 2012

Authored by KedAns-Dz

Xoops module extgallery version 1.0.8 suffers from shell upload and file download vulnerabilities.

tags | exploit, shell, vulnerability

SHA-256 | efd88a83367f65c5f985484f2a284435e4bff9c2448221292782b342964edd58

Download | Favorite | View

WordPress Generic Plugin Shell Upload

Posted Jul 13, 2012

Authored by KedAns-Dz

This Metasploit module exploits an arbitrary PHP File Upload and Code Execution flaw in some WordPress blog software plugins. The vulnerability allows for arbitrary file upload and remote code execution POST Data to Vulnerable Script/File in the plugin.

tags | exploit, remote, arbitrary, php, code execution, file upload

SHA-256 | b0f467c2f9513aea9fd89d25f94d00be23be09c42cfc54f3bbc14d023bf918cf

Download | Favorite | View

Chyrp 2.1.2 SQL Injection / Shell Upload

Posted Jul 13, 2012

Authored by KedAns-Dz

Chyrp version 2.1.2 suffers from shell upload and blind SQL injection vulnerabilities.

tags | exploit, shell, vulnerability, sql injection

SHA-256 | e287513c0cbb0dcc32a8b6b9e7fb601aed6506581291ac9d0276249d744f6812

Download | Favorite | View

WordPress Katalyst Timthumb 1.0 Shell Upload

Posted Jun 14, 2012

Authored by KedAns-Dz

WordPress Katalyst Timthumb plugin version 1.0 suffers from a remote shell upload vulnerability.

tags | exploit, remote, shell

SHA-256 | bb46b34f899224734d5a56a9e1990f7732880b333f1cf0d3704ee29b7ec80813

Download | Favorite | View

Zimplit CMS 3.0 CSRF / LFI / Shell Upload

Posted Jun 12, 2012

Authored by KedAns-Dz

Zimplit CMS version 3.0 suffers from cross site request forgery, local file inclusion, and remote shell upload vulnerabilities.

tags | exploit, remote, shell, local, vulnerability, file inclusion, csrf

SHA-256 | d687242f45ad944f038ec802f8b8dca7bd6897fa90332f14a9e5e39818973784

Download | Favorite | View

Joomla Joomsport SQL Injection / Shell Upload

Posted Jun 11, 2012

Authored by KedAns-Dz

The Joomla Joomsport component suffers from remote shell upload and remote SQL injection vulnerabilities.

tags | exploit, remote, shell, vulnerability, sql injection

SHA-256 | e9a76ab29955a0166d426cadbc1fb84359eeca77c4401ff86095bc6d467591ee

Download | Favorite | View

XoopsCube Shell Upload

Posted Jun 10, 2012

Authored by KedAns-Dz

The XoopsCube FileManager module suffers from a remote shell upload vulnerability.

tags | exploit, remote, shell

SHA-256 | a9ac7d70fc41409ef34e23c595566b5d39812245a10314c96b4d2144cbe481ef

Download | Favorite | View

WordPress WP Easy Gallery 1.8 Shell Upload

Posted Jun 8, 2012

Authored by KedAns-Dz

WordPress WP Easy Gallery plugin version 1.8 suffers from a remote shell upload vulnerability.

tags | exploit, remote, shell

SHA-256 | 8708a0229d8e3a219d0453c71acd6c833c8bd82aad0dd4b8bc7581d531a0648c

Download | Favorite | View

WordPress ImageDrop 1.1.2 Blind SQL Injection

Posted Jun 8, 2012

Authored by KedAns-Dz

WordPress ImageDrop version 1.1.2 suffers from a remote blind SQL injection vulnerability.

tags | exploit, remote, sql injection

SHA-256 | 929d96fbea46ad77a8ffaf61d68d7b45be6933347b445989f0cdbe2ca946c103

Download | Favorite | View

WordPress SS-Downloads 1.4.3 Cross Site Request Forgery / File Disclosure

Posted Jun 8, 2012

Authored by KedAns-Dz

WordPress SS-Downloads plugin version 1.4.3 suffers from cross site request forgery and file disclosure vulnerabilities.

tags | exploit, vulnerability, file inclusion, info disclosure, csrf

SHA-256 | f3dcba6853387ae2e9f0e6e00ca447dcb176d0b3a7a487ae1dbc3387c7d6c81f

Download | Favorite | View

Zoph 0.9pre2 CSRF / File Disclosure / SQL Injection

Posted Jun 4, 2012

Authored by KedAns-Dz

Zoph version 0.9pre2 suffers from cross site request forgery, remote file disclosure, and remote blind SQL injection vulnerabilities.

tags | exploit, remote, vulnerability, sql injection, info disclosure, csrf

SHA-256 | 865a2df0f072694ea17b80a8230b7ca7e96ee5bb8f33c6a27d742f75a8af1e29

Download | Favorite | View

TinyCMS 1.3 CSRF / LFI / File Upload

Posted Jun 3, 2012

Authored by KedAns-Dz

TinyCMS version 1.3 suffers from cross site request forgery, file upload, and local file inclusion vulnerabilities.

tags | exploit, local, vulnerability, file inclusion, file upload, csrf

SHA-256 | 33264e933a369719404982af97acd9acf0325409d6a5a63d9aba45c2297777a0

Download | Favorite | View

AdaptCMS 2.0.2 (TinyURL) SQL Injection

Posted Jun 3, 2012

Authored by KedAns-Dz

AdaptCMS version 2.0.2 (TinyURL) suffers from multiple remote SQL injection vulnerabilities.

tags | exploit, remote, vulnerability, sql injection

SHA-256 | ecc9c9dc887b3df0475b0f5e46b2f86ca3d6efa6d62a9d722afa1e8502476d61

Download | Favorite | View

TYPO3 4.7 Cross Site Request Forgery

Posted Jun 3, 2012

Authored by KedAns-Dz

TYPO3 version 4.7 suffers from a cross site request forgery vulnerability.

tags | exploit, csrf

SHA-256 | c80632c90b1ac04efcd7f77e078df6219065d85fb6eba49067507d5de0f365e5

Download | Favorite | View

VAMCart-InternetShop 0.9 File Upload Code Execution

Posted May 29, 2012

Authored by KedAns-Dz | Site metasploit.com

This Metasploit module exploits a vulnerability in the TinyMCE/tinybrowser plugin. This plugin is not secured in version 0.9 of VAMCart and allows the upload of files on the remote server. By renaming the uploaded file this vulnerability can be used to upload/execute code on the affected system.

tags | exploit, remote

SHA-256 | 2f631d7a476c9b413ae2de8686ab1f98d4e0e9c4ff4f224e34949b05e6bbf3c0

Download | Favorite | View

VAMCart-InternetShop 0.9 Cross Site Request Forgery / Shell Upload

Posted May 29, 2012

Authored by KedAns-Dz

VANCart-InternetShop version 0.9 suffers from cross site request forgery and shell upload vulnerabilities.

tags | exploit, shell, vulnerability, csrf

SHA-256 | a3d1a0eb4bb484d54b974426fd346ef862dfc26b4788bc1577f86886d324b2b8

Download | Favorite | View

PBBoard 2.1.4 Cross Site Request Forgery

Posted May 29, 2012

Authored by KedAns-Dz | Site metasploit.com

This Metasploit module exploits multiple cross site request forgery (CSRF) vulnerabilities in admin.php in PBBoard 2.1.4 to allow for arbitrary file upload / command execution.

tags | exploit, arbitrary, php, vulnerability, file upload, csrf

advisories | CVE-2012-1216, OSVDB-79218

SHA-256 | f39d87cd2d0ecdc33b13e8ce46c0cbdb325accad08219c2178ea9f86295312c7

Download | Favorite | View

DornCMS 1.4 (add_page.php) Arbitrary File Upload

Posted May 25, 2012

Authored by KedAns-Dz | Site metasploit.com

This Metasploit module exploits a vulnerability found in Dorn Content Management Script (CMS), version 1.4. By abusing the add_page.php file, the attacker can upload/add a new file (.php) to the /cms/pages/ directory without any authentication, which results in arbitrary code execution.

tags | exploit, arbitrary, php, code execution

SHA-256 | d9e8467b701cbfb9bbe903c58d26bef4b2a9541424f51ceb8b51542282f6f250

Download | Favorite | View

DynPage 1.0 Cross Site Request Forgery / Shell Upload

Posted May 25, 2012

Authored by KedAns-Dz

DynPage version 1.0 suffers from cross site request forgery and shell upload vulnerabilities.

tags | exploit, shell, vulnerability, csrf

SHA-256 | 37621a0070cbaef6aa5d4f64bb886aef4c1af19162680673b6c79897100c5b03

Download | Favorite | View

Ajaxmint-Gallery 1.0 Cross Site Request Forgery

Posted May 20, 2012

Authored by KedAns-Dz

Ajaxmint-Gallery version 1.0 suffers from a cross site request forgery vulnerability.

tags | exploit, csrf

SHA-256 | 75aab5ec49b45f29fd9cd17396f521f35a6baa0bb85bb434c5e2a2a7d7f276d2

Download | Favorite | View