what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 4 of 4

Files Date: 2014-12-07 to 2014-12-08

WordPress Ajax Store Locator 1.2 Arbitrary File Download

Posted Dec 7, 2014

Authored by Claudio Viviani

WordPress Ajax Store Locator plugin version 1.2 suffers from an arbitrary file download vulnerability.

tags | exploit, arbitrary

SHA-256 | fa66ce4a4e1a666bfd65e30d511a241b3ef667fc053b4e9ec7d96bdc501e7ed5

Download | Favorite | View

Digital Whisper Electronic Magazine #56

Posted Dec 7, 2014

Authored by cp77fk4r, digitalwhisper

Digital Whisper Electronic Magazine issue 56. Written in Hebrew.

tags | magazine

SHA-256 | 6dd8a95cc05aeb99a48198cf9194265c9f8d5204e3f06e71e05237f6207593d8

Download | Favorite | View

CMS Made Simple Install SQL Injection Command Execution

Posted Dec 7, 2014

Authored by SAHM

CMS Made Simple can have its install functionality leveraged to insert a malicious SQL statement that allows for command execution pass through.

tags | exploit, sql injection

SHA-256 | 9a1b9c07db266f15a7d8663d1a2c6e6e8c1f1963c189fd7736e0916124400c92

Download | Favorite | View

Douran Portal Cross Site Scripting

Posted Dec 7, 2014

Authored by E1.Coders

Douran Portal suffers from a cross site scripting vulnerability in Slider.ashx. Note that this finding houses site-specific data.

tags | exploit, xss

SHA-256 | 5f25e4808daa956eb3cd830f938f397f2345586215aae676ac1bdff6c05e7c25

Download | Favorite | View