exploit the possibilities

Register | Login

FilesNewsUsersAuthors

Home Files News Services About Contact Add New

Showing 1 - 25 of 3,937

File Inclusion Files

GL-AR300M-Lite 2.2.7 Command Injection / Directory Traversal

Posted Jan 16, 2019

Authored by Pasquale Turi

GL-AR300M-Lite version 2.27 suffers from command injection, file download, and directory traversal vulnerabilities.

tags | exploit, vulnerability, file inclusion, info disclosure

advisories | CVE-2019-6272, CVE-2019-6273, CVE-2019-6274, CVE-2019-6275

MD5 | d0de196650d9878fe7d588a4f063ad8d

Download | Favorite | Comments (0)

WordPress topcsstools 1.0 Open Redirection / Remote File Inclusion

Posted Jan 15, 2019

Authored by KingSkrupellos

WordPress topcsstools plugin version 1.0 suffers from open redirection and remote file inclusion vulnerabilities.

tags | exploit, remote, vulnerability, code execution, file inclusion

MD5 | 57f3ec1ca1ef194d2015913289b096f7

Download | Favorite | Comments (0)

Aspose.ZIP For .NET Path Traversal

Posted Jan 8, 2019

Authored by Jaroslav Lobacevski

Aspose.ZIP for .NET was vulnerable to path traversal that allowed an attacker overwriting arbitrary file in a context of running application. The issue was fixed in version 19.1.0.

tags | advisory, arbitrary, file inclusion

MD5 | 4515bab0f7cf63e9aeee37bcaf9a9e9d

Download | Favorite | Comments (0)

Ox App Suite 7.8.4 / 7.8.3 XSS / CSRF / Information Disclosure

Posted Jan 7, 2019

Authored by Secator

Ox App Suite versions 7.8.4 and 7.8.3 suffer from cross site scripting, cross site request forgery, and information disclosure vulnerabilities.

tags | exploit, vulnerability, xss, file inclusion, info disclosure, csrf

advisories | CVE-2018-12609, CVE-2018-12610, CVE-2018-12611

MD5 | 048df77a1ab85eecdd23b8f1251c22b1

Download | Favorite | Comments (0)

Roxy Fileman 1.4.5 File Upload / Directory Traversal

Posted Jan 7, 2019

Authored by Pongtorn Angsuchotmetee, Vittawat Masaree

Roxy Fileman version 1.4.5 suffers from remote file upload and directory traversal vulnerabilities.

tags | exploit, remote, vulnerability, file inclusion, file upload

advisories | CVE-2018-20525, CVE-2018-20526

MD5 | f18d3ae1fe4f8aea768cdfcb18391024

Download | Favorite | Comments (0)

Transcend Wi-Fi SD Card Cross Site Request Forgery / Traversal

Posted Dec 16, 2018

Authored by MustLive

Transcend Wi-Fi SD Card 16GB with firmware 1.8 suffers from cross site request forgery and directory traversal vulnerabilities.

tags | exploit, vulnerability, file inclusion, csrf

MD5 | 92d49952c0d4cd119e260e6fe9e520de

Download | Favorite | Comments (0)

Responsive FileManager 9.13.4 XSS / File Manipulation / Traversal

Posted Dec 14, 2018

Authored by farisv

Responsive FileManager version 9.13.4 suffers from bypass, cross site scripting, remote file read, remote file write, and traversal vulnerabilities.

tags | exploit, remote, vulnerability, xss, file inclusion

MD5 | 2ef45cffaee6d5b284e83ae3327d46c7

Download | Favorite | Comments (0)

Tarantella Enterprise Directory Traversal

Posted Nov 30, 2018

Authored by Rafael Pedrero

Tarantella Enterprise versions prior to 3.11 suffer from a directory traversal vulnerability.

tags | exploit, file inclusion

advisories | CVE-2018-19753

MD5 | 6f4b68b3b5d4374eebffd81225dcd9c8

Download | Favorite | Comments (0)

Joomla Fabrik 3.9 CSRF / LFI / Shell Upload

Posted Nov 29, 2018

Authored by KingSkrupellos

Joomla Fabrik component version 3.9 suffers from cross site request forgery, local file inclusion, and remote shell upload vulnerabilities.

tags | exploit, remote, shell, local, vulnerability, file inclusion, csrf

MD5 | cee583e8df398e9f206f9451d94be1bd

Download | Favorite | Comments (0)

phpMyAdmin 4.8.1 Authenticated Local File Inclusion

Posted Nov 27, 2018

Authored by Lucian Ioan Nitescu

phpMyAdmin version 4.8.1 authenticated local file inclusion proof of concept exploits.

tags | exploit, local, proof of concept, file inclusion

advisories | CVE-2018-12613

MD5 | 35dcecce1b2b42eba5e229267b8db14b

Download | Favorite | Comments (0)

Zyxel VMG1312-B10D 5.13AAXA.8 Directory Traversal

Posted Nov 26, 2018

Authored by numan turle

Zyxel VMG1312-B10D 5.13AAXA.8 suffers from a directory traversal vulnerability.

tags | exploit, file inclusion

MD5 | fed4245419c14b84eba230446aee15a1

Download | Favorite | Comments (0)

PHP-Proxy 5.1.0 Local File Inclusion

Posted Nov 15, 2018

Authored by Ameer Pornillos

PHP-Proxy version 5.1.0 suffers from a local file inclusion vulnerability.

tags | exploit, local, php, file inclusion

advisories | CVE-2018-19246

MD5 | 96c23b5c4ac90b08c6b144a53cf3862d

Download | Favorite | Comments (0)

Surreal ToDo 0.6.1.2 Local File Inclusion

Posted Nov 13, 2018

Authored by Ihsan Sencan

Surreal ToDo version 0.6.1.2 suffers from a local file inclusion vulnerability.

tags | exploit, local, file inclusion

MD5 | 4544bbb63c826c4b3fdfc2422dc06211

Download | Favorite | Comments (0)

WordPress Media File Manager 1.4.2 Directory Traversal

Posted Nov 12, 2018

Authored by Pasquale Turi

WordPress Media File Manager plugin version 1.4.2 suffers from a directory traversal vulnerability.

tags | exploit, file inclusion

MD5 | ad440b3cb42becebba5381c62008256e

Download | Favorite | Comments (0)

LibreHealth 2.0.0 File Read / File Delete / LFI

Posted Nov 7, 2018

Authored by Carlos Avila

LibreHealth version 2.0.0 suffers from arbitrary file read, file delete, and local file inclusion vulnerabilities.

tags | exploit, arbitrary, local, vulnerability, file inclusion

MD5 | c623d621a1af63ea7a2cc412995fc1a4

Download | Favorite | Comments (0)

PHP Proxy 3.0.3 Local File Inclusion

Posted Nov 5, 2018

Authored by Ozkan Mustafa Akkus

PHP Proxy version 3.0.3 suffers from a local file inclusion vulnerability.

tags | exploit, local, php, file inclusion

MD5 | 87c29784be880e65ee17bc44869c13be

Download | Favorite | Comments (0)

Microstrategy Web 7 Cross Site Scripting / Traversal

Posted Oct 31, 2018

Authored by Rafael Pedrero

Microstrategy Web 7 suffers from cross site scripting and traversal vulnerabilities.

tags | exploit, web, vulnerability, xss, file inclusion

advisories | CVE-2018-18775, CVE-2018-18776, CVE-2018-18777

MD5 | 842cc4a0f56ffc9bba7d4f8bb0fa768a

Download | Favorite | Comments (0)

Citrix NetScaler SD-WAN SQL Injection / Traversal / Command Injection

Posted Oct 23, 2018

Authored by Sergey Gordeychik, Denis Kolegov, Nikita Oleksov, Nikolay Tkachenko, Oleg Broslavsky

The management interfaces of Citrix NetScaler SD-WAN physical appliances and virtual appliances suffer from command injection, information exposure, incorrect access control, IP spoofing, remote SQL injection, and directory traversal vulnerabilities.

tags | advisory, remote, spoof, vulnerability, sql injection, file inclusion

advisories | CVE-2012-2104, CVE-2016-4793, CVE-2018-17444, CVE-2018-17445, CVE-2018-17446, CVE-2018-17447, CVE-2018-17448

MD5 | b27e1af5d9f4b9be4c08566bac90e203

Download | Favorite | Comments (0)

D-Link Plain-Text Password Storage / Code Execution / Directory Traversal

Posted Oct 18, 2018

Authored by Blazej Adamczyk

Multiple D-Link router models suffer from code execution, plain-text password storage, and directory traversal vulnerabilities.

tags | exploit, vulnerability, code execution, file inclusion

advisories | CVE-2017-6190, CVE-2018-10822, CVE-2018-10823, CVE-2018-10824

MD5 | af2cd1ac0b397da3a62f3d04d972086c

Download | Favorite | Comments (0)

Centos Web Panel 0.9.8.480 XSS / LFI / Code Execution

Posted Oct 15, 2018

Authored by Siber Guvenlik Hizmetleri

Centos Web Panel version 0.9.8.480 suffers from code execution, cross site scripting, and local file inclusion vulnerabilities.

tags | exploit, web, local, vulnerability, code execution, xss, file inclusion

systems | linux, centos

advisories | CVE-2018-18322, CVE-2018-18323, CVE-2018-18324

MD5 | e7fc8ff71e4d7349b20722fdec06c3b3

Download | Favorite | Comments (0)

Cockpit CMS CSRF / XSS / Path Traversal

Posted Oct 12, 2018

Authored by Simon Uvarov

Cockpit CMS suffers from cross site request forgery, cross site scripting, and traversal vulnerabilities. Version 0.6.2 should address these issues.

tags | exploit, vulnerability, xss, file inclusion, csrf

advisories | CVE-2018-15538, CVE-2018-15539, CVE-2018-15540

MD5 | 7d2a860626777079a63681bdf22080cc

Download | Favorite | Comments (0)

LG SuperSign EZ CMS 2.5 Local File Inclusion

Posted Sep 19, 2018

Authored by Alejandro Fanjul

LG SuperSign EZ CMS version 2.5 suffers from a local file inclusion vulnerability.

tags | exploit, local, file inclusion

advisories | CVE-2018-16288

MD5 | 46eacb280221d5cbed56a7615db482a6

Download | Favorite | Comments (0)

WordPress Localize My Post 1.0 Local File Inclusion

Posted Sep 19, 2018

Authored by Manuel Garcia Cardenas

WordPress Localize My Post plugin version 1.0 suffers from a local file inclusion vulnerability.

tags | exploit, local, file inclusion

advisories | CVE-2018-16299

MD5 | 7f78f65786c6ba92a8df4a1d6aef8f36

Download | Favorite | Comments (0)

WordPress Wechat Broadcast 1.2.0 Local File Inclusion

Posted Sep 19, 2018

Authored by Manuel Garcia Cardenas

WordPress Wechat Broadcast plugin version 1.2.0 suffers from a local file inclusion vulnerability.

tags | exploit, local, file inclusion

advisories | CVE-2018-16283

MD5 | 96c6e22ef7a8508c4c0907ada9779757

Download | Favorite | Comments (0)

Rubedo CMS 3.4.0 Directory Traversal

Posted Sep 13, 2018

Authored by Marouene Boubakri

Rubedo CMS version 3.4.0 suffers from a directory traversal vulnerability.

tags | exploit, file inclusion

advisories | CVE-2018-16836

MD5 | 14fccd1c40b3fc29f387c4dcccfd6fb5

Download | Favorite | Comments (0)