what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 25 of 29

Files from DevilScreaM

Planet Source Code XSS / SQL Injection / Shell Upload

Posted Nov 16, 2014

Authored by DevilScreaM

Planet Source code suffers from URL redirection, cross site scripting, remote file upload, and remote SQL injection vulnerabilities.

tags | exploit, remote, vulnerability, xss, sql injection, file upload

SHA-256 | 08ccbd2d051bcbffef50f9d6c06e60df15faee3476135babf9dd60a3950d3d1c

Download | Favorite | View

MyBB MyBBlog 1.0 Cross Site Scripting

Posted Oct 24, 2014

Authored by DevilScreaM

MyBB MyBBlog plugin version 1.0 suffers from a cross site scripting vulnerability. Note that this finding houses site-specific data.

tags | exploit, xss

SHA-256 | 1578e5289a6b5a76e304563e9345edf564380d58be23670d28152abc4de59330

Download | Favorite | View

XAMPP 3.2.1 Cross Site Scripting

Posted Jan 15, 2014

Authored by DevilScreaM

XAMPP version 3.2.1 suffers from a cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | 7e4de4aa57bfb79c844e7b693a14cc3809880e3e4222a8e2b4765d28905bc3cf

Download | Favorite | View

Joomla Aclassfb Shell Upload

Posted Jan 10, 2014

Authored by DevilScreaM

The Joomla Aclassfb component suffers from a remote shell upload vulnerability.

tags | exploit, remote, shell

SHA-256 | 9d0fb8ff59906454f8f77b6cd1a8d6cbd5c42f068d8b4fc058718a4e32f3316f

Download | Favorite | View

Joomla AceSearch 3.0 Cross Site Scripting

Posted Jan 6, 2014

Authored by DevilScreaM

Joomla AceSearch component version 3.0 suffers from a cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | e7a05ee0db5238182077cb146d0bce90318ec17be3495461f1abfbfc7421e6d8

Download | Favorite | View

SNES9x ReRecording Emulator DLL Hijacking

Posted Dec 9, 2013

Authored by DevilScreaM

SNES9x ReRecording Emulator version 1.x.x suffers from a DLL hijacking vulnerability in codec_mpeg.dll.

tags | exploit

systems | windows

SHA-256 | 945b33dd757b0e6ca21b6b7e518b606145f1374aca82fe60f91eb3410fb7e412

Download | Favorite | View

TheHostingTool 1.2.x Cross Site Scripting

Posted Dec 8, 2013

Authored by DevilScreaM

TheHostingTool version 1.2.x suffers from multiple cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss

SHA-256 | b8ff28cc399a94a530cfdfd2f9d7d3a6540e7c41b39dc57e51fa08a0112da645

Download | Favorite | View

Joomla Hotornot2 Shell Upload

Posted Dec 5, 2013

Authored by DevilScreaM

Joomla Hotornot2 component suffers from a remote code execution vulnerability via a shell upload.

tags | exploit, remote, shell, code execution

SHA-256 | 57c6ef0042333393f7da14f257ea50e899e05e9b18c943bee6131f7ad579b185

Download | Favorite | View

Joomla Alphauserpoints phpThumb.php Shell Upload

Posted Dec 1, 2013

Authored by DevilScreaM

Joomla Alphauserpoints includes phpThumb.php which is known to suffer from a remote shell upload vulnerability.

tags | exploit, remote, shell, php

SHA-256 | b1b62d78c9a946b12fbc9346386e404c8afdbb136f42bc7b7e23ba2424f3cc08

Download | Favorite | View

Joomla Alphacontent phpThumb.php Shell Upload

Posted Dec 1, 2013

Authored by DevilScreaM

Joomla Alphacontent includes phpThumb.php which is known to suffer from a remote shell upload vulnerability.

tags | exploit, remote, shell, php

SHA-256 | bb78cd69bf5df77bcb7dfc0f5fc0d9ef668f897f60696a4839fd5a0db52962dd

Download | Favorite | View

WordPress Suco Shell Upload

Posted Nov 20, 2013

Authored by DevilScreaM

WordPress Suco theme suffers from a remote shell upload vulnerability.

tags | exploit, remote, shell

SHA-256 | b2e22a3f07d33f211c40421e70052bfe57231643ebd7db5e5c627b99e766b408

Download | Favorite | View

WordPress iThemes2 Shell Upload

Posted Nov 20, 2013

Authored by DevilScreaM

WordPress iThemes2 theme suffers from a remote shell upload vulnerability.

tags | exploit, remote, shell

SHA-256 | 3c8e828548de930258ea049c0dae805645ae3dbb203c5a025c444e419760cbeb

Download | Favorite | View

WordPress Euclid Cross Site Request Forgery

Posted Nov 17, 2013

Authored by DevilScreaM

WordPress Euclid theme suffers from a cross site request forgery vulnerability.

tags | exploit, csrf

SHA-256 | 49fde0a1248fb3f261935e7861a803f31c5996379e540c4452c31d2caa41d47d

Download | Favorite | View

WordPress Dimension Cross Site Request Forgery

Posted Nov 17, 2013

Authored by DevilScreaM

WordPress Dimension theme suffers from a cross site request forgery vulnerability.

tags | exploit, csrf

SHA-256 | c79f4bdf46ea63e7957d6c6e13d78d30ac7c626decaf17605d13c77d8d8b5370

Download | Favorite | View

WordPress Amplus Cross Site Request Forgery

Posted Nov 17, 2013

Authored by DevilScreaM

WordPress Amplus theme suffers from a cross site request forgery vulnerability.

tags | exploit, csrf

SHA-256 | 90cdcb8d4e659c08cee7021e9bc9fa3135983a4188217e174de3a055e42dd6f1

Download | Favorite | View

WordPress Make A Statement Cross Site Request Forgery

Posted Nov 17, 2013

Authored by DevilScreaM

WordPress Make A Statement theme suffers from a cross site request forgery vulnerability.

tags | exploit, csrf

SHA-256 | bc164cec434beccdd48ac4cb8f5fac9449eb0916b078caa972f7ac7fe5464bbc

Download | Favorite | View

WordPress Highlight Premium Theme CSRF / Shell Upload

Posted Nov 10, 2013

Authored by DevilScreaM

WordPress Highlight Premium theme suffers from cross site request forgery and remote shell upload vulnerabilities.

tags | exploit, remote, shell, vulnerability, csrf

SHA-256 | 6ba9001b821f72576be89bb61ca27cae28a676975f79d85643de67f92a4a20eb

Download | Favorite | View

WordPress WP-Checkout Cross Site Scripting / Shell Upload

Posted Oct 31, 2013

Authored by DevilScreaM

WordPress WP-Checkout plugin suffers from cross site scripting and remote shell upload vulnerabilities. Note that this advisory has site-specific information.

tags | exploit, remote, shell, vulnerability, xss

SHA-256 | 8b75a731806da2c71e99adf68bf4ec4bcc441e9e2a626f2793e02907deffc994

Download | Favorite | View

WordPress MoneyTheme Cross Site Scripting / Shell Upload

Posted Oct 29, 2013

Authored by DevilScreaM

WordPress MoneyTheme suffers from cross site scripting and remote shell upload vulnerabilities.

tags | exploit, remote, shell, vulnerability, xss

SHA-256 | 118f2518be3ef83f488608e39f34988f8e8d867943df4d1309be1c8476a48492

Download | Favorite | View

BalkanSys Default Credentials / Redirection / File Upload

Posted Oct 26, 2013

Authored by DevilScreaM

BalkanSys suffers from default credentials, arbitrary file upload, and open redirection vulnerabilities. Note that this advisory has site-specific information.

tags | exploit, arbitrary, vulnerability, bypass, file upload

SHA-256 | 8f26c405b63c9567a1ce3478b4d6d560ea287f16b230a9696b659a3b5169206f

Download | Favorite | View

WordPress GeoPlaces 4.x Shell Upload

Posted Oct 25, 2013

Authored by DevilScreaM

WordPress GeoPlaces theme version 4.x suffers from a remote shell upload vulnerability.

tags | exploit, remote, shell

SHA-256 | 4bb5ca362685571ea46f9b60300a56f3aa737abbf2c8551c66c53798de33803e

Download | Favorite | View

LiveCart 1.4 Shell Upload

Posted Oct 23, 2013

Authored by DevilScreaM

LiveCart version 1.4 suffers from a remote PHP shell upload vulnerability.

tags | exploit, remote, shell, php

SHA-256 | e2a41ce6de3c4aa60db5b72a6cd923cfb719186f387af0bad1c8e9c450c3fe2c

Download | Favorite | View

WordPress DailyDeal Theme Shell Upload

Posted Oct 23, 2013

Authored by DevilScreaM

The WordPress DailyDeal theme suffers from a remote shell upload vulnerability.

tags | exploit, remote, shell

SHA-256 | 25e1be2c8c9b97be0f84118170063bb8eed0a22e212c8a9be4176e00df086f59

Download | Favorite | View

MNET Solution XSS / SQL Injection / File Upload

Posted Oct 19, 2013

Authored by DevilScreaM

Sites designed by MNET Solution suffer from cross site scripting, html injection, remote shell upload, and remote SQL injection vulnerabilities. Note that this advisory has site-specific information.

tags | exploit, remote, shell, vulnerability, xss, sql injection

SHA-256 | b8a92e2dbe7f7eb98856ebc26a7aa2fb0838c901e135f2a0969a831c7662780c

Download | Favorite | View

Chiangraientersoft HTML Injection

Posted Oct 7, 2013

Authored by DevilScreaM

Sites using the Chiangraientersoft code base suffer from a html injection vulnerability that can allow for cross site scripting attacks. Note that this advisory has site-specific information.

tags | exploit, xss

SHA-256 | d38dda3ba4898e2f3f8c1b2ef87a8eeca9e35edf1c91e895409139fe5385b109

Download | Favorite | View