##
# This file is part of the Metasploit Framework and may be subject to
# redistribution and commercial restrictions. Please see the Metasploit
# web site for more information on licensing and terms of use.
# http://metasploit.com/
##
require 'msf/core'
class Metasploit3 < Msf::Exploit::Remote
Rank = ExcellentRanking
include Msf::Exploit::Remote::HttpClient
def initialize(info = {})
super(update_info(info,
'Name' => 'Wordpress W3 Total Cache PHP Code Execution',
'Description' => %q{
This module exploits a PHP Code Injection vulnerability against Wordpress plugin
W3 Total Cache for versions up to and including 0.9.2.8. WP Super Cache 1.2...
Leggi il seguito »
WordPress W3 Total Cache PHP Code Execution
Inserito in 0day, exploit, linux, metasploit, MondoUnix, PHP, PHP CODE EXECUTION, Plugin, Security, Shell, Sicurezza, unix, Vulnerabilities, Vulnerability, W3 Total Cache, webapps, WORDPRESS SECURITY
phpMyAdmin Authenticated Remote Code Execution
30 aprile 2013 - Fonte: http://www.mondounix.com
##
# This file is part of the Metasploit Framework and may be subject to
# redistribution and commercial restrictions. Please see the Metasploit
# web site for more information on licensing and terms of use.
# http://metasploit.com/
##
require 'msf/core'
class Metasploit3 < Msf::Exploit::Remote
Rank = ExcellentRanking
include Msf::Exploit::Remote::HttpClient
def initialize(info = {})
super(update_info(info,
'Name' => 'phpMyAdmin Authenticated Remote Code Execution via preg_replace()',
'Description' => %q{
This module exploits a PREG_REPLACE_EVAL vulnerability in phpMyAdmin's
replace_prefix_tbl within libraries/mult_submits.inc.php via db_settings.php
...
Leggi il seguito »
Inserito in 0day, CODE EXECUTION, exploit, linux, metasploit, MondoUnix, PHP, PhpMyAdmin, remote, remote code execution, Security, Sicurezza, unix, Vulnerabilities, Vulnerability, webapps
Joomla Component JCE File Upload Remote Code Execution
27 marzo 2013 - Fonte: http://www.mondounix.com
##
# This file is part of the Metasploit Framework and may be subject to
# redistribution and commercial restrictions. Please see the Metasploit
# web site for more information on licensing and terms of use.
# http://metasploit.com/
##
require 'msf/core'
class Metasploit3 < Msf::Exploit::Remote
Rank = ExcellentRanking
include Msf::Exploit::Remote::HttpClient
include Msf::Exploit::FileDropper
def initialize(info = {})
super(update_info(info,
'Name' => 'Joomla Component JCE File Upload Remote Code Execution',
'Description' => %q{
This module exploits a vulnerability in the JCE component for Joomla!, which
could allow an unauthenticated...
Leggi il seguito »
Inserito in 0day, component, exploit, JCE FILE UPLOAD, joomla, linux, metasploit, MondoUnix, PHP, remote, remote code execution, Security, Sicurezza, unix, Vulnerabilities, Vulnerability, webapps
SCADA 3S CoDeSys Gateway Server Directory Traversal
10 marzo 2013 - Fonte: http://www.mondounix.com
## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions. Please see the Metasploit # web site for more information on licensing and terms of use. # http://metasploit.com ## require 'msf/core' class Metasploit3 < Msf::Exploit::Remote ...
Leggi il seguito »
Inserito in 0day, directory traversal, exploit, Gateway, linux, metasploit, MondoUnix, PHP, remote, SCADA 3S, SCADA 3S CODESYS GATEWAY, Security, Sicurezza, unix, Vulnerabilities, Vulnerability, webapps
DataLife Engine preview.php PHP Code Injection
2 febbraio 2013 - Fonte: http://www.mondounix.com
##
# This file is part of the Metasploit Framework and may be subject to
# redistribution and commercial restrictions. Please see the Metasploit
# web site for more information on licensing and terms of use.
# http://metasploit.com/
##
require 'msf/core'
class Metasploit3 < Msf::Exploit::Remote
Rank = ExcellentRanking
include Msf::Exploit::Remote::HttpClient
def initialize(info = {})
super(update_info(info,
'Name' => 'DataLife Engine preview.php PHP Code Injection',
'Description' => %q{
This module exploits a PHP code injection vulnerability DataLife Engine 9.7.
The vulnerability exists in preview.php, due to an insecure usage of preg_replace()
...
Leggi il seguito »
Inserito in 0day, CODE INJECTION, DATALIFE, DATALIFE ENGINE, exploit, linux, metasploit, MondoUnix, PHP, PHP CODE INJECTION, Preview, remote, remote code execution, Security, Sicurezza, unix, Vulnerabilities, Vulnerability, webapps
WordPress Google Document Embedder Arbitrary File Disclosure
10 gennaio 2013 - Fonte: http://www.mondounix.com
##
# This file is part of the Metasploit Framework and may be subject to
# redistribution and commercial restrictions. Please see the Metasploit
# web site for more information on licensing and terms of use.
# http://metasploit.com/
##
require 'msf/core'
require 'rbmysql'
class Metasploit3 < Msf::Exploit::Remote
Rank = NormalRanking
include Msf::Exploit::Remote::HttpClient
include Msf::Auxiliary::Report
def initialize(info = {})
super(update_info(info,
'Name' => 'WordPress Plugin Google Document Embedder Arbitrary File Disclosure',
'Description' => %q{
This module exploits an arbitrary file disclosure flaw in the WordPress
blogging...
Leggi il seguito »
Inserito in 0day, ARBITRARY FILE DISCLOSURE, exploit, GOOGLE DOCUMENTS EMBEDDER, linux, metasploit, MondoUnix, PHP, Plugin, Plugins, remote, script, Security, Sicurezza, unix, Vulnerabilities, Vulnerability, webapps, WORDPRESS SECURITY, WP-CONTENT
WordPress Advanced Custom Fields Remote File Inclusion
3 gennaio 2013 - Fonte: http://www.mondounix.com
##
# This file is part of the Metasploit Framework and may be subject to
# redistribution and commercial restrictions. Please see the Metasploit
# web site for more information on licensing and terms of use.
# http://metasploit.com/
##
require 'msf/core'
class Metasploit3 < Msf::Exploit::Remote
Rank = ExcellentRanking
include Msf::Exploit::Remote::HttpClient
include Msf::Exploit::Remote::HttpServer::PHPInclude
def initialize(info = {})
super(update_info(info,
'Name' => 'WordPress Plugin Advanced Custom Fields Remote File Inclusion',
'Description' => %q{
This module exploits a remote file inclusion flaw in the WordPress blogging
software...
Leggi il seguito »
Inserito in 0day, ADVANCED CUSTOM FIELDS, exploit, FILE INCLUSION, linux, metasploit, MondoUnix, PHP, Plugin, Plugins, remote, REMOTE FILE INCLUSIONE, script, Security, Sicurezza, unix, Vulnerabilities, Vulnerability, webapps, WORDPRESS SECURITY, WP-CONTENT
Turbo FTP Server 1.30.823 PORT Overflow
22 ottobre 2012 - Fonte: http://www.mondounix.com
## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions. Please see the Metasploit # web site for more information on licensing and terms of use. # http://metasploit.com/ ## require 'msf/core' class Metasploit3 < Msf::Exploit::Remote ...
Leggi il seguito »
Inserito in 0day, exploit, metasploit, MondoUnix, PORT OVERFLOW, remote, Security, server, Sicurezza, TURBO FTP SERVER, Vulnerabilities, Vulnerability
AjaXplorer checkInstall.php Remote Command Execution
17 ottobre 2012 - Fonte: http://www.mondounix.com
## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions. Please see the Metasploit # web site for more information on licensing and terms of use. # http://metasploit.com/ ## require 'msf/core' class Metasploit3 < Msf::Exploit::Remote ...
Leggi il seguito »
Inserito in 0day, AJAXPLORER, CheckInstall, exploit, linux, metasploit, MondoUnix, PHP, remote, REMOTE COMMAND EXECUTION, Security, Sicurezza, unix, Vulnerabilities, Vulnerability, webapps
Project Pier Arbitrary File Upload
14 ottobre 2012 - Fonte: http://www.mondounix.com
##
# This file is part of the Metasploit Framework and may be subject to
# redistribution and commercial restrictions. Please see the Metasploit
# Framework web site for more information on licensing and terms of use.
# http://metasploit.com/framework/
##
require 'msf/core'
class Metasploit3 < Msf::Exploit::Remote
Rank = ExcellentRanking
include Msf::Exploit::Remote::HttpClient
include Msf::Exploit::EXE
def initialize(info={})
super(update_info(info,
'Name' => "Project Pier Arbitrary File Upload Vulnerability",
'Description' => %q{
This module exploits a vulnerability found in Project Pier. The application's
uploading tool...
Leggi il seguito »
Inserito in 0day, ARBITRARY FILE UPLOAD, exploit, metasploit, MondoUnix, PROJECT PIER, remote, Security, Sicurezza, ssh, Vulnerabilities, Vulnerability
