exploit the possibilities
Home Files News &[SERVICES_TAB]About Contact Add New
Showing 1 - 25 of 58 RSS Feed

Files from Tom Adams

First Active2014-02-19
Last Active2024-09-01
WordPress Subscribe Comments File Read
Posted Sep 1, 2024
Authored by Roberto S. Soares, Tom Adams | Site metasploit.com

This Metasploit module exploits an authenticated directory traversal vulnerability in WordPress Plugin "Subscribe to Comments" version 2.1.2, allowing to read arbitrary files with the web server privileges.

tags | exploit, web, arbitrary
SHA-256 | fd7b19a9193f7aff16d3b71d71eee92ef8df3e278021933d800166fd2f528d75
Download | Favorite | View
WordPress Tooltipy 5.0 Cross Site Request Forgery
Posted Jun 12, 2018
Authored by Tom Adams

WordPress Tooltipy plugin version 5.0 suffers from a cross site request forgery vulnerability.

tags | exploit, csrf
SHA-256 | c8f3750df4042e50ce773fbee50cec7873f62c34d26909645eb06b443dfe7052
Download | Favorite | View
WordPress Tooltipy 5.0 Cross Site Scripting
Posted Jun 12, 2018
Authored by Tom Adams

WordPress Tooltipy plugin version 5.0 suffers from a cross site scripting vulnerability.

tags | exploit, xss
SHA-256 | 6eb4e52fcad8f00b82c4a47e651cb7194795e04d338435768fede1fe9077fca4
Download | Favorite | View
Metronet Tag Manager 1.2.7 Cross Site Request Forgery
Posted May 15, 2018
Authored by Tom Adams

Metronet Tag Manager version 1.2.7 suffers from a cross site request forgery vulnerability.

tags | exploit, csrf
SHA-256 | 4ab4d2176f53eb69df95bbb67d0c117d46bdab059f7376224e9529ecaeee5ec1
Download | Favorite | View
WordPress WP ULike 2.8.1 / 3.1 Arbitrary Data Deletion
Posted May 15, 2018
Authored by Tom Adams

WordPress WP ULike plugin versions 2.8.1 and 3.1 suffer from an arbitrary data deletion vulnerability.

tags | exploit, arbitrary
SHA-256 | 60d548f9ac31206f6dce81a9bd584718eec670910c5bc25fa7aeb146d86335c1
Download | Favorite | View
WordPress WP ULike 2.8.1 / 3.1 Cross Site Scripting
Posted May 15, 2018
Authored by Tom Adams

WordPress WP ULike plugin versions 2.8.1 and 3.1 suffer from a persistent cross site scripting vulnerability.

tags | exploit, xss
SHA-256 | 80d7060c00ca4ddac7b6916ec8392a1db436aa0ccb9d5f13d711e383093b1282
Download | Favorite | View
WordPress WP User Groups 2.0.0 Cross Site Request Forgery
Posted May 12, 2018
Authored by Tom Adams

WordPress WP User Groups plugin version 2.0.0 suffers from a cross site request forgery vulnerability.

tags | exploit, csrf
SHA-256 | 509946df5bd9ecce73ceac8f4fc333c4607a97cee298af0243863dead17a7716
Download | Favorite | View
WordPress WP Image Zoom 1.23 Denial Of Service
Posted Apr 11, 2018
Authored by Tom Adams

WordPress WP Image Zoom plugin version 1.23 suffers from a denial of service vulnerability.

tags | exploit, denial of service
SHA-256 | c8f25d0b435ab4c7dcc42419ac30a803214cba1b96eb5f1582fbf7cae9794cb1
Download | Favorite | View
WordPress Rating-Widget: Star Review System 2.8.9 Information Disclosure
Posted Apr 11, 2018
Authored by Tom Adams

WordPress Rating-Widget: Star Review System plugin version 2.8.9 suffers from an information disclosure vulnerability.

tags | exploit, info disclosure
SHA-256 | 6996d44e889c5267184b5c120e1c55d97a2ff86f9bc246ed1fa782b6c6a78622
Download | Favorite | View
WordPress Content Audit 1.9.1 Cross Site Request Forgery / Cross Site Scripting
Posted Sep 28, 2017
Authored by Tom Adams

WordPress Content Audit plugin version 1.9.1 suffers from cross site request forgery and cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss, csrf
SHA-256 | dc984adf5f9d9543aacd7fed916439032c04082b190d496601317b59fad3d41e
Download | Favorite | View
Salutation Responsive 3.0.15 Cross Site Scripting
Posted Jul 31, 2017
Authored by Tom Adams

Salutation Responsive WordPress + BuddyPress Theme version 3.0.15 suffers from a persistent cross site scripting vulnerability.

tags | exploit, xss
SHA-256 | 436fa0bce96b432cc53cebe95a1a22ae31fb0609f0f4a08f9049bd7a51546ec4
Download | Favorite | View
WordPress Stop User Enumeration 1.3.8 User Enumeration
Posted Jul 26, 2017
Authored by Tom Adams

WordPress Stop User Enumeration plugin version 1.3.8 suffers from a user enumeration vulnerability.

tags | exploit
SHA-256 | b7513f284de1b5522ef7c496fd4c6816b69284ea65ff20882b3bb5824e1e4e39
Download | Favorite | View
WordPress YouTube Embed Plus 11.8.1 Cross Site Request Forgery
Posted Jul 26, 2017
Authored by Tom Adams

WordPress YouTube Embed Plus plugin version 11.8.1 suffers from a cross site request forgery vulnerability.

tags | exploit, csrf
SHA-256 | 6978786658c9e7e79af098ad01d5a2b6a44041145b418751a98e98150db7f01e
Download | Favorite | View
WordPress Download Manager 2.9.46 / 2.9.51 Cross Site Scripting
Posted Jun 21, 2017
Authored by Tom Adams

WordPress Download Manager plugin versions 2.9.46 and 2.9.51 suffer from a cross site scripting vulnerability.

tags | exploit, xss
SHA-256 | 9de753843f33ce3f2dc9d5d13e262f6df0bb99ce7db35001b0177d5ed23072d8
Download | Favorite | View
WordPress Photo Gallery 1.3.34 / 1.3.42 Path Traversal
Posted Jun 21, 2017
Authored by Tom Adams

WordPress Photo Gallery plugin versions 1.3.34 and 1.3.42 suffer from a path traversal vulnerability.

tags | exploit, file inclusion
SHA-256 | 2e48b2bcd6a9011319d2820c216c197e008cdd23983c64c58a88c29df02fc36b
Download | Favorite | View
WordPress Firewall 2 1.3 Cross Site Request Forgery / Cross Site Scripting
Posted Apr 6, 2017
Authored by Tom Adams

WordPress Firewall 2 version 1.3 suffers from cross site request forgery and cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss, csrf
SHA-256 | e931376033f97633c8fcb5a60100c1bfabead9f74477b8421f59aa6b4043e110
Download | Favorite | View
Responsive Poll 1.6.4 / 1.7.4 CSRF / Cross Site Scripting
Posted Jan 10, 2017
Authored by Tom Adams

Responsive Poll versions 1.6.4 and 1.7.4 suffer from cross site request forgery and cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss, csrf
SHA-256 | ee6234965da9f0f4d9be5eecc91280e2f8c402d7627fe1d94a5d6448edc5a9ea
Download | Favorite | View
WordPress Stop User Enumeration 1.3.4 User Enumeration
Posted Jan 4, 2017
Authored by Tom Adams

WordPress Stop User Enumeration plugin version 1.3.4 fails to stop user enumeration.

tags | exploit
SHA-256 | a5b9ecefc46a9dc57fc49c4583f89b99ebc64da867181e4ef815252dc040302a
Download | Favorite | View
WordPress Image Slider 1.1.41 / 1.1.89 Arbitrary File Deletion
Posted Dec 27, 2016
Authored by Tom Adams

WordPress Image Slider plugin versions 1.1.41 and 1.1.89 suffer from an arbitrary file deletion vulnerability.

tags | exploit, arbitrary
SHA-256 | d26c0835b8209ca0f2b538837df8ceca4fa3b26c17c033bd4da15d6d4bce5a72
Download | Favorite | View
WordPress Copy-Me 1.0.0 Cross Site Request Forgery
Posted Dec 21, 2016
Authored by Tom Adams

WordPress Copy-Me plugin version 1.0.0 suffers from a cross site request forgery vulnerability.

tags | exploit, csrf
SHA-256 | 0f71f5e7759396da0da6cf867dfaa526d9638e8c6acf7187329c685417d8fdd3
Download | Favorite | View
WordPress Quiz And Survey Master 4.7.8 / 4.5.4 XSS / CSRF
Posted Dec 16, 2016
Authored by Tom Adams

WordPress Quiz and Survey Master versions 4.5.4 and 4.7.8 suffer from cross site request forgery and cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss, csrf
SHA-256 | f46a82fbc2630dc8ef0a1701356ad5a2f60798aabadbf007ed0cc9eebd4334d5
Download | Favorite | View
WordPress MailChimp 3.1.5 / 4.0.10 Cross Site Scripting
Posted Dec 15, 2016
Authored by Tom Adams

WordPress MailChimp versions 3.1.5 and 4.0.10 suffer from a cross site scripting vulnerability.

tags | exploit, xss
SHA-256 | ff179074357ac7336249ba032d5f12b0766d960a4f96041e3a66d6151fb4c1a0
Download | Favorite | View
WordPress Multisite Post Duplicator 0.9.5.1 Cross Site Request Forgery
Posted Dec 9, 2016
Authored by Tom Adams

WordPress Multisite Post Duplicator version 0.9.5.1 suffers from a cross site request forgery vulnerability.

tags | exploit, csrf
SHA-256 | a48083336df703d960a3e51cefa17b950424b1a6e48bc9ebe6980313d31bba7f
Download | Favorite | View
WordPress Advanced Custom Fields: Table Field 1.1.12 XSS
Posted Aug 13, 2016
Authored by Tom Adams

WordPress Advanced Custom Fields: Table Field plugin version 1.1.12 suffers from a persistent cross site scripting vulnerability.

tags | exploit, xss
SHA-256 | 22e77075a340c777a01ecc58cf41ba5881366012a20be804f683d80e887132c8
Download | Favorite | View
Watu PRO Play 1.9.2.1 Cross Site Scripting
Posted Sep 1, 2015
Authored by Tom Adams

Watu PRO Play version 1.9.2.1 suffers from a stored cross site scripting vulnerability.

tags | exploit, xss
SHA-256 | 162ad6b6b2124d6a4b68d4f59d55c906e0cedefe55ce2e38170f36bb61e258e0
Download | Favorite | View
Page 1 of 3
Back123Next

File Archive:

November 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Nov 1st
    30 Files
  • 2
    Nov 2nd
    0 Files
  • 3
    Nov 3rd
    0 Files
  • 4
    Nov 4th
    12 Files
  • 5
    Nov 5th
    44 Files
  • 6
    Nov 6th
    18 Files
  • 7
    Nov 7th
    9 Files
  • 8
    Nov 8th
    8 Files
  • 9
    Nov 9th
    3 Files
  • 10
    Nov 10th
    0 Files
  • 11
    Nov 11th
    14 Files
  • 12
    Nov 12th
    20 Files
  • 13
    Nov 13th
    63 Files
  • 14
    Nov 14th
    18 Files
  • 15
    Nov 15th
    8 Files
  • 16
    Nov 16th
    0 Files
  • 17
    Nov 17th
    0 Files
  • 18
    Nov 18th
    18 Files
  • 19
    Nov 19th
    7 Files
  • 20
    Nov 20th
    13 Files
  • 21
    Nov 21st
    6 Files
  • 22
    Nov 22nd
    48 Files
  • 23
    Nov 23rd
    0 Files
  • 24
    Nov 24th
    0 Files
  • 25
    Nov 25th
    60 Files
  • 26
    Nov 26th
    0 Files
  • 27
    Nov 27th
    44 Files
  • 28
    Nov 28th
    0 Files
  • 29
    Nov 29th
    0 Files
  • 30
    Nov 30th
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2024 Packet Storm. All rights reserved.

Site Links
News by Month
News Tags
Files by Month
File Tags
File Directory
About Us
History & Purpose
Contact Information
Terms of Service
Privacy Statement
Copyright Information
Services
Security Services
Hosting By
Rokasec
close