Joomla Recipe Manager 2.2 Component - id Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Recipe Manager v2.2 - SQL Injection Google Dork: inurl:index.php?option=comrecipe Date: 02.03.2017 Vendor Homepage: http://joomla6teen.com/ Software:...

Linux Kernel 4.4.0 (Ubuntu) - DCCP Double-Free PoC Exploit

Exploit for linux platform in category dos / poc // // EDB Note: More information http://seclists.org/oss-sec/2017/q1/471 // // A trigger for CVE-2017-6074, crashes kernel. // Tested on 4.4.0-62-generic 83-Ubuntu kernel. // https://github.com/xairy/kernel-exploits/tree/master/CVE-2017-6074 // //...

Joomla Appointments for JomSocial 3.8.1 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Appointments for JomSocial v3.8.1 - SQL Injection Google Dork: N/A Date: 25.02.2017 Vendor Homepage: https://www.cmsplugin.com/ Software :...

Joomla JomSocial Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component JomSocial - SQL Injection Google Dork: N/A Date: 25.02.2017 Vendor Homepage: https://www.cmsplugin.com/ Software : http://extensions.cmsplugin.com/extensions/j3demo/jomsocial Demo:...

EasyCom AS400 PHP API Buffer Overflow Exploit

Exploit for windows platform in category dos / poc + Credits: John Page AKA Hyp3rlinX + Website: hyp3rlinx.altervista.org Vendor: ================ easycom-aura.com Product: =========================== EASYCOM AS400 iBMI PHP API EasycomPHP4.0029.iC8im2.exe EASYCOM is the middleware which provides...

Joomla AppointmentBookingPro 4.0.1 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component AppointmentBookingPro v4.0.1 - SQL Injection Google Dork: inurl:index.php?option=comrsapptpro3 Date: 21.02.2017 Vendor Homepage: http://appointmentbookingpro.com/ Software Buy:...

Joomla J-BusinessDirectory 4.6.8 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component J-BusinessDirectory v4.6.8 - SQL Injection Google Dork: inurl:index.php?option=comjbusinessdirectory Date: 21.02.2017 Vendor Homepage: http://www.cmsjunkie.com/ Software Buy:...

Joomla Magic Deals Web 1.2.0 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Magic Deals Web v1.2.0 - SQL Injection Google Dork: inurl:index.php?option=commagicdealsweb Date: 21.02.2017 Vendor Homepage: http://jasonwebdesign.com/ Software Buy:...

Joomla OS Services Booking 2.5.1 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component OS Services Booking v2.5.1 - SQL Injection Google Dork: inurl:index.php?option=comosservicesbooking Date: 18.02.2017 Vendor Homepage: https://www.joomdonation.com/ Software Buy:...

Joomla JSP Store Locator 2.2 Component - id Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component JSP Store Locator v2.2 - SQL Injection Google Dork: inurl:index.php?option=comjsplocation Date: 15.02.2017 Vendor Homepage: http://joomlaserviceprovider.com Software Buy:...

Joomla Spider Facebook 1.6.1 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Spider Facebook v1.6.1 - SQL Injection Google Dork: inurl:index.php?option=comspiderfacebook Date: 16.02.2017 Vendor Homepage: http://web-dorado.com/ Software Buy:...

WordPress Corner Ad 1.0.7 Plugin - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Authorized Stored XSS at WordPress Corner-Ad plugin. Google Dork: inurl:/wp-content/plugins/corner-ad Date: 16-02-17 Exploit Author: Atik Rahman Vendor Homepage: https://wordpress.org/plugins/corner-ad/ Software Link:...

Cisco ASA - WebVPN CIFS Handling Buffer Overflow Vulnerability

Exploit for hardware platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=998 The WebVPN http server exposes a way of accessing files from CIFS with a url hook of the form: https://portal/+webvpn+/CIFSR/shareserver/sharename/file. When someone logged in...

Joomla Music Collection 3.0.3 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla Component Music Collection 3.0.3 - SQL Injection Home : https://extensions.joomla.org/extensions/extension/multimedia/multimedia-players/music-collection/ Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM...

Microsoft Edge - TypedArray.sort Use-After-Free (MS16-145) Exploit

Exploit for windows platform in category dos / poc !-- Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=983 There is a use-after-free in TypedArray.sort. In TypedArrayCompareElementsHelper...

ntfs-3g - Unsanitized modprobe Environment Privilege Escalation Vulnerability

Exploit for linux platform in category local exploits Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1072 ntfs-3g is installed by default e.g. on Ubuntu and comes with a setuid root program /bin/ntfs-3g. When this program is invoked on a system whose kernel does not support FUS...

Joomla JE QuoteForm SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component JE QuoteForm - SQL Injection Google Dork: inurl:index.php?option=comjequoteform Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy:...

LG G4 - lghashstorageserver Directory Traversal Vulnerability

Exploit for Android platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=987 The lghashstorageserver binder service /system/bin/lghashstorageserver implementation on the LG G4 is vulnerable to path traversal, allowing an app to read and write 0x20 bytes...

Joomla JE Gallery 1.3 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component JE Gallery v1.3 - SQL Injection Google Dork: inurl:index.php?option=comjegallery Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy:...

SonicDICOM PACS 2.3.2 CSRF Add Admin Exploit

Exploit for windows platform in category web applications SonicDICOM PACS 2.3.2 CSRF Add Admin Exploit Vendor: JIUN Corporation Product web page: https://www.sonicdicom.com Affected version: 2.3.2 and 2.3.1 Summary: SonicDICOM is PACS software that combines the capabilities of DICOM Server with w...