GPON Home Router FTP G-93RG1 - CSRF Command Execution Vulnerability

Exploit for hardware platform in category web applications CSRF Demo Exploit -- document.auto.submit; 0day.today 2018-03-31...

Advisory: CVE-2014-9707: GoAhead Web Server 3.0.0 - 3.4.1

Affected software: GoAhead Web Server Affected versions: 3.0.0 - 3.4.1 3.x.x series before 3.4.2 CVE ID: CVE-2014-9707 Description: The server incorrectly normalizes HTTP request URIs that contain path segments that start with a "." but are not entirely equal to "." or ".." eg. ".x". By sending a...

rt -- Remote DoS, Information disclosure and Session Hijackingvulnerabilities

Best Practical reports: RT 3.0.0 and above, if running on Perl 5.14.0 or higher, are vulnerable to a remote denial-of-service via the email gateway; any installation which accepts mail from untrusted sources is vulnerable, regardless of the permissions configuration inside RT. This...

Fortinet FortiAuthenticator Cross-Site Scripting Vulnerability

Fortinet FortiAuthenticator is a series of secure authentication solutions that identify and interface with FortiToken™ two-factor authentication tokens for secure remote access. A cross-site scripting vulnerability in Fortinet FortiAuthenticator 3.0.0 could allow a remote attacker to inject...

CVE-2015-1457

Fortinet FortiAuthenticator 3.0.0 allows local users to read arbitrary files via the -f flag to the dig command...

CVE-2015-1456

Fortinet FortiAuthenticator 3.0.0 logs the PostgreSQL usernames and passwords in cleartext, which allows remote administrators to obtain sensitive information by reading the log at debug/startup/...

DotNetNuke DNNspot Store 3.0.0 Arbitary File Upload

No description provided by source. Exploit Title: DotNetNuke DNNspot Store UploadifyHandler.ashx = 3.0.0 Arbitary File Upload Date: 23/01/2014 Author: Glafkos Charalambous Version: 3.0.0 Vendor: DNNspot Vendor URL: https://www.dnnspot.com Google Dork: inurl:/DesktopModules/DNNspot-Store/ root@kal...

Information disclosure

Eucalyptus 3.0.0 through 4.0.1, when the log level is set to DEBUG or lower, logs user and system passwords, which allows local users to obtain sensitive information by reading the cloud log files...

DotNetNuke DNNspot Store 3.0.0 - Arbitrary File Upload (Metasploit)

Exploit Title: DotNetNuke DNNspot Store UploadifyHandler.ashx windows/shell/reversetcp LHOST = 192.168.13.37 LPORT = 31337 RHOST = 192.168.31.33 - Handler failed to bind to 192.168.13.37:31337 Started reverse handler on 0.0.0.0:31337 192.168.31.33:80 - Uploading payload... 192.168.31.33:80 -...

WordPress Plugin WP Content Source Control - 'download.php' Directory Traversal

source: https://www.securityfocus.com/bid/69278/info WP Content Source Control plugin for WordPress is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue can allow an attacker to obtain sensitive information that could...

WordPress Plugin WP Content Source Control - download.php Directory Traversal

WordPress Plugin WP Content Source Control - download.php Directory Traversal source: https://www.securityfocus.com/bid/69278/info WP Content Source Control plugin for WordPress is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiti...

jax formmailer 3.0.0 - Remote File Inclusion Vulnerability

No description provided by source. --:remote file include:-- --------------------------------- script:Jax FormMailer 3.0.0 Release:01.06.2008 - Author: ahmadbady ----------------------------------------------------------------------- download...

Dolibarr ERP/CRM 3.0.0 - Multiple Vulnerabilities

No description provided by source. ------------------------------------------------------------------------ Software................Dolibarr 3.0.0 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.dolibarr.org/ Discovery...

vBulletin 3.0 Private Message HTML Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7594/info A vulnerability has been reported in vBulletin 3.0.0 beta 2. The problem is said to occur due to insufficient sanitization of private messages. As a result, an attacker may be capable of embedding malicious HTML...

Maintain 3.0.0-RC2 Example6.PHP Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/20560/info Maintain is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PH...

Php Blue Dragon CMS 3.0.0 - Remote Code Execution Exploit

No description provided by source. ?php // Exploit Name: Php Blue Dragon CMS 3.0.0 Code Execution Exploit //Script Homepage: http://phpbluedragon.pl/ // Autor: Kacper [email protected] // Autor Homepage: devilteam.eu | kacper.bblog.pl //Pozdrawiam wszystkich ludzi z DEVIL TEAM, Zapraszam na irc...

Linux Kernel 'perf_count_sw_cpu_clock' event Denial of Service

No description provided by source. //Vince / Error with overflows and perf::perfcountswcpuclock / / This test will crash Linux 3.0.0 / / compile with gcc -O2 -o ofloswcpuclockcrash ofloswcpuclockcrash.c / / by Vince Weaver vweaver1 at eecs.utk.edu / define GNUSOURCE 1 include stdio.h include...

TNR Enhanced Joomla Search <= SQL Injection Vulnerability

No description provided by source. ========================================================================================= o TNR Enhanced Joomla Search = SQL Injection Vulnerability Software : comesearch ver 3.0.0 Vendor : http://www.tnrjoomla.com/ Author : NoGe Contact : nogedotcodeatgmaildotc...

Cart Engine 3.0.0 Database Backup Disclosure Vulnerability

Cart Engine version 3.0.0 suffers from a database backup disclosure vulnerability. ?php / Cart Engine 3.0.0 Database Backup Disclosure Exploit Vendor: C97net Product web page: http://www.c97.net Affected version: 3.0.0 Summary: Open your own online shop today with Cart Engine! The small, yet...

Cart Engine 3.0.0 (task.php) Local File Inclusion Vulnerability

Summary Open your own online shop today with Cart Engine! The small, yet powerful and don't forget, FREE shopping cart based on PHP & MySQL. Unique features of Cart Engine include: CMS engine based on our qEngine, product options, custom fields, digital products, search engine friendly URL, user...