CVE-2016-9418

MyBB aka MyBulletinBoard before 1.8.8 on Windows and MyBB Merge System before 1.8.8 on Windows might allow remote attackers to obtain sensitive information from ACP backups via vectors involving a short name...

Design/Logic Flaw

MyBB aka MyBulletinBoard before 1.8.8 on Windows and MyBB Merge System before 1.8.8 on Windows might allow remote attackers to obtain sensitive information from ACP backups via vectors involving a short name...

CVE-2016-9418

MyBB aka MyBulletinBoard before 1.8.8 on Windows and MyBB Merge System before 1.8.8 on Windows might allow remote attackers to obtain sensitive information from ACP backups via vectors involving a short name...

CVE-2016-9418

CVE-2016-9418 affects MyBB (MyBulletinBoard) on Windows prior to 1.8.8 and MyBB Merge System on Windows prior to 1.8.8. The issue allows remote attackers to obtain sensitive information from ACP backups via vectors involving a short name. A fix is available in MyBB 1.8.8 release (and later); upgr...

MyBB < 1.8.8 Multiple Vulnerabilities

Binary data 9777.prm...

CVE-2015-2334

CVE-2015-2334 describes a CSRF vulnerability in the Admin Control Panel (ACP) login of MyBB (pre-1.8.4) that allows remote attackers to hijack user authentication. The root cause is CSRF in the ACP login flow; victims’ sessions could be manipulated via unspecified vectors. The publicly documented...

Cisco IOS XE Software Autonomic Networking Infrastructure Routing Protocol for Low-Power and Lossy Networks Vulnerability

A vulnerability in the IPv6 Routing Protocol for Low-Power and Lossy Networks RPL of Cisco IOS XE could allow an unauthenticated, adjacent attacker to inject routes into the autonomic control plane ACP. The vulnerability is due to RPL being active on ACP as well as the external Autonomic Networki...

CVE-2014-3405

Summary: Cisco IOS XE’s Autonomic Networking Infrastructure (ANI) and Autonomic Control Plane (ACP) run the IPv6 RPL protocol. The vulnerability allows an unauthenticated, adjacent attacker to inject routes via crafted RPL advertisements on the ANI interface, potentially impacting routing in the ...

WeBid 1.0.2 persistent XSS via SQL Injection

No description provided by source. Exploit Title: presistent XSS through SQLi WeBid 1.0.2 Google Dork: powered by WeBid Date: 15-06-2011 Author: Saif El-Sherei Software Link: http://sourceforge.net/projects/simpleauction/ Version: 1.0.2 Tested on: Firefox 4, XAMPP Info: Open source php/mysql full...

Icy Phoenix 1.3.0.53a HTTP Referer stored XSS

No description provided by source. Exploit Title: Icy Phoenix 1.3.0.53a http referer stored XSS Google Dork: Powered by Icy Phoenix http://www.icyphoenix.com/ Date: 16-2-2011 Author: Saif El-Sherei Software Link: http://www.icyphoenix.com/dload.php?action=file&fileid=171 Version: Icy Phoenix...

vBulletin Announcements Cookie Steal Vulnerability

If you get access to a forum with an acc that only has default acp, you can get all users information by creating a cookie stealer in announcements. vBulletin Announcements, by default has html enabled, so if you get access to a forum using other exploits and get a user with acp info, but it only...

CVE-2012-2324

Technical details about CVE-2012-2324 are not publicly provided in the connected documents. Monitor for updates; the sources reproduce the vulnerability description but do not specify affected versions, vectors, exploitation status, or fixes.

CVE-2012-2326

MyBB Admin Control Panel (ACP) contains a Cross-site Scripting (XSS) vulnerability (CVE-2012-2326) affecting

CVE-2012-2325

CVE-2012-2325 is a SQL injection vulnerability in the User Inline Moderation feature of the Admin Control Panel (ACP) in MyBB (MyBulletinBoard) , fixed in version 1.6.7. The flaw allows remote administrators to execute arbitrary SQL commands via unspecified vectors, impacting data confidentiality...

TeamSpeak 2 Interface - Cross Site Scripting (Client)

Document Title: =============== TeamSpeak 2 Interface - Cross Site Scripting Client References: =========== View: http://www.youtube.com/watch?v=ybE8qgMJ09o Release Date: ============= 2011-08-04 Vulnerability Laboratory ID VL-ID: ==================================== 245 Discovery Status:...

WeBid 1.0.2 - Persistent Cross-Site Scripting (via SQL Injection)

WeBid 1.0.2 - Persistent Cross-Site Scripting via SQL Injection Exploit Title: presistent XSS through SQLi WeBid 1.0.2 Google Dork: "powered by WeBid" Date: 15-06-2011 Author: Saif El-Sherei Software Link: http://sourceforge.net/projects/simpleauction/ Version: 1.0.2 Tested on: Firefox 4, XAMPP...

WeBid 1.0.2 presistent XSS via SQL Injection

Exploit for php platform in category web applications Exploit Title: presistent XSS through SQLi WeBid 1.0.2 Google Dork: "powered by WeBid" Author: Saif El-Sherei Software Link: http://sourceforge.net/projects/simpleauction/ Version: 1.0.2 Tested on: Firefox 4, XAMPP Info: Open source php/mysql...

1024cms ACP 1.1.0 Complete Modules Cross Site Scripting

================================================================================================================ 1024cms Admin Control Panel v1.1.0 Beta Complete-Modules Package - Cross-Site Scripting Vulnerability...

1024cms ACP 1.1.0 Master-cPanel Local File Inclusion

========================================================================================================== 1024cms Admin Control Panel v1.1.0 Beta Master-cPanel Package - Local File Include Vulnerability...

PerlSoft Guestbook v1.7b Bruteforcer + RCE!

Typ: Bruter & RCE Name: PerlSoft GB Pwner Affected Software: PerlSoft Gastebuch Version: 1.7b Coder/Bugfounder: Perforin ------ the RCE is only once possible, do not waste your command! STEP1: Use my script to bruteforce the admin login from the guestbook. STEP2: If we gain access, you can decide...