421 matches found
Ubiquiti Networks UniFi Cross-Site Request Forgery Vulnerability
Ubiquiti Networks UniFi Video also known as AirVision or AirVision Controller is a video surveillance system from Ubiquiti Networks in the United States. A cross-site request forgery vulnerability exists in UniFi v3.2.10 and earlier versions due to a failure to validate the referer header...
Medicomp Systems MEDCIN Engine Denial of Service Vulnerability
Medicomp Systems MEDCIN Engine is an electronic medical record system from French company Medicomp Systems. The system provides content and tools for physician and nurse documentation, clinical decision support and patient management. A security vulnerability exists in the 'AddUserFinding...
RealtyScript 4.0.2 - Multiple CSRF And Persistent XSS Vulnerabilities
Exploit for php platform in category web applications RealtyScript v4.0.2 Multiple CSRF And Persistent XSS Vulnerabilities Vendor: Next Click Ventures Product web page: http://www.realtyscript.com Affected version: 4.0.2 Summary: RealtyScript is award-winning real estate software that makes it...
RealtyScript 4.0.2 Cross Site Request Forgery / Cross Site Scripting
RealtyScript v4.0.2 Multiple CSRF And Persistent XSS Vulnerabilities Vendor: Next Click Ventures Product web page: http://www.realtyscript.com Affected version: 4.0.2 Summary: RealtyScript is award-winning real estate software that makes it effortless for a real estate agent, office, or...
CVE-2012-2930
Multiple cross-site request forgery CSRF vulnerabilities in TinyWebGallery TWG before 1.8.8 allow remote attackers to hijack the authentication of administrators for requests that 1 add a user via an adduser action to admin/index.php or 2 conduct static PHP code injection attacks in .htusers.php...
Ajax Search Pro <= 3.5 - Cross-Site Request Forgery (CSRF) Add User
The ajax-search-pro WordPress plugin was affected by a Cross-Site Request Forgery CSRF Add User security vulnerability. This will register an administrator with username "xADMIN" and password "xPASS": POST request to:...
Ajax Search Pro <= 3.5 - Cross-Site Request Forgery (CSRF) Add User
The ajax-search-pro WordPress plugin was affected by a Cross-Site Request Forgery CSRF Add User security vulnerability. PoC This will register an administrator with username "xADMIN" and password "xPASS": POST request to:...
SyndeoCMS Cross-Site Request Forgery Vulnerability
SyndeoCMS is a content management system for elementary schools. A cross-site request forgery vulnerability exists in SyndeoCMS 3.0 and prior versions that allows remote attackers to hijack the authentication of an administrator's request to add a user account, saveuser...
AlkalinePHP <= 0.77.35 (adduser.php) Arbitrary Add-Admin Vuln
No description provided by source. --==+================================================================================+==-- --==+ AlkalinePHP = 0.77.35 adduser.php Arbitrary Add-Admin +==-- --==+================================================================================+==-- Discovered By:...
VHCS <= 2.4.7.1 (Add User) Authentication Bypass Exploit
No description provided by source. html head titleVHCS version = 2.4.7.1 PoC. By RoMaNSoFt/title script language=JavaScript function submitform if document.adminadduser.username.value=='admin' alert'Learn to read before launching an exploit, script-kiddie!'; exit;...
YourTube 1.0 - CSRF Vulnerability (Add User)
No description provided by source. YourTube v1.0 CSRF Vulnerability Add User ==================================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Script : http://www.ac4p.com/ .:. Dork : inurl:Powered by YourTube v1.0 === Exploit === form method=POST...
MySms 1.0 - Multiple Vulnerabilities
No description provided by source. MySms v1.0 Multiple Vulnerabilities ==================================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] === Exploit === 1Auth Bypass =============== www.site.com/MySms/admin/index.php Username: 'or'a'='a Password:...
Linux/MIPS - add user(UID 0) with password - 164 bytes
No description provided by source. / Title: Linux/MIPS -add userUID 0 with password - 164 bytes Date: 2011-11-24 Author: rigan - imrigan at gmail.com Note: Username - rOOt Password - pwn3d / include stdio.h char sc = \x24\x09\x73\x50 // li t1,29520 \x05\x30\xff\xff // bltzal t1,400094 L...
linux/x86 bindport 8000 & add user with root access 225+ bytes
No description provided by source. ; ; Title : Bindport TCP/8000 & execve add user with access root ; os : Linux x86 ; size : 225+ bytes ; IP : localhost ; Port : 8000 ; Use : nc localhost 8000 ; ; Author : Jonathan Salwan ; Mail : submit AT shell-storm.org ; Web : http://www.shell-storm.org ; ; ...
QK SMTP <= 3.01 (RCPT TO) Remote Buffer Overflow Exploit
No description provided by source. / . \ \ \ \ | | / | | | | \ / / /\ \ / \ | | \ / | |/ | |/ / \ / \ | / \ // | Y / ^ /\ | //\ \ /| / / || /\ | \ | \ / / / / 25\10\06 / || / / mm. dM8 YMMMb. dMM8 YMMMMb dMMM' YMMMb dMMMP There are doors I have yet to open YMMM MMM' windows I have yet...
PageDirector CMS Multiple Vulnerabilities
No description provided by source. Exploit Title : PageDirector CMS Multiple Vulnerabilities Date : 20 - 6 - 2010 Author : Tr0y-x Vendor : www.customerparadigm.com Version : All Versions Tested on : Linux Home : WwW.SeC-WaR.CoM http://www.sec-war.com/ Price : 675.00 $ loooooolz -== SQL Injection...
Linux/ARM - add root user with password - 151 bytes
No description provided by source. / Title: Linux/ARM - add root user with password - 151 bytes Date: 2010-11-25 Tested on: ARM926EJ-S rev 5 v5l Author: Jonathan Salwan - twitter: @shellstorm http://shell-storm.org Informations: ------------- - user: shell-storm - pswd: toor - uid : 0 / include...
CrystalPlayer 1.98 - (.mls) Local Buffer Overflow Exploit
No description provided by source. !/usr/bin/perl Crystal Player 1.98 Playlist.mls File Local Buffer Overflow Exploit Source:: http://www.crystalplayer.com/CrystalPro.exe Credit To Timq For The Vulnerability POC By Arham Muhammad While Debugging EIP And EBP Successfully Gets Overwritten! Upon...
Qool CMS 2.0 RC2 - Multiple Vulnerabilities
No description provided by source. ?!-- Qool CMS v2.0 RC2 XSRF Add Root Exploit Vendor: Qool CMS Product web page: http://www.qool.gr Affected version: 2.0 RC2 Codename: Sommige Summary: Qool CMS is a content management system that helps web masters be more productive. Qool has been built with bo...
Linksys Cisco WAG120N CSRF Vulnerability
No description provided by source. ---------------------------------------------------------------- Hardware : Linksys Cisco Wag120nAnd perhaps similar versions Type of vunlnerability : CSRF Change Admin Password And Add User Risk of use : High...