Dahan-pass version of the jis Unified identity authentication system vulnerabilities package-vulnerability warning-the black bar safety net

For the system part of the function of the capture when found: POST: http://10.11.5.201:9080/jis/front/upduserdo.jsp CONTENT: cid=0 0 0 0 0&vcloginid=admin&vcpassword=1 2 3 4 5 6&vcpwd=1 2 3 4 5 6&vcusername=system...

Built2Go PHP Shopping - Cross-Site Request Forgery (Admin Password)

Built2Go PHP Shopping - Cross-Site Request Forgery Admin Password source: https://www.securityfocus.com/bid/64735/info Built2Go PHP Shopping is prone to a cross-site request-forgery vulnerability. Exploiting the issue will allow a remote attacker to use a victim's currently active session to chan...

Command School Student Management System - '/sw/Admin_change_Password.php' Cross-Site Request Forgery (Admin Password Manipulation)

source: https://www.securityfocus.com/bid/64707/info Command School Student Management System is prone to the following security vulnerabilities: 1. Multiple SQL-injection vulnerabilities 2. A cross-site request forgery vulnerability 3. A cross-site scripting vulnerability 4. An HTML injection...

V5shop官方演示站点一处有意思的逻辑缺陷可泄漏管理员密码

简要描述： 我了个插，一个厂商发3个之后就不挖了，不然有刷rank的嫌疑。 wb都是xsser的，不然他会很伤心的，请别的白帽子也高台贵手。 详细说明： 为啥我会说有意思，难道没意思我会说有意思吗？我不知道你们看完觉得有没有意思。 打开http://site2.v5shop.com.cn/vprostandred/。铺面而来的是 本屌当时就填了个验证码就进去了。看到admin，很高心，于是想要提交，你以为管理是sb吗？这是演示站点啊。虽然你可以进行各种操作，但是你以为官网是sb啊。于是搞的本吊上级下跳，慢慢的审查这个演示后台。突然24k纯金狗眼一亮发现一个地方可以修改密码...

Cisco EPC3925跨站请求伪造漏洞

Cisco EPC3925是美国思科（Cisco）公司的一款家用无线路由器设备。 Cisco EPC3925路由器中存在跨站请求伪造漏洞，该漏洞源于goform/Quicksetup URL没有正确验证请求。远程攻击者可借助Password和PasswordReEnter参数利用该漏洞更改密码。 Exploit Title: Cisco EPC3925 � Cross Site Request Forgery Google Dork: N/A Date: 12-11-2013 Exploit Author: Jeroen - IT Nerdbox Vendor Homepage:...

Beetel TC1-450 Airtel Wireless Router - Multiple Cross-Site Request Forgery Vulnerabilities

Beetel TC1-450 Airtel Wireless Router - Multiple Cross-Site Request Forgery Vulnerabilities Exploit Title: Beetel TC1-450 Airtel Wireless Router - Multiple CSRF Vulnerabilities Date: 12/13/2013 Author: SaMaN @samanL33T Vendor Homepage:http://www.beetel.in/node/10139 Category: Hardware/Wireless...

Beetel TC1-450 Airtel Wireless Router - Multiple CSRF Vulnerabilities

Exploit for hardware platform in category web applications Technical Details Beetel 450-TC1 Wireless Router has a Cross Site Request Forgery Vulnerability in its Web Console. Attacker can easily change Wireless password,Reboot Router, Reset Router,Change Router's Admin Password by simply making t...

Beetel TC1-450 Airtel Cross Site Request Forgery

Exploit Title: Beetel TC1-450 Airtel Wireless Router - Multiple CSRF Vulnerabilities Date: 12/13/2013 Author: SaMaN @samanL33T Vendor Homepage:http://www.beetel.in/node/10139 Category: Hardware/Wireless Router Firmware Version: TM4-0Q-020 and below Tested on: Beetel 450-TC1 Wireless Router Patch/...

Cisco EPC3925 - Cross Site Request Forgery

This proof of concept demonstrates that the admin password can be changed by an attacker in a CSRF attack. However, it seems like any setting in the device can be manipulated using an attack like this...

Cisco EPC3925 Cross Site Request Forgery

Exploit Title: Cisco EPC3925 � Cross Site Request Forgery Google Dork: N/A Date: 12-11-2013 Exploit Author: Jeroen - IT Nerdbox Vendor Homepage: http://www.cisco.com Software Link: Not public Version: epc3925-E10-5-v302r125572-130520c Tested on: Cisco EPC3925 CVE: N/A Description: This proof of...

Cisco EPC3925 - Cross-Site Request Forgery

Exploit Title: Cisco EPC3925 � Cross Site Request Forgery Google Dork: N/A Date: 12-11-2013 Exploit Author: Jeroen - IT Nerdbox Vendor Homepage: http://www.cisco.com Software Link: Not public Version: epc3925-E10-5-v302r125572-130520c Tested on: Cisco EPC3925 CVE: N/A Description: This proof of...

ProQuiz v2.X.X CSRF (change admin passwd) Vulenrability

Exploit for php platform in category web applications + Author: TUNISIAN CYBER + Exploit Title: ProQuiz v2.X.X CSRF change admin passwd Vulenrability + Date: 14-12-2013 + Category: WebApp + Vendor:http://proquiz.softon.org/ + Google Dork: intext:"Powered by - Softon Technologies" + Tested on: Win...

WHMCompleteSolution (WHMCS) 4.x5.x - Multiple Web Vulnerabilities

WHMCompleteSolution WHMCS 4.x5.x - Multiple Web Vulnerabilities Exploit Title: WHMCS v4.x & v5.x - Multiple Web Vulnerabilities Date: 2013-12-10 Exploit Author: ahwak2000 Vendor Homepage: http://whmcs.com/ Version: 4.x , 5.x Tested on: win 7 +------------------+ | Vulnerability |...

Belkin WiFi NetCam video stream backdoor with unchangeable admin/admin credentials

Product: Product NetCam WiFi Camera With Night Vision, purchased August 2013 Summary: Live video stream is accessible with user/password of admin/admin. The user/password combination admin/admin cannot be changed by the user. This "feature" is undocumented. To reproduce: 1. Connect webcam to...

ZyXEL GS1510-16 Password Extractor

This module exploits a vulnerability in ZyXEL GS1510-16 routers to extract the admin password. Due to a lack of authentication on the webctrl.cgi script, unauthenticated attackers can recover the administrator password for these devices. The vulnerable device has reached end of life for support...

Elastix Voip system 2.x , Php code injection / Data dump Exploit

Elastix is famous asterisk voip system interface dist. it's vulnerable to php code injection vuln , which can be used to dump all data including - SIP Extention Data - Plain text admin password - Moderators passwords - All trunks data - shell upload Usage Info just add the ip list to "list.txt"...

Cisco TelePresence VX Clinical Assistant WIL-A Module Reboot Admin Password Removal

Cisco TelePresence VX Clinical Assistant is affected by a password reset vulnerability. The WIL-A module causes the administrative password to be reset to a blank password every time the device is rebooted. This plugin attempts to authenticate to the device using the username 'admin' and a blank...

Cisco TelePresence VX Clinical Assistant unauthorized access

admin password is reset on every reboot...

TOSHIBA e-Studio 232233282283 - Cross-Site Request Forgery (Change Admin Password)

TOSHIBA e-Studio 232233282283 - Cross-Site Request Forgery Change Admin Password Exploit Title: TOSHIBA e-Studio 232/233/282/283 Change Admin Password CSRF Vulnerability Date: 02.10.2013 Exploit Author: Hubert Gradek PL Affected version: firmware T377SY0EXXX Tested on: TOSHIBA e-Studio 232...

TOSHIBA e-Studio 232/233/282/283 - Cross-Site Request Forgery (Change Admin Password)

Exploit Title: TOSHIBA e-Studio 232/233/282/283 Change Admin Password CSRF Vulnerability Date: 02.10.2013 Exploit Author: Hubert Gradek PL Affected version: firmware T377SY0EXXX Tested on: TOSHIBA e-Studio 232 T377SY0E354 / 233 T377SY0E331 CVE : No CVE exists - 0day exploit Password must be minim...