Cisco Linksys WAG54GS - Cross-Site Request Forgery (Change Admin Password)

+--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Cisco Linksys WAG54GS ADSL Router change admin password Date : 20-02-2012 Author : Ivano Binetti http://ivanobinetti.com Vendor site :...

D-Link DSL-2640B (ADSL Router) CSRF Vulnerability

Exploit for hardware platform in category web applications +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : D-Link DSL-2640B ADSL Router CSRF Vulnerability Date : 19-02-2012 Author : Ivano Binetti...

D-Link DSL-2640B Cross Site Request Forgery

+--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : D-Link DSL-2640B ADSL Router CSRF Vulnerability Date : 19-02-2012 Author : Ivano Binetti http://ivanobinetti.com Vendor site : http://www.d-link.com...

11in1 CMS 1.2.1 - Cross-Site Request Forgery (Admin Password)

11in1 CMS 1.2.1 - Cross-Site Request Forgery Admin Password source: https://www.securityfocus.com/bid/52025/info 11in1 is prone to a cross-site request-forgery and a local file include vulnerability. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

11in1 CMS 1.2.1 - Cross-Site Request Forgery (Admin Password)

source: https://www.securityfocus.com/bid/52025/info 11in1 is prone to a cross-site request-forgery and a local file include vulnerability. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, steal...

Ananta Gazelle CMS upload statement for registration and fix-vulnerability warning-the black bar safety net

The head of the table: Ananta Gazelle CMS - Update Statement Sql injection Author: hackme Download address: http://sourceforge.net/projects/ananta/files/stable/Gazelle 1.0 stable/AnantaGazelle1.0.zip/ Impact version: 1.0 stable Test platform: backbox 2.1 First for my bad English, sorry + This...

ShuzirenCMS v4. 0 background Get a Shell and fix-vulnerability warning-the black bar safety net

A simple look under the... Find Asp Php script permission to seal too tightly throughout the website, directory any one not to write Test environment/system: Digital Information Center content management system ShuzirenCMS v4. 0 / Windows Regardless of your social worker,dig yourself the...

Akiva Webboard SQL Injection

Hey, this is my first time that i report a vulnerability to a mailing list. The problem on the Akiva Webboard is, that you can login as Administrator with admin'-- SQL Injection and if you go to the adminprofil you can see the Adminpasswort in the HTML code. The current version is 9. I do only kn...

GotoCode Online Classifieds - Multiple Vulnerabilities

GotoCode Online Classifieds - Multiple Vulnerabilities Exploit Title : GotoCode Online Classifieds Multiple Vulnerabilities Vulnerability : Privilege Escalation / Remote Database Download Date : 09/10/2011 Author : Nathaniel Carew Email : [email protected] Impact : High Software Link :...

GotoCode Online Classifieds - Multiple Vulnerabilities

Exploit Title : GotoCode Online Classifieds Multiple Vulnerabilities Vulnerability : Privilege Escalation / Remote Database Download Date : 09/10/2011 Author : Nathaniel Carew Email : [email protected] Impact : High Software Link : http://www.gotocode.com/apps.asp?appid=5& Platform : ASP.NET Test...

GotoCode Online Classifieds Access Bypass

Exploit Title : GotoCode Online Classifieds Multiple Vulnerabilities Vulnerability : Privilege Escalation / Remote Database Download Date : 09/10/2011 Author : Nathaniel Carew Email : [email protected] Impact : High Software Link : http://www.gotocode.com/apps.asp?appid=5& Platform : ASP.NET Test...

GotoCode Online Classifieds Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title : GotoCode Online Classifieds Multiple Vulnerabilities Vulnerability : Privilege Escalation / Remote Database Download Date : 09/10/2011 Author : Nathaniel Carew Email : email protected Impact : High Software Link :...

CVE-2011-2190

The generateadminpassword function in Cherokee before 1.2.99 uses time and PID values for seeding of a random number generator, which makes it easier for local users to determine admin passwords via a brute-force attack...

CVE-2011-2190

The Cherokee generate_admin_password function (before version 1.2.99) seeds its RNG with time and PID values, enabling a local-user brute-force approach to determine admin passwords. Affected: Cherokee before 1.2.99. Impact: weak randomness in password generation increases the risk of unauthorize...

ezCourses Security Bypass Vulnerability (Oct 2011) - Active Check

ezCourses is prone to a security bypass vulnerability because it fails to properly validate user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

ezCourses - admin.asp Security Bypass

ezCourses - admin.asp Security Bypass source: https://www.securityfocus.com/bid/49907/info ezCourses is prone to a security-bypass vulnerability because it fails to properly validate user-supplied input. Attackers could exploit the issue to bypass certain security restrictions and add or change t...

ezCourses Remote Permission Bypass

,-.-. | | | | | o ,---. o | o | | |,---.,---.|---.,---.,---.|---. |---|,---.,---.|/ .,---.,---. |---|,---.,---.,---.,---..,---.|--- .,---.,---. | | |,---|| || || |---'| | | |,---|| | \ || || | | |---.---.| || |,---|| || || | ' '---^---| ' ---'---'o '---^---' '---|o '---'---'---'---'---^---'---' '...

FOX Sports website database hacked and leaked by Shad0w

FOX Sports website database hacked and leaked by Shad0w One of the Biggest Fox Sports website with world rank 678 and millions of Readers/Day got hacked. Hacker named "Shad0w " release SQL injection Vulnerability on one of the sub domain of Fox Sports and exploit it to extract the database. Leake...

FOX Sports website database hacked and leaked by Shad0w

FOX Sports website database hacked and leaked by Shad0w One of the Biggest Fox Sports website with world rank 678 and millions of Readers/Day got hacked. Hacker named "Shad0w" release SQL injection Vulnerability on one of the sub domain of Fox Sports and exploit it to extract the database. Leaked...

Mambo 4.6.5 Cross Site Request Forgery

===================================================================== . . . . | | ||/ | || | / / \ / /\ | | / | \ \ | |/ | \ / | || | // | / // | \ /\ | /|//|||| |\ | / /|| / Exploit-ID is the Exploit Information Disclosure Web : exploit-id.com e-mail : rootatexploit-iddotcom I'm Caddy-Dz,...