Country micro-cms comments solicited module SQL injection

No description provided by source...

Country micro CMS multiple reflected XSS

No description provided by source...

Leviathan - Wide Range Mass Audit Toolkit

Leviathan is a mass audit toolkit which has wide range service discovery, brute force, SQL injection detection and running custom exploit capabilities. It consists open source tools such masscan, ncrack, dsss and gives you the flexibility of using them with a combination. The main goal of this...

Online Cinema and Event Booking Script 2.01 - newsid SQL Injection

Online Cinema and Event Booking Script 2.01 - newsid SQL Injection Exploit Title: Online Cinema and Event Booking Script v2.01 - SQL Injection Google Dork: N/A Date: 06.03.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software :...

PHP Matrimonial Script 3.0 - SQL Injection

Exploit Title: Matrimonial Script v3.0 - SQL Injection Google Dork: N/A Date: 06.03.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software : http://www.phpscriptsmall.com/product/matrimonial-script/ Demo: http://74.124.215.220/matriialscrip/ Version: 3.0 Tested on: Win7 x64, Kali Linux x64...

Grab: Authorization bypass using login by phone option+horizontal escalation possible on Grab Android App

Description: After my previous report about 2FA bypass on the Profile Edit endpoint i was interested to find enpoint, which will allow me horizontal privileges escalation. So, I found the endpoint using android app https://p.grabtaxi.com/api/passenger/v2/profiles/activationsms which allow me to...

autovpn - Easily connect to a VPN in a country of your choice

autovpn is a tool to automatically connect you to a random VPN in a country of your choice. It uses openvpn to connect you to a server obtained from VPN Gate. Compiling First clone the repo and cd into the directory: $ git clone https://github.com/adtac/autovpn $ cd autovpn Then run this to...

Hindu Matrimonial Script - Authentication Bypass Vulnerability

Exploit for php platform in category web applications Vulnerability:: Admin Login Bypass & SQLi + Add/Edit Date: 13.01.2017 Vendor Homepage: http://www.phpmatrimonialscript.in/ Script Name: Hindu Matrimonial Script Script Buy Now: http://www.phpmatrimonialscript.in/product/hindu-matrimonial-scrip...

Hindu Matrimonial Script - Authentication Bypass

Hindu Matrimonial Script - Authentication Bypass Vulnerability:: Admin Login Bypass & SQLi + Add/Edit Date: 13.01.2017 Vendor Homepage: http://www.phpmatrimonialscript.in/ Script Name: Hindu Matrimonial Script Script Buy Now: http://www.phpmatrimonialscript.in/product/hindu-matrimonial-script/...

texaslandmen.com XSS vulnerability

Vulnerable URL: http://www.texaslandmen.com/propertyresults.php?area=HillCountry=Texas=acreage=DESC'"--!...

openSUSE Security Update : tor (openSUSE-2016-1526)

This update for tor updates to version 0.2.8.12 and fixes the following issues : - a hostile hidden service could cause tor clients to crash boo1016343, CVE-2016-1254 - updated fallback directory list - updated geoip and geoip6 to the December 7 2016 Maxmind GeoLite2 Country database. - When Tor...

Man In The Middle (MitM)

geoip-lite-country is vulnerable to man-in-the-middle MitM attacks. This is because the library downloads a CSV resource via HTTP, allowing MitM attacks...

Cross-site scripting vulnerability in wordpress plugin caret-country-access-limit

caret-country-access-limit is a Wordpress plugin for descriptive country access limitation The Wordpress plugin caret-country-access-limit is vulnerable to an xss vulnerability due to improper filtering of user input, which allows attackers to frame malicious web pages and trick users into parsin...

Mindoktor: Vulnerable Mobile Phone configuration

Information I've found that when you register in "https://clinic.mindoktor.se/user/register", there is a specific field that says: "Mobile Phone - is needed to receive one-time codes via SMS". According to the description: You need your mobile phone every time you log in, so for every login an sm...

Threat Outbreak Alert RuleID24353: Email Messages Distributing Malicious Software on August 18, 2016

Medium Alert ID: 48517 First Published: 2016 August 18 14:25 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID24353 may contain the following files: Name |...

indiancountrytodaymedianetwork.com XSS vulnerability

Vulnerable URL: http://indiancountrytodaymedianetwork.com/2016/04/13/why-poor-vote-theyre-billionaires%3Cscript%3Ealert%28%27OPENBUGBOUNTY%27%29%3B%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 09:55 GMT Vulnerability type:| XSS...

indiancountrytodaymedianetwork.com XSS vulnerability

Vulnerable URL: http://indiancountrytodaymedianetwork.com/2016/04/13/why-poor-vote-theyre-billionaires%27%3E%20%3C/form%3E%3Cscript%3Ealert%28%22OPENBUGBOUNTY%22%29%3B%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 09:54 GMT...

Admin panel UliCMS SQL Injection Vulnerability

UliCMS is a web content management solution. A SQL code injection exists due to the "countryblacklist" variable of the page "action=spamfilter". An attacker can exploit the vulnerability to execute database code...

Guess the Country! - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Guess the Country! published at the 'play' market has multiple vulnerabilities...

My Country - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application My Country published at the 'play' market has multiple vulnerabilities...