5214 matches found
ZYXEL Prestig P-660HNU-T1 - ISP Credentials Disclosure
ZYXEL Prestig P-660HNU-T1 - ISP Credentials Disclosure !/usr/bin/perl Exploit Author: Sebastián Magof Hardware: ZyXEL Prestig P-660HNU-T1 Vulnerable file: wzADSL.asp location: http://gateway/cgi-bin/wzADSL.asp Bug: ISP usr+pwd disclosure Type: Local Date: 22/09/2014 Vendor Homepage:...
Information disclosure
The mPAY24 payment module before 1.6 for PrestaShop allows remote attackers to obtain credentials, the installation path, and other sensitive information via a direct request to api/curllog.log...
CVE-2014-4750
IBM PowerVC Express Edition 1.2.0 before FixPack3 establishes an FTP session for transferring files to a managed IVM, which allows remote attackers to discover credentials by sniffing the network...
LifeType <= 1.0.4 - SQL Injection / Admin Credentials Disclosure Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo LifeType = 1.0.4r3270 SQL injection / admin credentials disclosure\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n; echo dork: \Powered by LifeType\ \RSS 0.90\ \RSS 1.0\ \RSS 2.0...
CA ARCserve D2D r15 GWT RPC Multiple Vulnerabilities
No description provided by source. Exploit Title:CA ARCserve D2D r15 GWT RPC Request Auth Bypass / Credentials Disclosure and Commands Execution Google Dork: / Date: 25 July 2011 Author: rgod Software Link: / Version: r15.0 Tested on: Microsoft Windows Server 2003 r2 sp2 CVE : none ?php / CA...
RunCms <= 1.5.2 (debug_show.php) Remote SQL Injection Exploit
No description provided by source. ?php printr' -------------------------------------------------------------------------- RunCms = 1.5.2 /class/debug/debugshow.php sql injection / credentials disclosure exploit by rgod mail: retrog at alice dot it site: http://retrogod.altervista.org dork: Runcm...
DCP-Portal 5.5 advertiser.php password Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/8739/info Multiple SQL Injection vulnerabilities have been discovered that affect DCP-Portal scripts. These issues are likely due to a lack of sufficient sanitization performed on user supplied URI parameters. Attacks hav...
Docebo <= 3.5.0.3 (lib.regset.php/non-blind) SQL Injection Exploit
No description provided by source. ?php printr' ----------------------------------------------------------------------------- Docebo Suite = 3.5.0.3 lib.regset.php/non-blind SQL injection exploit by rgod bug found by EgiX working with Mysql = 4.1 PHP 5.X needed by Docebo regardless of php.ini...
LoudBlog <= 0.5 (id) SQL Injection / Admin Credentials Disclosure
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo LoudBlog = 0.5 'id' SQL injection / admin credentials disclosure\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n; echo a dork: \Powered by LoudBlog\r\n\r\n; / works regardless of...
Etomite CMS <= 0.6.1 (username) SQL Injection Exploit (mq = off)
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo Etomite CMS = 0.6.1 all patches applied 'username' SQL injection / admin credentials disclosure\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n; echo google dork: \Content managed...
Flat PHP Board <= 1.2 - Multiple Vulnerabilities
No description provided by source. --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org...
myBloggie <= 2.1.4 (trackback.php) Multiple SQL Injections Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo MyBloggie = 2.1.4 trackback.php multiple SQL injections vulnerability /\n; echo administrative credentials disclosure exploit\n; echo by rgod [email protected]\n; echo site: http://retrogod.altervista.org\n\n; / works...
CMtextS <= 1.0 (users_logins/admin.txt) Credentials Disclosure Vuln
No description provided by source. ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+ +:+:+ +:+ ++...
GetSimple CMS 2.01 and 2.02 Administrative Credentials Disclosure
No description provided by source. Researcher: Michael Brooks Affecting: GetSimple CMS 2.01 and 2.02 Fixed:2.03 Vulnerability: Administrative Credentials Disclosure Vendor's Homepage: http://code.google.com/p/get-simple-cms download url for 2.01: http://www.box.net/get-simple/1/30435008/399754548...
http-vuln-cve2013-7091 NSE Script
An 0 day was released on the 6th December 2013 by rubina119, and was patched in Zimbra 7.2.6. The vulnerability is a local file inclusion that can retrieve any file from the server. Currently, we read /etc/passwd and /dev/null, and compare the lengths to determine vulnerability. TODO: Add the...
Four Oracle Demantra Security Vulnerabilities Found
Oracle’s Demantra, part of the company’s Value Chain Planning suite of software, is fraught with vulnerabilities according to several bug disclosures issued over the weekend. Researchers at the London-based computer security firm Portcullis claim the application is plagued by a four vulnerabiliti...
Technicolor TC7200 - Credentials Disclosure
Technicolor TC7200 - Credentials Disclosure Exploit Title: Technicolor TC7200: Authentication Bypass Google Dork: N/A Date: 24-02-2014 Exploit Author: Jeroen - IT Nerdbox Vendor Homepage: http://www.technicolor.com/ Software Link:...
Technicolor TC7200 - Credentials Disclosure
Exploit Title: Technicolor TC7200: Authentication Bypass Google Dork: N/A Date: 24-02-2014 Exploit Author: Jeroen - IT Nerdbox Vendor Homepage: http://www.technicolor.com/ Software Link:...
Technicolor TC7200 - Credentials Disclosure Vulnerability
Exploit for hardware platform in category web applications Exploit Title: Technicolor TC7200: Authentication Bypass Google Dork: N/A Date: 24-02-2014 Exploit Author: Jeroen - IT Nerdbox Vendor Homepage: http://www.technicolor.com/ Software Link:...
ASUS RT-N66U Router - HTTPS Directory traversal and full file access and credential disclosure vuln
Vulnerable product: ASUS RT-N66U when HTTPS WebService via AiCloud is enabled AC66R and RT-N65U are effected as well, but need more testing Vulnerabilities: - Linux 2.6.22 - Researched on both 3.0.0.4.270 and 3.0.0.4.354 firmware - Full directory traversal and plain text disclosure of all sensiti...