Web Based TimeSheet Script - Authentication Bypass

Exploit Title: Web Based TimeSheet Script - Authentication Bypass Google Dork: N/A Date: 26.01.2017 Vendor Homepage: http://qualitypointtech.net/ Software Buy: http://www.qualitypointtech.com/webtimesheet/ Demo: http://qualitypointtech.net/timesheetdemo/index.php Version: N/A Tested on: Win7 x64,...

Job Site PHP Script 1.1 - Authentication Bypass

Exploit Title: ICJobSite-Job Site PHP Script - Authentication Bypass Google Dork: N/A Date: 20.01.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Buy: http://www.icloudcenter.com/jobs-site-script.htm Demo: http://icloudcenter.net/demos/icjobsite/ Version: 1.1 Tested on: Win7 x64 Explo...

B2B Alibaba Clone Script - 'IndustryID' SQL Injection

Exploit Title: B2B Alibaba Clone Script - SQL Injection Google Dork: N/A Date: 20.01.2017 Vendor Homepage: https://www.clonescriptsoft.com/ Software Buy: https://www.clonescriptsoft.com/collections/b2b-alibaba-clone/products/alibaba-clone Demo: http://alibaba.clonescriptsoft.com/ Version: N/A...

ICTutors Tutoring Site Script 1.1 - Authentication Bypass

Exploit Title: ICTutors-Tutoring Site Script - Authentication Bypass Google Dork: N/A Date: 20.01.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Buy: http://www.icloudcenter.com/tutoring-site-script.htm Demo: http://www.icloudcenter.net/demos/ictutors/ Version: 1.1 Tested on: Win7 x6...

Image Sharing Script 4.13 - Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title : Image Sharing Script v4.13 - Multiple Vulnerability Author : Hasan Emre Ozer Google Dork : - Date : 16/01/2017 Type : webapps Platform: PHP Vendor Homepage : http://itechscripts.com/image-sharing-script/ Sofware Price and Demo ...

Haraj v2 Script Shell Upload Vulnerability

Exploit for php platform in category web applications |----------------------------| | xBADGIRL21 | | N3W PUBLIC 3XPL0IT | | , | | 0day T == -- | | /-' | | // | | x21 | |----------------------------| | Exploit Title : Haraj v2 Script Shell Upload Vulnerability | Exploit Author : xBADGIRL21 | Dork...

Business Networking Script 8.11 - SQL Injection Cross-Site Scripting

Business Networking Script 8.11 - SQL Injection Cross-Site Scripting Exploit Title : ----------- : Business Networking Script v8.11- SQLi & Persistent Cross Site Scripting Author : ----------------- : Ahmet Gurel Google Dork : --------- : - Date : -------------------- : 16/01/2017 Type :...

Business Networking Script 8.11 - SQL Injection / Cross-Site Scripting

Exploit Title : ----------- : Business Networking Script v8.11- SQLi & Persistent Cross Site Scripting Author : ----------------- : Ahmet Gurel Google Dork : --------- : - Date : -------------------- : 16/01/2017 Type : -------------------- : webapps Platform : --------------- : PHP Vendor Homepa...

Online Food Delivery 2.04 - Authentication Bypass Vulnerability

Exploit for php platform in category web applications Vulnerability: Online Food Delivery v2.04 Authentication bypass Date: 12.01.2017 Software link: http://itechscripts.com/food-delivery/ Demo: http://restaurant.itechscripts.com Price: 49$ Category: webapps Exploit Author: Dawid Morawski Website...

Job Portal Script 9.11 - Authentication Bypass Vulnerability

Exploit for php platform in category web applications Vulnerability: Job Portal Script v9.11 Authentication bypass Date: 12.01.2017 Software link: http://itechscripts.com/job-portal-script/ Demo: http://job-portal.itechscripts.com Price: 199$ Category: webapps Exploit Author: Dawid Morawski...

Online Food Delivery 2.04 - Authentication Bypass

Online Food Delivery 2.04 - Authentication Bypass Vulnerability: Online Food Delivery v2.04 Authentication bypass Date: 12.01.2017 Software link: http://itechscripts.com/food-delivery/ Demo: http://restaurant.itechscripts.com Price: 49$ Category: webapps Exploit Author: Dawid Morawski Website:...

GlobaLeaks: No valid SPF records on demo.globaleaks.org

User originally noticed www.globaleaks.org was without SPF record. This is out of scope, but demo.globaleaks.org lacks it as well. Marked as informative...

iOS 10 iMessage character crash Bug again-vulnerability warning-the black bar safety net

! Recently, hacker@vincedes3 found a from iOS 8 to iOS 10.2.1 b2 universal iMessage character crash Bug, the Bug also utilizes the iOS 8 iMessage SMS Bug of a similar technique, a section of malicious code sent to the victims, the victims in receiving SMS, browse SMS can be caught, then the SMS...

Teampass 2.1.26.8: Unauthenticated SQL Injection

RIPS Analysis RIPS was able to analyze the whole project consisting of 140,000 lines of code in only 25 seconds, uncovering a lot of severe security vulnerabilities. The two main types of issues was SQL injection and file inclusion. Luckily, most of the SQL injections were found in the installati...

ARG-W4 ADSL Router Denial Of Service / Cross Site Request Forgery

Exploit Title: ARG-W4 ADSL Router - Multiple Vulnerabilities Date: 2016-12-11 Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM Tested on: Windows AND Linux Exploit Demo : http://persian-team.ir/showthread.php?tid=196 1 - Denial of Service !/usr/bin/python import urllib2 import...

PHPKit 1.6.6: Code Execution for Privileged Users

RIPS Analysis Within only 24 seconds, the analysis with RIPS completed and uncovered critical security vulnerabilities, mainly in the administration section of the application. As we demonstrated in multiple previous calendar posts, these vulnerabilities can be chained with other vulnerabilities...

OWOX, Inc.: Access to Grafana Dashboard

Hi, I was looking at the office.owox.com on port 3000 Grafana webapp. I'm not sure if it is for demo purposes, but I can access the main dashboard and view all graphs. I am also able to sign in and create my own organizations, dashboards etc. I searched on the net for any reference to this web...

Red Jasmin 1.0 SQL Injection

Exploit Title : RedJasmin Sql injection vulnerability Date : 18/11/2016 Exploit Author : behrouz mansoori Vendor Homepage : www.redjasmin.com Google Dork : "Designed & Developed by Redjasmin.com" category : webapps Tested on : windows 7 ,firefox Proof of Concept : search google Dork : "Designed &...

Schoolhos CMS 2.29 - Remote Code Execution SQL Injection

Schoolhos CMS 2.29 - Remote Code Execution SQL Injection \x0d\x0a-----------------------------26518470919255\x0d\x0a\x0d\x0a' \ 'http://HOST/PATH/elearningku/proses.php?pilih=guru&untukdi=upload'...

iOS WebView Problem Allows Attackers to Initiate Phone Calls

iOS developers who have embedded Apple’s WebView into mobile apps need to be aware of an exploitable issue that could allow phone calls to a number of the attacker’s choosing. Researcher Collin Mulliner said the vulnerability is trivial to exploit, requiring at a minimum one line of HTML code. Th...