5269 matches found
Joomla! Component com_payplans 3.3.6 - SQL Injection
Joomla! Component compayplans 3.3.6 - SQL Injection Exploit Title : Joomla compayplans - SQL Injection Exploit Author : Persian Hack Team Vendor Homepage : http://extensions.joomla.org/extension/payplans Category: Webapps Tested on: Win Version: 3.3.6 Date: 2016/06/08 PoC: groupid Parameter...
Joomla Affiliate Tracker 2.0.3 SQL Injection
Exploit Title : Joomla comaffiliatetracker - SQL Injection Exploit Author : Persian Hack Team Vendor Homepage : http://extensions.joomla.org/extension/affiliate-tracker Category: Webapps Tested on: Win Version: 2.0.3 Date: 2016/06/13 PoC: First Login To Panel And Go To Affiliate Tracker userid...
Joomla Maqma Helpdesk 4.2.3 Cross Site Scripting
Exploit Title : Joomla commaqmahelpdesk - XSS Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : http://extensions.joomla.org/extension/maqma-helpdesk Category: Webapps Tested on: Win Date: 2016/06/09 Version : 4.2.3 PoC: Add Your Tiket sometimes you must login First in Message Te...
Joomla AvailCal 05 SQL Injection
Exploit Title : Joomla comavailcal - SQL Injection Exploit Author : Persian Hack Team Dork : inurl:index.php?option=comavailcal Vendor Homepage : https://github.com/lorelay90210/jpm-joomla-extensions/tree/master/availcal/availcal Category: Webapps Tested on: Win Version: 05 Date: 2016/06/08 PoC: ...
Joomla Event Manager 2.x Cross Site Scripting
Exploit Title : Joomla Event Manager comjem - Cross Site Scripting Exploit Author : Persian Hack Team Vendor Homepage : http://www.joomlaeventmanager.net/download Category: Webapps Tested on: Win Version: 2.x Date: 2016/05/11 PoC: itemid=XSS Payload = "PersianHack Team Demo :...
万户OA /UploadServlet 任意文件上传漏洞
任意文件上传 url: /UploadServlet 最后上传的文件路径就是: uploadFolder/path/fileId.substring0, 6/fileId，path和fileId两个参数可控，所以可以上传任意文件了 官方demo演示:...
Zarafe.net CMS 1.0 SQL Injection
Exploit Title : Zarafe.net CMS SQL Injection Vulnerability Exploit Author : Iran Cyber Security Group ICSG Discovered By : 0x3a Vendor HomePage : www.zarrafe.net Version : 1.0 Q1 Date : 4 April, 2016 Tested On : Internet Explorer , Win 98 ----------------------------------------- SQL Injection :...
Webnet CMS 1.2 XSS / File Disclosure / SQL Injection
Exploit Title : Webnet CMS Multiple Vulnerabilities Exploit Author : Persian Hack Team Vendor Homepage : http://www.webnet.ir/ Homepage : http://www.persian-team.ir Date: 2016/04/15 Version : 1.2 POC: 1-LFDLocal File Dislocation Explain : ids Parameter encode base64 Path , you can use...
ChitaSoft CMS 3 Cross Site Scripting
Exploit Title : ChitaSoft v3 CMS Cross Site Scripting Exploit Author : Persian Hack Team Vendor Homepage : http://www.chitasoft.com/products/3 Author Homepage : http://www.persian-team.ir Date: 2016/04/15 Version : 3 PoC: product.php?id=XSS Payload = ' Demo:...
v0lt - Security CTF Toy Tools
v0lt is an attempt to regroup every tool I used/use/will use in security CTF, Python style. A lot of exercises were solved using bash scripts but Python may be more flexible, that's why. Nothing to do with Gallopsled. It's a toy toolkit, with small but specific utils only. Requirements and...
Show and Tell - Demo - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Show and Tell - Demo published at the 'play' market has multiple vulnerabilities...
Cursive Writing Wizard - Demo - Corrupted files, Customized SSL, External URLs vulnerabilities
HackApp vulnerability scanner discovered that application Cursive Writing Wizard - Demo published at the 'play' market has multiple vulnerabilities...
Miners! Demo - Corrupted files, External URLs, Native code usage vulnerabilities
HackApp vulnerability scanner discovered that application Miners! Demo published at the 'play' market has multiple vulnerabilities...
Brain Games for Kids. Demo - External URLs vulnerabilities
HackApp vulnerability scanner discovered that application Brain Games for Kids. Demo published at the 'play' market has multiple vulnerabilities...
Unicorn Training Demo - Native code usage, SD-card access, Suspicious files vulnerabilities
HackApp vulnerability scanner discovered that application Unicorn Training Demo published at the 'play' market has multiple vulnerabilities...
Arma Tactics Demo - Base64 encoded String, Customized SSL, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Arma Tactics Demo published at the 'play' market has multiple vulnerabilities...
Perfect Chess Trainer Demo - MIT license, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Perfect Chess Trainer Demo published at the 'play' market has multiple vulnerabilities...
Five Nights at Freddy's 3 Demo - Dangerous filesystem permissions, Dynamic Code Loading, External URLs vulnerabilities
HackApp vulnerability scanner discovered that application Five Nights at Freddy's 3 Demo published at the 'play' market has multiple vulnerabilities...
Survivalcraft Demo - External URLs, Native code usage, SD-card access vulnerabilities
HackApp vulnerability scanner discovered that application Survivalcraft Demo published at the 'play' market has multiple vulnerabilities...