brownstone.net XSS vulnerability

Vulnerable URL: http://www.brownstone.net/download/downloadfile.asp?cat=d6" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6519977 VIP website status:| No Check brownstone.net SSL...

whirOA download. jsp arbitrary File Download

No description provided by source...

PHP Calendar Script 1.0 - User Credentials Disclosure

Exploit for php platform in category web applications Exploit Title: PHP calendar script Password Download File Date: 2016-07-18 Exploit Author: Meisam Monsef email protected or email protected Vendor Homepage: http://www.newsp.eu/calendarscript.php?pt=st Version: All Version Download Link :...

CVE-2016-1594

Micro Focus Novell Service Desk before 7.2 allows remote authenticated users to read arbitrary attachments via a request to a LiveTime.woa URL, as demonstrated by obtaining sensitive information via a 1 downloadLogFiles or 2 downloadFile action...

Wordpress auto-thickbox-plus plugin XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress plugin auto-thickbox-plus XSS Vulnerability Vendor or Software Link: https://wordpress.org/plugins/auto-thickbox-plus/ Google dork: inurl:/wp-content/plugins/auto-thickbox-plus The code in...

Arbitrary File Download Vulnerability in Internet Behavior Management System of Shenzhen Wheaton Information Technology Co.

Shenzhen Wheaton Information Technology Co., Ltd. Internet behavior management system is a set of monitoring system for the user's online behavior. Shenzhen Wheaton Information Technology Co., Ltd. Internet behavior management system there are arbitrary file download vulnerability, there are...

Codiad path directory traversal vulnerability

Codiad is an open source Web-based IDE application for writing and editing code online. A directory traversal vulnerability exists in Codiad components/filemanager/download.php, which allows an attacker to read the contents of arbitrary files via the path parameter...

Web File Browser 0.4bX UploadFile/DownloadFile Vulenrabilities

Exploit for php platform in category web applications + Author: TUNISIAN CYBER + Exploit Title: Web File Browser 0.4bX UploadFile/DownloadFile Vulenrabilities + Date: 14-12-2013 + Category: WebApp + Vendor: http://sourceforge.net/projects/webfilebrowser/files/webfilebrowser/ + Google Dork:...

Local Java applets may read contents of local file system — Mozilla

Security researcher Georgi Guninski reported an issue with Java applets where in some circumstances the applet could access files on the local system when loaded using the a file:/// URI and violate file origin policy due to interaction with the codebase parameter. This affects applets running on...

op5 Monitoring 5.4.2 XSS / CSRF / SQL Injection

Author: loneferret of Offensive Security Product: op5 Monitoring VM appliance Version: 5.4.2 Vendor Site: http://www.op5.com/ Software Download: http://www.op5.com/get-op5-monitor/get-started/ Software Description: op5 is a market leading developer of Open Source Management solutions. op5 develop...

Truecaller.com Open Redirect

WhiteHatZone Vulnerable Website: http://www.truecaller.com/ Used URL to redirected: http://www.whitehatzone.blogspot.com/ VUlnerable Link: http://www.truecaller.com/?p=downloadfile&url=http://www.whitehatzone.blogspot.com/ Greetz : Vidit Baxi, Sumit Pareek...

solaris/x86 - Remote Download file - 79 bytes

Exploit for solaris/x86 platform in category shellcode ============================================= solaris/x86 - Remote Download file - 79 bytes ============================================= / Title: Solaris/x86 - Remote Download file - 79 bytes Author: Jonathan Salwan Web:...

Zenturi ProgramChecker ActiveX Control Arbitrary File Download.

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Zenturi...

Improper access control

Ryneezy phoSheezy 0.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the file containing the administrator's password hash via a direct request for config/password...

ExcelOCX ActiveX 3.2 (Download File) Insecure Method Exploit

No description provided by source. html body / --=0-0-000000000--x==-xxxxxxxxxbr/ - Excel Viewer OCX 3.2 br/ homepage: www.officeocx.com br/ download: www.brothersoft.com/excel-viewer-ocx-51797.html br/ - RegKey Safe for Script: Truebr/ - RegKey Safe for Init: True br/ - Implements IObjectSafety:...

ExcelOCX ActiveX 3.2 - Download File Insecure Method

/ --=0-0-000000000--x==-xxxxxxxxx - Excel Viewer OCX 3.2 homepage: www.officeocx.com download: www.brothersoft.com/excel-viewer-ocx-51797.html - RegKey Safe for Script: True - RegKey Safe for Init: True - Implements IObjectSafety: True - IDisp Safe: Safe for untrusted: caller,data - IPersist Safe...

Windows/x86 - Download File (http://skypher.com/dll) + LoadLibrary + Null-Free Shellcode (164 bytes)

Windows/x86 - Download File http://skypher.com/dll + LoadLibrary + Null-Free Shellcode 164 bytes. Shellcode exploit for Windowsx86 platform. Tags: Metas... ; Copyright c 2009-2010, Berend-Jan "SkyLined" Wever ; Project homepage: http://code.google.com/p/w32-dl-loadlib-shellcode/ ; All rights...

MYPHP 4.0 enterprise built Station system 0day-vulnerability warning-the black bar safety net

Vulnerability official address:www. myphp. cnChinese most professional enterprise built Station system Vulnerability causes:failure to good filtering the Upload file extension caused the upload vulnerability 漏洞 利用 地址 :http://localhost/adminc/downupload.php Vulnerability code analysis: |...

moziloCMS 1.10.1 - 'download.php' Arbitrary Download File

!/usr/bin/perl moziloCMS 1.10.1 Perl exploit discovered & written by Ams ax330d doggy gmail dot com DESCRIPTION: Vulnerability hides in "download.php", which we can use to download any file we want to. Here, for example, "admin/conf/logindata.conf". Btw, not very smart solution to keep it open no...

WordPress Plugin Download - 'dl_id' SQL Injection

Wordpress Plugin Download file Remote SQL Injection Vulnerability Author: BL4CK Mail: [email protected] Dork: inurl:"wp-download.php?dlid=" Example: http://localhost/path/path/path/wp-download.php?dlid=SQL SQL: null//union//all//select//concatuserlogin,0x3a,userpass//from//wpusers/ Greetz: ZioN,...