WordPress StatTraq 1.3.0 SQL Injection

Exploit Title : WordPress StatTraq 1.3.0 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 27/03/2020 Software Download Link : downloads.wordpress.org/plugin/wp-stattraq.zip Software Version : 1.3.0 WordPress Version : 2.6 or higher - 2.8.3 Tested On...

PT-2020-12083 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue concerns the handling of URIs in admin/header.php, which allows for Reflected XSS attacks. This can be exploited in admin/import-html.php by adding a question mark ? follow...

Vulnerability of the Server component: Security: Encryption of the MySQL Server database management system, which allows attackers to cause downtime or service failures.

The vulnerability of the MySQL Server component’s Security: Encryption module is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause downtime or service failures using the MySQL protocol...

Google Android Kernel Component Elevation of Privilege Vulnerability (CNVD-2019-40503)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An elevation of privilege vulnerability exists in the Google Android Kernel component binder driver, which can be exploited by an attacker to elevate privileges...

Joomla SwPhotoGallery 1.5.26 SQL Injection

Exploit Title : Joomla SwPhotoGallery 1.5.26 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 12/10/2019 Vendor Homepage : joomla.org Affected Versions : 1.5.16 and 1.5.26 Tested On : Windows and Linux Category : WebApps Exploit Risk : Medium...

ParantezTeknoloji Library Software 16.0519000 Open Redirection

Exploit Title : ParantezTeknoloji Library Software 16.0519000 Open Redirection Vulnerability Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 04/10/2019 Vendor Homepage : parantezteknoloji.com.tr Software Affected Versions and Download Links : Koha 3.2000000...

USN-4146-1 clamav vulnerabilities

It was discovered that ClamAV incorrectly handled unpacking ZIP files. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service. CVE-2019-12625 It was discovered that ClamAV incorrectly handled unpacking bzip2 files. A remote attacker could use th...

Information Leakage Vulnerability in Monarch LinkWorks Collaboration Platform

Ltd. is a digital construction platform service provider based on "end+cloud+big data" products/services, providing value-added services such as industrial big data and industrial new finance. An information leakage vulnerability exists in the Dream Dragon LinkWorks collaboration platform. An...

Joomla JomEstate 4.1 SQL Injection

Exploit Title : Joomla 2.5.28 ComJomEstate Real Estate Components 4.1 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 29/08/2019 Vendor Homepage : comdev.eu/jomestate Joomla Affected Versions : Joomla 1.5.18 Joomla 1.5.26 - Joomla 1.6 - Joomla 1.7...

Joomla OrgChart 1.0.0 Cross Site Scripting / SQL Injection

Exploit Title : Joomla 1.5.26 ComOrgChart Components 1.0.0 XSS SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 24/08/2019 Vendor Homepage : ibrini.com - cmspal.it - altropiano.com - Software Download Link :...

Plexo Torresoft Alex Torres Software 2.0 Cross Site Scripting / SQL Injection

Exploit Title : Plexo Torresoft Alex Torres Software 2.0 XSS SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 26/08/2019 Vendor Homepage : torresoft.co Software Version : 2.0 Tested On : Windows and Linux Category : WebApps Exploit Risk : Medium...

Koha Library Software 18.1106000 Open Redirection

Exploit Title : Koha Library Software 18.1106000 Tracklinks Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 19/06/2019 Vendor Homepage : koha.org - koha-community.org Software Download Link : download.koha-community.org...

WordPress Xunjin 4.6 Open Redirection

Exploit Title : WordPress Xunjin Themes 4.6 Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 24/05/2019 Vendor Homepage : xunjinwang.com Theme Affected Version : 4.6 WordPress Affected Version : 4.9.10 Information Link :...

WordPress Aliyun 5.2 Open Redirection

Exploit Title : WordPress Aliyun Themes 5.2 Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 23/05/2019 Vendor Homepage : aliyunhelp.com - zmingcx.com Version : WordPress Version 4.9.10 - Theme Version 5.2 Tested On : Windows and Linux Category :...

WordPress Jingke 1.0 Open Redirection

Exploit Title : WordPress Jingke Themes 1.0 Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 24/05/2019 Vendor Homepage : hwaq.cc - zmingcx.com WordPress Affected Version : 4.9.x Theme Affected Version : 1.0 Information Link :...

NIT-Warangal Dispensary Management System India 1.0 Database Disclosure

Exploit Title : NIT-Warangal Dispensary Management System India 1.0 Database Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 15/04/2019 Vendor Homepage : nitw.ac.in Software Download Link : github.com/NIT-Warangal/DispensaryMS/archive/master.zip Sofwa...

HP LaserJet P3015 Printers 6.7.0.x Authentication Bypass

Exploit Title : HP LaserJet P3015 Printers 6.7.0.x Bypass Missing Authentication Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 31/03/2019 Vendor Homepage : hp.com Software Information Link :...

Coders Survey 3.4.10 Database Disclosure

Exploit Title : Coders Survey 3.4.10 Database Disclosure Exploit Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 02/04/2019 Vendor Homepage : coders-survey.com Software Download Link : github.com/fortrabbit/coders-survey/archive/master.zip Software Information...

MeteoTemplate 17.1 Nectarine globalSnow 1.1 Open Redirection

Exploit Title : MeteoTemplate 17.1 Nectarine globalSnow Plugins 1.1 Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 07/03/2019 Vendor Homepage : meteotemplate.com Software Download Link :...

vBulletin 4.x Seo By vBSeo 3.3.2 Open Redirection

Exploit Title : vBulletin 4.x Seo by vBSeo 3.3.2 Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 04/03/2019 Vendor Homepages : vbulletin.com vbseo.com Software Information Links : vbulletin-mods.com/forum/showthread.php?t=936...