9557 matches found
MangosWeb SQL Injection Vulnerability
No description provided by source. EXPLOIT TITLE: MangosWeb SQL Vulnerability DATE: 1/7/2012 BY Hood3dRob1n AFFECTED PRODUCTS: MangosWeb Enhanced Version 3.0.3 SW LINK: http://code.google.com/p/mwenhanced/ CATEGORY: WebApp 0day DORK: intext:MangosWeb ENhanced Version 3.0.3 @2009-2011, KeysWow Dev...
Aladdin Knowledge Systems eToken 3.3.3 eToken PIN Extraction Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1170/info Alladin Knowledge Systems eToken is a USB smartcard-like device used for authentication, file integrity, and encryption. Access to the eToken device itself and entering the PIN number encoded in the eToken will...
Joomla Component com_hotbrackets Blind SQL Injection Vulnerability
Joomla Component comhotbrackets Blind SQL injection Vulnerability author : Fl0riX Name : comhotbrackets Bug Type : Blind SQL Injection Infection : Admin login bilgileri alnabilir. Demo Vuln. : TRUE+ » http://server/index.php?option=comhotbrackets&id=1 and 1=1 FALSE- »...
Pandora FMS <= 3.1 Authentication Bypass
No description provided by source. + Introduction Pandora FMS for Pandora Flexible Monitoring System is a software solution for monitoring computer networks. It allows monitoring in a visual way the status and performance of several parameters from different operating systems, servers, applicatio...
Cisco Unified Communications Manager - TFTP Service
No description provided by source. !/bin/bash Proof of Concept on how to get tftp config files from cisco phones This can be performed anonymously and privileges gathered relies on those assigned to the ldap account Developed by Daniel Svartman [email protected] In case tftp files are...
iGaming CMS <= 1.5 - Blind SQL Injection
No description provided by source. !/usr/bin/env perl =pod iGaming CMS = 1.5 Blind SQL Injection Author: plucky Email: [email protected] Web Site: http://plucky.heliohost.org Crew : WarWolfZ Usage: perl exploit.pl website userid Example: perl exploit.pl http://website.net/iGamingCMS1.5/ 1...
WebDM CMS SQL Injection Vulnerability
No description provided by source. WebDM CMS SQL Injection Vulnerability EDB-ID: CVE: OSVDB-ID: Author: Dr.0rYX and Cr3w-DZ Published: Verified: Exploit Code: Vulnerable App: . . \ \ /| | \ /|| / / /\ \ | | | | \ \ \ | \ \ |/ \ \ | | \ / \ | /| | | Y \ // / | \ | | / \ \ / \ || /\ /| || ||...
Calendarix 0.8.20071118 - SQL Injection
No description provided by source. Informatique inside Calendarix : SQL injection Version : 0.8.20071118 et infrieur Author : Thibow Contact : Thibow4tlinformatique-insidedotcom Location : France Website : http://www.informatique-inside.com Dork : inurl:calday.php?op=day&catview= Solution : Updat...
Graugon Forum 1.3 - SQL Injection Vulnerability
No description provided by source. !------------------------------------------------------------------------ Software................Graugon Forum 1.3 Vulnerability...........SQL Injection Threat Level............Critical 4/5 Download................http://www.graugon.com/ Discovery...
Particle Wiki <= 1.0.2 (version) Remote SQL Injection Vulnerability
No description provided by source. Particle wiki = 1.0.2 Remote SQLInjection - Username/Passwordhash Extractor Thanks to UNSECURED SYSTEMS : http://pridels.blogspot.com/2006/06/particle-wiki-sql-inj.html Exploited by FarhadKey from http://www.kapda.ir Username :...
Irola My-Time 3.5 - Remote SQL Injection Vulnerability
No description provided by source. Aria-Security Team http://Aria-Security.Net ----------------------------- Original Advisory @ http://aria-security.net/forum/showthread.php?p=1106 Vendor: http://www.irola.com Username/Password Fields can run SQL Queries. Therefore: We get the Tables:...
Uzbey: Flash Content-Type Sniffing Vulnerability
Hello, There's a Flash Content-Type Sniffing vulnerability. Using this vulnerability I can read the client side source code of your website from a different origin say prakharprasad.com and then look for potentially sensitive data in those pages for example - CSRF prevention tokens and then...
ZeroCMS 1.0 SQL Injection Vulnerability
ZeroCMS version 1.0 suffers from a remote SQL injection vulnerability. ZeroCMS v1.0 SQL Injection Vulnerability zerotransactarticle.php articleid POST parameter Vendor: Another Awesome Stuff Product web page: http://www.aas9.in/zerocms Affected version: 1.0 Severity: High CWE: 89 -...
Hook Analyser 3.1 - Malware Analysis Tool
Hook Analyser is a freeware application which allows an investigator/analyst to perform “static & run-time / dynamic” analysis of suspicious applications, also gather analyse & co-related threat intelligence related information or data from various open sources on the Internet. Essentially it’s a...
SAProuter Detection
The script sends a connection request to the server and attempts to extract the version number from the reply. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...
Discuz! <=2.5 csrf防御绕过
简要描述： 在Discuz! '.gif', 2 = '.jpg', 3 = '.png'; 只检查了后缀而不像3.0以上用库检查了图片格式 漏洞证明： 步骤 1、新建一个获取页面源码 提取formhash 然后用formhash发送添加副站长请求的swf，保存为.jpg后缀 2、注册一个账号，去/home.php?mod=spacecp&ac=avatar上传上一步生成的.jpg后缀的swf文件并抓包 上传后的地址应该是 http://192.168.1.104/ucserver/data/tmp/uploaduid.jpg这样的...
kesako script SQL Injection Vulnerability
Exploit for php platform in category web applications kesako script SQL Injection =================================================================== .:. Exploit Title : kesako Script Sql Injection .:. Author : Microsoft-dz .:. Contact : email protected .:. Dork : intext:powered by kesako...
openssl multi-threaded multi-domain EXP, support for custom ports, save the binary file to save space-bug warning-the black bar safety net
!/ usr/bin/python Quick and dirty demonstration of CVE-2 0 1 4-0 1 6 0 by Jared Stafford [email protected] The author disclaims copyright to this source code. Multi process and bin dump version by [email protected] import sys import struct import socket import time import select impo...
TurboMail邮箱系统越权读取任意文件、导入备份等（可读取任意用户及管理员密码等）
简要描述： TurboMail邮箱系统越权读取任意文件（可读取管理员密码等） 详细说明： http://localhost/tmw/8/viewfile/account.xml?type=gl&logtype=../../turbomail/accounts/root/postmaster（你想要读密码的用户名）&sessionid=此处需普通用户sessionid 可以读取任意用户密码 此处导入的是zip文件，会自动解压，你也可以导入你上传的其他文件，如图片后缀的zip也可以解压...
Legal Guidelines Say Apple Can Extract Data From Locked iOS Devices
If law enforcement gets hold of your locked iPhone and has some interest in its contents, Apple can pull all kinds of content from the device, including texts, contacts, photos and videos, call history and audio recordings. The company said in a new document that provides guidance for law...