Fortinet FortiWeb CSRF Vulnerability (FG-IR-14-013)

Fortinet FortiWeb is prone to multiple cross-site request forgery CSRF vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2014-9197

The Schneider Electric ETG3000 FactoryCast HMI Gateway with firmware before 1.60 IR 04 stores rde.jar under the web root with insufficient access control, which allows remote attackers to obtain sensitive setup and configuration information via a direct request...

PT-2015-3870

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 Description The issue affects the confidentiality of the system, related to the DBMS IR component in the Recovery component of Oracle Database Server when...

IPUX Cube Type CS303C IP Camera - (UltraMJCamX.ocx) ActiveX Stack Buffer Overflow

Exploit for hardware platform in category web applications IPUX Cube Type CS303C IP Camera UltraMJCamX.ocx ActiveX Stack Buffer Overflow Vendor: Big Good Holdings Limited | Fitivision Technology Inc. Product web page: http://www.ipux.net | http://www.fitivision.com Affected version: Cube Type...

IPUX Cube Type CS303C IP Camera - 'UltraMJCamX.ocx' ActiveX Stack Buffer Overflow

IPUX Cube Type CS303C IP Camera UltraMJCamX.ocx ActiveX Stack Buffer Overflow Vendor: Big Good Holdings Limited | Fitivision Technology Inc. Product web page: http://www.ipux.net | http://www.fitivision.com Affected version: Cube Type ICS303C firmware: ICS303C 1.0.0-17 20140120 r1511 Summary: The...

Vastal I-Tech SQL Injection Vulnerability

No description provided by source. IN THE NAME OF GOD Vastal I-Tech SQL Injection Vulnerability Author : HELLBOY Tested on Lunix CVE : N/A Email : [email protected] Dork : inurl:viewgroup.php?groupid= Exploit : http://site/viewgroup.php?groupid=SQLI EXAM:...

BaBB 2.8 - Remote Code Injection Exploit

No description provided by source. !usr/bin/python BaBB 2.8 Full Code Injection Exploit AUTHOR : Sina Yazdanmehr R3d.W0rm Discovered by : Sina Yazdanmehr R3d.W0rm Our Site : http://IrCrash.com My Official WebSite : http://R3dW0rm.ir IRCRASH Team Members : Khashayar Fereidani - R3d.w0rm Sina...

PT-2013-3266

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.8.x through 1.8.4 Description The issue is related to the dissect rohc ir packet function in the ROHC dissector, which does not properly handle unknown profiles. This allows remote attackers to cause a denial of service,...

Results Unlimited CMS SQL Injection

Exploit Title : results-unlimited Cms Sql Injection Vulnerabilities Author : IrIsT Security Team - Security7 Security Team Discovered By : Am!r Home : http://IrIsT.Ir - http://Security7.Ir Software Link : http://www.results-unlimited.com/ Security Risk : High Version : All Version Tested on :...

SMF 2.0.2 Cross Site Scripting

Exploit Title : SMF 2.0.2 Cross-Site Scripting Vulnerabilitiy Author : Zarbat.Org & IrIsT.Ir Discovered By : Am!r Home : http://Zarbat.Org/forums/ Software Link : http://www.simplemachines.org Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork :...

Online-Development CMS Cross Site Scripting

Exploit Title : Online-Development Cms Cross-Site Scripting Vulnerabilitiy Author : Zarbat.Org & IrIsT.Ir Discovered By : Am!r Home : http://Zarbat.Org/forums/ Software Link : http://www.onlinedevelopment.co.uk/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows...

Oracle Java SE Rhino Script Engine Remote Code Execution Vulnerability

Description Oracle Java SE is prone to a remote code-execution vulnerability in Java Runtime Environment. The vulnerability can be exploited over multiple protocols. This issue affects the 'Scripting' sub-component. This vulnerability affects the following supported versions: JDK and JRE 7, 6...

Unfixed XSS vulnerability at www.mob98.ir

Security researcher BHG, has submitted on 05/07/2011 a cross-site-scripting XSS vulnerability affecting www.mob98.ir, which at the time of submission ranked 24827 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/12/2011. It is currently...

Interact 2.4.1 SQL Injection Vulnerability

Exploit for php platform in category web applications Title : Interact 2.4.1 SQL Injection Affected Version : Interact l0rd D3lt4l0rD & Turb0 ,,,, email protected S.V.T :D 0day.today 2018-02-06...

Mihan shop (ir) Setup Basic Site Settings Vulnerability

Exploit for php platform in category web applications ======================================================= Mihan shop ir Setup Basic Site Settings Vulnerability ======================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 ...

Vastal I-Tech - SQL Injection

IN THE NAME OF GOD Vastal I-Tech SQL Injection Vulnerability Author : HELLBOY Tested on Lunix CVE : N/A Email : [email protected] Dork : inurl:"viewgroup.php?groupid=" Exploit : http://site/viewgroup.php?groupid=SQLI EXAM:...

Lanai Core 0.6 Remote File Disclosure / Info Disclosure Vulns

No description provided by source. Lanai Core v 0.6 Remote File Disclosure / IG AUTHOR : Sina Yazdanmehr R3d.W0rm Discovered by : Sina Yazdanmehr R3d.W0rm Our Site : http://IrCrash.com My Official WebSite : http://R3dW0rm.ir IRCRASH Team Members : Khashayar Fereidani - R3d.w0rm Sina Yazdanmehr...

MDVA-2008:139 : lirc

The lircdev module contained in the dkms-lirc package shipped with Mandriva Linux 2009 contains a bug which would cause it to crash oops immediately on load. The result of this is that lirc is unusable, and if you have dkms-lirc installed and the 'lircd' service enabled, the system may fail to bo...

Mandriva Update for lirc MDVA-2008:139 (lirc)

Check for the Version of lirc OpenVAS Vulnerability Test Mandriva Update for lirc MDVA-2008:139 lirc Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Mandriva Update for lirc MDVA-2008:139 (lirc)

Check for the Version of lirc OpenVAS Vulnerability Test Mandriva Update for lirc MDVA-2008:139 lirc Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...