ArrowChat 1.5.61 - Multiple Vulnerabilities

ArrowChat 1.5.61 - Multiple Vulnerabilities Exploit Title: ArrowChat ?do=" enctype="multipart/form-data" --------------------...

Google, Paypal, Facebook Internal IP disclosure vulnerability

Do you have any idea about an Internal IP Address or a Private IP Address that too assigned for Multinational Companies? Yeah, today we are gonna discuss about Internal IP or Private IP address Disclosure. Disclosure of an Internal IP like 192.168.. or 172.16.. , can really Impact ? Most security...

WebConnection / Toto / Tides Cross Site Scripting

Exploit Title : WebConnection Cross-Site Scripting Vulnerability Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir/forum Software Link : http://www.webconnection.com Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : intext:"Site...

Et-Chat Rank SQL Injection

Exploit Title : Et-Chat Rank SQL Injection Vulnerability Author : Ashiyane Digital Security Team Designed By : Remove Home : http://ashiyane.org/ Software Link : http://et-chat.ir/ Security Risk : High - SQL Injection Version : All Version Dork : inurl : ÓíÓÊã ÇãÊíÇÒ Ïåí Exploit : 1 . Search This...

Essential Website Design CMS SQL Injection

Exploit Title : essentialwebsitedesign Cms Sql Injection Vulnerability Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir/forum Software Link : http://www.essentialwebsitedesign.net Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork :...

Mangium Infotech CMS SQL Injection

Exploit Title: Mangium Infotech cms Sql Injection Vulnerability Google Dork: Intext:" Powered by Mangium Infotech" Date: 08/29/2012 Author: Crim3R Site : Http://Ajaxtm.com/ Vendor Home : http://www.mangium.com/ Tested on: all ================================== + id parametr in newsdetail.php is...

Infinite IT Solutions CMS Cross Site Scripting

? Exploit Title : Infinite IT Solutions Cms Cross-Site Scripting Vulnerability Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir/forum Software Link : http://www.infiniteitsolutions.net/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Do...

YourArcadeScript 2.4 - index.php?id SQL Injection

YourArcadeScript 2.4 - index.php?id SQL Injection Exploit Title: YourArcadeScript 2.4 SQLi Vulnerability Version: 2.4 Date: 17/08/2012 Author: DaOne LCA Software Link: http://www.yourarcadescript.com Google Dork: intext:"Powered by YourArcadeScript 2.4" Exploit...

Shopping Tree Cross Site Scripting

Exploit Title: Shopping Tree Cross Site Scripting Google Dork: "Shopping Tree, Inc" Date: 14/08/2012 Author: IranianDarkCodersTeam Discovered By : Nafsh Site : http://idc-team.net/ Software Link: http://www.shoppingtree.com Bug : /logon.asp?msg= Xss Example :...

Am4ss 1.2 Cross Site Scripting

Exploit Title : am4ss 1.2 alert'Sec-w.com' ================================================= Gr34ts 4 : Sec-w.com Members...

CVE-2011-4289

Moodle 2.0.x before 2.0.3 does not recognize the configuration setting that makes e-mail addresses visible only to course members, which allows remote authenticated users to obtain sensitive address information by reading a full profile page...

Prominent Technologies CMS SQL Injection

Exploit Title : prominenttech Cms Sql Injection Vulnerabilitiy Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir/forum Software Link : http://www.prominenttech.com Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : "Powered by...

Axous 1.1.0 SQL Injection

Exploit Title : Axous 1.1.0 SQL Injection Vulnerabilitiy Author : Secure-Land Security Team Discovered By : farbodmahini Home : Secure-Land.net Version : All Version Vendor Link : www.axous.com Contact : [email protected] , [email protected] Security Risk : High DorK : intext:"Powered by...

WTE CMS SQL Injection

Exploit Title : WTE CMS SQL Injection Vulnerability Author : Secure-Land Security Team Discovered By : farbodmahini Home : Secure-Land.net Version : All Version Vendor : www.wte.cn Contact : [email protected] , [email protected] Security Risk : High DorK : "Powered by WTE" Expl0iT:...

DEBIAN-CVE-2012-2054

Redmine before 1.3.2 does not properly restrict the use of a hash to provide values for a model's attributes, which allows remote attackers to set attributes in the 1 Comment, 2 Document, 3 IssueCategory, 4 MembersController, 5 Message, 6 News, 7 TimeEntry, 8 Version, 9 Wiki, 10 UserPreference, o...

RugbyOrganiser Sql Injection Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Anonymous Retaliates for Arrests, Defaces Panda Labs

Hackers associated with the Anonymous and the Antisec movement claim to have compromised and defaced various Panda Labs’ websites earlier today. The hack comes one day after the news broke of the indictment of five core LulzSec hackers on various counts of hacking and other related charges. As...

IBM SPSS ExportHTML.dll ActiveX Control Render Method Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM SPSS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the Render method expos...

EWD SQL Injection

|=----=----=----=----=----=--------=| | | | /\ /\ \ /\ /\ \ | | //\ /\ \ \L\ \ \ \ \ Turki$ hackers | | \ \ \ \ \ users / /+ column = name + password / / /+ injection / http://www.thecompletepianist.com/material.php?id=-18+union+select+1,2,name,4,password,6,7,8+from+users / /...

Newchemistry SQL Injection

|=----=----=----=----=----=--------=| | | | /\ /\ \ /\ /\ \ | | //\ /\ \ \L\ \ \ \ \ Turki$ hackers | | \ \ \ \ \ '\ \ \ | | \ \ \ \ \ \L\ \ \ \ \ \ | | \ \ \ / \ \ \ | | // // //// | | | | | |=----=----=----=----=----=--------=|...