MySQL Blob Uploader 1.7 - 'home-filet-edit.php' SQL Injection / Cross-Site Scripting

Exploit Title: MySQL Blob Uploader 1.7 - 'home-filet-edit.php' SQL Injection / Cross-Site Scripting Dork: N/A Date: 22.05.2018 Exploit Author: Özkan Mustafa Akkuş AkkuS Vendor Homepage: https://codecanyon.net/item/mysql-file-and-image-uploader-and-sharing-blob-file-server/17748300 Version: 1.7 -...

Feedy RSS News Ticker 2.0 - 'cat' SQL Injection

Exploit Title: Feedy RSS News Ticker 2.0 - 'cat' SQL Injection Dork: N/A Date: 2018-05-22 Exploit Author: Özkan Mustafa Akkuş AkkuS Vendor Homepage: https://codecanyon.net/item/feedy-rss-news-ticker/5818277 Version: 2.0 Category: Webapps Tested on: Kali linux PoC: SQLi: Parameter: cat Type:...

Mustafa Ceceli-Şarkı Bulmaca - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Mustafa Ceceli-Şarkı Bulmaca published at the 'play' market has multiple vulnerabilities...

Zyxel P-660HW-T1 v3 Wireless Router - CSRF Vulnerability

No description provided by source. Exploit Title: Zyxel P-660HW-T1 v3 Wireless Router - CSRF Vulnerabilities Date: 05/22/2014 Author: Mustafa ALTINKAYNAK Vendor Homepage:http://www.zyxel.com/tr/tr/productsservices/p660hwseries.shtml?t=p Category: Hardware/Wireless Router Tested on: Zyxel P-660HW-...

Meto Forum 1.1 - Multiple Remote SQL Injection Vulnerabilities

No description provided by source. -------------------------------------------\ Meto Forum v1.1 Multiple Remote SQL İinjectin Vulnerable Script : http://www.aspindir.com/goster/5444 Risk : Forum in All users saved password is to take. Coded : Asp , SQL Language = 'Acces'...

undefinedImpressCMS 1.3.6.1 Cross Site Scriptingundefined

Exploit Title: ImpressCMS 1.3.6.1 Reflected XSS Date: 05/28/2014 Author: Mustafa ALTINKAYNAK Download URL : http://www.impresscms.org Software Link: http://www.impresscms.org/content.php?page=Download Vuln Category: CWE-79 XSS Tested on: ImpressCMS 1.3.6.1 Tested Local Platform : XAMP on Windows ...

Videos Tube 1.0 - Multiple SQL Injection Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Videos Tube SQL Injection and Remote Code Execution Google Dork: inurl:"single.php?url=" video Date: 05.05.2014 Exploit Author: Mustafa ALTINKAYNAK Vendor Homepage: http://www.phpscriptlerim.com Software Link:...

Videos Tube 1.0 SQL Injection

| Exploit Title: Videos Tube SQL Injection and Remote Code Execution| | Google Dork: inurl:"single.php?url=" video| | Date: 05.05.2014| | Exploit Author: Mustafa ALTINKAYNAK| | Vendor Homepage: http://www.phpscriptlerim.com| | Software Link: http://demo.phpscriptlerim.com/free/videostube/| |...

AuraCMS 3.0 Cross Site Scripting / Local File Inclusion

Exploit Title: AuraCMS 3.0 Multiple Vulnerabilities Date: 05/28/2014 Author: Mustafa ALTINKAYNAK Download URL :http://auracms.org/ Software Link: http://codeload.github.com/auracms/AuraCMS/zip/master Vuln Category: CWE-79 XSS - CWE-98 LFI Tested on: AuraCMS 3.0 Tested Local Platform : XAMP on...

AuraCMS 3.0 - Multiple Vulnerabilities

Exploit Title: AuraCMS 3.0 Multiple Vulnerabilities Date: 05/28/2014 Author: Mustafa ALTINKAYNAK Download URL :http://auracms.org/ Software Link: http://codeload.github.com/auracms/AuraCMS/zip/master Vuln Category: CWE-79 XSS - CWE-98 LFI Tested on: AuraCMS 3.0 Tested Local Platform : XAMP on...

AuraCMS 3.0 - Multiple Vulnerabilities

AuraCMS 3.0 - Multiple Vulnerabilities Exploit Title: AuraCMS 3.0 Multiple Vulnerabilities Date: 05/28/2014 Author: Mustafa ALTINKAYNAK Download URL :http://auracms.org/ Software Link: http://codeload.github.com/auracms/AuraCMS/zip/master Vuln Category: CWE-79 XSS - CWE-98 LFI Tested on: AuraCMS...

Zyxel P-660HW-T1 Cross Site Request Forgery

Exploit Title: Zyxel P-660HW-T1 v3 Wireless Router - CSRF Vulnerabilities Date: 05/28/2014 Author: Mustafa ALTINKAYNAK Vendor Homepage:http://www.zyxel.com/tr/tr/productsservices/p660hwseries.shtml?t=p Category: Hardware/Wireless Router Tested on: Zyxel P-660HW-T1 v3 Wireless Router Patch/ Fix:...

ZYXEL P-660HW-T1 3 Wireless Router - Cross-Site Request Forgery

ZYXEL P-660HW-T1 3 Wireless Router - Cross-Site Request Forgery Exploit Title: Zyxel P-660HW-T1 v3 Wireless Router - CSRF Vulnerabilities Date: 05/22/2014 Author: Mustafa ALTINKAYNAK Vendor Homepage:http://www.zyxel.com/tr/tr/productsservices/p660hwseries.shtml?t=p Category: Hardware/Wireless...

Turkish hackers hack FC Spartak Moscow Soccer team

Turkish hackers recently hacked the Web site of soccer team FC Spartak Moscow after the Russian team's fans burned Turkish flags and pictures of Atatürk during a Champions League playoff match against Turkish team Fenerbahce on August 21. A portrait of Atatürk next to a Turkish flag was also post...

supernet-sql.txt

----------------------------------- SuperNET Shop v1.0 Remote SQL Ä°njection Vulnerability Discovered By : U238 ugur238 webpage : ugur238.org the end mail : [email protected] From : Turkey - Erzincan Script : http://www.aspindir.com/indir.asp?ID=2 Script alternativ :...

[Full-disclosure] Advisory: My Gaming Ladder Combo System <= 7.0 Remote File Inclusion Vulnerability.

--Security Report-- Advisory: My Gaming Ladder Combo System = 7.0 Remote File Inclusion Vulnerability. --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 22/04/06 13:37 PM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: MyGamingLadder...

[Full-disclosure] EzASPSite <= 2.0 RC3 Remote SQL Injection Exploit Vulnerability.

--Security Report-- Advisory: EzASPSite = 2.0 RC3 Remote SQL Injection Exploit Vulnerability. --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 29/03/06 21:33 PM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: EzASPSite...

MiniNukeCMS.txt

--Security Report-- Advisory: MiniNuke CMS System all versions pages.asp SQL Injection vulnerability --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 19/02/06 10:31 PM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: MiniNuke...

[Full-disclosure] MiniNuke CMS System all versions (pages.asp) SQL Injection

EDITED 20/02/2006 --Security Report-- Advisory: MiniNuke CMS System all versions pages.asp SQL Injection vulnerability --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 19/02/06 10:31 PM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor:...

Advisory: MiniNuke CMS System <= 1.8.2 (membership.asp) remote user password change exploit

--Security Report-- Advisory: MiniNuke CMS System = 1.8.2 membership.asp remote user password change exploit --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 12/01/06 08:49 PM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: MiniNuke...