PHP Telephone Directory - Multiple Vulnerabilities

Exploit Title: PHP Telephone Directory - Multiple Vulnerabilities Date: 2016-10-16 Exploit Author: larrycompress Contact: [email protected] Type: webapps Platform: PHP Vendor Homepage: http://www.pagereactions.com/product.php?pku=2 Software Link:...

Yelp: Error Page Text Injection

Hello Yelp team, Description : An attacker is able to inject his own text into error page and can fool the victim to visit his own malicious site. Please take a look at attached document, it contains POC as well as attack scenario about how the attacker can exploit this vulnerability and...

Brave Software: [iOS/Android] Address Bar Spoofing Vulnerability

Hello, I am Aaditya Purani, I would like to Report Address Bar spoofing vulnerability in Brave Browser on the IOS as well as Android Platform. All the Test have been carried out against Latest Brave Browser whose versions i have mentioned in Products affected section. Summary: Brave Browser Suffe...

PowerShellEmpire Arbitrary File Upload (Skywalker)

A vulnerability existed in the new Empire maintained by BC Security prior to commit e73e883 use exploit/linux/http/empire/skywalker msf undefinedskywalker show actions ...actions... msf undefinedskywalker set ACTION msf undefinedskywalker show options ...show and set options... msf...

RSS News AutoPilot Script 1.0.1 / 3.1.0 - Admin Panel Authentication Bypass

Exploit for php platform in category web applications Exploit Title: RSS News AutoPilot Script - Admin Panel Authentication Bypass Date: 14 October 2016 Exploit Author: Arbin Godar Website : ArbinGodar.com Software Link: https://codecanyon.net/item/rss-news-autopilot-script/11812898 Version: 1.0....

Simple Forum PHP 2.4 SQL Injection

===================================================== Simple Forum PHP 2.4 - SQL Injection ===================================================== Vendor Homepage: http://simpleforumphp.com Date: 14 Oct 2016 Demo Link : http://simpleforumphp.com/forum/admin.php Version : 2.4 Platform : WebApp - PHP...

Colorful Blog - Cross-Site Request Forgery (Change Admin Password)

Exploit for php platform in category web applications Exploit Title :----------- : Colorful Blog - Cross-Site Request Forgery Change Admin Pass Author :------------------ : Besim Google Dork :---------- : - Date :--------------------- : 13/10/2016 Type :--------------------- : webapps Platform...

YouTube Automated CMS 1.0.7 - Cross-Site Request Forgery Persistent Cross-Site Scripting

YouTube Automated CMS 1.0.7 - Cross-Site Request Forgery Persistent Cross-Site Scripting Exploit Title: YouTube Automated CMS 1.0.1 / 1.0.7 - CSRF to Persistent XSS Date: 14 October 2016 Exploit Author: Arbin Godar Website : ArbinGodar.com Software Link:...

Categorizator 0.3.1 SQL Injection

Exploit Title: Categorizator 0.3.1 | SQL Injection Date: 03/09/16 Exploit Author: Wad Deek Vendor Homepage: http://lelogiciellibre.net/telecharger/annuaire-web.php Software Link: ftp://ftp2.lelogiciellibre.net/lelogiciellibre/annu/categorizator031.zip Version: 0.3.1 Tested on: Xampp on Windows7...

Colorful Blog - Cross-Site Request Forgery (Change Admin Password)

Colorful Blog - Cross-Site Request Forgery Change Admin Password Exploit Title :----------- : Colorful Blog - Cross-Site Request Forgery Change Admin Pass Author :------------------ : Besim Google Dork :---------- : - Date :--------------------- : 13/10/2016 Type :--------------------- : webapps...

VOX Music Player 2.8.8 - '.pls' Denial of Service

Exploit Title: VOX Music Player 2.8.8 '.pls' Local Crash PoC Date: 10-12-2016 Exploit Author: Antonio Z. Vendor Homepage: http://coppertino.com/vox/mac/ Software Link: http://dl.devmate.com/com.coppertino.Vox/Vox.dmg Version: 2.8.8 Tested on: OS X 10.10, OS X 10.11, OS X 10.12 import os evil =...

Simple Blog PHP 2.0 Cross Site Request Forgery / Cross Site Scripting

===================================================== Simple Blog PHP 2.0 - CSRFAdd Post // Stored XSS ===================================================== Vendor Homepage: http://simpleblogphp.com/ Date: 13 Oct 2016 Demo Link : http://simpleblogphp.com/blog/admin.php Version : 2.0 Platform : PH...

phpEnter 4.2.7 Cross Site Request Forgery

function submitRequest var xhr = new XMLHttpRequest; xhr.open"POST", "http://sitename/path/addnews.php", true; xhr.setRequestHeader"Accept", "text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8"; xhr.setRequestHeader"Accept-Language", "en-US,en;q=0.5"; xhr.setRequestHeader"Content-Type"...

ApPHP MicroBlog 1.0.2 Cross Site Request Forgery

Exploit Title : ApPHP MicroBlog 1.0.2 - Cross-Site Request Forgery Add New Author Author : Besim Google Dork : Date : 12/10/2016 Type : webapps Platform : PHP Vendor Homepage : - Software link : http://www.scriptdungeon.com/jump.php?ScriptID=9162 CSRF PoC function submitRequest var xhr = new...

Simple Blog PHP 2.0 - Multiple Vulnerabilities

Simple Blog PHP 2.0 - Multiple Vulnerabilities ===================================================== Simple Blog PHP 2.0 - CSRFAdd Post // Stored XSS ===================================================== Vendor Homepage: http://simpleblogphp.com/ Date: 13 Oct 2016 Demo Link :...

Google Android - Binder Generic ASLR Leak

Google Android - Binder Generic ASLR Leak Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=889 The interaction between the kernel /dev/binder and the usermode Parcel.cpp mean that when a binder object is passed as BINDERTYPEBINDER or BINDERTYPEWEAKBINDER, a pointer to that object...

Categorizator 0.3.1 - SQL Injection

Exploit Title: Categorizator 0.3.1 | SQL Injection Date: 03/09/16 Exploit Author: Wad Deek Vendor Homepage: http://lelogiciellibre.net/telecharger/annuaire-web.php Software Link: ftp://ftp2.lelogiciellibre.net/lelogiciellibre/annu/categorizator031.zip Version: 0.3.1 Tested on: Xampp on Windows7...

Adobe Flash Player 23.0.0.162 - '.SWF' ConstantPool Critical Memory Corruption

Exploit for multiple platform in category dos / poc Application: Adobe Flash Player Platforms: Windows,OSX Versions: 23.0.0.162 and earlier Author: Francis Provencher of COSIG Website: https://cosig.gouv.qc.ca/en/advisory/ Twitter: @COSIG Date: October 11, 2016 CVE-2016-4273 COSIG-2016-35 1...

Adobe Flash Player 23.0.0.162 - '.SWF' ConstantPool Critical Memory Corruption

Application: Adobe Flash Player Platforms: Windows,OSX Versions: 23.0.0.162 and earlier Author: Francis Provencher of COSIG Website: https://cosig.gouv.qc.ca/en/advisory/ Twitter: @COSIG Date: October 11, 2016 CVE-2016-4273 COSIG-2016-35 1 Introduction 2 Report Timeline 3 Technical details 4 POC...

Android - Binder Generic ASLR Leak Vulnerability

Exploit for Android platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=889 The interaction between the kernel /dev/binder and the usermode Parcel.cpp mean that when a binder object is passed as BINDERTYPEBINDER or BINDERTYPEWEAKBINDER, a pointer to th...