Zenario ProBusiness 7.3.0.37342 Backup Disclosure

======================================================================== | Title : Zenario probusiness-7.3.0.37342 Backup Disclosure Vulnerability | Author : indoushka | email : [email protected] | Tested on : windows 8.1 FranASSais V.Pro | Version : 7.3.0.37342 | Vendor : http://zenar.io/...

MLM Unilevel Plan Script 1.0.2 - SQL Injection

Application Name : MLM Unilevel Plan Script v1.0.2 Exploit Author : Cyber Warrior | Bug Researchers Group | N4TuraL Author Contact : https://twitter.com/byn4tural Vendor Homepage : http://www.i-netsolution.com/ Vulnerable Type : SQL Injection Date : 2016-10-06 Tested on : Windows 10 / Mozilla...

VUPlayer 2.49 - (.pls) Buffer Overflow Vulnerability

VUPlayer is a freeware multi-format audio player for windows. Copy of the Vendor Homepage: http://vuplayer.com/vuplayer.php Technical Details & Description: ================================ The classic buffer overflow vulnerability is located in the software VUPlayer an attacker can manipulate th...

Joomla com_jsjobs SQL injection Vulnerability

Exploit for php platform in category web applications |✚✚✚✚✚✚✚✚✚✚✚✚✚✚✚✚✚✚✚✚✚✚✚ !! Exploit Title : Joomla comjsjobs SQL injection Vulnerability !! Exploit Author : xBADGIRL21 !! Dork : inurl:index.php?option=comjsjobs !! Vendor Homepage : http://www.joomsky.com !! MyBlog :...

Joomla Topics 1.5.12 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title : Joomla comtopics SQL injection Exploit Author : xBADGIRL21 Dork : inurl:index.php?option=comtopics Category: Webapps version: 1.5.12 Tested on: Windows skype:xbadgirl21 Date: 2016/07/08 video Proof Youtube :...

Joomla com_threate 1.1.4 SQL injection Vulnerability

Exploit for php platform in category web applications Exploit Title : Joomla comthreate 1.1.4 SQL injection Exploit Author : xBADGIRL21 Dork : index.php?option=comthreate version: 1.1.4 Vendor Homepage : http://joomlic.com/ Tested on: Windows skype:xbadgirl21 Date: 2016/07/09 video Proof :...

Wordpress force download Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Exploit Title : Wordpress force download Arbitrary File Download Dork 1 : inurl:force-download.php?file=wp-content/uploads Dork 2 : inurl:wp-content/uploads inurl:force-download.php?file= Vendor Homepage : http://elouai.com/force-download.php...

DWebPro 8.4.2 Remote Binary Execution / File Inclusion

Exploit Title: DWebPro 8.4.2 Remote Binary Execution Date: 01/10/2016 Exploit Author: Tulpa Contact: [email protected] Author website: www.tulpa-security.com Author twitter: @tulpasecurity Vendor Homepage: http://www.dwebpro.com/ Software Link: http://www.dwebpro.com/download Version: 8.4....

The Realm / Dashgum Software CMS Admin Page ByPass Vulnerability

Exploit for php platform in category web applications Exploit Title : The Realm / Dashgum Software CMS Admin Page ByPass Exploit Author : xBADGIRL21 version The Realm : 1.0.1 version Dashgum : v2 Vendor : http://www.bluthemes.com/item/realm - http://gridgum.com/themes/dashgum-bootstrap-dashboard/...

DWebPro 8.4.2 - Multiple Vulnerabilities

Exploit Title: DWebPro 8.4.2 Remote Binary Execution Date: 01/10/2016 Exploit Author: Tulpa Contact: [email protected] Author website: www.tulpa-security.com Author twitter: @tulpasecurity Vendor Homepage: http://www.dwebpro.com/ Software Link: http://www.dwebpro.com/download Version: 8.4....

Bezaat Script V2 Arbitrary Shell Upload Vulnerability

Exploit for php platform in category web applications Exploit Title : Bezaat Script V2 Arbitrary Shell Upload Vulnerability Exploit Author : xBADGIRL21 Dork 1 : index of /SystemImagesads/ Dork 2 : Powed by Greenit Egypt for Information Technology Vendor Homepage :...

DWebPro 8.4.2 - Multiple Vulnerabilities

DWebPro 8.4.2 - Multiple Vulnerabilities Exploit Title: DWebPro 8.4.2 Remote Binary Execution Date: 01/10/2016 Exploit Author: Tulpa Contact: [email protected] Author website: www.tulpa-security.com Author twitter: @tulpasecurity Vendor Homepage: http://www.dwebpro.com/ Software Link:...

SAP AS JAVA P4 MSPRuntimeInterface information disclosure

Application: SAP AS JAVA P4 Versions Affected: SAP AS JAVA P4 7.4 Vendor URL: SAP Bugs: Information disclosure Reported: 10.03.2016 Vendor response: 11.03.2016 Date of Public Advisory: 12.10.2016 Reference: SAP Security Note 2331908 Author: Vahagn Vardanyan ERPScan VULNERABILITY INFORMATION Class...

Ubiquiti UniFi 5.2.7 Critical Vulnerability

Exploit for hardware platform in category web applications together with my colleague we found two uncritical vulnerabilities you'll find below. Product: UniFi AP AC Lite Vendor: Ubiquiti Networks Inc. Internal reference: ? Bug ID Vulnerability type: Incorrect access control Vulnerable version:...

ImageMagick remote execution vulnerability analysis and exploit-vulnerability warning-the black bar safety net

1.1 ImageMagick description 1. ImageMagick description ImageMagick is a set of powerful, stable and open source set of tools and development kits that can be used to read, write and process the more than 8 9 basic format of the picture file, including the popular TIFF, JPEG, GIF, PNG, PDF, and...

Ubiquiti UniFi AP AC Lite 5.2.7 Improper Access Control

Product: UniFi AP AC Lite Vendor: Ubiquiti Networks Inc. Internal reference: ? Bug ID Vulnerability type: Incorrect access control Vulnerable version: Unify 5.2.7 and possible other versions affected not tested Vulnerable component: Database Report confidence: yes Solution status: Not fixed by...

Flv Player 2011 v1.3 - DLL Hijacking Exploit

Document Title: =============== Flv Player 2011 v1.3 - DLL Hijacking Exploit References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1962 Release Date: ============= 2016-09-29 Vulnerability Laboratory ID VL-ID: ==================================== 1962 Common...

CVE-2 0 1 6-7 4 0 1-Django CSRF Defense bypass vulnerability analysis-vulnerability warning-the black bar safety net

Django yesterday fixes this vulnerability: https://www.djangoproject.com/weblog/2016/sep/26/security-releases/ In fact, last year had similar issues, report it to Twitter https://hackerone.com/reports/14883 that vulnerability is composed of the following components. 0x01 by the Google Analytics...

Ipod Video Converter DLL Hijacking

i?Document Title: =============== Ipod Video Converter - DLL Hijacking Vulnerability Release Date: ============= 2016-09-23 Vulnerability Disclosure Timeline: ================================== 2016-09-27 : Public Disclosure Product & Service Introduction: =============================== iPod Vid...

Microsoft Windows 8.1 Update 2 / 10 10586 (x86/x64) - NtLoadKeyEx User Hive Attachment Point Privilege Escalation (MS16-111)

/ Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=865 Windows: NtLoadKeyEx User Hive Attachment Point EoP Platform: Windows 10 10586 32/64 and 8.1 Update 2, not tested Windows 7 Class: Elevation of Privilege Summary: The NtLoadKeyEx system call allows an unprivileged user to loa...