CVE-2013-7379

creationtimestamp| type| source ---|---|--- 2020-08-31 22:59:07+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-9vxc-g2jx-qj3p...

CWP 0.9.8.885 Cross Site Scripting

Exploit Title: CWP CentOS Control Web Panel Store Cross Site Scripting Date: 25 Oct 2019 Exploit Author: Pongtorn Angsuchotmetee, Nissana Sirijirakal, Narin Boonwasanarak Vendor Homepage: https://control-webpanel.com/ Version: 0.9.8.885 CVE : CVE-2019-16295 +++++++++++++++++++++++++++++++++...

CVE-2016-10543

creationtimestamp| type| source ---|---|--- 2019-02-18 23:40:04+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-84fv-prrc-5ggr...

CVE-2017-16018

creationtimestamp| type| source ---|---|--- 2018-11-09 17:45:38+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-qw3g-35hc-fcrh...

CVE-2016-10547

creationtimestamp| type| source ---|---|--- 2018-11-06 23:13:37+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-f7ph-p5rv-phw2...

CVE-2018-16461

creationtimestamp| type| source ---|---|--- 2018-11-01 14:51:33+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-7g2w-6r25-2j7p...

CVE-2016-10540

creationtimestamp| type| source ---|---|--- 2018-10-09 00:40:41+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-hxm2-r34f-qmc5...

CVE-2018-3751

creationtimestamp| type| source ---|---|--- 2018-09-18 13:46:06+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-cvxm-f295-x957...

CVE-2017-10910

creationtimestamp| type| source ---|---|--- 2017-12-28 22:51:58+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-h9mj-fghc-664w...

CVE-2013-7454

creationtimestamp| type| source ---|---|--- 2017-10-24 18:33:36+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-q4qq-fm7q-cwp5...

CVE-2015-8858

creationtimestamp| type| source ---|---|--- 2017-10-24 18:33:36+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-c9f4-xj24-8jqx...

REDDOXX Appliance Build 2032 / 2.0.625 - Remote Command Execution Vulnerability

Exploit for jsp platform in category web applications Remote Command Execution as root in REDDOXX Appliance RedTeam Pentesting discovered a remote command execution vulnerability in the REDDOXX appliance software, which allows attackers to execute arbitrary command with root privileges while...

Relay Ajax Directory Manager 1.5.3 File Upload / Command Execution

Advisory: Unauthenticated File Upload in Relay Ajax Directory Manager may Lead to Remote Command Execution A vulnerability within the Relay Ajax Directory Manager web application allows unauthenticated attackers to upload arbitrary files to the web server running the web application. Details...

Alcatel-Lucent OmniSwitch Web Interface Cross Site Request Forgery Vulnerability

Vulnerability in the management web interface of an Alcatel-Lucent OmniSwitch 6450. The management web interface has no protection against cross-site request forgery attacks. This allows specially crafted web pages to change the switch configuration and create users, if an administrator accesses...

Achievo v1.4.3 - Multiple Web Vulnerabilities

Document Title: =============== Achievo v1.4.3 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=403 http://www.cnnvd.org.cn/vulnerability/show/cvid/2012020060 ID: CNNVD-201202-060 Release Date: ============= 2012-01-29...

Simploo CMS 1.7.1 PHP Code Execution

Exploit for php platform in category web applications Simploo CMS Community Edition - Remote PHP Code Execution Issue Details ============= Product: Simploo CMS Community Edition Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.simploo.de/ Advisory-Status: published Credits...

Pandora FMS Monitoring Application SQL Injection

PenTest Information: ==================== GESEC Teamsmash & rem0ve discover a SQL Injection Vulnerability on Pandora FMS Monitoring Software. Attackers can manipulate the application DBMS over a remote sql-injection vulnerability. Details ======= Tested on OS: UBUNTU 5.4 Tested with Software:...

Barracuda Web Firewall 660 Firmware 7.3.1.007 - Multiple Vulnerabilities

Pentest Information: ==================== GESEC Team remove discover a input validation vulnerability on Barracuda - Web Application Firewall 660 Appliance. A remote attacker is able to get sensitive customer sessions hijackor can implement script routines & malicious codesserver-side|persistent...

Barracuda Web Firewall 660 Firmware v7.3.1.007 Vulnerability

No description provided by source. Pentest Information: ==================== GESEC Team remove discover a input validation vulnerability on Barracuda - Web Application Firewall 660 Appliance. A remote attacker is able to get sensitive customer sessions hijackor can implement script routines &...

social-sql.txt

HACKATTACK Advisory 2008-11-20Social Engine 2.7 CRLF Injection + SQL injection Details Product: Social Engine Security-Risk: moderate Remote-Exploit: yes Vendor-URL: http://www.socialengine.net/ Vendor-Status: informed Advisory-Status: published Credits Discovered by: David Vieira-Kurz of...