1410 matches found
Malware exploit: Rockloaded
Type: SQLi and shell file upload Author: Danail Velev Contact: ICQ: 209030 / [email protected] Website: http://colocation.bg/ Software: https://github.com/colocation/RockLoader-source Original Release: https://cxsecurity.com/ascii/WLB-2016070003...
My Private Tutor Website Script - Authentication Bypass
Vulnerability: Admin Login Bypass & SQLi Date: 13.01.2017 Vendor Homepage: http://scriptfirm.com/ Script Name: Professional Service Booking Script Script Buy Now: My Private Tutor Website Author: İhsan Şencan Author Web: http://ihsan.net Mail : ihsanbeygirihsannoktanet http://localhost/PATH/admin...
Courier Business Website Script - Authentication Bypass
Vulnerability: Admin Login Bypass & SQLi Date: 13.01.2017 Vendor Homepage: http://scriptfirm.com/ Script Name: Courier Business Website Script Script Buy Now: http://scriptfirm.com/courier-business-website Author: İhsan Şencan Author Web: http://ihsan.net Mail : ihsanbeygirihsannoktanet...
My Private Tutor Website Script - Authentication Bypass
My Private Tutor Website Script - Authentication Bypass Vulnerability: Admin Login Bypass & SQLi Date: 13.01.2017 Vendor Homepage: http://scriptfirm.com/ Script Name: Professional Service Booking Script Script Buy Now: My Private Tutor Website Author: İhsan Şencan Author Web: http://ihsan.net Mai...
Just Dial Marketplace - Authentication Bypass
Just Dial Marketplace - Authentication Bypass Vulnerability: Admin Login Bypass & SQLi Date: 13.01.2017 Vendor Homepage: http://scriptfirm.com/ Script Name: Just Dial Marketplace Script Script Buy Now: http://scriptfirm.com/just-dial-marketplace Author: İhsan Şencan Author Web: http://ihsan.net...
Education Website Script - Authentication Bypass
Education Website Script - Authentication Bypass Vulnerability:: Admin Login Bypass & SQLi Date: 13.01.2017 Vendor Homepage: http://scriptfirm.com/ Script Name: Education Website Script Script Buy Now: http://scriptfirm.com/education-website Author: İhsan Şencan Author Web: http://ihsan.net Mail ...
Just Dial Marketplace - Authentication Bypass
Vulnerability: Admin Login Bypass & SQLi Date: 13.01.2017 Vendor Homepage: http://scriptfirm.com/ Script Name: Just Dial Marketplace Script Script Buy Now: http://scriptfirm.com/just-dial-marketplace Author: İhsan Şencan Author Web: http://ihsan.net Mail : ihsanbeygirihsannoktanet...
SonicWALL GMS / Analyzer 8.x < 8.2 Multiple SQLi Vulnerabilities
SonicWALL GMS / Analyzer are prone to multiple SQL injection SQLi vulnerabilities. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
My Link Trader 1.1 - Authentication Bypass Vulnerability
Exploit for php platform in category web applications Type: login bypass via SQLi Vendor: http://software.friendsinwar.com/ Script Name: My Link Trader Script Version: 1.1 Software Link: http://software.friendsinwar.com/downloads.php?catid=2&downloadid=13 Author: Netsalar Mail :...
My Click Counter 1.0 - Authentication Bypass Vulnerability
Exploit for php platform in category web applications x Type: Admin login bypass via SQLi x Vendor: http://software.friendsinwar.com/ x Script Name: My Click Counter x Script Version: 1.0 x Script DL: http://software.friendsinwar.com/downloads.php?catid=2&fileid=15 x Author: AnarchyAngel AKA Adam...
Podlove Podcast Publisher <= 2.3.15 - Multiple SQLi & XSS
The Podlove Podcast Publisher WordPress plugin was affected by a Multiple SQLi & XSS security vulnerability...
Malware exploit: Herpes Net 3.0
Type: SQL Injection Author: bwall import random import pycurl import urllib import cStringIO import json def ui: try: return unicodei, errors='ignore' except: return i class HerpesNetPanel: def initself, gatewayurl: self.gatewayurl = gatewayurl @staticmethod def getfieldgateway, table, column, ro...
Exponent CMS <= 2.4.0 Information Disclosure and SQLi Vulnerabilities
Exponent CMS is prone to an SQL injection SQLi and an information disclosure vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...
NextGEN Gallery <= 2.1.56 - Authenticated Local File Inclusion (LFI) & SQLi
The WordPress Gallery Plugin – NextGEN Gallery WordPress plugin was affected by an Authenticated Local File Inclusion LFI & SQLi security vulnerability...
Alienvault OSSIMUSM 5.3.1 - SQL Injection
Alienvault OSSIMUSM 5.3.1 - SQL Injection Details ======= Product: Alienvault OSSIM/USM Vulnerability: SQL Injection Author: Peter Lapp, lappsec gmail com CVE: CVE-2016-8582 Vulnerable Versions: =5.3.1 Fixed Version: 5.3.2 Vulnerability Details ===================== A SQL injection vulnerability...
CVE-2016-1000122
XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension...
CVE-2016-1000121
XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension...
CVE-2016-1000121
CVE-2016-1000121 affects the Huge IT Joomla Slider extension v1.0.9. The connected documents describe reflected XSS and SQL Injection vulnerabilities in the component, arising from inadequate input filtering in the extension’s admin code paths (notably in the slider manager and related PHP files)...
CVE-2016-1000120
CVE-2016-1000120 affects Joomla's Huge IT Catalog extension (v1.0.4). The connected sources confirm SQL injection and cross-site scripting vulnerabilities in the catalog component caused by inadequate validation of user-submitted input. Potential impact, as described in CNVD, includes arbitrary s...
