478 matches found
ManageEngine Firewall Analyzer 8.0 - Directory Traversal/XSS Vulnerabilities
Exploit for hardware platform in category web applications ...:::::ManageEngine Firewall Analyzer Directory Traversal/XSS Vulnerabilities::::.... Sobhan System Network & Security Group sobhansys ------------------------------------------------------- Date: 2015-01-28 Exploit Author: AmirHadi...
Researchers Finds Malicious Tor Exit Node Adding Malware to Binaries
A security researcher has identified a Tor exit node that was actively patching binaries users download, adding malware to the files dynamically. The discovery, experts say, highlights the danger of trusting files downloaded from unknown sources and the potential for attackers to abuse the trust...
EGYWEB (Mantrac) <= Remote File Disclosure Exploit
database passwords can be drawn.. Usage Info python exploit.py http://TARGET.COM EGYWEB Mantrac Example and tested on; http://www.deltagroup.com.eg http://www.mantracvostok.ru http://www.mantracghana.com http://www.mantracnigeria.com http://www.mantrackenya.com http://www.mantractanzania.com...
Food Order Portal 8.3 Cross Site Request Forgery
Food Order Portal 8.3 - CSRF Remote Admin Delete PoC My + Author : KnocKout Contactonlymail : [email protected] HomePage : http://Cyber-Warrior.Org - http://h4x0resec.blogspot.com Greetz: DaiMon,furty,BackDoor,EthicalHacker,BARCOD3,SZE©,VolqaN,Septemb0x | Unuttuklarýmýz affola.. Turkey...
Travel Portal II 6.0 Cross Site Request Forgery
Travel Portal II 6.0 - CSRF Admin Password Change PoC Exploit My + Author : KnocKout Contactonlymail : [email protected] HomePage : http://Cyber-Warrior.Org - http://h4x0resec.blogspot.com - http://www.cyber-warrior.org/100379 Greetz:...
LY Website CMS SQL Injection
Title: LY Website CMS Sql Injection vulnerability + Date: 2014-08-15 + Author: Iran Security Group + Vendor Homepage: http://www.lywebsite.com/ + Tested on: Windows7 & Kali Linux + Vulnerable Files: /pro.php + Dork : inurl:/pro.php?CateId= intext:"Power By LY Website" POC:...
WordPress CK-And-SyntaxHighLighter Arbitrary File Upload
Title: Wordpress ck-and-syntaxhighlighter Plugin RFU vulnerability + Date: 2014-08-12 + Author: Hekt0r + Tested on: Windows7 & Kali Linux + Vendor Homepage: http://wordpress.org/ + Software Link: http://wordpress.org/plugins/ck-and-syntaxhighlighter/ + Dork :...
J&W Communications SQL Injection
Title: J&W Communications Cms SQL Injection Vulnerability + Date: 2014-07-29 + Author: Hekt0r + Vendor Homepage: www.jw-com.com + Tested on: Windows7 & Kali Linux + Vulnerable Files: /rosters.php /team.php /scoresheet.php + Dork : intext:"designed by J&W Communications" inurl:/team.php.php?id=...
Design Foundry Cross Site Scripting / SQL Injection
Title: Foundry CMS Multiple Vulnerability + Date: 2014/07/20 + Author: Hekt0r + Vendor Homepage: www.design-foundry.co.uk + Tested on: Windows 7 & Kali Linux + Vulnerable Files: /page.php + Dork : intext:"Site by The Design Foundry" POC: + Sql Injection: http://site/page.php?id=SQL-Injection +...
phpscripte24 Countdown Standart Rückwärts Auktions System SQL Injection
No description provided by source. ----------------------------Information------------------------------------------------ +Name : phpscripte24 Countdown Standart Rückwärts Auktions System SQL Injection Vulnerability +Autor : Easy Laster +ICQ : 11-051-551 +Date : 08.05.2010 +Script : phpscripte24...
Powie's PSCRIPT Gästebuch <= 2.09 SQL Injection Vulnerability
No description provided by source. ----------------------------Information------------------------------------------------ +Name : Powie's PSCRIPT Gästebuch = 2.09 SQL Injection Vulnerability +Autor : Easy Laster +Date : 29.03.2010 +Script : Powie's PSCRIPT Gästebuch = 2.09 +Download :...
Date & Sex Vor und Rückwärts Auktions System <= 2 - Blind SQL Injection Exploit
No description provided by source. ---------------------------Information------------------------------------------------ +Name : Date & Sex Vor und Rückwärts Auktions System = v2 Blind SQL Injection Exploit +Autor : Easy Laster +Date : 27.03.2010 +Script : Date & Sex Vor und Rückwärts Auktions...
PowieSys <= 0.7.7 alpha index.php (shownews) SQL Injection Vulnerability
No description provided by source. ----------------------------Information------------------------------------------------ +Name : PowieSys = 0.7.7 alpha index.php shownews SQL Injection Vulnerability +Autor : Easy Laster +Date : 22.03.2010 +Script : PowieSys = 0.7.7 alpha +Download :...
spidaNews 1.0 news.php (id) SQL Injection Vulnerability news.php (id)
No description provided by source. ----------------------------Information------------------------------------------------ +Name : spidaNews V.1.0 SQL injection Vulnerability news.php id +Autor : Easy Laster +Date : 02.04.2011 +Script : spidaNews V.1.0 +Download :...
PHPKit <= 1.6.1 R2 overview.php SQL injection Vulnerability Exploit
No description provided by source. ----------------------------Information------------------------------------------------ +Name : PHPKit = 1.6.1 R2 overview.php SQL injection Vulnerability Exploit +Autor : Easy Laster +Date : 22.10.2010 +Script : PHPKit 1.6.1 R2 +Price : free +Language : PHP...
2daybiz Matrimonial Script smartresult.php SQL Injection Vulnerability
No description provided by source. ----------------------------Information------------------------------------------------ +ICQ : 11-051-551 +Info : http://www.2daybiz.com/matrimonialscript.html +Discovered by Easy Laster 4004-security-project.com +Security Group Undergroundagents and...
BS Business Directory (articlesdetails.php) SQL Injection Vulnerability Proof of Concept
No description provided by source. ----------------------------Information------------------------------------------------ +Autor : Easy Laster +ICQ : 11-051-551 +Date : 06.07.2010 +Script : BS Business Directory +Price : $24.95 +Language :PHP +Discovered by Easy Laster 4004-security-project.com...
xine 0.99.2 - Remote Stack Overflow Exploit
No description provided by source. / $ An open security advisory 6 - Xine vcd MRL input identifier management overflow 1: Bug Researcher: c0ntexatopen-security.org 2: Bug Released: July 28th 2004 3: Bug Impact Rate: Medium / Hi 4: Bug Scope Rate: Remote / Local $ This advisory and/or proof of...
Mensajeitor Tag Board 1.x Authentication Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10774/info It has been reported that Mensajeitor Tag Board is affected by an authentication bypass vulnerability. This issue is due to a failure of the application to properly handle authentication controls. Successful...
PHP-Fusion MG User-Fotoalbum SQL Injection Vulnerability
No description provided by source. ----------------------------Information------------------------------------------------ +Name : PHP-Fusion mg user fotoalbum 1.0.1 = SQL injection Vulnerability Proof of Concept +Autor : Easy Laster +Date : 10.10.2010 +Script : PHP-Fusion mg user fotoalbum 1.0.1...