Samsung Smart Home Camera SNH-P-6410 - Command Injection

Exploit for hardware platform in category remote exploits E-DB Note: source https://www.pentestpartners.com/blog/samsungs-smart-camera-a-tale-of-iot-network-security/ import urllib, urllib2, crypt, time New password for web interface webpassword = 'admin' New password for root rootpassword = 'roo...

Harvest: Users enumeration is possible through cycling through recurring[client_id] argument value.

Details: An attacker can enumerate the names of companies on your site by going to the URL https://harvesterxxx.harvestapp.com/recurringinvoices/new?utf8=%E2%9C%93&recurringclientid=4677449&newclientname= and cycling through the numerical value of the recurringclientid= argument, which will view...

Alibaba Clone B2B Script - Admin Authentication Bypass

Alibaba Clone B2B Script - Admin Authentication Bypass Exploit Title: Alibaba Clone B2B Script Admin Authentication Bypass Date: 2016-05-03 Exploit Author: Meisam Monsef [email protected] or [email protected] Vendor Homepage: http://alibaba-clone.com/ Version: All Versions Exploit : For enter...

pioneer.jp XSS vulnerability

Vulnerable URL: http://pioneer.jp/cgi-bin/device/download/filegetj.pl?file=BDR-XU03JFW103EU.EXE'%22alert'XSSPOSED'...

CVE-2015-5342

The choice module in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 allows remote authenticated users to bypass intended access restrictions by visiting a URL to add or delete responses in the closed state...

lifeproof.co.uk XSS vulnerability

Vulnerable URL: https://www.lifeproof.co.uk/en-us/search?q=--...

Don't use Chrome to browse this article, it will crash! - Vulnerability warning-the black bar safety net

! Earlier there 8 characters makes Skype crash example, today we refer to is 1 6 characters make Chrome crash, you just need to click which 1 of 6 characters, and even the mouse just in this 1 6 bytes of the link moving around can cause Chrome to crash. Challenge Google Chrome: just 1 6 character...

KLA11454 Multiple vulnerabilities in SeaMonkey

Multiple vulnerabilities were found in SeaMonkey. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions and spoof user interface. Below is a complete list of vulnerabilities: 1. Multiple memory corruption vulnerabilities...

The vulnerability of the Moodle learning management system allows a hacker to gain access to personal contact information and details about unread messages.

The vulnerability of the Moodle learning management system’s sub-component message/index.php is related to the lack of protection for administrative data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to personal contact information and details...

Moodle < 2.4 / 2.4.x < 2.4.10 / 2.5.x < 2.5.6 / 2.6.x < 2.6.3 Multiple Vulnerabilities

Binary data 8716.prm...

Mandriva Linux Security Advisory : drupal (MDVSA-2015:181)

Updated drupal packages fix security vulnerabilities : An information disclosure vulnerability was discovered in Drupal before 7.27. When pages are cached for anonymous users, form state may leak between anonymous users. Sensitive or private information recorded for one anonymous user could thus ...

Kunstmaan CMS Open Redirect

Affected software: kunstmaan cms Type of vulnerability: redirect vulnerability URL: bundles.kunstmaan.be Discovered by: Provensec Website: http://www.provensec.com version: not specified on domain Proof of concept http://demo.bundles.kunstmaan.be/en/admin/media/delete/9?redirectUrl=http://google....

Design/Logic Flaw

Mozilla Firefox before 36.0 does not properly recognize the equivalence of domain names with and without a trailing . dot character, which allows man-in-the-middle attackers to bypass the HPKP and HSTS protection mechanisms by constructing a URL with this character and leveraging access to an X.5...

URL request injection

When libcurl sends a request to a server via an HTTP proxy, it copies the entire URL into the request and sends if off. If the given URL contains line feeds and carriage returns those are sent along to the proxy too, which allows the program to for example send a separate HTTP request injected...

Code injection

The frontend rendering component in TYPO3 4.5.x before 4.5.39, 4.6.x through 6.2.x before 6.2.9, and 7.x before 7.0.2, when config.prefixLocalAnchors is set and using a homepage with links that only contain anchors, allows remote attackers to change URLs to arbitrary domains for those links via...

CVE-2014-9508

The frontend rendering component in TYPO3 4.5.x before 4.5.39, 4.6.x through 6.2.x before 6.2.9, and 7.x before 7.0.2, when config.prefixLocalAnchors is set and using a homepage with links that only contain anchors, allows remote attackers to change URLs to arbitrary domains for those links via...

CVE-2014-9060

The CVE-2014-9060 issue affects Moodle’s LTI module (versions prior to 2.5.9, 2.6.x prior to 2.6.6, and 2.7.x prior to 2.7.3; also 2.4.11) where the return URL parameters are not properly restricted. This allows remote attackers to trigger generation of arbitrary messages by modifying the return ...

DMXReady PayPal Store Manager <= 1.1 Contents Change Vulnerability

No description provided by source. Title : DMXReady PayPal Store Manager = 1.1 Remote Contents Change Vulnerability Author : ajann from Turkey Contact : : S.Page : http://www.dmxready.com $$ : 129.97 $ Dork : inurl:incpaypalstoremanager.asp DorkEx :...

Microsoft IIS 2.0/3.0 Appended Dot Script Source Disclosure Vulnerability

source: http://www.securityfocus.com/bid/2074/info Microsoft Internet Information Server IIS is a popular web server, providing support for a variety of scripting languages, including ASP active server pages. IIS 2.0 and 3.0 suffer from an issue allowing a remote user to retrieve the source code...

SimpNews 2.0.1/2.13 PATH_SIMPNEWS Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8227/info SimpNews is prone to a vulnerability that may permit remote attackers to include and execute malicious PHP scripts. Remote users, under some PHP configurations, may influence a Simpnews URI variable. This variab...