315 matches found
Design by ARRR Design - SQL Injection
Design by ARRR Design - SQL Injection. Webapps exploit for PHP platform Exploit Title: Design by ARRR Design Get Username & Password Exploit Author: ./MalingSendal - Trenggalek Cyber Army Dork : intext:"Design by ARRR Design" Vendor Homepage: http://arrrdesign.web.id/ Date : 2016/10/07 Tested on ...
FreeBSD : asterisk -- RTP Resource Exhaustion (5cb18881-7604-11e6-b362-001999f8d30b)
The Asterisk project reports : The overlap dialing feature in chansip allows chansip to report to a device that the number that has been dialed is incomplete and more digits are required. If this functionality is used with a device that has performed username/password authentication RTP resources...
JVC IP Camera VN-T216VPRU - Credentials Disclosure
Exploit for cgi platform in category web applications 1. Advisory Information ======================================== Title : JVC IP-Camera VN-T216VPRU Remote Credentials Disclosure Vendor Homepage : http://pro.jvc.com/ Remotely Exploitable : Yes Tested on Camera types : VN-T216VPRU Product...
asterisk -- RTP Resource Exhaustion
The Asterisk project reports: The overlap dialing feature in chansip allows chansip to report to a device that the number that has been dialed is incomplete and more digits are required. If this functionality is used with a device that has performed username/password authentication RTP resources...
Bellini/Supercook Wi-Fi Yumi SC200 Information Disclosure / Code Execution
Bellini/Supercook Wi-Fi Yumi SC200 - Multiple vulnerabilities Reported By: ================================== James McLean - Primary: james dot mclean at gmail dot com Secondary: labs at juicedigital dot net Device Overview: ================================== From...
Bellini / Supercook Wi-Fi Yumi SC200 - Multiple Vulnerabilities
Exploit for hardware platform in category web applications ''' Bellini/Supercook Wi-Fi Yumi SC200 - Multiple vulnerabilities Reported By: ================================== James McLean - Primary: james dot mclean at gmail dot com Secondary: labs at juicedigital dot net Device Overview:...
SUSE-SU-2015:2385-1 Security update for grub2
This update for grub2 provides the following fixes: A security issues with a bufferoverflow when reading username and password was fixed bsc956631, CVE-2015-8370 Also following bugs were fixed: - Fix buffer overflows when reading username and password. bsc956631, CVE-2015-8370 - Expand list of...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in PHPJabbers Event Booking Calendar 2.0 allow remote attackers to hijack the authentication of administrators for requests that 1 change the username and password of the administrator via an update action to the AdminOptions controller or...
Xerox Workcentre 5735 LDAP Service Redential Extractor
This module extract the printer's LDAP username and password from Xerox Workcentre 5735. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Xerox Workcentre 5735 LDAP Service Redential Extractor',...
Use git-credential-store to avoid exposing plaintext username/password
Using https://username:[email protected] will expose the credentials e.g. in 'ps' when users have SSH access to the server which also runs Bamboo. This can be avoided if Bamboo uses git-credential-store...
Shiro: successful authentication without specifying user name or password
It was discovered that Apache Shiro authenticated users without specifying a user name or a password when used in conjunction with an LDAP back end that allowed unauthenticated binds...
EFS Easy Chat server Universal BOF-SEH (Meta)
No description provided by source. $Id: caigatewaydebug.rb 6568 2009-05-19 13:20:32Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of us...
RCBlog 1.03 - Authentication Bypass Vulnerability
No description provided by source. Vendor: http://noahmedling.com Versions: RCBlog 1.03 May also affect earlier versions Credit: Danny Moules Critical: Yes See PUSH 55 Advisory at https://www.push55.co.uk/index.php?s=ad&id=4 ---- By default, the application provides public access to the text file...
Particle Wiki <= 1.0.2 (version) Remote SQL Injection Vulnerability
No description provided by source. Particle wiki = 1.0.2 Remote SQLInjection - Username/Passwordhash Extractor Thanks to UNSECURED SYSTEMS : http://pridels.blogspot.com/2006/06/particle-wiki-sql-inj.html Exploited by FarhadKey from http://www.kapda.ir Username :...
StarVedia IPCamera IC502w IC502w+ v020313 - Username/Password Disclosure
No description provided by source. !/usr/bin/perl + StarVedia IPCamera IC502w IC502w+ v020313 remote bypass username/password disclosure exploit Author: Todor Donev Email: todor.donev at gmail dot com Type: Hardware Thanks to Tsvetelina Emirska the best friend in my life and all my other friends...
PHPJabbers Car Rental脚本多个漏洞
No description provided by source. Car Rental Script - Multiple Vulnerabilities ==================================================================== .:. Author : HackXBack .:. Contact : [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script : http://www.phpjabbers.com/car-rental/ ===...
PHPJabbers Car Rental Script - Multiple Vulnerabilities
PHPJabbers Car Rental Script - Multiple Vulnerabilities Car Rental Script - Multiple Vulnerabilities ==================================================================== .:. Author : HackXBack .:. Contact : [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script :...
Car Rental Script Cross Site Request Forgery / Cross Site Scripting
Car Rental Script - Multiple Vulnerabilties ==================================================================== .:. Author : HackXBack .:. Contact : [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script : http://www.phpjabbers.com/car-rental/ .:. Tested On Demo :...
CVE-2013-4114
The automatic update request in Nagstamont before 0.9.10 uses a cleartext base64 format for transmission of a username and password, which allows remote attackers to obtain sensitive information by sniffing the network...
Mobile microblog SQL injection and 1 3 9 mailbox defects,can enter others 1 3 9 mailbox-vulnerability warning-the black bar safety net
Mobile modest system underSQL injection, and did not attempt cross-database 1 3 9 mailbox password to retrieve defect Implantation where the parameters appkey Such as:...