GSA Bounty: [api.data.gov] Leak Valid API With out Verification -

Description Remote attackers are able to retrieve a valid working api key with random Generation Process without a secure parsing or secure channel , human verification ..etc . the current proccess for requesting any api key is with signup form , and message with api delivered privately to user ,...

Wireless Repeater BE126 - Remote Code Execution Exploit

Exploit for hardware platform in category web applications Exploit Title: WIFI Repeater BE126 – Remote Code Execution Date Publish: 09/09/2017 Exploit Authors: Hay Mizrachi, Omer Kaspi Contact: email protected, email protected Vendor Homepage: http://www.twsz.com Category: Webapps Version: 1.0...

Quali CloudShell 7.1.0.6508 (Patch 6) - Persistent Cross-Site Scripting

Vulnerability type: Multiple Stored Cross Site Scripting Vendor: Quali Product: CloudShell Affected version: v7.1.0.6508 Patch 6 Patched version: v8 and up Credit: Benjamin Lee CVE ID: CVE-2017-9767 ========================================================== Overview Quali CloudShell v7.1.0.6508...

CVE-2017-9828

'/cgi-bin/admin/testserver.cgi' of the web service in most of the VIVOTEK Network Cameras is vulnerable to shell command injection, which allows remote attackers to execute any shell command as root via a crafted HTTP request. This vulnerability is already verified on VIVOTEK Network Camera...

Nuevomailer < 6.0 - SQL Injection

Exploit Title: Nuevo mailer version = 6.0 SQL Injection Exploit Author: ALEH BOITSAU Google Dork: inurl:/inc/rdr.php? Date: 2017-06-09 Vendor Homepage: https://www.nuevomailer.com/ Version: 6.0 and below Tested on: Linux Vulnerable script: rdr.php Vulnerable parameter: r PoC:...

Nuevomailer 6.0 - SQL Injection

Nuevomailer 6.0 - SQL Injection Exploit Title: Nuevo mailer version = 6.0 SQL Injection Exploit Author: ALEH BOITSAU Google Dork: inurl:/inc/rdr.php? Date: 2017-06-09 Vendor Homepage: https://www.nuevomailer.com/ Version: 6.0 and below Tested on: Linux Vulnerable script: rdr.php Vulnerable...

Joomla JGrid 4.44 SQL Injection

Exploit Title: Joomla Component JGrid 4.44 - SQL Injection Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM Mojtaba Kazemi Vendor Home : https://extensions.joomla.org/extensions/extension/core-enhancements/data-reports/jgrid/ Home : http://persian-team.ir/ Telegram Channel AND Dem...

Weblate: Open redirect in Signing in via Social Sites

Weak Authentication Leads to the Open redirection to Malicios Sites : Signing in via Facebook : + https://hosted.weblate.org/accounts/login/facebook/?next=///evil.com Signing in via Gmail : + https://hosted.weblate.org/accounts/login/google-oauth2/?next=///evil.com Signing in via Github: +...

Joomla JobGrok Application 3.1-1.2.55 SQL Injection

Exploit Title: Joomla Component JobGrok Application 3.1-1.2.55 - SQL Injection Date: 2017-04-02 Home : https://extensions.joomla.org/extension/job-grok-app/ Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM [email protected] Home : http://persian-team.ir/ Telegram Channel AND...

Joomla FocalPoint 1.2.3 SQL Injection

Exploit Title: Joomla Component FocalPoint 1.2.3 - SQL Injection Date: 2017-03-23 Home : https://extensions.joomla.org/extensions/extension/maps-a-weather/maps-a-locations/focalpoint/ Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM [email protected] Home :...

LocalTapiola: Single User DOS on SelectedLocale -cookie (verkkopalvelu.tapiola.fi)

Hey, I want to report again similar issue to 201723 , but cookie is setting up on different parameter. Basic report information Summary: found a way in which any attacker will send a link to user, and user will not able to use any of the service provided by lahitapiola. Affected Websites 1...

Joomla Music Collection 3.0.3 SQL Injection

Exploit Title: Joomla Component Music Collection 3.0.3 - SQL Injection Date: 2017-02-11 Home : https://extensions.joomla.org/extensions/extension/multimedia/multimedia-players/music-collection/ Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM [email protected] Home :...

Joomla Soccer Bet 4.1.5 SQL Injection

Exploit Title: Joomla Component Soccer Bet 4.1.5 - SQL Injection Date: 2017-02-11 Home : https://extensions.joomla.org/extensions/extension/sports-a-games/tips-a-betts/soccer-bet/ Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM [email protected] Home : http://persian-team.ir...

Joomla! Component onisPetitions 2.5 - 'tag' SQL Injection

Exploit Title: Joomla Component onisPetitions 2.5 - SQL Injection Date: 2017-02-11 Home : https://extensions.joomla.org/extensions/extension/contacts-and-feedback/polls/onispetitions/ Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM [email protected] Home :...

Business Networking Script 8.11 Cross Site Scripting / SQL Injection

Exploit Title : ----------- : Business Networking Script v8.11- SQLi & Persistent Cross Site Scripting Author : ----------------- : Ahmet Gurel Google Dork : --------- : - Date : -------------------- : 16/01/2017 Type : -------------------- : webapps Platform : --------------- : PHP Vendor Homepa...

BlackBoard LMS 9.1 SP14 - (Title) Persistent Vulnerability

Document Title: =============== BlackBoard LMS 9.1 SP14 - Title Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1901 Release Date: ============= 2017-01-10 Vulnerability Laboratory ID VL-ID: ====================================...

TP-LINK TD-W8151N - Denial of Service

TP-LINK TD-W8151N - Denial of Service Exploit Title: TP-LINK TD-W8151N - Denial of Service Date: 2016-12-13 Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM Home : http://persian-team.ir/ Tested on: Windows AND Linux Demo : https://www.youtube.com/watch?v=WrGgHvhiCGg POC : flagFre...

LocalTapiola: SQL Injection /webApp/oma_conf ctx parameter (viestinta.lahitapiola.fi)

Vulnerable script: /webApp/omaconf Vulnerable parameter: ctxvarsemail Database: PostgreSQL PoC http POST /webApp/omaconf HTTP/1.1 Host: viestinta.lahitapiola.fi Content-Type: application/x-www-form-urlencoded Content-Length: 1131...

CNDSOFT 2.3 - Cross-Site Request Forgery / Arbitrary File Upload

========================================================================================================= Exploit Title: CNDSOFT 2.3 - Arbitrary File Upload with CSRF shell.php Author: Besim Google Dork: - Date: 19/10/2016 Type: webapps Platform : PHP Vendor Homepage: - Software Link:...

WordPress Newsletter 4.6.0 Cross Site Request Forgery / Cross Site Scripting

Exploit for php platform in category web applications Wordpress Plugin: Newsletter 4.6.0 https://wordpress.org/plugins/newsletter/ is vulnerable to CSRF and XSS. The issue is supposed to be fixed in version 4.6.1 . See https://wordpress.org/plugins/newsletter/changelog/ for more details. 1. Store...