LinEx - Password Reset Vulnerability

No description provided by source. Exploit Title: LinEx All Versions Password Reset Vulnerability Google Dork: linkex.dk 2006-2011 Date: 15/01/2014 Exploit Author: N B Sri Harsha Reconnect Gray hat Vendor Homepage: http://linkex.dk/ Software Link: http://linkex.dk/releases/linkex.20120508.zip...

Ublog access version - Arbitrary Database Disclosure Exploit

No description provided by source. !/usr/bin/perl Ublog access version mdb-database/blog.mdb dork : http://www.google.co.ma/search?q=index.asp%3Farchivio%3DOK&hl=fr&start=20&sa=N demos : http://radiologyhunters.com/blog/mdb-database/blog.mdb http://foges.net/mdb-database/blog.mdb...

MyBB Member.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14684/info MyBB is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. Successful exploitation could result in a compromise of the...

destoon新版短消息中心xss指谁打谁

简要描述： 发现提交了几个xss被无视...再试一次咯 destoon新版短消息中心xss指谁打谁。 详细说明： 首先选取一个对象我们去发消息 然后抓包，往里面填充我们的xss代码 其中的xss 然后我们来试着点开该信息，审查元素，代码完好 漏洞证明： 看网络连接，加载成功了...

Moodle 2.3.82.4.5 - Multiple Vulnerabilities

Moodle 2.3.82.4.5 - Multiple Vulnerabilities Ciaran McNally Application: Moodle http://download.moodle.org/ Versions: parameter in an rss feed is vulnerable to javascript injection. This blog post is viewable by everyone on moodle and you can link to it directly. Upon clicking the "Link to origin...

MyBB TipsOfTheDay Cross Site Scripting / SQL Injection

Exploit Title: TipsOfTheDay mybb plugin stored XSS and SQL injection vulnerabilitys. Date: 12.12.2012 Exploit Author: VipVince Vendor Homepage: http://www.mybb.com/ Software Link: http://mods.mybb.com/view/tips-of-the-day Version: 1.0 Tested on: Windows The tipsoftheday.php file is vulnerable to...

SHOPEX 4.8.5 注入漏洞以及后台拿SHELL

简要描述： SHOPEX 4.8.5 注入漏洞以及后台拿SHELL shopex很久没有更新了啊亲，非得每次出漏洞了才更新一下下吗？ wooyun提示：漏洞在上报乌云之前已经在外界披露，请紧急处理 详细说明： SHOPEX 4.8.5 注入漏洞以及后台拿SHELL 漏洞文件： 漏洞核心函数 \core\modelv5\trading\mdl.goods.php 漏洞代码： None 拿shell方法…. 第一步 页面管理 修改模版 然后选一个XML编辑 开始用 live http 抓包 你们懂的 然后把第一个POST包给抓出来 然后改包 包要这么改 我研究了半天 尼玛的菊花红...

M86 Security detected Web exploitation attacks using AJAX

M86 Security detected Web exploitation attacks using AJAX Security researchers from Web filtering vendor M86 Security have detected Web exploitation attacks that use AJAX to fragment the payload into small pieces of code that are harder to detect by antivirus programs and intrusion prevention...

DIY-CMS Blog Mod SQL Injection

Exploit Title: DIY-CMS blog mod SQL Injection Author: snup Contact: [email protected] Site: http://e-o-u.org SQL Injection: DORK: inurl:"mod.php?mod=blog" intext:"powered by DIY-CMS" inurl:"mod.php?mod=blog" BUG: http://127.0.0.1/diy-cms/mod.php?mod=blog&modfile=tags&tag=features&start=sqli...

Facebook / Google+ Cross Site Content Forgery

Blackhatacademy has asked me to post this to the mailing list as im one of the instructors there, I did not personally develop the exploit, please direct questions regarding it to hatter on irc.blackhatacademy.org Overview Over the years, facebook has been vulnerable to numerous web exploitation...

SuSE 11.1 Security Update : flash-player (SAT Patch Number 4715)

A critical vulnerability has been identified in Adobe Flash Player 10.3.181.23 and earlier versions for Windows, Macintosh, Linux and Solaris, and Adobe Flash Player 10.3.185.23 and earlier versions for Android. This memory corruption vulnerability CVE-2011-2110 could cause a crash and potentiall...

FreeNAS exec_raw.php Arbitrary Command Execution

$Id: freenasexecraw.rb 11015 2010-11-12 23:14:46Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

[whem]-UPLoad - v 7.0 Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications ============================================================ whem-UPLoad - v 7.0 Insecure Cookie Handling Vulnerability ============================================================...

Sugar CRM 5.5.0.rc2/5.2.0j - Multiple Vulnerabilities

Author: Janek Vind 'waraxe' Vulnerable: SugarCRM SugarCRM 5.5.0.RC2 SugarCRM SugarCRM 5.2.0j Product: http://www.sugarcrm.com/crm/ Description: SugarCRM is prone to multiple remote vulnerabilities, including: 1. Multiple SQL-injection vulnerabilities 2. Multiple unauthorized access vulnerabilitie...

Joomla Recerca component SQL Injection

Exploit for unknown platform in category web applications ====================================== Joomla Recerca component SQL Injection ====================================== use HTTP::Request; use LWP::UserAgent; $cmsapp = 'Joomla Component comrecerca'; $vuln =...

Virtue Classifieds SQL Injection

CMS : Virtue Classifieds WEB : http://www.virtuenetz.com/classified/ Archivo : search.php Variable Tipo : GET Valor : category Tipo : SQL Injection Url : http:/www.site.com/search.php?category=SQLI PoC:...

Studio Lounge Address Book 2.5 (profile) Shell Upload Vulnerability

No description provided by source. Address Book 2.5 profile Remote Shell Upload Vulnerability bug found by Jose Luis Gongora Fernandez a.k.a JosS contact: sys-projectathotmail.com website: http://www.hack0wn.com/ - download: http://www.studiolounge.net/2007/08/17/address-book-25 - vuln file:...

Comparison Engine Power 1.0 - product.comparision.php SQL Injection

Comparison Engine Power 1.0 - product.comparision.php SQL Injection source: https://www.securityfocus.com/bid/34232/info Comparison Engine Power is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this...

DropAFew 0.2 - search.php?delete Action id SQL Injection

DropAFew 0.2 - search.php?delete Action id SQL Injection source: https://www.securityfocus.com/bid/23400/info DropAFew is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could all...

Computer Terrorism (UK) :: Incident Response Centre - Adobe/Macromedia Flash Player Vulnerability

Computer Terrorism UK :: Incident Response Centre www.computerterrorism.com Security Advisory: CT12-09-2006 ============================================================ Adobe/Macromedia Flash Player - Remote Code Execution ============================================================ Advisory Date...