Barracuda Web App Firewall 8.0.1.007Load Balancer 5.4.0.004 - Remote Command Execution (Metasploit)

Barracuda Web App Firewall 8.0.1.007Load Balancer 5.4.0.004 - Remote Command Execution Metasploit Exploit Title: Barracuda Web App Firewall/Load Balancer Post Auth Remote Root Exploit Date: 07/21/16 Exploit Author: xort [email protected] Vendor Homepage: https://www.barracuda.com/ Software...

Barracuda Web App Firewall 8.0.1.007/Load Balancer 5.4.0.004 - Remote Command Execution (Metasploit)

Exploit for linux platform in category remote exploits Exploit Title: Barracuda Web App Firewall/Load Balancer Post Auth Remote Root Exploit Date: 07/21/16 Exploit Author: xort email protected Vendor Homepage: https://www.barracuda.com/ Software Link: https://www.barracuda.com/products/loadbalanc...

Barracuda Web App Firewall 8.0.1.007/Load Balancer 5.4.0.004 - Remote Command Execution (Metasploit)

Exploit Title: Barracuda Web App Firewall/Load Balancer Post Auth Remote Root Exploit Date: 07/21/16 Exploit Author: xort [email protected] Vendor Homepage: https://www.barracuda.com/ Software Link: https://www.barracuda.com/products/loadbalance &...

Barracuda Web App Firewall / Load Balancer Remote Root

Exploit Title: Barracuda Web App Firewall/Load Balancer Post Auth Remote Root Exploit Date: 07/21/16 Exploit Author: xort [email protected] Vendor Homepage: https://www.barracuda.com/ Software Link: https://www.barracuda.com/products/loadbalance &...

Veris: Email spoofing in [email protected]

Hey, I've found email spoofing vulnerability in [email protected] Issue: ======== When I try to send a fake email from [email protected] to my email [email protected] I was successful in sending a fake email to my inbox, this is an issue; because, fake mails should be sent into the 'spam' folde...

Untangle NGFW 12.1.0 Beta - execEvil() Command Injection

Untangle NGFW 12.1.0 Beta - execEvil Command Injection !/usr/bin/python Title: Untangle NGFW = v12.1.0 beta execEvil authenticated root CI exploit CVE: Not yet assigned Discovery: Matt Bush @3xocyte Exploit: Matt Bush Contact: [email protected] Disclosure Timeline: 22/4/2016 Attempted t...

Untangle NGFW 12.1.0 Beta - 'execEvil()' Command Injection

!/usr/bin/python Title: Untangle NGFW " print "! and in a sep...

Untangle NGFW 12.1.0 Beta execEvil() Command Injection

!/usr/bin/python Title: Untangle NGFW " print "! and in a separat...

LebiShop Mall Backend Catalog Traversal Vulnerability

LebiShop mall system is an online mall system using ASP.NET language. The system is widely used in small and medium-sized e-commerce enterprises. The mall system's management background provides a system template management function , the function in the system template to browse files related to...

VulnCheck KEV: CVE-2010-2493

The default configuration of the deployment descriptor aka web.xml in picketlink-sts.war in 1 the securitysaml quickstart, 2 the webserviceproxysecurity quickstart, 3 the web-console application, 4 the http-invoker application, 5 the gpd-deployer application, 6 the jbpm-console application, 7 the...

Xymon Command Injection Vulnerability

Xymon is an open source , cross-platform network monitoring application . The application can be viewed through the web page of the operational status of each server , and supports Email and SMS notification function . Xymon's useradm and chpasswd web applications in the command injection...

eBay Magento Persistent Mail Encoding

Document Title: =============== Ebay Magento Bug Bounty 2 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1203 eBay Inc. Bug Bounty Program ID: EIBBP-26644 Release Date: ============= 2016-01-18 Vulnerability Laboratory ID...

Modern Vulnerable Web App: Hackazon

Hackazon is a free, vulnerable test site that is an online storefront built with the same technologies used in today’s rich client and mobile applications. Hackazon has an AJAX interface, strict workflows and RESTful API’s used by a companion mobile app providing uniquely-effective training and...

Joomla Shape 5 MP3 Player 2.0 Local File Disclosure Exploit

Joomla Shape 5 MP3 Player version 2.0 suffers from a local file disclosure vulnerability. Joomla = Shape 5 MP3 Player 2.0 Local File Disclosure Exploit My + Author : KnocKout Contact : email protected Skype : email protected HomePage : http://h4x0resec.blogspot.com Greetz : b3mb4m, ZoRLu, KedAns-...

Gökhan Balbal Script 2.0 - Cross-Site Request Forgery

. | | / | | \ \ | | \ / | |\ / / /\ \ / \ | Y / ^ / / || / / / / /\ /\ \ \ \ | / \ / / \ | \ \ / // / \ / / / / Gökhan Balbal v2.0 = Cross-Site Request Forgery Exploit Add Admin My + Author : KnocKout Contact : [email protected] HomePage : http://milw00rm.com -...

Traffic CMS 1.4.x Local File Inclusion Vulnerability

Traffic CMS version 1.4.x suffers from a local file inclusion vulnerability. Traffic CMS v1.4.x = Local File Inclusion Vulnerability My + Author : KnocKout Contact : email protected HomePage : http://milw00rm.com - http://h4x0resec.blogspot.com Þeker Insanlar : ZoRLu, milw00rm.com , Septemb0x ,...

Traffic CMS 1.4.x Local File Inclusion

. | | / | | \ \ | | \ / | |\ / / /\ \ / \ | Y / ^ / / || / / / / /\ /\ \ \ \ | / \ / / \ | \ \ / // / \ / / / / Traffic CMS v1.4.x = Local File Inclusion Vulnerability My + Author : KnocKout Contact : [email protected] HomePage : http://milw00rm.com - http://h4x0resec.blogspot.com...

Codetainer - A Docker Container In Your Browser

codetainer allows you to create code 'sandboxes' you can embed in your web applications think of it like an OSS clone of codepicnic.com . Codetainer runs as a webservice and provides APIs to create, view, and attach to the sandbox along with a nifty HTML terminal you can interact with the sandbox...

Kaboozu CMS Shell Upload

. | | / | | \ \ | | \ / | |\ / / /\ \ / \ | Y / ^ / / || / / / / /\ /\ \ \ \ | / \ / http://h4x0resec.blogspot.com / \ | \ \ / // / \ / = 1 Kasımda oylar MHP'ye, ona göre.. = / / / Kaboozu CMS x.x.x - Remote Shell Upload Vulnerability 0day My + Discovered by: KnocKout Contact :...

CVE-2015-6037

Cross-site scripting XSS vulnerability in Microsoft Excel Services on SharePoint Server 2010 SP2 and 2013 SP1, Office Web Apps 2010 SP2, Excel Web App 2010 SP2, Office Web Apps Server 2013 SP1, and SharePoint Foundation 2013 SP1 allows remote authenticated users to inject arbitrary web script or...