37 matches found
Tradebox CryptoCurrency - symbol SQL Injection Vulnerability
Exploit for php platform in category web applications Title: Tradebox - CryptoCurrency Buy Sell and Trading Exploit Author: Abdullah Çelebi Vendor Homepage: https://www.bdtask.com Software Link: tradebox.bdtask.com/demo-v5.3/ Version: 5.4 Category: Webapps Tested on: WAMPP @Win Software...
Placeto CMS Alpha 4 SQL Injection
Placeto CMS Alpha v4 - 'page' SQL Injection Title: Placeto CMS Date: 21.03.2019 Exploit Author: Abdullah Çelebi Vendor Homepage: https://sourceforge.net/projects/placeto/ Software Link: https://sourceforge.net/projects/placeto/files/alpha-rv.4/placeto.zip Version: Alpha rv.4 Category: Webapps...
FTP Voyager 16.2.0 - Denial of Service (PoC)
Exploit Title: FTP Voyager 16.2.0 - Denial of Service PoC Author: Abdullah Alıç Discovey Date: 2018-10-2 Vendor notified : 2018-10-2 Homepage: https://www.serv-u.com/ Software Link: https://www.serv-u.com/ftp-voyager Tested Version: 16.2.0 Tested on OS: Windows XP Professional sp3 ENG Steps to...
Weblate: Open redirect in Signing in via Social Sites
Weak Authentication Leads to the Open redirection to Malicios Sites : Signing in via Facebook : + https://hosted.weblate.org/accounts/login/facebook/?next=///evil.com Signing in via Gmail : + https://hosted.weblate.org/accounts/login/google-oauth2/?next=///evil.com Signing in via Github: +...
Flickr Cross-Site Request Forgery Vulnerability Patched
Yahoo-owned Flickr, one of the biggest online photo management and sharing website in the world was recently impacted by a web application vulnerability, which could allow an attacker to modify users’ profile image. Flickr is one of the most popular photo sharing website with more than 87 million...
RW-Download 4.0.6 - (index.php) SQL Injection Vulnerability
No description provided by source. /////////////////////////Dr.NeT/////////////////////////////////Dr.NeT//////////////////////Dr.NeT////////// //Title ||= RW-Download v4.0.6 = index.php SQL Injection Vulnerability // //Secript ||= RW-Download // //Language||= Php // //Download||=...
Thanks to the researchers 2014
Research Thanks to the researchers 2014 Share January 31st, 2014 Each year, a number of researchers offer their assistance to help us tighten the security of our wide array of websites. We would like to take this opportunity to thank the researchers and testers of 2014 for their assistance in...
Turkish Government websites hacked by Anonymous, declares #OpTurkey
Internet Activists and Collective Hacker group Anonymous carried out a series of cyber attacks on Turkish government websites in retaliation for violent police response to anti-government protests, launched OpTurkey operation. There are several videos to be seen on YouTube about the protest of...
Jordan Islamist opposition website hacked !
Jordan's opposition Islamic Action Front party said Sunday its website has been hacked, a day after it called for the ouster of the prime minister over a deadly crackdown on protesters. "The content of the website has been replaced with slogans and statements, clearly showing that an official par...
ZDI-11-065: Adobe Reader Controlled memset Remote Code Execution Vulnerability
ZDI-11-065: Adobe Reader Controlled memset Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-065 February 8, 2011 -- CVE ID: CVE-2011-0567 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Adobe -- Affected Products: Adobe Reader -- Vulnerability...
President Ali Abdullah Saleh website hacked !
Yemen has denied that the website of President Ali Abdullah Saleh—the ambition of anti-government protests—was brought bottomward by hackers this accomplished week, its official account bureau said. "An official in the admiral of advice and advice technology denied letters claiming that the websi...
RW-Download v4.0.6 (index.php) SQL Injection Vulnerability
Exploit for php platform in category web applications /////////////////////////Dr.NeT/////////////////////////////////Dr.NeT//////////////////////Dr.NeT////////// //Title ||= RW-Download v4.0.6 = index.php SQL Injection Vulnerability // //Secript ||= RW-Download // //Language||= Php //...
RW-Download 4.0.6 - 'index.php' SQL Injection
/////////////////////////Dr.NeT/////////////////////////////////Dr.NeT//////////////////////Dr.NeT////////// //Title ||= RW-Download v4.0.6 = index.php SQL Injection Vulnerability // //Secript ||= RW-Download // //Language||= Php // //Download||=...
CubeCart <= 3.0.4 SQL Injection Vulnerability
Exploit for php platform in category web applications /////////////////////////////// 0day.today 2018-03-09...
CubeCart 3.0.4 - SQL Injection
CubeCart 3.0.4 - SQL Injection ///////////////////////////////...
CubeCart 3.0.4 - SQL Injection
///////////////////////////////...
phpRaid 3.0.b3 - 'phpBB'/'SMF' Remote File Inclusion
Kurdish Security Advisory phpRaid Remote File Include PHPBB/SMF : "Sosyalizim'de .srar insan olmakta .srard.r" Abdullah Ocalan Contact : irc.gigachat.net kurdhack & www.PatrioticHackers.com & [email protected] Script : phpRaid Script Website : http://www.spiffyjr.com/ Version : phpRaid v2.9.5 "...