CVE-2017-7253

Dahua IP Camera devices 3.200.0001.6 can be exploited via these steps: 1. Use the default low-privilege credentials to list all users via a request to a certain URI. 2. Login to the IP camera with admin credentials so as to obtain full control of the target IP camera. During exploitation, the fir...

Bull / IBM AIX Clusterwatch/Watchware - Multiple Vulnerabilities

Exploit for cgi platform in category web applications Bull Clusterwatch/Watchware is a VERY VERY OLD tool used by sysadmins to manage their AIX clusters. Marble effect in the web banner and questionable font: it smells the 90s ! Tool is mainly a web app with CGIs shell scripts and binaries and we...

BullIBM AIX ClusterwatchWatchware - Multiple Vulnerabilities

BullIBM AIX ClusterwatchWatchware - Multiple Vulnerabilities Bull Clusterwatch/Watchware is a VERY VERY OLD tool used by sysadmins to manage their AIX clusters. Marble effect in the web banner and questionable font: it smells the 90s ! Tool is mainly a web app with CGIs shell scripts and binaries...

Bull / IBM AIX Clusterwatch / Watchware File Write / Command Injection

Bull Clusterwatch/Watchware is a VERY VERY OLD tool used by sysadmins to manage their AIX clusters. Marble effect in the web banner and questionable font: it smells the 90s ! Tool is mainly a web app with CGIs shell scripts and binaries and we have found three vulnerabilities in it: Trivial admin...

Bull/IBM AIX Clusterwatch/Watchware - Multiple Vulnerabilities

Bull Clusterwatch/Watchware is a VERY VERY OLD tool used by sysadmins to manage their AIX clusters. Marble effect in the web banner and questionable font: it smells the 90s ! Tool is mainly a web app with CGIs shell scripts and binaries and we have found three vulnerabilities in it: Trivial admin...

PHP Classifieds Rental Script 3.6.0 - scatid SQL Injection

PHP Classifieds Rental Script 3.6.0 - scatid SQL Injection Exploit Title: PHP Classifieds Rental Script v3.6.0 - SQL Injection Google Dork: N/A Date: 06.03.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software : http://www.phpscriptsmall.com/product/php-classifieds-rental-script/ Demo:...

MLM Forced Matrix 2.0.7 SQL Injection

Exploit Title: MLM Forced Matrix v2.0.7 - SQL Injection Google Dork: N/A Date: 06.03.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software : http://www.phpscriptsmall.com/product/mlm-forced-matrix/ Demo: http://74.124.215.220/forctrix/ Version: 2.0.7 Tested on: Win7 x64, Kali Linux x64...

Entrepreneur B2B Script 2.0.4 - id Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Entrepreneur B2B Script v2.0.4 - SQL Injection Google Dork: N/A Date: 06.03.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software : http://www.phpscriptsmall.com/product/entrepreneur-b2b-script/ Demo:...

Groupon Clone Script 3.01 - catid Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Groupon Clone Script v3.01 - SQL Injection Google Dork: N/A Date: 06.03.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software : http://www.phpscriptsmall.com/product/groupon-clone-script/ Demo:...

MLM Forced Matrix 2.0.7 - SQL Injection

MLM Forced Matrix 2.0.7 - SQL Injection Exploit Title: MLM Forced Matrix v2.0.7 - SQL Injection Google Dork: N/A Date: 06.03.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software : http://www.phpscriptsmall.com/product/mlm-forced-matrix/ Demo: http://74.124.215.220/forctrix/ Version: 2.0....

MLM Forex Market Plan Script 2.0.1 SQL Injection

Exploit Title: MLM Forex Market Plan Script v2.0.1 - SQL Injection Google Dork: N/A Date: 06.03.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software : http://www.phpscriptsmall.com/product/mlm-forex-market-plan-script/ Demo: http://74.124.215.220/forexmlm/ Version: 2.0.1 Tested on: Win7...

Entrepreneur B2B Script 2.0.4 - id SQL Injection

Entrepreneur B2B Script 2.0.4 - id SQL Injection Exploit Title: Entrepreneur B2B Script v2.0.4 - SQL Injection Google Dork: N/A Date: 06.03.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software : http://www.phpscriptsmall.com/product/entrepreneur-b2b-script/ Demo:...

MLM Binary Plan Script 2.0.5 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: MLM Binary Plan Script v2.0.5 - SQL Injection Google Dork: N/A Date: 06.03.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software : http://www.phpscriptsmall.com/product/mlm-binary-plan-script/ Demo:...

Schools Alert Management Script 2.01 - 'list_id' SQL Injection

Exploit Title: Schools Alert Management Script v2.01 - SQL Injection Google Dork: N/A Date: 06.03.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software : http://www.phpscriptsmall.com/product/schools-alert-management-system/ Demo: http://www.schoolcollageerp.com/schoolalert/ Version: 2.01...

MLM Binary Plan Script 2.0.5 - SQL Injection

Exploit Title: MLM Binary Plan Script v2.0.5 - SQL Injection Google Dork: N/A Date: 06.03.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software : http://www.phpscriptsmall.com/product/mlm-binary-plan-script/ Demo: http://74.124.215.220/binamlm/ Version: 2.0.5 Tested on: Win7 x64, Kali Lin...

MLM Membership Plan Script 2.0.5 - SQL Injection

Exploit Title: MLM Membership Plan Script v2.0.5 - SQL Injection Google Dork: N/A Date: 06.03.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software : http://www.phpscriptsmall.com/product/mlm-membership-plan-script/ Demo: http://74.124.215.220/membipmlm/ Version: 2.0.5 Tested on: Win7 x64...

Clone Script Directory Script 1.1.0 - cid SQL Injection

Clone Script Directory Script 1.1.0 - cid SQL Injection Exploit Title: Flippy ScriptZone – Clone Script Directory Script v1.1.0 - SQL Injection Google Dork: N/A Date: 06.02.2017 Vendor Homepage: https://www.flippyscripts.com/ Software Buy:...

Questions And Answers Script 2.0.0 SQL Injection

Exploit Title: Flippy Answers a Questions and Answers Script v2.0.0 - SQL Injection Google Dork: N/A Date: 06.02.2017 Vendor Homepage: https://www.flippyscripts.com/ Software Buy: https://www.flippyscripts.com/flippy-answers-questions-and-answers-script/ Demo: http://answers.flippydemos.com/...

Viral Pictures and Video Script 2.0.0 - id SQL Injection

Viral Pictures and Video Script 2.0.0 - id SQL Injection Exploit Title: Flippy HotViral – Viral Pictures and Video Script v2.0.0 - SQL Injection Google Dork: N/A Date: 06.02.2017 Vendor Homepage: https://www.flippyscripts.com/ Software Buy:...

NETGEAR WNR2000v5 router information disclosure vulnerability

The NETGEAR WNR2000v5 router is a popular router device. A security vulnerability in the NETGEAR WNR2000v5 router allows remote attackers to exploit the vulnerability by submitting a special /BRSnetgearsuccess.html URI request, which can be used to obtain administrator username and password...