ServersCheck Monitoring Software 9.0.129.0.14 - Persistent Cross-Site Scripting

ServersCheck Monitoring Software 9.0.129.0.14 - Persistent Cross-Site Scripting Author: loneferret of Offensive Security Product: ServersCheck Monitoring Software Version: 9.0.12 - 9.0.14 some versions of 9.0.15 Vendor Site: http://www.serverscheck.com Software Download:...

ServersCheck Monitoring Software 9.0.12/9.0.14 - Persistent Cross-Site Scripting

Author: loneferret of Offensive Security Product: ServersCheck Monitoring Software Version: 9.0.12 - 9.0.14 some versions of 9.0.15 Vendor Site: http://www.serverscheck.com Software Download: http://www.serverscheck.com/monitoringsoftware/download.asp Note: Older Appliances may be affected...

(0Day) HP SiteScope SOAP Call update Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP SiteScope. Authentication is not required to exploit this vulnerability. The specific flaw exists because HP SiteScope allows unauthenticated SOAP calls to be made to the SiteScope service. One ...

(0Day) HP SiteScope SOAP Call create Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP SiteScope. Authentication is not required to exploit this vulnerability. The specific flaw exists because HP SiteScope allows unauthenticated SOAP calls to be made to the SiteScope service. One ...

Conceptronic Grab'n'Go and Sitecom Storage Center - Password Disclosure

Updated to include Sitecom MD-253 and MD254 Minor textual changes == Conceptronic Grab’n’Go and Sitecom Storage Center - Password disclosure Vulnerability - Security Advisory AA-002 Severity Rating: High Discovery Date: May 5, 2012 Vendor Notification: May 31, 2012 =Impact - System Access -...

Kamads Classifieds 2.0 - Admin Hash Disclosure

\n"; print "\nex...........: php $argv0 http://www.target.com/V2AXHTML/admin/admin.php\n"; die; else $ch = curlinit; curlsetopt$ch,CURLOPTURL,"$argv1"; $op1 = curlsetopt$ch,CURLOPTRETURNTRANSFER,true; curlsetopt$ch,CURLOPTUSERAGENT,"Mozilla/4.0 compatible; MSIE 5.01; Windows NT 5.0";...

Am4ss 1.2 PHP Code Injection

10/2011 , Vulnerability discovered till now , i haven't reported the vendor , why!!! The idiot backdoored it by himself + the official site is fucked up ; 19/07/2012 , Public Disclosured C:\labphp am4ss.php localhost /lab/am4ss/ +---------------------------------------+ | Am4SS , PHP Code Injecti...

Cotonti 0.6.23 SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================================== Vulnerable Software: cotonti-0.6.23 Official Site: http://www.cotonti.com/ Tested version: http://cotonti.googlecode.com/files/cotonti-0.6.23.7z...

Cotonti 0.6.23 SQL Injection

================================================================== Vulnerable Software: cotonti-0.6.23 Official Site: http://www.cotonti.com/ Tested version: http://cotonti.googlecode.com/files/cotonti-0.6.23.7z ================================================================== About Software:...

traq 2.3.5 - Multiple Vulnerabilities

traq 2.3.5 - Multiple Vulnerabilities ==================================================================== Vulnerable Software: traq-2.3.5 Official Site: TraqProject.org ==================================================================== About Software: Traq is a PHP powered project manager,...

Critical Sqli Vulnerability in channel [V] Website

Critical Sqli Vulnerability in channel V Website A 16 years old White Hat Hacker "Arjun Siyag" from India discover a Critical Sqli Vulnerability in channel V Website https://www.channelv.in. Proof of the hack is as shown in above image. Hacker disclose only the admin username and password, which...

ReadyOnline CMS SQL Injection & Easy Login Vulnerability

Exploit for php platform in category web applications =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- In The Name Of God -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= -------------------------------------------------------------------------------- @ ReadyOnline CMS SQL Injection & Easy Login...

Uiga Personal Portal SQL Injection

Exploit Title : Uiga Personal Portal Sql Injection Vulnerability Author : Secure-Land Security Team Discovered By : farbodmahini Home : Secure-Land.net Version : All Version Vendor : www.uiga.com Contact : [email protected] , [email protected] Security Risk : High Dork : "Copyright...

Uiga FanClub SQL Injection

Exploit Title : Uiga FanClub Sql Injection Vulnerability Author : Secure-Land Security Team Discovered By : farbodmahini Home : Secure-Land.net Version : All Version Vendor : www.uiga.com Contact : [email protected] , [email protected] Security Risk : High Dork : intitle:"Uiga FanClub"...

lifetype 1.2.11 CSRF Add User

Exploit for php platform in category web applications +---------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title := lifetype 1.2.11 CSRF Add User Date := 05/april/2012 Author := khaled-Ham Software link :...

FreePBX Remote Exploit

FreePBX web interface remote vulnerability The admin username and password for the web interface is stored in plain text in this publicly accessible file: http://yourip/admin/modules/framework/bin/genampconf.php Which allows a hacker to access the web GUI and view the secretspasswords for each...

Splunk Search Remote Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Splunk Search...

Splunk Remote Root Exploit

Exploit for multiple platform in category remote exploits from sec1httplib.requestbuilder import Requestobj from sec1httplib.threaddispatcher import import threading import re import urlparse import sys import urllib import base64 from optparse import OptionParser import sys """ Source:...

MySQL.com Once again Compromised using Sql Flaw

MySQL.com Once again Compromised using Sql Flaw A hacker with name "D35M0ND142 " claim to hack MySql.com website using Sql Injection Flaws. In September, Mysql.com was hacked and it was serving BlackHole exploit malware on the site. In a pastebin dump Hacker Exposes various Admin user credentials...

MySQL.com Once again Compromised using Sql Flaw

MySQL.com Once again Compromised using Sql Flaw A hacker with name "D35M0ND142" claim to hack MySql.com website using Sql Injection Flaws. In September, Mysql.com was hacked and it was serving BlackHole exploit malware on the site. In a pastebin dump Hacker Exposes various Admin user credentials...