Huawei HG866 Authentication Bypass

Exploit for hardware platform in category web applications Exploit Title: Huawei HG866 Authentication Bypass Date: Jun 14 2012 Exploit Author: hkm Vendor Homepage: http://www.huawei.com Version: V1R2C01SPC202, R3.2.4.92sbn - R3.4.2.257sbn, 3FE53864AOCB16 Tested on: HG866GTAVER.C, 01, 02 Advisory:...

shopxp online shopping system v7. 4 SQL injection vulnerability-vulnerability warning-the black bar safety net

Keywords: inurl:shopxpnews. asp Injected code: TEXTBOX2. ASP? action=modify&news%69d=1 2 2%20and%2 0 1=2%20union%20select%201,2,admin%2bpassword,4,5,6,7%20from%20shopxpadmin Broke the user name and password note: username and password are connected together, after the sixth bit is the password MD...

Ajaxmint-Gallery v1.0 <= CSRF Change Admin Password

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

MX60 series VoIP voice gateway privilege escalation vulnerability-vulnerability warning-the black bar safety net

Test object: mx60 series VoIP voice gateway Bug: getting the admin password to login to control the entire gateway Scope of impact: with the MX Series with the operator are spread to the right, no equipment to test, haha Source: non-security Chinese networkwW.w.SiteDirSec.CoM management group...

HUAWEI SmartAX MT880 CSRF Vulnerability (ADSL Router)

Exploit for hardware platform in category web applications ================================================================================ || | | || || || |/ | || |/ | | | | | | | | | | | \ | | | | \ ================================================================================ Exploit Title:...

Owncloud 3.0.3 Clear Text Password Storage

Owncloud App "Ldap user backend" stored password in clear text Author: francesco.tornieri "At" verona-wireless.net Summary: store domain admin password in clear text Discovery date: 09/05/2012 Developer date contact : 09/05/2012 Where: From local Release Date: 11/05/2012 Criticality level: High...

Cisco Linksys WRT54GL CSRF Change Admin Password

Exploit for hardware platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1...

Cisco Linksys WRT54GL Cross Site Request Forgery

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Parallels PLESK 9.x - Insecure Permissions

Parallels PLESK 9.x - Insecure Permissions Exploit Title: PLESK 9.x insecure directory permission admin password revealed Date: 25/04/2012 Author: Nicolas Krassas , twitter.com/dinosn Software Link: www.parallels.com/plesk/ Version: 9.x Tested on: ubuntu / centos During backup procedures, PLESK...

Parallels PLESK 9.x Insecure Permissions

Exploit Title: PLESK 9.x insecure directory permission admin password revealed Date: 25/04/2012 Author: Nicolas Krassas , twitter.com/dinosn Software Link: www.parallels.com/plesk/ Version: 9.x Tested on: ubuntu / centos During backup procedures, PLESK panel is keeping a detailed log of the proce...

Parallels PLESK 9.x Insecure Permissions

Exploit for linux platform in category local exploits Exploit Title: PLESK 9.x insecure directory permission admin password revealed Date: 25/04/2012 Author: Nicolas Krassas , twitter.com/dinosn Software Link: www.parallels.com/plesk/ Version: 9.x Tested on: ubuntu / centos During backup...

Parallels PLESK 9.x - Insecure Permissions

Exploit Title: PLESK 9.x insecure directory permission admin password revealed Date: 25/04/2012 Author: Nicolas Krassas , twitter.com/dinosn Software Link: www.parallels.com/plesk/ Version: 9.x Tested on: ubuntu / centos During backup procedures, PLESK panel is keeping a detailed log of the proce...

CVE-2012-1799

The web server on the Siemens Scalance S Security Module firewall S602 V2, S612 V2, and S613 V2 with firmware before 2.3.0.3 does not limit the rate of authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack on the administrative password...

ZTE - Change Admin Password

ZTE - Change Admin Password Exploit Title: ZTE Change admin password Author: Nuevo Asesino Version: ZTE Inc., Software Release ZXDSL 831IIV7.5.0aZ29OV Exploit By Nuevo Asesino password ====== 123456 Now you can get the username & the...

ZTE ZXDSL 831 II V7.5.0a_Z29_OV Change admin password

Exploit for hardware platform in category web applications Exploit Title: ZTE Change admin password Author: Nuevo Asesino Version: ZTE Inc., Software Release ZXDSL 831IIV7.5.0aZ29OV Exploit By Nuevo Asesino password ====== 123456 Now you can get the username & the password...

Paid to Click Script CSRF

Exploit for php platform in category web applications Exploit Title: Paid to Click Script CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/paid-to-click-script/27181/ Category:: webapps Demo : http://www.e-soft24.com/scripts/paid-to-click/admin/login.php 0day.toda...

Easy Banner Manager Pro [CSRF] / (change admin password)

Exploit for php platform in category web applications Exploit Title: Easy Banner Manager Pro CSRF / change admin password Author: Jonturk75 Vendor or Software Link: www.scripts.com/viewscript/easy-banner-manager-pro/32281/ Category:: webapps Demo site: http://demo.scriptsez.net/ebm/demo.html :...

A.M.Y CSRF (change admin password)

Exploit for php platform in category web applications Exploit Title: A.M.Y CSRF change admin password Author: Jonturk75 Category:: webapps Demo site: http://calendarscripts.info/demos/amy/admin.php Email me when a new advertiser signs up. 0day.today 2018-04-09...

A.M.Y. Cross Site Request Forgery

Exploit Title: A.M.Y CSRF change admin password Author: Jonturk75 Category:: webapps Demo site: http://calendarscripts.info/demos/amy/admin.php Email me when a new advertiser signs up...

Easy Banner Manager Pro Cross Site Request Forgery

Exploit Title: Easy Banner Manager Pro CSRF / change admin password Author: Jonturk75 Vendor or Software Link: www.scripts.com/viewscript/easy-banner-manager-pro/32281/ Category:: webapps Demo site: http://demo.scriptsez.net/ebm/demo.html...