Parallels PLESK 9.x - Insecure Permissions

Exploit Title: PLESK 9.x insecure directory permission admin password revealed Date: 25/04/2012 Author: Nicolas Krassas , twitter.com/dinosn Software Link: www.parallels.com/plesk/ Version: 9.x Tested on: ubuntu / centos During backup procedures, PLESK panel is keeping a detailed log of the proce...

Parallels PLESK 9.x Insecure Permissions

Exploit for linux platform in category local exploits Exploit Title: PLESK 9.x insecure directory permission admin password revealed Date: 25/04/2012 Author: Nicolas Krassas , twitter.com/dinosn Software Link: www.parallels.com/plesk/ Version: 9.x Tested on: ubuntu / centos During backup...

Parallels PLESK 9.x Insecure Permissions

Exploit Title: PLESK 9.x insecure directory permission admin password revealed Date: 25/04/2012 Author: Nicolas Krassas , twitter.com/dinosn Software Link: www.parallels.com/plesk/ Version: 9.x Tested on: ubuntu / centos During backup procedures, PLESK panel is keeping a detailed log of the proce...

Parallels PLESK 9.x - Insecure Permissions

Parallels PLESK 9.x - Insecure Permissions Exploit Title: PLESK 9.x insecure directory permission admin password revealed Date: 25/04/2012 Author: Nicolas Krassas , twitter.com/dinosn Software Link: www.parallels.com/plesk/ Version: 9.x Tested on: ubuntu / centos During backup procedures, PLESK...

CVE-2012-1799

The web server on the Siemens Scalance S Security Module firewall S602 V2, S612 V2, and S613 V2 with firmware before 2.3.0.3 does not limit the rate of authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack on the administrative password...

ZTE - Change Admin Password

ZTE - Change Admin Password Exploit Title: ZTE Change admin password Author: Nuevo Asesino Version: ZTE Inc., Software Release ZXDSL 831IIV7.5.0aZ29OV Exploit By Nuevo Asesino password ====== 123456 Now you can get the username & the...

ZTE ZXDSL 831 II V7.5.0a_Z29_OV Change admin password

Exploit for hardware platform in category web applications Exploit Title: ZTE Change admin password Author: Nuevo Asesino Version: ZTE Inc., Software Release ZXDSL 831IIV7.5.0aZ29OV Exploit By Nuevo Asesino password ====== 123456 Now you can get the username & the password...

Paid to Click Script CSRF

Exploit for php platform in category web applications Exploit Title: Paid to Click Script CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/paid-to-click-script/27181/ Category:: webapps Demo : http://www.e-soft24.com/scripts/paid-to-click/admin/login.php 0day.toda...

A.M.Y. Cross Site Request Forgery

Exploit Title: A.M.Y CSRF change admin password Author: Jonturk75 Category:: webapps Demo site: http://calendarscripts.info/demos/amy/admin.php Email me when a new advertiser signs up...

Easy Banner Manager Pro Cross Site Request Forgery

Exploit Title: Easy Banner Manager Pro CSRF / change admin password Author: Jonturk75 Vendor or Software Link: www.scripts.com/viewscript/easy-banner-manager-pro/32281/ Category:: webapps Demo site: http://demo.scriptsez.net/ebm/demo.html...

Easy Banner Manager Pro [CSRF] / (change admin password)

Exploit for php platform in category web applications Exploit Title: Easy Banner Manager Pro CSRF / change admin password Author: Jonturk75 Vendor or Software Link: www.scripts.com/viewscript/easy-banner-manager-pro/32281/ Category:: webapps Demo site: http://demo.scriptsez.net/ebm/demo.html :...

A.M.Y CSRF (change admin password)

Exploit for php platform in category web applications Exploit Title: A.M.Y CSRF change admin password Author: Jonturk75 Category:: webapps Demo site: http://calendarscripts.info/demos/amy/admin.php Email me when a new advertiser signs up. 0day.today 2018-04-09...

CVE-2012-0366

Cisco Unity Connection before 7.1.3bSu2 allows remote authenticated users to change the administrative password by leveraging the Help Desk Administrator role, aka Bug ID CSCtd45141...

Dlink DCS series CSRF change the administrative password-vulnerability warning-the black bar safety net

Title: Dlink DCS series CSRF Change Admin Password Affected version: DCS-9 0 0, DCS-2 0 0 0, DCS-5 3 0 0 and possibly other. Author: rigan - [email protected] -- A description of the problem: Dlink DCS is a camera series These cameras with the one containing the csrf flaw in the web interface Thi...

YVS Image Gallery Sql Injection

Exploit for php platform in category web applications -=+ Application: YVS Image Gallery -=+ Version: 0.0.0.1 -=+ Vendor's URL: http://yvs.vacau.com/gallery.html -=+ Platform: Windows\Linux\Unix -=+ Bug type: Sql INJECTIONS -=+ Exploitation: Remote -=- -=+ Author: Corrado Liotta Aka CorryL...

YVS Image Gallery - SQL Injection

YVS Image Gallery - SQL Injection -=+ Application: YVS Image Gallery -=+ Version: 0.0.0.1 -=+ Vendor's URL: http://yvs.vacau.com/gallery.html -=+ Platform: Windows\Linux\Unix -=+ Bug type: Sql INJECTIONS -=+ Exploitation: Remote -=- -=+ Author: Corrado Liotta Aka CorryL corryl80atgmaildotcom -=+...

D-Link DSL-2640U (ADSL Router) CSRF Change Admin Password

Exploit for hardware platform in category web applications +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : D-Link DSL-2640U ADSL Router CSRF Vulnerability Change Admin Pssword Date : 20-01-2012 Auth...

YVS Image Gallery SQL Injection

-=--------------------ADVISORY-------------------=- YVS Image Gallery Author: Corrado Liotta Aka CorryL [email protected] -=-----------------------------------------------=- -=+ Application: YVS Image Gallery -=+ Version: 0.0.0.1 -=+ Vendor's URL: http://yvs.vacau.com/gallery.html -=+ Platform:...

D-Link DCS Series Cross Site Request Forgery

Title: Dlink DCS series CSRF Change Admin Password Version: DCS-900, DCS-2000, DCS-5300 and possibly other. Date: 2012-02-22 Author: rigan - imrigan sobachka gmail.com -- Description: Dlink DCS is a series of network cameras. These cameras use a web interface which is prone to CSRF vulnerabilitie...

D-Link DCS Series - Cross-Site Request Forgery (Change Admin Password)

Title: Dlink DCS series CSRF Change Admin Password Version: DCS-900, DCS-2000, DCS-5300 and possibly other. Date: 2012-02-22 Author: rigan - imrigan sobachka gmail.com -- Description: Dlink DCS is a series of network cameras. These cameras use a web interface which is prone to CSRF vulnerabilitie...