HackerOne: Privilege escalation..., or not?!

I just created the admin profile, go check it out: https://hackerone.com/nimda Or see attached image! This is very much related! svg/onload=alert1// Free iPad Here! This is Unrela...

BeehiveForum 0.9.1 Multiple Vulnerabilities

Exploit for php platform in category web applications =========================================== BeehiveForum 0.9.1 Multiple Vulnerabilities =========================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\...

Automated Link Exchange Portal 1.3 Multiple Remote Vulnerabilities

No description provided by source. ------------------------------------------------------------------------- Automated Link Exchange Portal V1.3 Multiple Remote Vulnerabilities --------------------------------------------------------------- Founder : TiGeR-Dz Home:www.h4ckx.com Script: Automated...

Automated Link Exchange Portal 1.3 Bypass

------------------------------------------------------------------------- Automated Link Exchange Portal V1.3 Multiple Remote Vulnerabilities --------------------------------------------------------------- Founder : TiGeR-Dz Home:www.h4ckx.com Script: Automated Link Exchange Portal Version 1.3...

Zomplog <= 3.8.2 (newuser.php) Arbitrary Add Admin Exploit

Exploit for unknown platform in category web applications ========================================================== Zomplog Добавляем админа "Add Admin" /-- Титлы блога "Blog Title" Логин "Username" Пароль "Password" Повторяем пароль "Confirm...

miniBB 2.2 (CSS/SQL/FPD) Multiple Remote Vulnerabilities

No description provided by source. Author: GiReX Homepage: girex.altervista.org Date: 21/04/2008 CMS: miniBB 2.2 and maybe prior Site: minibb.net Bug 1: Full Path Disclosure Bug 2: Cross Site Scripting Bug 3: Remote SQL Injection Need: registerglobals = On ---------------------------------------...

Design/Logic Flaw

The 1 login, 2 admin profile edit, 3 reminder, 4 edit profile, 5 profile view, 6 gallery view, 7 gallery comment, and 8 gallery feedback capabilities in web-app.org WebAPP before 0.9.9.7 do not verify presence of users in memberlist.dat, which has unknown impact and remote attack vectors...