2520 matches found
Default credentials
The ZTE ZXV10 W300 router with firmware W300V1.0.0aZRDLK has a default password of admin for the admin account, which makes it easier for remote attackers to obtain access via unspecified vectors...
CVE-2014-4018
The ZTE ZXV10 W300 router with firmware W300V1.0.0aZRDLK has a default password of admin for the admin account, which makes it easier for remote attackers to obtain access via unspecified vectors...
CVE-2014-2951
Datum Systems SnIP on PSM-500 and PSM-4500 devices has a hardcoded password of admin for the admin account, which makes it easier for remote attackers to obtain access via unspecified vectors...
Hardcoded credentials
Datum Systems SnIP on PSM-500 and PSM-4500 devices has a hardcoded password of admin for the admin account, which makes it easier for remote attackers to obtain access via unspecified vectors...
CVE-2014-2951
Datum Systems SnIP on the PSM-500/PSM-4500 satellite modem devices contains a hardcoded admin password (admin) for the admin account, enabling remote attackers to gain access via unspecified vectors. CVE-2014-2951 is rated CVSS v2 base 10.0 (Network, no auth, complete confidentiality, integrity a...
CmsEasy最新 V5.5-UTF8 正式版暴力注入
简要描述： 官网下载最新版为20140605 注入+后台getshell 详细说明： cmseasy最新版后台无验证码，导致管理员账户可被暴力破解： 1.cmseasy后台无验证码导致可暴力破解管理员密码登陆后台； 2.后台模板编辑html文件，发现html里可执行php代码，利用php的写文件函数写shell。 漏洞证明： 0x01:爆破登陆后台 1.后台点击登陆后抓包： 2.burp爆破，通过回显得知管理员密码： 3.成功登陆后台： 0x02:后台模板编辑getshell 后台模板编辑处，我们先看left.html，点击编辑后发现是一堆代码。那我添加写文件的代码不就getshell了...
SocialCMS 1.0.2 - CSRF Vulnerability
No description provided by source. +-------------------------------------------------------------------------+ Exploit Title : Socialcms CSRF Vulnerability Date : 16-02-2012 Author : Ivano Binetti http://ivanobinetti.com Vendor site : http://socialcms.com Software link :...
VR GPub 4.0 CSRF Vulnerability
No description provided by source. +-------------------------------------------------------------------------+ Exploit Title : VR GPub 4.0 CSRF Vulnerability version : VR GPub 4.0 Author : Cyber-Crystal Date : n/a Dork : inurl:VR GPub Software Link :...
Bonefire 0.7.1 - Reinstall Admin Account Exploit
No description provided by source...
Nuked-Klan <= 1.7.6 - Multiple Vulnerabilities Exploit
No description provided by source. ?php / Name: Nuked-Klan = 1.7.6 Multiple Vulnerabilities Exploit Credits: Charles real F. charlesfolathotmail.fr URL: http://realn.free.fr/releases/46556 Date: 04-01-08 - Remote Code Execution - Remote File Upload - Admin Hash Extraction Remote Code Exec...
Allomani - Super Multimedia 2.5 - CSRF Add Admin Account
No description provided by source. Exploit Title: Allomani - Super Multimedia v2.5 - CSRF Add Admin Account Date: 29-06-2010 Author: G0D-F4Th3r Software Link: http://allomani.com Version: 2.5 html body onload=javascript:fireForms form method=POST name=form0 action=...
IPN Development Handler 2.0 - Multiple Vulnerabilities
No description provided by source. IPN Development Handler v2.0 CSRF Change Admin Account ============================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Script : http://scripts.filehungry.com/product/php/e-commerce/paypal/ipndevelopmenthandler/ ===...
openauto 1.6.3 - Multiple Vulnerabilities
No description provided by source. Credit:Michael Brooks Affects:OpenAuto 1.6.3 Vulnerabilites: XSRF/XSS/Blind SQLi/Captcha Bypass http://openautoclassifieds.com/ ---------------------------------------------------------------------------------------------------- Reflective XSS by adding a onclic...
viart shop 4.0.5 - CSRF Vulnerability
No description provided by source. +-------------------------------------------------------------------------+ Software : viart shop 4.0.5 Author : Or4nG.M4N Date : n/a Dork : inurl:powered by viart shop 4.0.5 Software Link : http://www.viart.com/...
Allomani Songs & Clips Script 2.7.0 - [CSRF] Add Admin Account
No description provided by source. Exploit Title: Allomani & Clips v2.7.0 - CSRF Add Admin Account Date:25 -06-2010 Author: G0D-F4Th3rG0D-F4Th3r Software Link: http://allomani.com html body onload=javascript:fireForms form method=POST name=form0 action= http://www.site.com/path/admin/index.php...
win32/xp sp3 (Tr) Add Admin Account Shellcode 127 bytes
No description provided by source. Title : win32/xp sp3 Tr Add Admin Account Shellcode 127 bytes Proof : http://img823.imageshack.us/img823/1017/addqx.jpg Desc. : usr: zrl , pass: 123456 , localgroup: Administrator Author : ZoRLu / http://inj3ct0r.com/author/577 mail-msn :...
EGroupware 1.8.006 - Multiple Vulnerabilities
No description provided by source. 1）简单的CSRF利用下面创建新的管理员登录“ImmuniWeb”和密码“ImmuniWeb”： 2）利用CSRF 写入php文件 1.php"...
Woltlab Burning Board 2.3.4 File Disclosure Vulnerability
No description provided by source. Exploit Title: Woltlab Burning Board 2.3.4 File Disclosure Vulnerability Date: 2010-11-12 Author: SFX Version: 2.3.4 CVE : N/A After you've used the Exploit to get the admin account: goto: http://lolcathost/wbb/acp/avatar.php?action=readfolder import: acp/lib...
SyndeoCMS <= 3.0 CSRF Vulnerability
No description provided by source. +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : SyndeoCMS = 3.0 CSRF Vulnerability Date : 19-02-2012 Author : Ivano Binetti http://ivanobinetti.com Vendor site :...
Traidnt UP - Cross-Site Request Forgery Add Admin Account
No description provided by source. Exploit Title: Traidnt UP - CSRF Add Admin Account Date: 24-09-2010 Author: G0D-F4Th3r Software Link: http://www.traidnt.net Software Download: http://traidntup.googlecode.com/files/Traidnt%20up%20V3.0.zip Version: 3.0 Exploit html body onload=javascript:fireFor...