PHP-Fusion 7.02.07 Blind SQL Injection

============================================= MGC ALERT 2015-002 - Original release date: September 18, 2015 - Last revised: October 05, 2015 - Discovered by: Manuel García Cárdenas - Severity: 7,1/10 CVSS Base Score ============================================= I. VULNERABILITY...

Royal Slider <= 3.2.6 - Authenticated Cross-Site Scripting (XSS)

The vulnerability exists due to insufficient sanitation of user-supplied data in "rstype" HTTP GET parameter when creating / editing a slider. A remote attacker can trick a logged-in administrator to open a specially crafted link and execute arbitrary HTML and script code in browser in context of...

Virtual Freer v1.57 - Authentication Bypass Vulnerability

Document Title: =============== Virtual Freer v1.57 - Authentication Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1592 Release Date: ============= 2015-09-04 Vulnerability Laboratory ID VL-ID: ====================================...

ColdFusion explosion: from XSS to RCE chain reaction-vulnerability warning-the black bar safety net

In the audit of ColdFusion 1 0 and 1 1 of the admin panel, I found a DOM based cross-site scripting vulnerability. In this article I will show you how to exploit the vulnerability from the ColdFusion application server to get remote code execution. The discovery of this vulnerability, I to the...

Dogma India dogmaindia CMS Authentication Bypass Vulnerability

Exploit for php platform in category web applications Document Title: =============== Dogma India dogmaindia CMS - Auth Bypass Vulnerability Product & Service Introduction: =============================== Industrial Training Centre ITCs are training Centre which provide training in technical fiel...

LinuxOptic CMS 2009 Authentication Bypass Vulnerability

Exploit for php platform in category web applications Document Title: =============== LinuxOptic CMS 2009 - Auth Bypass Session Vulnerability Product & Service Introduction: =============================== By employing the best brains in software programming, graphic designing and webmasters in o...

Dogma India dogmaindia CMS Authentication Bypass

Document Title: =============== Dogma India dogmaindia CMS - Auth Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1583 Release Date: ============= 2015-08-25 Vulnerability Laboratory ID VL-ID: ==================================== 158...

LinuxOptic CMS 2009 Authentication Bypass

Document Title: =============== LinuxOptic CMS 2009 - Auth Bypass Session Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1585 Release Date: ============= 2015-08-26 Vulnerability Laboratory ID VL-ID: ==================================== 15...

LinuxOptic CMS 2009 - Auth Bypass Session Vulnerability

Document Title: =============== LinuxOptic CMS 2009 - Auth Bypass Session Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1585 Release Date: ============= 2015-08-26 Vulnerability Laboratory ID VL-ID: ==================================== 15...

LinuxOptic CMS 2009 - Auth Bypass Session Vulnerability

Document Title: =============== LinuxOptic CMS 2009 - Auth Bypass Session Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1585 Release Date: ============= 2015-08-26 Vulnerability Laboratory ID VL-ID: ==================================== 15...

Dogma India dogmaindia CMS - Auth Bypass Vulnerability

Document Title: =============== Dogma India dogmaindia CMS - Auth Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1583 Release Date: ============= 2015-08-25 Vulnerability Laboratory ID VL-ID: ==================================== 158...

Dogma India dogmaindia CMS - Auth Bypass Vulnerability

Document Title: =============== Dogma India dogmaindia CMS - Auth Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1583 Release Date: ============= 2015-08-25 Vulnerability Laboratory ID VL-ID: ==================================== 158...

Vifi Radio 1 Shell Upload / CSRF

. | | / | | \ \ | | \ / | |\ / / /\ \ / \ | Y / ^ / / || / / / / /\ /\ \ \ \ | / \ / http://h4x0resec.blogspot.com / \ | \ \ / // / \ / / / / Vifi Radio v1 - Arbitrary File Upload Vulnerability with CSRF My + Discovered by: KnocKout Contact : [email protected] HomePage :...

Vifi Radio 1 Cross Site Request Forgery

. | | / | | \ \ | | \ / | |\ / / /\ \ / \ | Y / ^ / / || / / / / /\ /\ \ \ \ | / \ / http://h4x0resec.blogspot.com / \ | \ \ / // / \ / / / / Vifi Radio v1 - CSRF Arbitrary Change Password Exploit My + Discovered by: KnocKout Contact : [email protected] HomePage :...

Vifi Radio 1.0 - Cross-Site Request Forgery

. | | / | | \ \ | | \ / | |\ / / /\ \ / \ | Y / ^ / / || / / / / /\ /\ \ \ \ | / \ / http://h4x0resec.blogspot.com / \ | \ \ / // / \ / / / / Vifi Radio v1 - CSRF Arbitrary Change Password Exploit My + Discovered by: KnocKout Contact : [email protected] HomePage :...

Vifi Radio 1.0 - Cross-Site Request Forgery

Vifi Radio 1.0 - Cross-Site Request Forgery . | | / | | \ \ | | \ / | |\ / / /\ \ / \ | Y / ^ / / || / / / / /\ /\ \ \ \ | / \ / http://h4x0resec.blogspot.com / \ | \ \ / // / \ / / / / Vifi Radio v1 - CSRF Arbitrary Change Password Exploit My + Discovered by: KnocKout Contact :...

Ability FTP Server 2.1.4 - Admin Panel AUTHCODE Remote Denial of Service

Ability FTP Server 2.1.4 - Admin Panel AUTHCODE Remote Denial of Service !/usr/bin/env python Exploit Title: Ability FTP Server Admin Panel AUTHCODE Command Remote Dos Date: 2015-08-15 Exploit Author: St0rn Twitter: st0rnpentest Vendor Homepage: www.codecrafters.com Software Link:...

Ability FTP Server 2.1.4 - Admin Panel 'AUTHCODE' Remote Denial of Service

!/usr/bin/env python Exploit Title: Ability FTP Server Admin Panel AUTHCODE Command Remote Dos Date: 2015-08-15 Exploit Author: St0rn Twitter: st0rnpentest Vendor Homepage: www.codecrafters.com Software Link: http://www.codecrafters.com/AbilityFTPServer Version: 2.1.4 Tested on: Windows 7 import...

Ability FTP Server 2.1.4 - Admin Panel AUTHCODE Command Remote DoS Exploit

Exploit for windows platform in category dos / poc !/usr/bin/env python Exploit Title: Ability FTP Server Admin Panel AUTHCODE Command Remote Dos Date: 2015-08-15 Exploit Author: St0rn Twitter: st0rnpentest Vendor Homepage: www.codecrafters.com Software Link:...

Progressive SQL Injection / XSS Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Progressive SQL injection+XSS Google Dork: intext:"Designed & Developed By: Progressive or inurl:"main.php?maid=" Exploit Author: R3NW4 Platform: WebApps Version: the lower versions Tested on: LinuxDebian Greetz: MuhmadEmad - Al...