Everfocus <= 1.4 EDSR Remote Authentication Bypass

No description provided by source. Product: Everfocus EDSR series Version affected: 1.4 and older Website: http://www.everfocus.com/ Discovered By: Andrea Fabrizi Email: andrea.fabrizi gmail com Web: http://www.andreafabrizi.it Vuln: remote DVR applet authentication bypass The EDSR firmware don't...

Docebo 3.6.0.3 - Multiple SQL-Injection Vulnerabilities

No description provided by source. Application: Docebo Version affected: 3.6.0.3 Website: http://www.docebo.com Discovered By: Andrea Fabrizi Email: andrea.fabrizi at gmail dot com email concealed Web: http://www.andreafabrizi.it Vuln: Multiple SQL-Injection Vulnerabilities EXAMPLE 1...

Samsung DVR Firmware 1.10 - Authentication Bypass

No description provided by source. Title: Samsung DVR authentication bypass Version affected: firmware version = 1.10 Vendor: Samsung - www.samsung-security.com Discovered by: Andrea Fabrizi Email: [email protected] Web: http://www.andreafabrizi.it Twitter: @andreaf83 Status: unpatched...

Synology DSM 4.3-3810 - Directory Traversal

Synology DSM 4.3-3810 - Directory Traversal Title: Synology DSM multiple directory traversal Version affected: = 4.3-3810 Vendor: Synology Discovered by: Andrea Fabrizi Email: [email protected] Web: http://www.andreafabrizi.it Twitter: @andreaf83 Status: patched CVE: 2013-6987 I'm again he...

Synology DSM 4.3-3810 - Directory Traversal

Title: Synology DSM multiple directory traversal Version affected: = 4.3-3810 Vendor: Synology Discovered by: Andrea Fabrizi Email: [email protected] Web: http://www.andreafabrizi.it Twitter: @andreaf83 Status: patched CVE: 2013-6987 I'm again here with a Synology DSM vulnerability. Synolo...

Synology DSM 4.3-3810 - Directory Traversal

Exploit for cgi platform in category web applications Title: Synology DSM multiple directory traversal Version affected: = 4.3-3810 Vendor: Synology Discovered by: Andrea Fabrizi Email: email protected Web: http://www.andreafabrizi.it Twitter: @andreaf83 Status: patched CVE: 2013-6987 I'm again...

Synology DSM 4.3-3810 Directory Traversal

Title: Synology DSM multiple directory traversal Version affected: = 4.3-3810 Vendor: Synology Discovered by: Andrea Fabrizi Email: [email protected] Web: http://www.andreafabrizi.it Twitter: @andreaf83 Status: patched CVE: 2013-6987 I'm again here with a Synology DSM vulnerability. Synolo...

Synology DiskStation Manager (DSM) 4.3-3776 - Multiple Vulnerabilities

Exploit for linux platform in category web applications Title: Synology DSM multiple vulnerabilities Version affected: = 4.3-3776 Vendor: Synology Discovered by: Andrea Fabrizi Email: email protected Web: http://www.andreafabrizi.it Twitter: @andreaf83 Status: unpatched Synology DiskStation Manag...

Samsung DVR Firmware 1.10 - Authentication Bypass

Samsung DVR Firmware 1.10 - Authentication Bypass Title: Samsung DVR authentication bypass Version affected: firmware version = 1.10 Vendor: Samsung - www.samsung-security.com Discovered by: Andrea Fabrizi Email: [email protected] Web: http://www.andreafabrizi.it Twitter: @andreaf83 Status...

Buffalo TeraStation TS-Series - Multiple Vulnerabilities

Title: Buffalo TeraStation TS-Series multiple vulnerabilities Version affected: firmware version = 1.5.7 Vendor: http://www.buffalotech.com/products/network-storage Discovered by: Andrea Fabrizi Email: andrea.fabrizi gmail com Web: http://www.andreafabrizi.it Twitter: @andreaf83 Status: unpatched...

Visual Tools DVR Command Injection / Password Disclosure

Exploit for hardware platform in category web applications Title: Visual Tools DVR multiple vulnerabilities Version affected: VS Series = 3.0.6.16, VX Series = 4.2.19.2 Vendor: http://www.visual-tools.com/ Discovered By: Andrea Fabrizi Email: email protected Web: http://www.andreafabrizi.it Statu...

PhpShop 0.8.1 SQL Injection / XSS / XSRF

Application: PhpShop Version affected: 0.8.1 Website: http://www.phpshop.org/ Discovered By: Andrea Fabrizi Email: [email protected] Web: http://www.andreafabrizi.it Vuln: Multiple Vulnerabilities SQL INJECTION http://localhost/phpshop-0.8.1/?page=admin/functionlist&moduleid=111111' union...

phpShop 0.8.1 Multiple Vulnerabilities

Exploit for unknown platform in category web applications ====================================== phpShop 0.8.1 Multiple Vulnerabilities ====================================== Vendor: http://www.phpshop.org/ Discovered By: Andrea Fabrizi SQL INJECTION...

phpShop 0.8.1 - Multiple Vulnerabilities

phpShop 0.8.1 - Multiple Vulnerabilities Vendor: http://www.phpshop.org/ Discovered By: Andrea Fabrizi Email: [email protected] Web: http://www.andreafabrizi.it SQL INJECTION http://server/phpshop-0.8.1/?page=admin/functionlist&moduleid=111111' union select...

phpShop 0.8.1 - Multiple Vulnerabilities

Vendor: http://www.phpshop.org/ Discovered By: Andrea Fabrizi Email: [email protected] Web: http://www.andreafabrizi.it SQL INJECTION http://server/phpshop-0.8.1/?page=admin/functionlist&moduleid=111111' union select 1,database,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1 -- aaa...

3Com OfficeConnect Command Execution

Product: 3Com OfficeConnect Firewall/Router Website: http://www.3com.com/ Discovered By: Andrea Fabrizi Email: [email protected] Web: http://www.andreafabrizi.it Vuln: remote command execution and password disclosure Admin password disclosure 1 SSH/Telnet to router using one of these hidde...

Snitz Forums 2000 Multiple Cross-Site Scripting Vulnerabilities

No description provided by source. Application: Snitz Forums 2000 Version affected: 3.4.07 Website: http://forum.snitz.com/ Discovered By: Andrea Fabrizi Email: andrea.fabrizi gmail com Web: http://www.andreafabrizi.it Vuln: Multiple Cross-Site Scripting PERMANENT XSS If sound tag is allowed:...

Snitz Forums 2000 - Multiple Cross-Site Scripting Vulnerabilities

Snitz Forums 2000 - Multiple Cross-Site Scripting Vulnerabilities Application: Snitz Forums 2000 Version affected: 3.4.07 Website: http://forum.snitz.com/ Discovered By: Andrea Fabrizi Email: andrea.fabrizi gmail com Web: http://www.andreafabrizi.it Vuln: Multiple Cross-Site Scripting PERMANENT X...

Snitz Forums 2000 Multiple Cross-Site Scripting Vulnerabilities

Application: Snitz Forums 2000 Version affected: 3.4.07 Website: http://forum.snitz.com/ Discovered By: Andrea Fabrizi Email: [email protected] Web: http://www.andreafabrizi.it Vuln: Multiple Cross-Site Scripting PERMANENT XSS If sound tag is allowed: soundhttp://urltovalidmp3orm3ufile.m3u...

Snitz Forums 2000 Multiple Cross-Site Scripting

Exploit for unknown platform in category web applications =============================================================== Snitz Forums 2000 Multiple Cross-Site Scripting Vulnerabilities =============================================================== Application: Snitz Forums 2000 Version affected...