HTML Template Engine 1.0 Database Disclosure

| Title : html template engine 1.0 Database Disclosure Exploit | Author : indoushka | email : [email protected] | Tested on: windows 8.1 FranASSais V.Pro | Vendor : SourceForge: Kanator / http://adyou.me/4TVD ========================================================= !/usr/bin/perl -w Autho...

Gateway 1.0 Database Disclosure

======================================================================== | Title : gateway v1.0 Database Disclosure Exploit | Author : indoushka | email : [email protected] | Tested on : windows 8.1 FranASSais V.Pro | Version : v1.0 | Vendor :...

Web Shell Detector - PHP Script That Helps You Find And Identify PHP / CGI (Perl) / ASP / ASPX Shells

Web Shell Detector is a php script that helps you find and identify php/cgiperl/asp/aspx shells. Web Shell Detector has a “web shells” signature database that helps to identify “web shell” up to 99%. By using the latest javascript and css technologies, web shell detector has a light weight and...

Sql injection

An issue was discovered in Ipswitch WhatsUp Gold before 2017 Plus SP1 17.1.1. Multiple SQL injection vulnerabilities are present in the legacy .ASP pages, which could allow attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2018-5778

An issue was discovered in Ipswitch WhatsUp Gold before 2017 Plus SP1 17.1.1. Multiple SQL injection vulnerabilities are present in the legacy .ASP pages, which could allow attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2018-17141 · Ipswitch · Ipswitch Whatsup Gold

Name of the Vulnerable Software and Affected Versions: Ipswitch WhatsUp Gold versions prior to 2017 Plus SP1 17.1.1 Description: An issue was discovered in the legacy .ASP pages of Ipswitch WhatsUp Gold, where multiple SQL injection vulnerabilities are present. These vulnerabilities could allow...

D-Link DNS-343 ShareCenter < 1.05 - Command Injection

Introduction The purpose of this article is to detail the research that I have recently completed regarding the D-Link DNS 343 ShareCenter. Background The D-Link ShareCenter 4-Bay Network Storage Enclosure DNS-343 connects to your network instead of to a computer so everyone on your network can...

Simple ASC CMS 1.2 Database Disclosure

======================================================================== | Title : Simple ASC CMS 1.2 Database Disclosure Exploit | Author : indoushka | email : [email protected] | Tested on : windows 8.1 FranASSais V.Pro | Vendor : http://www.aspsource.org...

Kaseya VSA 9.2 Shell Upload Vulnerability

Exploit for asp platform in category web applications ------------------------------------------------------------------------ Code execution in Kaseya VSA ------------------------------------------------------------------------ Kin Hung Cheng, Robert Hartshorn, May 2017...

Microsoft ASP.NET Core Cross-Site Request Forgery Vulnerability

Microsoft ASP.NET Core is a cross-platform open source framework from Microsoft Corporation USA. The framework is used to build cloud-based applications such as web applications, IoT applications, and mobile backends. A cross-site request forgery vulnerability exists in Microsoft ASP.NET Core...

PHICOMM K2 (PSG1218) Input Validation Vulnerability

The PHICOMM K2 PSG1218 is a wireless router product from the Chinese company PHICOMM. An input validation vulnerability exists in PHICOMM K2 PSG1218 versions 22.5.11.5 and earlier. A remote attacker can exploit this vulnerability by sending a request to an ASP script to execute code...

Microsoft ASP .NET Core for Windows

Binary data microsoftaspdotnetcorewin.nbin...

Security Update ASP .NET Core September 2017

The remote Windows host has an installation of ASP.NET Core runtime package store with a version less than 2.0.12219.0. Therefore the host is affected by multiple vulnerabilities : - An open redirect vulnerability that can lead to an escalation of privilege. CVE-2017-11879 - A flaw that is...

chinaplasonline.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-399544 Description| Value ---|--- Affected Website:| chinaplasonline.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet...

SQL Injection Vulnerability in WebShow Shopping System V5.4 getpwd2.asp

Netshow shopping system is a shopping website developed with asp+access. A SQL injection vulnerability exists in NetShow Shopping System V5.4 getpwd2.asp. An attacker can obtain sensitive database information by constructing a specific SQL injection...

SQL Injection Vulnerability in WebShow Shopping System V5.4

Net show shopping system is a shopping site developed with asp + access. Nethub Shopping System V5.4 front-end textBox3.asp exists SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

Breacher - Tool To Find Admin Login Pages And EAR Vulnerabilites

A script to find admin login pages and EAR vulnerabilites. Features Multi-threading on demand Big path list 798 paths Supports php, asp and html extensions Checks for potential EAR vulnerabilites Checks for robots.txt Support for custom patns Usages Check all paths with php extension python...

ASP4CMS AspCMS Information Disclosure Vulnerability

ASP4CMS AspCMS is China's ASP4CMS open source laboratory of a free enterprise website construction system . The system supports customized templates and plug-in extensions and other features. ASP4CMS AspCMS 2.7.2 version of the member/Orderinfo.asp file has a security vulnerability. A remote...

sailracer.org XSS vulnerability

Vulnerable URL: http://www.sailracer.org/events/event-v2.asp?eventid=66760="Online Entry not available for this event, or closed, please contact the event organisers. Details: Description| Value ---|--- Patched:| No Latest check for patch:| 21.12.2017 Vulnerability type:| XSS Vulnerability status...

Mr.SIP - SIP-Based Audit and Attack Tool

Mr.SIP is a tool developed to audit and simulate SIP-based attacks. Originally it was developed to be used in academic work to help developing novel SIP-based DDoS attacks and defense approaches and then as an idea to convert it to a fully functional SIP-based penetration testing tool, it has bee...