Allegro Software RomPager 'Misfortune Cookie' (CVE-2014-9222) Authentication Bypass

This module exploits HTTP servers that appear to be vulnerable to the 'Misfortune Cookie' vulnerability which affects Allegro Software Rompager versions before 4.34 and can allow attackers to authenticate to the HTTP service as an administrator without providing valid credentials. This module...

Student Information System (SIS) 0.1 - Authentication Bypass

Student Information System SIS 0.1 - Authentication Bypass Exploit Title............... Student Information System SIS Auth Bypass Google Dork................. N/A Date........................ 14/10/2016 Exploit Author.............. lahilote Vendor Homepage...

Health Record System 0.1 - Authentication Bypass

Health Record System 0.1 - Authentication Bypass Exploit Title.............. Health Record System Auth Bypass Google Dork................ N/A Date....................... 14/10/2016 Exploit Author............. lahilote Vendor Homepage............ http://www.sourcecodester.com/node/10430 Software...

WordPress InfiniteWP Admin Panel 2.8.0 Command Injection

------------------------------------------------------------------------ Command injection in InfiniteWP Admin Panel ------------------------------------------------------------------------ Sipke Mellema, July 2016 ------------------------------------------------------------------------ Abstract...

SIEMENS IP Cameras (Multiple Models) - Credential Disclosure Configuration Download

SIEMENS IP Cameras Multiple Models - Credential Disclosure Configuration Download Multiple SIEMENS IP Cameras auth bypass configuration download Tested: SIEMENS IP Camera CCID1410-ST X.1.0.24 SIEMENS IP Camera CCMW1025 x.2.2.1798 SIEMENS IP Camera CCMS2025 x.2.2.1798 SIEMENS IP Camera CVMS2025-IR...

MESSOA IP Cameras (Multiple Models) - Password Change

MESSOA IP Cameras Multiple Models - Password Change Multiple MESSOA IP-Cameras auth bypass admin user/password changer Tested: MESSOA NIC 835 Release: X.2.1.8 MESSOA NIC 835-HN5 Release: X.2.1.17 MESSOA NIC 836 Release: X.2.1.7 MESSOA NDZ 860 Release: X.3.0.6.1 MESSOA Copyright 2016 c Todor Donev...

SIEMENS IP Cameras (Multiple Models) - Credential Disclosure / Configuration Download

Exploit for cgi platform in category web applications Multiple SIEMENS IP Cameras auth bypass configuration download Tested: SIEMENS IP Camera CCID1410-ST X.1.0.24 SIEMENS IP Camera CCMW1025 x.2.2.1798 SIEMENS IP Camera CCMS2025 x.2.2.1798 SIEMENS IP Camera CVMS2025-IR x.2.2.1798 SIEMENS IP Camer...

Nusiorung CMS 2016 SQL Injection

Document Title: =============== Nusiorung CMS 2016 - Login Auth Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1875 Release Date: ============= 2016-07-13 Vulnerability Laboratory ID VL-ID: ==================================== 1875...

Nusiorung CMS 2016 - (Login) Auth Bypass Vulnerability

Document Title: =============== Nusiorung CMS 2016 - Login Auth Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1875 Release Date: ============= 2016-07-12 Vulnerability Laboratory ID VL-ID: ==================================== 1875...

Z Web Solutions CMS v5.1 - Auth Bypass Web Vulnerability

Document Title: =============== Z Web Solutions CMS v5.1 - Auth Bypass Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1864 Release Date: ============= 2016-06-28 Vulnerability Laboratory ID VL-ID: ====================================...

Alfine CMS v2.6 - (Login) Auth Bypass Vulnerability

Document Title: =============== Alfine CMS v2.6 - Login Auth Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1863 Release Date: ============= 2016-06-27 Vulnerability Laboratory ID VL-ID: ==================================== 1863...

Alfine CMS v2.6 - (Login) Auth Bypass Vulnerability

Document Title: =============== Alfine CMS v2.6 - Login Auth Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1863 Release Date: ============= 2016-06-26 Vulnerability Laboratory ID VL-ID: ==================================== 1863...

Meteocontrol WEB’log - Admin Password Disclosure (Metasploit)

Meteocontrol WEB’log - Admin Password Disclosure Metasploit Exploit Title: Meteocontrol WEB'log - Extract Admin password Discovered by: Karn Ganeshen Vendor Homepage: http://www.meteocontrol.com/en/ Versions Reported: All Meteocontrol WEB'log versions CVE-ID: CVE-2016-2296 Meteocontrol WEB'log -...

Gemtek CPE7000 / WLTCS-106 - Multiple Vulnerabilities

!/usr/bin/python ''' Exploit Title: Gemtek CPE7000 / WLTCS-106 multiple vulnerabilities Date: 04/06/2016 Exploit Author: Federico Ramondino - framondino0x40mentat0x2eis Vendor Homepage: gemtek.com.tw Version: Firmware Version 01.01.02.082 Tested on: Product Name : CPE7000 Model ID : WLTCS-106...

CVE-2016-2313

authlogin.php in Cacti before 0.8.8g allows remote authenticated users who use web authentication to bypass intended access restrictions by logging in as a user not in the cacti database...

ProjectSend r582 - Multiple Vulnerabilities

ProjectSend r582 - Multiple Vulnerabilities Advisory ID: SGMA-16001 Title: ProjectSend multiple vulnerabilities Product: ProjectSend previously cFTP Version: r582 and probably prior Vendor: www.projectsend.org Vulnerability type: SQL-injection, Auth bypass, Arbitrary File Access, Insecure Object...

Classic Infomedia Authentication Bypass

Document Title: =============== Classic Infomedia Login - Auth Bypass Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1679 Release Date: ============= 2016-01-25 Vulnerability Laboratory ID VL-ID: ==================================== 16...

Dahua DVR Auth Bypass Scanner

Scans for Dahua-based DVRs and then grabs settings. Optionally resets a user's password and clears the device logs This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule %qDahua DVR Auth Bypass Scanner...

Qualsoft Systems - Auth ByPass Vulnerability

Exploit for php platform in category web applications Title : Qualsoft Systems - AddNewsDetails.php Auth ByPass Vulnerability Dork : intext:Powered by Qualsoft Systems Pvt. Ltd demo : http://www.dnyanada.net/ firt you go here: localhost/AddNewsDetails.php after you go here:...

WebComIndia CMS 2015Q4 - Auth Bypass Vulnerability

Document Title: =============== WebComIndia CMS 2015Q4 - Auth Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1614 Release Date: ============= 2015-10-07 Vulnerability Laboratory ID VL-ID: ==================================== 1614...