9414 matches found
Drale DBTableViewer 100123 - Blind SQL Injection
Drale DBTableViewer 100123 - Blind SQL Injection Drale DBTableViewer v100123 - Blind SQL Injection Exploit Title: drale DBTableViewer - SQL InjectionBlind/Error Base Date: 2016-06-08 Exploit Author: HaHwul Exploit Author Blog: www.hahwul.com Vendor Homepage: http://drale.com/ Software Link:...
Drale DBTableViewer 100123 - Blind SQL Injection
Drale DBTableViewer v100123 - Blind SQL Injection Exploit Title: drale DBTableViewer - SQL InjectionBlind/Error Base Date: 2016-06-08 Exploit Author: HaHwul Exploit Author Blog: www.hahwul.com Vendor Homepage: http://drale.com/ Software Link:...
Drale DBTableViewer 100123 Blind SQL Injection
Drale DBTableViewer v100123 - Blind SQL Injection Exploit Title: drale DBTableViewer - SQL InjectionBlind/Error Base Date: 2016-06-08 Exploit Author: HaHwul Exploit Author Blog: www.hahwul.com Vendor Homepage: http://drale.com/ Software Link:...
New Relic: Blind SSRF on synthetics.newrelic.com
Introduction It was possible to retrieve some data from the http://169.254.169.254/latest/ URL corresponding to the amazon instance metadatas. With more time, we can dump the whole content. PoC When creating a Ping Monitor on the https://synthetics.newrelic.com/accounts/XXXXXXX/synthetics URL, it...
Tiny Tiny RSS SQL Injection Vulnerability
A blind injection vulnerability exists in $itemid in Tiny Tiny RSS processcategoryorder. An attacker is able to connect to the library database and execute database statements...
GoDaddy Patches Blind XSS Vulnerability
Domain registrar GoDaddy fixed a vulnerability affecting systems used by its customer support agents that could have been abused to take over, modify or delete accounts. Researcher Matthew Bryant said that a riff on a cross-site scripting attack called a blind XSS was to blame. A GoDaddy customer...
Poisoning the Well – Compromising GoDaddy Customer Support With Blind XSS
This is the first part of a series of stories of compromising companies via blind cross-site scripting. As companies fix the issues and allow me to disclose them, I will post them here. Blind cross-site scripting XSS is an often-missed class of XSS which occurs when an XSS payload fires in a...
悟空CRM V0.5.4 /App/Lib/Action/FinanceAction.class.php SQL盲注
No description provided by source...
LocalTapiola: Blind Stored XSS Against Lahitapiola Employees - Session and Information leakage
Issue The reporter was able to perform a Blind Pervasive XSS against some of the public forms on LocalTapiolas website. The persistent or stored XSS vulnerability is a more devastating variant of a cross-site scripting flaw: it occurs when the data provided by the attacker is saved by the server,...
PHPBack 1.3.0 - SQL Injection
PHPBack 1.3.0 - SQL Injection / + Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/PHPBACK-v1.3.0-SQL-INJECTION.txt Vendor: ================ www.phpback.org Product: ================ PHPBack v1.3.0 Vulnerability Type: ===================...
PHPBack 1.3.0 - SQL Injection
/ + Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/PHPBACK-v1.3.0-SQL-INJECTION.txt Vendor: ================ www.phpback.org Product: ================ PHPBack v1.3.0 Vulnerability Type: =================== SQL Injection CVE Reference:...
PHPBack 1.3.0 - SQL Injection
Exploit for php platform in category web applications / + Credits: hyp3rlinx Vendor: ================ www.phpback.org Product: ================ PHPBack v1.3.0 Vulnerability Type: =================== SQL Injection CVE Reference: ============== N/A Vulnerability Details: ===================== PHPBa...
modified eCommerce Shopsoftware 2.0.0.0 rev 9678 - Blind SQL Injection
Exploit for php platform in category web applications...
用友某系统多处注入漏洞打包
简要描述： wooyun搜了一下，没有人提，来一发。 详细说明： 首先，该接口是无需权限访问的。 已http://.../bugs/wooyun-2010-0178322为例： ...:8080/uapws/service/nc.itf.bd.crm.ICurrtypeExportToCrmService?wsdl ...:8080/uapws/service/nc.itf.bd.crm.IInvbasdocExportToCrmService?wsdl ...:8080/uapws/service/nc.itf.bd.crm.IMeasdocExportToCrmService?wsd...
Gratipay: Possible Blind SQL injection | Language choice in presentation
I haven't managed to inject something, but I just want to make sure that this input is filtered. See the attached screenshot...
Facebook uses Artificial Intelligence to Describe Photos to Blind Users
Today the Internet has become dominated by images, and it’s the major feature that got Facebook to a Billion daily users. We can not imagine Facebook without photos, but for Millions of blind and visually impaired people, Facebook without photos has been the reality since its launch. But not now!...
Music Quiz - Blind test - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Music Quiz - Blind test published at the 'play' market has multiple vulnerabilities...
gongwalker API Manager v1.1 - Blind SQL Injection
No description provided by source...
SM Soft Tech CMS 1.0 SQL Injection
========================================================== + Title :- SM SOFT TECH CMS - SQL INJECTION + Date :- 24 - MAR - 2016 + Vendor Homepage :- http://www.smsofttech.net/ + Version :- All Versions + Tested on :- Nginx/1.4.5, PHP/5.2.17, Linux - Windows + Category :- webapps + Google Dorks :...