COMTREND ADSL Router CT-5624 C01_R03 Unauthenticated Remote DNS Changer

!/bin/bash COMTREND ADSL Router CT-5624 C01R03 Unauthenticated Remote DNS Change Exploit Copyright 2016 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web interface, which is accessible without authentication. On...

Inteno EG101R1 VoIP Router Unauthenticated Remote DNS Changer

!/bin/bash Inteno EG101R1 VoIP Router Unauthenticated Remote DNS Change Exploit Copyright 2016 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web interface, which is accessible without authentication. Once...

PIKATEL 96338WS Unauthenticated Remote DNS Changer

!/bin/bash PIKATEL 96338WS Unauthenticated Remote DNS Change Exploit Copyright 2016 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web interface, which is accessible without authentication. Once modified, systems...

Exper EWM-01 ADSL/MODEM Unauthenticated Remote DNS Changer

!/bin/bash Exper EWM-01 ADSL/MODEM Unauthenticated Remote DNS Change Exploit Copyright 2016 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web interface, which is accessible without authentication. Once modified,...

WiFi-Pumpkin v0.8.1 - Framework for Rogue Wi-Fi Access Point Attack

Framework for Rogue Wi-Fi Access Point Attack Description WiFi-Pumpkin is a open source security tool that provides the Rogue access point to Man-In-The-Middle and network attacks. Installation Kali 2.0/WifiSlax 4.11.1/Parrot 3.0.1/2.0.5 Python 2.7 git clone...

MESSOA IP-Cameras Authentication Bypass / Credential Changer

Multiple MESSOA IP-Cameras auth bypass admin user/password changer Tested: MESSOA NIC 835 Release: X.2.1.8 MESSOA NIC 835-HN5 Release: X.2.1.17 MESSOA NIC 836 Release: X.2.1.7 MESSOA NDZ 860 Release: X.3.0.6.1 MESSOA Copyright 2016 c Todor Donev http://www.ethical-hacker.org/...

MESSOA IP Cameras (Multiple Models) - Password Change

Multiple MESSOA IP-Cameras auth bypass admin user/password changer Tested: MESSOA NIC 835 Release: X.2.1.8 MESSOA NIC 835-HN5 Release: X.2.1.17 MESSOA NIC 836 Release: X.2.1.7 MESSOA NDZ 860 Release: X.3.0.6.1 MESSOA Copyright 2016 c Todor Donev http://www.ethical-hacker.org/...

CM Ad Changer 1.7.7 WP Plugin - Cross Site Vulnerability

Document Title: =============== CM Ad Changer 1.7.7 WP Plugin - Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1856 Release Date: ============= 2016-06-13 Vulnerability Laboratory ID VL-ID: ====================================...

CM Ad Changer 1.7.7 WP Plugin - Cross Site Vulnerability

Document Title: =============== CM Ad Changer 1.7.7 WP Plugin - Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1856 Release Date: ============= 2016-06-12 Vulnerability Laboratory ID VL-ID: ====================================...

WordPress CM Ad Changer 1.7.7 Cross Site Scripting

Exploit Title: CM Ad Changer Plugin XSS Date: 9/6/2016 Exploit Author: Aaditya Purani Author Homepage: https://aadityapurani.com Vendor Homepage: https://ad-changer.cminds.com Software Link: https://downloads.wordpress.org/plugins/cm-ad-changer.zip Updated Version: 1.7.7 Tested on: Wordpress 4.5....

CM Ad Changer <= 1.7.7 - Stored Cross-Site Scripting (XSS)

An Stored Cross Site Scripting was reported by the author to CM Ad Plugins under which an unprivileged user can trigger a Stored XSS to perform malicious actions or any attacker could send a crafted link CSRF which can trigger the Stored XSS. PoC 1 Go to CM Ad changers - Campaigns 2 Create a...

CM Ad Changer <= 1.7.7 - Stored Cross-Site Scripting (XSS)

An Stored Cross Site Scripting was reported by the author to CM Ad Plugins under which an unprivileged user can trigger a Stored XSS to perform malicious actions or any attacker could send a crafted link CSRF which can trigger the Stored XSS. 1 Go to CM Ad changers - Campaigns 2 Create a Campaign...

WiFi-Pumpkin v0.7.5 - Framework for Rogue Wi-Fi Access Point Attack

WiFi-Pumpkin is a security tool that provides the Rogue access point to Man-In-The-Middle and network attacks. Installation Kali 2.0/WifiSlax 4.11.1/Parrot 2.0.5 Python 2.7 git clone https://github.com/P0cL4bs/WiFi-Pumpkin.git cd WiFi-Pumpkin chmod +x installer.sh ./installer.sh --install refer t...

WordPress CM Ad Changer 1.7.2 Cross Site Scripting

FULL DISCLOSURE Product : cm-ad-changer Exploit Author : Rahul Pratap Singh Version :1.7.2 Home page Link : https://wordpress.org/plugins/cm-ad-changer/ Website : 0x62626262.wordpress.com Linkedin : https://in.linkedin.com/in/rahulpratapsingh94 Date : 21/4/2016 XSS Vulnerability:...

CM Ad Changer <= 1.7.2 - Cross-Site Scripting (XSS)

The CM Ad Changer WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

MW Font Changer <= 4.2.5 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The MW Font Changer WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability. http://www.example.com/wp-content/plugins/parsi-font/css.php?size="alert1;"...

MW Font Changer <= 4.2.5 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The MW Font Changer WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability. PoC http://www.example.com/wp-content/plugins/parsi-font/css.php?size=""...

Voice Changer - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Voice Changer published at the 'play' market has multiple vulnerabilities...

RoboVox Voice Changer - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application RoboVox Voice Changer published at the 'play' market has multiple vulnerabilities...

Face Changer - Photo Editor - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Face Changer - Photo Editor published at the 'play' market has multiple vulnerabilities...