CVE-2018-8858

The CVE-2018-8858 issue affects Vecna VGo Robot firmware versions 3.0.3.52164 and 3.0.3.53662 (prior versions may be affected). The vulnerability corresponds to CVE-2018-8858: insufficiently protected credentials that could allow an attacker with firmware access to extract credentials. ICS-CERT u...

TAC Xenta 511 / 911 Credential Disclosure

Exploit Title: TAC Xenta 511 and 911 Credentials Disclosure Date: 25.05.2018 Exploit Author: Marek Cybul Vendor Homepage: https://download.schneider-electric.com/files?pFileName=TACXenta911SDS-XENTA911.pdf Version: 5.17 Schneider Electric TAC Xenta 911 and 511 PLCs Directory traversal in help...

TAC Xenta 511911 - Directory Traversal

TAC Xenta 511911 - Directory Traversal Exploit Title: TAC Xenta 511 and 911 Credentials Disclosure Date: 25.05.2018 Exploit Author: Marek Cybul Vendor Homepage: https://download.schneider-electric.com/files?pFileName=TACXenta911SDS-XENTA911.pdf Version: 5.17 Schneider Electric TAC Xenta 911 and 5...

NETGEAR WNR1000v3 - Password Recovery Credential Disclosure (Metasploit)

NETGEAR WNR1000v3 - Password Recovery Credential Disclosure Metasploit This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework Exploit Title: Netgear WNR1000v3 Password Recovery Credential Disclosure Vulnerability Date: 7-5-14...

D-Link DIR 645 Password Extractor

This module exploits an authentication bypass vulnerability in DIR 645 'D-Link DIR 645 Password Extractor', 'Description' = %q This module exploits an authentication bypass vulnerability in DIR 645 'OSVDB', '90733' , 'BID', '58231' , 'PACKETSTORM', '120591' , 'Author' = 'Roberto Paleari ',...

Windows Gather SmartFTP Saved Password Extraction

This module finds saved login credentials for the SmartFTP FTP client for windows. It finds the saved passwords and decrypts them. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rexml/document' class...

Webdrivers Simple Forum (message_details.php) SQL Injection Exploit

Exploit for unknown platform in category web applications =================================================================== Webdrivers Simple Forum messagedetails.php SQL Injection Exploit =================================================================== !perl use IO::Socket; By:Bl0od3r Germa...

Coppermine Photo Gallery 1.3.2 - File Retrieval SQL Injection

Coppermine Photo Gallery 1.3.2 - File Retrieval SQL Injection tested and approved /str0ke CPG Exploit File Retrieval by SQL Injection. By Default this exploit get the config.inc.php file which contains the db user/pass If you want to get another file you need to have the good cookie you can use...

MercuryBoard 1.1.1 - SQL Injection

MercuryBoard 1.1.1 - SQL Injection little late posting this /str0ke Exploit: http://www.site.com/mercuryboard/index.php?a=post&s=reply&t=1&qu=10000%20UNION%20SELECT%20userpassword,username%20from%20mbusers%20where%20usergroup%20=%201%20limit%201/ milw0rm.com 2005-02-12...

PerlDesk 1.x SQL-Injection Exploit

No description provided by source. !/usr/bin/perl Example: kb.cgi?view=0 UNION SELECT 1,3,password,username,3,7 FROM users Exploit is attached. ./pde.pl www.internethosting4u.com /perldesk/kb.cgi 148.244.150.58:80 use IO::Socket; print ' PerlDesk exploit Usage: ./pdsploit.pl host path proxy...