Alex Guestbook 5.0.4 Cross Site Scripting

Exploit Title: Alex Guestbook Version 5.0.4 - Cross Site Scripting Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM Mojtaba Kazemi Vendor Home : http://www.alexguestbook.net/ Home : http://persian-team.ir/ Google Dork : inurl:alexguestbook3 Telegram Channel: @PersianHackTeam Teste...

Open Source Hackers Tool Belt: Pybelt

Open Source Hackers Tool Belt Pybelt is an open source hackers tool belt complete with: A port scanner SQL injection scanner Dork checker Hash cracker Hash type verification tool Proxy finding tool XSS scanner It is capable of cracking hashes without prior knowledge of the algorithm, scanning por...

Pybelt - The Hackers Tool Belt

Pybelt is an open source hackers tool belt complete with: A port scanner SQL injection scanner Dork checker Hash cracker Hash type verification tool Proxy finding tool XSS scanner It is capable of cracking hashes without prior knowledge of the algorithm, scanning ports on a given host, searching...

9Xperts SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: 79Xperts SQL Injection Vulnerability Google Dork: intext:"Developed by 79Xperts" inurl:.php?id= Date: 2017-05-06 Exploit Author: Sh4dow email protected My Team: Zero Security Group Vendor Homepage: https://www.79xperts.com Teste...

osCommerce Error-based SQL Injection

| \ | \ | | | | | | / \ | | | |/ / | |/ / | | | | | | | | | / / | | | / | / | | | | | | | | | | | | | | | |\ \ \ / / // / | | | /\ | | | | | / / / / / | | | \ | | / | | | / \ | | | | | \ | | | | \ \ / / | | | | | \ --. | | | / / | | | | | |/ / | | | | \ V / | | | . | --. \ | | | | | |...

Grab: Private Grab Messages on Android App can be accessed and cached by Search Engines

Description Hello. Today i discovered, that Search Engines can access the private users messages OTP pins, Group invites information etc. It happens because the https://grab-attention.grabtaxi.com host allows search indexing, and can leak the authtoken to the Search Engines which also can lead to...

Joomla! Component Vik Rent Items 1.3 - SQL Injection

Joomla! The Component Vik Rent Items v1. 3 - SQL Injection Joomla! The Component Vik Rent Items v1. 3, the presence of the parameter filter is not strict, leading to a sql injection vulnerability, if the other server is turned on the error display, can directly use, Google Dork: inurl:index. php?...

Country on Sale Script - SQL Injection

Country on Sale Script - SQL Injection Country on Sale Script, the presence of the parameter filter is not strict, leading to a sql injection vulnerability, if the other server is turned on the error display, can directly use, if you turn off the error display, you can use time-based blind Google...

Joomla! Component Simple Membership 3.3.3 - 'userId' Parameter SQL Injection

Joomla! Component Simple Membership 3.3.3 - the 'userId' Parameter SQL Injection Joomla! Component Simple Membership 3.3.3, the presence of the parameter filter is not strict, leading to a sql injection vulnerability, if the other server is turned on the error display, can directly use, if you tu...

Joomla FocalPoint 1.2.3 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla Component FocalPoint 1.2.3 - SQL Injection Date: 2017-03-23 Home : https://extensions.joomla.org/extensions/extension/maps-a-weather/maps-a-locations/focalpoint/ Exploit Author: Persian Hack Team Discovered by : Mojtaba...

Joomla FocalPoint 1.2.3 SQL Injection

Exploit Title: Joomla Component FocalPoint 1.2.3 - SQL Injection Date: 2017-03-23 Home : https://extensions.joomla.org/extensions/extension/maps-a-weather/maps-a-locations/focalpoint/ Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM [email protected] Home :...

Joomla! Component Coupon v3.5 - SQL Injection

Joomla! Component Coupon v3. 5 - SQL Injection Joomla! Component Coupon v3. 5, the presence of the parameter filter is not strict, leading to a sql injection vulnerability, if the other server is turned on the error display, can directly use, if you turn off the error display, you can use...

Joomla com_product v2. 2 parameters main_proid SQL injection vulnerability

Joomla comproduct 2.2 SQL injection Vulnerability Joomla comproduct 2.2, the presence of the parameter filter is not strict, leading to a sql injection vulnerability, if the other server is turned on the error display, can directly use, if you turn off the error display can be used based on the...

Nlance - Freelance Marketplace Software v2.2 - SQL Injection

Nlance - Freelance Marketplace Software v2. 2 - SQL Injection Nlance - Freelance Marketplace Software v2. 2, The presence of the parameter filter is not strict, leading to a sql injection vulnerability, if the other server is turned on the error display, can be directly used Google Dork: N/A...

Joomla! Component Guesser v1.0.4 - SQL Injection

Joomla! Component Guesser v1. 0. 4 - SQL Injection Joomla! Component Guesser v1. 0. 4, There is parameter filter is not strict, leading to a sql injection vulnerability, if the other server is turned on the error display, can be directly used Google Dork: inurl:index. php? option=comguesser...

Steam Profile Integration 2.0.11 - SQL injection

Steam Profile Integration 2.0.11 - SQL injection Exploit Title: IPS Community Suite - Steam Profile Integration 2.0.11 and below SQL injection Google Dork: inurl:tab=nodesteamsteamprofile Date: 13/03/2017 Exploit Author: DrWhat Vendor Homepage:...

Joomla com_product 2.2 SQL injection Vulnerability

Exploit for php platform in category web applications xBADGIRL21 N3W PUBLIC 3XPL0IT , 0day T == -- /-' // x21 Exploit Title : Joomla comproduct 2.2 SQL injection Vulnerability Exploit Author : xBADGIRL21 Dork : inurl:index.php?option=comproduct version : 2.2 Tested on: WIN7 MyBlog :...

Job Portal Script 3.0 Cross Site Scripting / SQL Injection Vulnerabilities

Exploit for php platform in category web applications Title: Job portal Script v3.0 - SQL Injection / Cross Site Scripting Credit: Bilal KARDADOU Vendor: www.jobportalscript.com Vendor URL: http://www.jobportalscript.com/index.html Product: Job portal site. Google Dork: categorysearch.php?indus=...

Joomla! Component JUX EventOn 1.0.1 - 'id' SQL Injection

Exploit Title: Joomla! Component JUX EventOn v1.0.1 - SQL Injection Google Dork: inurl:index.php?option=comjuxeventon Date: 04.03.2017 Vendor Homepage: http://joomlaux.com/ Software Buy: https://extensions.joomla.org/extensions/extension/calendars-a-events/events/jux-eventon/ Demo:...

Joomla Wisroyq 1.6 SQL Injection

@@@ @@@@@@@@@@@ @@@@@ @@@@@@@@@@ @@@ @@@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@@@@@@@@@ @@@ @ @@@@@@@@@@ @@@ @@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@ @@@ @@@ @@ @@@...