Honeywell IP-Camera HICC-1100PT - Local File Disclosure

Advisory Information ======================================== Title : Honeywell IP-Camera HICC-1100PT Local File Inclusion Vendor Homepage : https://www.asia.security.honeywell.com Remotely Exploitable : Yes Tested on Camera types : HICC-1100PT Reference :...

Karenderia Multiple Restaurant System 3.2 Cross Site Scripting

======================================================================== | Title : Karenderia Multiple Restaurant System 3.2 Xss/html inject vulnerability | Author : indoushka | email : [email protected] | Tested on : windows 8.1 FranASSais V.Pro | Version : v 3.2 | Vendor :...

Vanderbilt IP-Camera CCPW3025-IR / CVMW3025-IR Credential Disclosure

Advisory Information ======================================== Title : Vanderbilt IP-Camera CCPW3025-IR + CVMW3025-IR Remote Credentials Disclosure Vendor Homepage : https://is.spiap.com/ Remotely Exploitable : Yes Tested on Camera types : CCPW3025-IR , CVMW3025-IR Product References :...

C2S DVR Management IRDOME-II-C2S / IRBOX-II-C2S / DVR - Credentials Disclosure / Authentication Bypass

Advisory Information ======================================== Title : C2S DVR Management Remote Credentials Disclosure & Authentication Bypass Vendor Homepage : http://www.cash2s.com/en/ Remotely Exploitable : Yes Tested on Camera types : IRDOME-II-C2S, IRBOX-II-C2S, DVR Vulnerabilities :...

Siemens IP-Camera Unauthenticated Remote Credential Disclosure

Advisory Information ======================================== Title : SIEMENS IP-Camera Unauthenticated Remote Credentials Disclosure Vendor Homepage : https://www.siemens.com Remotely Exploitable : Yes Versions Affected : x.2.2.1798, CxMS2025V2458SP1, x.2.2.1798, x.2.2.1235 Tested on Camera...

SIEMENS IP-Camera CVMS2025-IR CCMS2025 - Credentials Disclosure

SIEMENS IP-Camera CVMS2025-IR CCMS2025 - Credentials Disclosure 1. Advisory Information ======================================== Title : SIEMENS IP-Camera Unauthenticated Remote Credentials Disclosure Vendor Homepage : https://www.siemens.com Remotely Exploitable : Yes Versions Affected :...

Joomla Extra Search 2.2.8 SQL Injection

Exploit Title : Joomla comextrasearch SQL injection Vulnerability Exploit Author : howucan Website : http://howucan.gr Dork : inurl:/index.php?option=comextrasearch establename Software link : http://www.joomlaboat.com/extra-search Software version : 2.2.8 video : http://adf.ly/1cmGen Tested on:...

Joomla Zh GoogleMap 8.1.2.0 Blind SQL Injection

======================================================================== | Title : Joomla comzhgooglemap V 8.1.2.0 Blind sql injection vulnerability | Author : indoushka | email : [email protected] | Tested on : windows 8.1 Français V.Pro | Version : 8.1.2.0 | Vendor :...

Streamo Online Radio And TV Streaming CMS - SQL Injection

Exploit for php platform in category web applications Application Name : Streamo - Online Radio And Tv Streaming CMS Google Dork : inurl:rjdetails.php?id= Exploit Author : Cyber Warrior | Bug Researchers Group | N4TuraL Author Contact : https://twitter.com/byn4tural Vendor Homepage :...

Streamo Online Radio And TV Streaming CMS - SQL Injection

Streamo Online Radio And TV Streaming CMS - SQL Injection Application Name : Streamo - Online Radio And Tv Streaming CMS Google Dork : inurl:rjdetails.php?id= Exploit Author : Cyber Warrior | Bug Researchers Group | N4TuraL Author Contact : https://twitter.com/byn4tural Vendor Homepage :...

Streamo Online Radio And TV Streaming CMS - SQL Injection

Application Name : Streamo - Online Radio And Tv Streaming CMS Google Dork : inurl:rjdetails.php?id= Exploit Author : Cyber Warrior | Bug Researchers Group | N4TuraL Author Contact : https://twitter.com/byn4tural Vendor Homepage : http://rexbd.net/ Vulnerable Type : SQL Injection Date : 2016-07-0...

Kagao 3.0 Cross Site Scripting / SQL Injection

Application Name : Kagao v3.0 - Professional Classified Market Google Dork : inurl:/cat1.php?id2= Exploit Author : Cyber Warrior | Bug Researchers Group | N4TuraL Vendor Homepage : http://kogaoscript.com/ Vulnerable Type : SQL Injection & Cross Site Scripting Date : 2016-06-26 Tested on : Windows...

Kagao 3.0 - Multiple Vulnerabilities

Kagao 3.0 - Multiple Vulnerabilities Application Name : Kagao v3.0 - Professional Classified Market Google Dork : inurl:/cat1.php?id2= Exploit Author : Cyber Warrior | Bug Researchers Group | N4TuraL Vendor Homepage : http://kogaoscript.com/ Vulnerable Type : SQL Injection & Cross Site Scripting...

OPAC KpwinSQL - SQL Injection

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ Product - OPAC KpwinSQL - SQL Injection Date - 6/24/2016 Author - bRpsd Skype: vegnox Vendor HomePage - http://www.kpsys.cz/ Product Download - http://www.kpsys.cz/kpwinsql/demo.html Product Version - / All SQL Version - Firebird 1.5.3 ...

CodoForum 3.4 - Persistent Cross-Site Scripting

Exploit Title: Codoforum v3.4 Stored Cross-Site Scripting Stored XSS Google Dork: intext:"powered by codoforum" Date: 01/06/2016 Exploit Author: Ahmed Sherif OffensiveBits Vendor Homepage: http://codologic.com/page/ Software Link: http://codoforum.com/index.php Version: V3.4 Tested on: Linux Mint...

Electroweb Online Examination System 1.0 SQL Injection

Exploit Title: Online examination system 1.0 - SQL Injection Google Dork: inurl:showtest.php?subid= Date: 2016/06/05 Exploit Author: Ali Ghanbari Vendor Homepage: http://www.onlinefreeprojectdownload.com Sofware Link :...

WEBONE CMS 6 SQL Injection

======================================================================== | Title : WEBONE CMS 6 SQL Injection Vulnerability | Author : indoushka | email : [email protected] | Tested on: windows 8.1 Français V.Pro | Vendor : http://webone.com.tw/...

WordPress Q&A (Focus Plus) FAQ Plugin 1.3.9.7 - Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: WordPress Q and A Focus Plus FAQ Full Path Disclosure and SQL Injection Google Dork: inurl:"wp-content/plugins/q-and-a" Date: 12-05-2016 Software Link: https://wordpress.org/plugins/q-and-a-focus-plus-faq/ Version: 1.3.9.7 and...

Zarafe.net CMS 1.0 SQL Injection

Exploit Title : Zarafe.net CMS SQL Injection Vulnerability Exploit Author : Iran Cyber Security Group ICSG Discovered By : 0x3a Vendor HomePage : www.zarrafe.net Version : 1.0 Q1 Date : 4 April, 2016 Tested On : Internet Explorer , Win 98 ----------------------------------------- SQL Injection :...

Quicksilver HQ VoHo Concept4E CMS 1.0 SQL Injection

Document Title: =============== Quicksilver HQ VoHo Concept4E CMS v1.0 - Multiple SQL Injection Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1816 Release Date: ============= 2016-04-06 Vulnerability Laboratory ID VL-ID:...