WordPress Plugin IBPS Online Exam 1.0 - SQL Injection / Cross-Site Scripting

Exploit Title: IBPS Online Exam Plugin for WordPress v1.0 - XSS SQLi Date: 2017-07-11 Exploit Author: 8bitsec Vendor Homepage: https://elfemo.com/demo/server2/order2032/ Software Link: https://codecanyon.net/item/ibps-online-exam-plugin-for-wordpress/20028534 Version: 1.0 Tested on: Kali Linux 2....

Internet Bug Bounty: heap-buffer-overflow (READ of size 61) in Perl_re_intuit_start()

Reported to the Perl security mailing list on 25 August 2016. ==17057==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x60800000b978 at pc 0x0000004a9201 bp 0x7ffe97551890 sp 0x7ffe97551048 READ of size 61 at 0x60800000b978 thread T0 0 0x4a9200 in interceptormemcmp...

TI Online Examination System 2.0 Admin Password Changer Exploit

Exploit for php platform in category web applications !/usr/bin/perl ------------------------------------------------------------------------ + TI Online Examination System 2.0 Admin Password Changer Exploit ------------------------------------------------------------------------ Discovered by Ju...

TI Online Examination System 2.0 Admin Login Bypass Vulnerability

Exploit for php platform in category web applications --------------------------------------------------------------------------------------- + TI Online Examination System = 2.0 sql injection Admin Login Bypass -------------------------------------------------------------------------------------...

Cookie Spoofing Vulnerability in Nanjing Guanbao Technology Development Co.

Nanjing Guanbao Technology Development Co. Guanbao online examination system is a comprehensive examination system. A cookie spoofing vulnerability exists in Nanjing Guanbao Technology Development Co. This vulnerability allows an attacker to forge a cookie to gain access to the corresponding...

Nanjing Guanbao Technology Development Co., Ltd. Guanbao online examination system has logical design flaws and loopholes

Nanjing Guanbao Technology Development Co. Guanbao online examination system is a comprehensive examination system. A logical design flaw exists in the FrmOtherRegUser.aspx page of the Nanjing Guanbao Technology Development Co. It allows an attacker to use the isnew parameter to determine whether...

Arbitrary File Download Vulnerability in Nanjing Guanbao Technology Development Co.

Nanjing Guanbao Technology Development Co. Guanbao online examination system is a comprehensive examination system. An arbitrary file download vulnerability exists in the Nanjing Guanbao Technology Development Co. The vulnerability exists because FileInfo fails to perform any operation on the tex...

TI Online Examination System 2.0 - SQL Injection

TI Online Examination System 2.0 - SQL Injection Exploit Title: TI Online Examination System v2.0 - SQL Injection Google Dork: N/A Date: 12.02.2017 Vendor Homepage: http://textusintentio.com/ Software Buy: https://codecanyon.net/item/ti-online-examination-system-v2/11248904 Demo:...

TI Online Examination System 2.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: TI Online Examination System v2.0 - SQL Injection Google Dork: N/A Date: 12.02.2017 Vendor Homepage: http://textusintentio.com/ Software Buy: https://codecanyon.net/item/ti-online-examination-system-v2/11248904 Demo:...

TI Online Examination System 2.0 - SQL Injection

Exploit Title: TI Online Examination System v2.0 - SQL Injection Google Dork: N/A Date: 12.02.2017 Vendor Homepage: http://textusintentio.com/ Software Buy: https://codecanyon.net/item/ti-online-examination-system-v2/11248904 Demo: http://oesv2.textusintentio.com/ Version: 2.0 Tested on: Win7 x64...

TI Online Examination System 2.0 SQL Injection

Exploit Title: TI Online Examination System v2.0 - SQL Injection Google Dork: N/A Date: 12.02.2017 Vendor Homepage: http://textusintentio.com/ Software Buy: https://codecanyon.net/item/ti-online-examination-system-v2/11248904 Demo: http://oesv2.textusintentio.com/ Version: 2.0 Tested on: Win7 x64...

CVE-2016-7936

Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode without -w which...

CVE-2016-7932

Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode without -w which...

CVE-2016-7973

Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode without -w which...

CVE-2017-5485

Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode without -w which...

CVE-2017-5484

Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode without -w which...

CVE-2017-5202

Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode without -w which...

CVE-2016-7993

Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode without -w which...

CVE-2016-7925

Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode without -w which...

SQL Injection Vulnerability in the Registration Page of the Online Examination System of Shenzhen Biaochi Information Technology Co.

The Enterprise Huitong Online Exam System is a set of professional application software suitable for the government, schools, enterprises and institutions to carry out internal network examination and evaluation through the Internet or LAN. There is a SQL injection vulnerability in the uAge and...