Alstrasoft e-Friends 5.12 - SQL Injection

Alstrasoft e-Friends 5.12 - SQL Injection Exploit Title: AlstraSoft E-Friends v5.12 Script - SQL Injection Google Dork: N/A Date: 04.02.2017 Vendor Homepage: http://www.alstrasoft.com/ Software Buy: http://www.alstrasoft.com/efriends.htm Demo: http://alstrahost.com/friends/ Version: 5.12 Tested o...

Alstrasoft e-Friends 5.12 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: AlstraSoft E-Friends v5.12 Script - SQL Injection Google Dork: N/A Date: 04.02.2017 Vendor Homepage: http://www.alstrasoft.com/ Software Buy: http://www.alstrasoft.com/efriends.htm Demo: http://alstrahost.com/friends/ Version:...

Alstrasoft e-Friends 5.12 - SQL Injection

Exploit Title: AlstraSoft E-Friends v5.12 Script - SQL Injection Google Dork: N/A Date: 04.02.2017 Vendor Homepage: http://www.alstrasoft.com/ Software Buy: http://www.alstrasoft.com/efriends.htm Demo: http://alstrahost.com/friends/ Version: 5.12 Tested on: Win7 x64, Kali Linux x64 Exploit Author...

Starting Page 1.3 - category SQL Injection

Starting Page 1.3 - category SQL Injection Exploit Title: Starting Page 1.3 "Add a Link" - SQL Injection Date: 11-01-2017 Software Link: http://software.friendsinwar.com/downloads.php?catid=2&downloadid=11 Exploit Author: Ben Lee Contact: [email protected] Category: webapps Tested on: Win7 1...

My Click Counter 1.0 - Authentication Bypass

x Type: Admin login bypass via SQLi x Vendor: http://software.friendsinwar.com/ x Script Name: My Click Counter x Script Version: 1.0 x Script DL: http://software.friendsinwar.com/downloads.php?catid=2&fileid=15 x Author: AnarchyAngel AKA Adam x Mail : anarchydotang31@gmaildotcom Navigate to...

XAMPP Control Panel - Denial Of Service

''' + Credits: John Page hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/XAMPP-CONTROL-PANEL-MEMORY-CORRUPTION-DOS.txt + ISR: ApparitionSec Vendor: ===================== www.apachefriends.org Product: =================== XAMPP Control Panel XAMPP...

XAMPP Control Panel Denial Of Service

Credits: John Page hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/XAMPP-CONTROL-PANEL-MEMORY-CORRUPTION-DOS.txt + ISR: ApparitionSec Vendor: ===================== www.apachefriends.org Product: =================== XAMPP Control Panel XAMPP is a...

WeChat has an arbitrary code execution vulnerability (badkernel)

WeChat is a free application from Tencent that provides instant messaging services for smart terminals. WeChat suffers from a remote arbitrary code execution vulnerability badkernel. Attackers using the vulnerability can carry out quasi-worm spread, and can be sent through the circle of friends a...

UNO ™ & Friends - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application UNO ™ & Friends published at the 'play' market has multiple vulnerabilities...

Waldo & Friends - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Waldo & Friends published at the 'play' market has multiple vulnerabilities...

Yukkuri My Friends - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Yukkuri My Friends published at the 'play' market has multiple vulnerabilities...

Princess Agnes and friends - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Princess Agnes and friends published at the 'play' market has multiple vulnerabilities...

Friends of the Forest - Free - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Friends of the Forest - Free published at the 'play' market has multiple vulnerabilities...

Spotty and Friends Playground - Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Spotty and Friends Playground published at the 'play' market has multiple vulnerabilities...

LEGO® Friends Art Maker - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application LEGO® Friends Art Maker published at the 'play' market has multiple vulnerabilities...

Season of Tree :Forest Friends - External URLs, Possible privilege escalation, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Season of Tree :Forest Friends published at the 'play' market has multiple vulnerabilities...

Thomas & Friends: Go Go Thomas - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Thomas & Friends: Go Go Thomas published at the 'play' market has multiple vulnerabilities...

Hanging With Friends - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Hanging With Friends published at the 'play' market has multiple vulnerabilities...

Psych! Outwit Your Friends - AWS Credentials, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Psych! Outwit Your Friends published at the 'play' market has multiple vulnerabilities...

Words With Friends Classic - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Words With Friends Classic published at the 'play' market has multiple vulnerabilities...