62 matches found
X (Formerly Twitter): Remote Unrestricted file Creation/Deletion and Possible RCE.
Hello Gents, During my research on Twitter BBP, I found below domain name: Reverb.twitter.com Background: We worked with Twitter to develop TwitterReverb, an application that reveals how conversations arise and reverberate across the entire Twitter landscape. The custom application allows visitor...
Web Based Alumni Tracking System 0.1 - SQL Injection
Exploit Title.............. Web Based Alumni Tracking System Multiple Vulnerability Google Dork................ N/A Date....................... 14/10/2016 Exploit Author............. lahilote Vendor Homepage............ http://www.sourcecodester.com/php/10832/web-based-alumni-tracking-system.html...
Simple Shopping Cart Application 0.1 - SQL Injection
Simple Shopping Cart Application 0.1 - SQL Injection Exploit Title.............. Simple Shopping Cart Application SQL Injection Google Dork................ inurl:"product-details.php?prodid=" "Designed by FBC Students" Date....................... 14/10/2016 Exploit Author............. lahilote...
Simple Shopping Cart Application 0.1 - SQL Injection
Exploit Title.............. Simple Shopping Cart Application SQL Injection Google Dork................ inurl:"product-details.php?prodid=" "Designed by FBC Students" Date....................... 14/10/2016 Exploit Author............. lahilote Vendor Homepage...
how-to-all.com XSS vulnerability
Vulnerable URL: https://how-to-all.com/%D0%BC%D0%BE%D1%80%D1%84%D0%BE%D0%BB%D0%BE%D0%B3%D0%B8%D1%8F:%3Csvg%20onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...
NRSS Reader 0.3.9 - Local Stack Overflow
NRSS Reader 0.3.9 - Local Stack Overflow Exploit developed using Exploit Pack v5.4 Exploit Author: Juan Sacco - http://www.exploitpack.com - [email protected] Program affected: NRSS RSS Reader Version: 0.3.9-1 Tested and developed under: Kali Linux 2.0 x86 - https://www.kali.org Program...
How to Draw Christmas - Dangerous filesystem permissions, Dynamic Code Loading, External URLs vulnerabilities
HackApp vulnerability scanner discovered that application How to Draw Christmas published at the 'play' market has multiple vulnerabilities...
Linux/x86_x64 - execve/bin/sh - 26 bytes
Linux/x86x64 - execve/bin/sh - 26 bytes. Shellcode exploit for linx86-64 platform / --------------------------------------------------------------------------------------------------- Linux/x86x64 - execve/bin/sh - 26 bytes Ajith Kp @ajithkp560 http://www.terminalcoders.blogspot.com Om Asato Maa...
STIMS Cutter 1.1.3.20 - Buffer Overflow (Denial of Service) (PoC)
Exploit Title: STIMS CUTTER OVERFLOW SEH OVERWRITE Date: 19 Feb 2016 Exploit Author: Shantanu Khandelwal Vendor Homepage: http://www.stimslabs.com/ Software Link: http://www.stimslabs.com/en/cutter/STIMSCutterEnSetup.exe Version: 1.1.3.20 Tested on: Windows XP SP3 CVE : UNKNOWN ==============HOW ...
PentestBox - Portable Penetration Testing Distribution for Windows Environments
PentestBox is not like other Penetration Testing Distributions which runs on virtual machines. It is created because more than 50% of penetration testing distributions users uses windows. So it provides an efficient platform for Penetration Testing on windows platform. Check out demo video: Easy ...
CVE-2014-7360
CVE-2014-7360 affects the Android app How To Boil Eggs (com.appmakr.app842173), version 251333. The root cause is lack of SSL X.509 certificate verification, allowing MITM attackers to spoof servers and obtain sensitive information via crafted certificates. Reported impact aligns with partial con...
Inferno vBShout <= 2.5.2 - SQL Injection
No description provided by source. ==================================================================== Inferno vBShout SQLI 0day = 2.5.2 ==================================================================== / / / / / / / / / // / / / / // / / / / / // / / // /// ///...
Freelancer.com XSS + Cookie Grabber
Stored XSS in Freelancer.com + Cookie Stealer. The package contains the how-to guide, PHP scriptcookie grabber and XSS vector in order. This is private exploit. You can buy it at https://0day.today...
How-To Video: Securing Facebook
Facebook’s active-user count is rapidly approaching one billion. The world’s largest social network, which has long been a popular target and platform for attackers, will only become a more relevant outlet for scams and other fraud as it continues to grow. While the target grows, so too does the...
Inferno vBShout 2.5.2 - SQL Injection
==================================================================== Inferno vBShout SQLI 0day settings'scommands'; if $this-vbulletin-db-affectedrows vbulletin-db-queryfirst"select from " . TABLEPREFIX . "infernoshoutusers where suser='$this-vbulletin-userinfo'userid''" $this-vbulletin-db-query"...
Inferno vBShout 2.5.2 - SQL Injection
Inferno vBShout 2.5.2 - SQL Injection ==================================================================== Inferno vBShout SQLI 0day settings'scommands'; if $this-vbulletin-db-affectedrows vbulletin-db-queryfirst"select from " . TABLEPREFIX . "infernoshoutusers where...
#anonsec : Anonymous Hackers guide how to Mesh Network !
anonsec : Anonymous Hackers guide how to Mesh Network ! They Wrote the message : Yes, there is work to do. The idea is to write a how-to on building mesh networks. The n00bs must understand it. Mesh networks are usefull, as they cannot be censored nor shut down. Later on that How-to can become pa...
eoCMS 0.9 nightly Mullti Vulnerability
Exploit for php platform in category web applications ====================================== eoCMS 0.9 nightly Mullti Vulnerability ====================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/...
Uploaderv6.1 Remote File Upload Vulnerability
Exploit for php platform in category web applications ============================================= Uploaderv6.1 Remote File Upload Vulnerability ============================================= Uploaderv6.1 Remote File Upload Vulnerability + Author : St0rM Hacker + Email :email protected + Site : :...
Becky! Internet Mail Read Receipt请求缓冲区溢出漏洞
BUGTRAQ ID: 33756 Becky! Internet Mail是一个常用的Email客户端软件。 Becky! Internet Mail客户端没有正确地处理read receipt请求。如果用户查看了特制的邮件并允许发送read receipt请求的话，就可以触发缓冲区溢出，导致执行任意代码。 RimArts Becky! Internet Mail 2.48.02 厂商补丁： RimArts ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.rimarts.co.jp/index.html 在General...