PT-2017-16755

Name of the Vulnerable Software and Affected Versions Emirates NBD KSA app versions 2.0.1 through 2.1.0 Emirates NBD KSA app versions 3.10.0 through 3.10.4 Description The issue concerns the failure to verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof serve...

CVE-2017-5915: Improper Certificate Validation

The Emirates NBD Bank P.J.S.C Emirates NBD KSA app 3.10.0 through 3.10.4 UAE and 2.0.1 through 2.1.0 KSA for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

ksa-teachers.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-171718 Description| Value ---|--- Affected Website:| ksa-teachers.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

PHP-Fusion Remote Command Execution Vulnerability

No description provided by source. Exploit Title: PHP-Fusion Remote Command Execution Vulnerability Date: 2010/07/19 Author: ViRuS Qalaa Email: [email protected] My Sites : www.pal-mafia.com & www.vbspiders.com Script home: http://www.phpfusion-ar.com download Script:...

almnzm 2.4 - Cross-Site Request Forgery (Add Admin)

almnzm 2.4 - Cross-Site Request Forgery Add Admin Title: almnzm 2.4 Priv8 Almnzm 2.4 CSRF Exploit!! Add New Admin :D By: HaNniBaL KsA HK www.r00t-s3c.com UserName: PassWord: E-mail: ! -- NOTE!: The value id'z for admin privileges can be cha...

almnzm 2.4 <= CSRF Vulnerability (Add Admin)

Exploit for php platform in category web applications Title: almnzm 2.4 Priv8 Almnzm 2.4 CSRF Exploit!! Add New Admin :D By: HaNniBaL KsA HK www.r00t-s3c.com UserName: PassWord: E-mail: ! -- NOTE!: The value id'z for...

almnzm 2.4 - Cross-Site Request Forgery (Add Admin)

Title: almnzm 2.4 Priv8 Almnzm 2.4 CSRF Exploit!! Add New Admin :D By: HaNniBaL KsA HK www.r00t-s3c.com UserName: PassWord: E-mail: ! -- NOTE!: The value id'z for admin privileges can be change in any site :D "down in checkbox'z!" ^ so ? .. ma...

Unfixed XSS vulnerability at words.co.il

Security researcher HaNniBaL KsA, has submitted on 12/03/2011 a cross-site-scripting XSS vulnerability affecting words.co.il, which at the time of submission ranked 248856 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/03/2011. It is...

WordPress plugin photoracer SQL injection Vulnerability

Exploit for php platform in category web applications r00t-s3cur1ty cr3w rS HaNniBaL KsA - Dr.Silver - MR.DH email protected: ./rS Title : WordPress plugin photoracer Multi Vulnerability Vendor : http://www.dhzgw.com Author : HaNniBaL KsA HK Team : r00t-s3cur1ty cr3w rS E-mail : email protected...

3 Brazilian Government sites hacked by "kinG oF coNTroL" KSA Hacker

3 Brazilian Government sites hacked by "kinG oF coNTroL" KSA Hacker Hacked sites : https://campinagrande.pb.gov.br/ https://guarai.to.gov.br/ https://camaradeitapuranga.go.gov.br/ News Source : Kai Farmer...

Dawaween V 1.03 SQL Injection Vulnerability

Exploit for php platform in category web applications =========================================== Dawaween V 1.03 SQL Injection Vulnerability =========================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\...

Textpattern CMS 4.2.0 Remote File Inclusion

Remote File Inclusion Vulnerability ------------------------------------------------------------------------------ Textpattern index.php -------------------------------------------------------------- + Author : Sn!pEr.S!Te Hacker + Email : [email protected] + Inj3ct0r Team Hacker + 28-8-201...

Free PHP Photo Gallery Script Remote File Inclusion

Exploit Title: Free PHP photo gallery script Remote File inclusion Vulnerability Date: 2010/07/21 Author: ViRuS Qalaa Email: [email protected] My Sites : www.pal-mafia.com & www.vbspiders.com Script home: http://www.phpgalleryscript.org download Script: http://phpweby.com/downloads/gallery Tested on:...

PHP-Fusion - Remote Command Execution

PHP-Fusion - Remote Command Execution Exploit Title: PHP-Fusion Remote Command Execution Vulnerability Date: 2010/07/19 Author: ViRuS Qalaa Email: [email protected] My Sites : www.pal-mafia.com & www.vbspiders.com Script home: http://www.phpfusion-ar.com download Script:...

PHP-Fusion Remote Command Execution

Exploit Title: PHP-Fusion Remote Command Execution Vulnerability Date: 2010/07/19 Author: ViRuS Qalaa Email: [email protected] My Sites : www.pal-mafia.com & www.vbspiders.com Script home: http://www.phpfusion-ar.com download Script: http://www.phpfusion-ar.com/downloads.php?catid=1&downloadid=91...

bbPress v1.0.2 Cross-Site Request Forgery

Exploit for php platform in category web applications ========================================= bbPress v1.0.2 Cross-Site Request Forgery ========================================= : Software : bbPress v 1.0.2 CSRF : site : www.bbpress.org : date : 29/6/2010 : Author : saudi0hacker : Date : May 25...

Speedy 1.0 - Arbitrary File Upload

Speedy 1.0 - Arbitrary File Upload Author: ViRuS Qalaa Email: [email protected] My Sites : www.pal-mafia.com & www.vbspiders.com Script home: http://www.speedy-up.com/ Tested on: Windows Team hacker:ViRuS Qalaa & HaCkEr aRaR & ViRuS KSAX-MaN HaCk3r TeaM :::::::::::::::::::::::::...

livetv-sql.txt

|| || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...

Tips Complete Website 1.2.0 - tipid SQL Injection

Tips Complete Website 1.2.0 - tipid SQL Injection || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...

PHP Classifieds Script <= 05122008 SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ================================================================ PHP Classifieds Script Kings of injection | | // | | | |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| Found by : Cyb3r-1sT Groups : Inj3ct0r...