2632 matches found
Cisco Linksys E4200 - Multiple Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ============================================= XSS, LFI in Cisco, Linksys E4200 Firmware ============================================= URL: http://www.cloudscan.me/2013/05/xss-lfi-linksys-e4200-firmware-0d.html...
Sulogu cookie based LFI and XSS vulnerabilities
Exploit for php platform in category web applications Exploit Title: Sulogu cookie based LFI and XSS vulnerabilities Google Dork: intext:"Powered by Su Logu - A free PHP blog by Fabiux version 0.6.2" Download Link:http://www.uploadmb.com/dw.php?id=1367006431 Version: 0.6.2 Tested on: Linux Bug...
phpMyAdmin 3.5.8 / 4.0.0-RC2 Code Execution / LFI / Overwrite
waraxe-2013-SA103 - Multiple Vulnerabilities in phpMyAdmin =============================================================================== Author: Janek Vind "waraxe" Date: 25. April 2013 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-103.html Description of vulnerable software:...
IceWarp Software LFI / Arbitary File Upload Vulnerabilities
Exploit for php platform in category web applications This is private exploit. You can buy it at https://0day.today...
[Panoptic] Automates the process of search and retrieval of content for common log and config files through LFI vulnerability
Panoptic is an open source penetration testing tool that automates the process of search and retrieval of content for common log and config files through LFI vulnerability. Official introductionary post can be found here. Also, you can find a sample run here. Help Menu Usage: panoptic.py --url...
Open-Xchange 6 XSS / LFI / SSRF / Hashing
Multiple security issues for Open-Xchange Server have been discovered and fixed. The vendor has chosen responsible full disclosure to publish security issue details. Users of the software have already been provided with patched versions. Proof regarding authenticity can be obtained from the...
Cisco Video Surveillance Operations Manager 6.3.2 XSS / LFI / Bypass
Cisco Video Surveillance Operations Manager version 6.3.2 suffers from cross site scripting, access bypass, and local file inclusion vulnerabilities. Exploit Title:Cisco Video Surveillance Operations Manager Multiple vulnerabilities Google Dork: intitle:"Video Surveillance Operations Manager Logi...
PHP-Fusion 7.02.05 XSS / LFI / SQL Injection Vulnerabilities
PHP-Fusion version 7.02.05 suffers from insecure backup handling, cross site scripting, local file inclusion, and remote SQL injection vulnerabilities. Multiple Vulnerabilities in PHP-Fusion 7.02.05 ===================================================== Author: Janek Vind "waraxe" Date: 27. Februa...
MyFi Wireless Disk 1.2 CSRF / LFI / Code Execution
Title: ====== MyFi Wireless Disk 1.2 iPad iPhone - Multiple Vulnerabilities Date: ===== 2013-02-13 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=864 VL-ID: ===== 864 Common Vulnerability Scoring System: ==================================== 8.3 Introduction:...
Smoke Loader LFI / File Deletion Vulnerabilities
Smoke Loader Command and Control panel suffers from local file inclusion and file deletion vulnerabilities. Two other vulnerabilities I forgot to mention, lfi and file deletion via control.php. The user must be logged into the administrative panel. 1. LFI GET...
Smoke Loader LFI / File Deletion
Two other vulnerabilities I forgot to mention, lfi and file deletion via control.php. The user must be logged into the administrative panel. 1. LFI GET http://evilserver.net/control.php?act=dwnshell&file=../../../../etc/passwd Enter username for Who are you? at evilsite.net:80:eviladmin Password:...
Air Disk Wireless 1.9 LFI / Command Injection
Title: ====== Air Disk Wireless 1.9 iPad iPhone - Multiple Vulnerabilities Date: ===== 2013-02-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=850 VL-ID: ===== 850 Common Vulnerability Scoring System: ==================================== 8.3 Introduction: ===========...
ArrowChat 1.5.61 - Multiple Vulnerabilities
ArrowChat 1.5.61 - Multiple Vulnerabilities Exploit Title: ArrowChat ?do=" enctype="multipart/form-data" --------------------...
WordPress A Page Flip Book 2.3 LFI
Remote file include vulnerability in WordPress A Page Flip Book plugin Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...
Joomla Plugins Scanner
This module scans a Joomla install for plugins and potential vulnerabilities. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Joomla Plugins Scanner', 'Description' = %q This module scans a...
Bitweaver 2.8.1 LFI
Local file include vulnerability in Bitweaver overlaytype parameter Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...
WebPagetest 2.6 LFI
Local file include vulnerability in WebPagetest about.php Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...
Agencia[e] XSS / LFI / SQL Injection
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= INDEPENDENT SECURITY RESEARCHER PENETRATION TESTING SECURITY -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Author: Ur0b0r0x Tiwtte: @Ur0b0r0x Email: [email protected] Line: GreyHat Exploit Title: Agenciae - SQL Injection / LFI / XSS Vulnerabilities Dork: intext:...
BabyGekko 1.2.2e XSS / LFI / SQL Injection Vulnerabilities
BabyGekko version 1.2.2e suffers from cross site scripting, local file inclusion, and remote SQL injection vulnerabilities. Product: BabyGekko 1.2.2e Vendor: babygekko.com Vulnerable Versions: 1.2.2e and probably prior Tested Version: 1.2.2e Vendor Notification: October 24, 2012 Vendor Patch:...