CVE-2020-35273

CVE-2020-35273 affects EgavilanMedia User Registration & Login System with Admin Panel 1.0. The vulnerability is a Cross-Site Request Forgery (CSRF) that can remotely gain privileges in the User Profile panel, allowing an attacker to update any user’s account. Root cause stated in the sources is ...

CVE-2020-35273: Cross-Site Request Forgery (CSRF)

EgavilanMedia User Registration & Login System with Admin Panel 1.0 is affected by Cross Site Request Forgery CSRF to remotely gain privileges in the User Profile panel. An attacker can update any user's account...

EgavilanMedia User Registration And Login System With Admin Panel 1.0 XSS

Exploit Title: EgavilanMedia User Registration & Login System with Admin Panel 1.0 - Stored Cross Site Scripting Exploit Author: Soushikta Chowdhury Vendor Homepage: http://egavilanmedia.com Software Link: http://egavilanmedia.com/user-registration-and-login-system-with-admin-panel/ Version: 1.0...

WebDamn User Registration And Login System With User Panel SQL Injection

Exploit Title: WebDamn User Registration & Login System with User Panel - SQLi Auth Bypass Date: 18-11-2020 Exploit Author: Aakash Madaan Vendor Homepage: https://webdamn.com/ Software Link : https://webdamn.com/user-management-system-with-php-mysql/ Version: N/A Default Tested on: Windows 10...

EgavilanMedia User Registration And Login System With Admin Panel 1.0 CSRF

Exploit Title: EgavilanMedia User Registration & Login System with Admin Panel 1.0 - CSRF Date: 01-12-2020 Exploit Author: Hardik Solanki Vendor Homepage: http://egavilanmedia.com Software Link:...

WebDamn User Registration & Login System with User Panel - SQLi Auth Bypass

Exploit Title: WebDamn User Registration & Login System with User Panel - SQLi Auth Bypass Date: 18-11-2020 Exploit Author: Aakash Madaan Vendor Homepage: https://webdamn.com/ Software Link : https://webdamn.com/user-management-system-with-php-mysql/ Version: N/A Default Tested on: Windows 10...

Nintendo Confirms Breach of 160,000 Accounts

Nintendo said over 160,000 accounts have been hacked, due to attackers abusing a legacy login system. Over the past few weeks, Nintendo gamers have been reporting suspicious activities on their accounts. According to the complaints, aired out on Twitter and Reddit, unauthorized actors were loggin...

Part-DB 0.4 Authentication Bypass

Exploit Title: Part-DB 0.4 - Authentication Bypass Date: 2019-10-26 Author: Marvoloo Vendor Homepage: https://github.com/Part-DB/Part-DB/ Software Link: https://github.com/Part-DB/Part-DB/archive/master.zip Version: 0.4 Tested on: Linux CVE : N/A Discription: Easy authentication bypass...

Information Disclosure

phpmyadmin is vulnerable to information disclosure. An attacker with access to the login system and configuration storage tables is able to retrieve local files due to an error in the transformation feature...

CVE-2018-19968

An attacker can exploit phpMyAdmin before 4.8.4 to leak the contents of a local file because of an error in the transformation feature. The attacker must have access to the phpMyAdmin Configuration Storage tables, although these can easily be created in any database to which the attacker has...

Google Login Security for High-Risk Users

Google has a new login service for high-risk users. It's good, but unforgiving. Logging in from a desktop will require a special USB key, while accessing your data from a mobile device will similarly require a Bluetooth dongle. All non-Google services and apps will be exiled from reaching into yo...

Xavier SQL Injection Vulnerability

Xavier - PHP is a login script and user management administration panel. Xavier suffers from a SQL injection vulnerability. Allows attackers to exploit the vulnerability to obtain sensitive information...

SQL Injection Vulnerability in vigocam Network Camera Login System

Veco Technology Hangzhou Co., Ltd. is a webcam manufacturer. A SQL injection vulnerability exists in the vigocam network camera login system. The vulnerability allows attackers to exploit the vulnerability to gain access to sensitive database information...

Command Execution Vulnerability in NETRUN VPN Internet Behavior Management Router Login System

Nanjing Runye Technology Co., Ltd. specializes in computer software, hardware research and development, sales and system integration. A command execution vulnerability exists in the NETRUN VPN Internet Behavior Management Router login system. It allows attackers to remotely execute commands and...

Libsys图书管理系统 V5.5 变量覆盖漏洞

登陆页面 sessionstart ; if isset $REQUEST'username' $strUser = trim $REQUEST'username' ; $strInput = trim $REQUEST'passwd' ; $strMsg = "用户名或者密码错误"; switch $strUser case "opacadmin" : $strPassWd = $strPassWdFile; $strMsg = verifypwd $strInput, $strPassWd ; if $strMsg == true $SESSION'ADMINUSER' =...

id.nan-net.jp vulnerability

Vulnerable URL: http://id.nan-net.jp/system/login/link.cgi?jump=http://xssposed.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 2 VIP website status:| No Check...

TurboMail /mailmain 弱密码漏洞

No description provided by source. !/usr/bin/env python coding: utf-8 import re import random import threading from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register class MyThreadthreading.Thread: def initself,func,args,name='':...

QQ input method pure version 1. 1 The presence of IME vulnerability-vulnerability warning-the black bar safety net

In the login system before, or Telnet before you can open the input method selected help, you can open the IE browser, by saving the page you can open the computer file list. The main is now popular PC end windows 8 system...

FlatFile Login System - Remote Password Disclosure Vulnerability

No description provided by source...

Simple Text-File Login script 1.0.6 - (DD/RFI) Multiple Vulnerabilities

No description provided by source. START 0x01 Informations: Script : Simple Text-File Login script 1.0.6 Download : http://www.hotscripts.com/jump.php?listingid=36777&jumptype=1 Vulnerability : Remote File Inclusion / Sensitive Data Disclosure Author : Osirys Contact : osirysatlivedotit Notes :...