Source Technology SQL Injection

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x Official Website: http://www.1337day.com 0 1 x Support...

Upper Link LTD CMS SQL Injection

Exploit Title : upperlinkltd Cms Sql Injection Vulnerabilitiy Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir/forum Software Link : http://upperlink.com.ng/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : "powered by Upperlink...

PyroCMS 2.1.1 CRLF Injection And Stored XSS Vulnerability

Summary PyroCMS is a CMS built using the CodeIgniter PHP framework. Using an MVC architecture it was built with modularity in mind. Lightweight, themeable and dynamic. Description PyroCMS suffers from a stored XSS and HTTP Response Splitting vulnerability when parsing user input to the 'title' an...

PyroCMS 2.1.1 CRLF Injection / Stored Cross Site Scripting

PyroCMS 2.1.1 CRLF Injection And Stored XSS Vulnerability Vendor: HappyNinjas Ltd Product web page: http://www.pyrocms.com Affected version: 2.1.1 Community Summary: PyroCMS is a CMS built using the CodeIgniter PHP framework. Using an MVC architecture it was built with modularity in mind...

Debliteck - SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================================== Debliteck - SQL Injection Vulnerability ========================================================================== Title: - SQL Injection Vulnerability Author : D0m12...

Web2bizz Remote File UPLOAD

Exploit for php platform in category web applications +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Web2bizz Pvt. Ltd. RFUPLOAD Date : 20-04-2012 Author : TeaM MosTa Version : /N/ Dork : "Powered ...

Joomla Beatz 1.x Cross Site Scripting

OVERVIEW Beatz 1.x versions are vulnerable to Cross Site Scripting. 2. BACKGROUND Beatz is a set of powerful Social Networking Script Joomla! 1.5 plugins that allows you to start your own favourite artist band website. Although it is just a Joomla! plugin, it comes with full Joolma! bundle for...

Cyberoam Unified Threat Management: Insecure Password Handling

Hi, Please find below the details of a vulnerability I discovered in Cyberoam UTM device. The Vendor was notified, however I did not receive any response from Vendor despite repeated email reminders. SECURITY ADVISORY: cyberoam-utm-insecure-password-handling Affected Software: Cyberoam CR50ia...

Ricoh DC DL-10 SR10 FTP USER Command Buffer Overflow

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

vBShout Persistent XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: vBShout persistent XSS 0day Google Dork: "DragonByte Technologies Ltd" vbshout Date: 21/3/2012 9:00 PM EST Author: ToiL Software Link: http://www.dragonbyte-tech.com/ Version: all Tested on: all CVE : XSS Greeting from Team...

vBShout - Persistent Cross-Site Scripting

vBShout - Persistent Cross-Site Scripting Exploit Title: vBShout persistent XSS 0day Google Dork: "DragonByte Technologies Ltd" vbshout Date: 21/3/2012 9:00 PM EST Author: ToiL Software Link: http://www.dragonbyte-tech.com/ Version: all Tested on: all CVE : XSS Greeting from Team Odyessy. Today w...

vBShout - Persistent Cross-Site Scripting

Exploit Title: vBShout persistent XSS 0day Google Dork: "DragonByte Technologies Ltd" vbshout Date: 21/3/2012 9:00 PM EST Author: ToiL Software Link: http://www.dragonbyte-tech.com/ Version: all Tested on: all CVE : XSS Greeting from Team Odyessy. Today we will release a 0day for the vBulletin mo...

phpList 2.10.17 Remote SQL Injection / XSS Vulnerability

Exploit for php platform in category web applications phpList 2.10.17 Remote SQL Injection and XSS Vulnerability Vendor: phpList Ltd Product web page: http://www.phplist.com Affected version: 2.10.17 Summary: phplist is the world's most popular open source email campaign manager. phplist is free ...

Zend Server 5.6.0 - Multiple Remote Script Insertion Vulnerabilities

Zend Server 5.6.0 - Multiple Remote Script Insertion Vulnerabilities !-- Title: Zend Server 5.6.0 Multiple Remote Script Insertion Vulnerabilities Vendor: Zend Technologies Ltd. Product web page: http://www.zend.com Affected version: Zend Server 5.6.0 Zend Optimizer+ 4.1 Zend Code Tracing 1.0 Zen...

Infoserve SQL Vulnerability

Exploit for php platform in category web applications ============================================================================================================= - Optimiz3r - | | | | |--..-----.| | |.---.-..----.| |--..-----..----..-----.| |.----..--------..--.--. | | | | || -|| || || || | -||...

Dolphin 7.0.7 Cross Site Scripting

OVERVIEW Dolphin 7.0.7 and lower versions are vulnerable to Cross Site Scripting. 2. BACKGROUND Dolphin is the only "all-in-one" free community software platform for creating your own social networking, community or online dating site without any limits and under your full control. Dolphin comes...

Weibo.com Cross Site Scripting

Information --------------------------------- Name : XSS Vulnerability in WEIBO.COM Vendor Homepage : http://corp.sina.com.cn/eng/sinaindexeng.htm Vulnerability Type : Cross-Site Scripting Severity : High Researcher : Yuping Li at ADLab of Beijing Leadsec Technology Co., Ltd Description...

JVN#33021167: Pocket WiFi (GP02) vulnerable to cross-site request forgery

Pocket WiFi GP02 provided by eAccess Ltd. is a mobile wireless LAN router. Pocket WiFi GP02 contains a cross-site request forgery vulnerability. Impact If a user views a malicious page while logged in, settings of Pocket WiFi GP02 may be initialized, or Pocket WiFi GP02 may be rebooted. Solution...

Japan developing cyber weapons for Counter Attacks

Japan developing cyber weapons for Counter Attack Japanese technology firm Fujitsu is developing a 'seek and destroy' virus which could identify and combat hacking and other cyber threats in a more effective way. The weapon is the culmination of a 179 million yen three-year project entrusted by t...

Yahoo! Mail Cross Site Request Forgery

======================================================================= YAHOOMAIL CSRF Vulnerability ======================================================================= Vulnerability found in- Yahoomail Delete Contact module email [email protected] company AKS IT Services Pvt. Ltd...