Luis Bernardo SQL Injection Vulnerability

Luis Bernard is a web application development framework. A SQL injection vulnerability exists in the idplayer parameter of the formseeplayer.php page of the Luis Bernard system. Because the program fails to adequately filter user-submitted input, an attacker could use this vulnerability to take...

SuperScan 4.1 - Windows Enumeration HostnameIPURL Field Overflow (SEH)

SuperScan 4.1 - Windows Enumeration HostnameIPURL Field Overflow SEH !/usr/bin/env python -- coding: utf-8 -- Exploit Title : SuperScan 4.1 Windows Enumeration Hostname/IP/URL Field SEH Overflow Crash PoC Discovery by : Luis Martínez Email : [email protected] Discovery Date : 18/11/2015...

SuperScan 4.1 - Tools HostnameIPURL Field Buffer Overflow

SuperScan 4.1 - Tools HostnameIPURL Field Buffer Overflow !/usr/bin/env python -- coding: utf-8 -- Exploit Title : SuperScan 4.1 Tools Hostname/IP/URL Field Buffer Overflow Crash PoC Discovery by : Luis Martínez Email : [email protected] Discovery Date : 18/11/2015 Vendor Homepage :...

SuperScan 4.1 - Windows Enumeration Hostname/IP/URL Field Overflow (SEH)

!/usr/bin/env python -- coding: utf-8 -- Exploit Title : SuperScan 4.1 Windows Enumeration Hostname/IP/URL Field SEH Overflow Crash PoC Discovery by : Luis Martínez Email : [email protected] Discovery Date : 18/11/2015 Vendor Homepage : http://www.foundstone.com Software Link :...

QNap QVR Client 5.1.0.11290 - Crash PoC

Exploit for windows platform in category dos / poc !/usr/bin/env python -- coding: utf-8 -- Exploit Title : QNap QVR Client 5.1.0.11290 Crash PoC Discovery by : Luis Martínez Email : email protected Discovery Date : 05/11/2015 Vendor Homepage: http://www.qnapsecurity.com/n/en/ Software Link :...

QNap QVR Client 5.1.0.11290 - Crash (PoC)

!/usr/bin/env python -- coding: utf-8 -- Exploit Title : QNap QVR Client 5.1.0.11290 Crash PoC Discovery by : Luis Martínez Email : [email protected] Discovery Date : 05/11/2015 Vendor Homepage: http://www.qnapsecurity.com/n/en/ Software Link :...

Sam Spade 1.14 - Scan Addresses Buffer Overflow

!/usr/bin/python -- coding: cp1252 -- EXPLOIT TITLE: Sam Spade 1.14 Scan from IP address Field Exploit AUTHOR: VIKRAMADITYA "-OPTIMUS" Credits: Luis Mart�nez Date of Testing: 2nd November 2015 Download Link : https://www.exploit-db.com/apps/7ad7569341d685b4760ba4adecab6def-spade114.exe Tested On ...

Sam Spade 1.14 - Scan From IP Address Field SEH Overflow Crash PoC

Exploit for windows platform in category dos / poc !/usr/bin/env python -- coding: utf-8 -- Exploit Title : Sam Spade 1.14 Scan from IP address Field SEH Overflow Crash PoC Discovery by : Luis Martínez Email : email protected Discovery Date : 20/10/2015 Vendor Homepage : http://samspade.org...

Phishers Use Luis Suarez Bite as Bait

The World Cup is the most popular sporting event on the planet, and not just among sports fans; attackers and scammers of all stripes love it as well, as it presents a unique opportunity to separate victims from their money. Phishing and malware scams tied to the World Cup in Brazil have been...

SIESTTA 2.0 (LFI/XSS) Multiple Vulnerabilities

No description provided by source. SIESTTA 2.0 LFI/XSS Multiple Vulnerabilities download: http://ramoncastro.es/siesttaold/ Author: Jose Luis Gongora Fernandez 'aka' JosS mail: sys-projectathotmaildotcom site: http://www.hack0wn.com/ team: Spanish Hackers Team - SHT Hack0wn Security Project!! Thi...

Simple Document Management System 1.1.5 / 2.0 SQL Injection

Simple Document Management System 1.1.5 / 2.0 Multiple Vulnerabilities bug found by Jose Luis Gongora Fernandez a.k.a JosS twitter: @JossGongora contact: sys-projectathotmaildotcom website: http://www.hack0wn.com/ download: http://mirror.us.cc.com.au/pub/cafuego/sdms ----------- version 2.0...

Trend Micro Data Loss Prevention Virtual Appliance 5.5 - Directory Traversal

Software: Trend Micro Data Loss Prevention Virtual Appliance 5.5 Vulnerability: Directory Traversal Threat Level: Serious 5/5 Download: http://support.trendmicro.com.cn/TM- Product/Product/DLP/5.5/Manager/5.5GM/DLPVA- 5.5.1294-i386-DVD.iso Discovery Date: 27/05/2011 Remote: Yes Author Site Email:...

Harvard.edu Local File Inclusion

Hey, I've tried reporting issues to Harvard University tons of times in the past but they rarely respond and even more rarely commend researchers for finding vulnerabilities so I decided that full-disclosure was the way to get Harvard off of their crimson asses and patch this vulnerability. PoC...

Multi-lingual E-Commerce System 0.2 Multiple Remote File Inclusion

Exploit for php platform in category web applications ================================================================== Multi-lingual E-Commerce System 0.2 Multiple Remote File Inclusion ================================================================== bug found by Jose Luis Gongora Fernandez...

Zendesk Multiple Vulnerabilities

Exploit for multiple platform in category web applications ================================ Zendesk Multiple Vulnerabilities ================================ /????????????????????????????????\ :Zendesk Multiple Vulnerabilities : / /Discovered By: \ |Luis Santana | / Overview ?????????? Luis...

Unfixed XSS vulnerability at thevault.stridegum.com

Security researcher Luis Santana, has submitted on 08/04/2010 a cross-site-scripting XSS vulnerability affecting thevault.stridegum.com, which at the time of submission ranked 279882 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/07/2010. I...

AJ HYIP MERIDIAN SQL Injection

AJ HYIP MERIDIAN news.php id Blind SQL Injection Vulnerability bug found by Jose Luis Gongora Fernandez a.k.a JosS contact: sys-projectathotmail.com website: http://www.hack0wn.com/ - site: http://www.ajsquare.com/products/ajhyip/index.php - about AJ HYIP: AJ HYIP is a complete financial tool wit...

AJ HYIP PRIME - welcome.php?id Blind SQL Injection

AJ HYIP PRIME - welcome.php?id Blind SQL Injection AJ HYIP PRIME welcome.php id Blind SQL Injection Vulnerability bug found by Jose Luis Gongora Fernandez a.k.a JosS contact: sys-projectathotmail.com website: http://www.hack0wn.com/ - site: http://www.ajsquare.com/products/ajhyip/index.php - abou...

AJ HYIP MERIDIAN - news.php?id Blind SQL Injection

AJ HYIP MERIDIAN - news.php?id Blind SQL Injection AJ HYIP MERIDIAN news.php id Blind SQL Injection Vulnerability bug found by Jose Luis Gongora Fernandez a.k.a JosS contact: sys-projectathotmail.com website: http://www.hack0wn.com/ - site: http://www.ajsquare.com/products/ajhyip/index.php - abou...

AJ HYIP PRIME - 'welcome.php?id' Blind SQL Injection

AJ HYIP PRIME welcome.php id Blind SQL Injection Vulnerability bug found by Jose Luis Gongora Fernandez a.k.a JosS contact: sys-projectathotmail.com website: http://www.hack0wn.com/ - site: http://www.ajsquare.com/products/ajhyip/index.php - about AJ HYIP: AJ HYIP is a complete financial tool wit...