Joomla! Component onisQuotes 2.5 - tag SQL Injection

Joomla! Component onisQuotes 2.5 - tag SQL Injection Exploit Title: Joomla Component onisQuotes 2.5 - SQL Injection Date: 2017-02-11 Home : https://extensions.joomla.org/extensions/extension/news-display/quotes/onisquotes/ Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM...

Joomla! Component Vik Booking 1.7 - SQL Injection

Exploit Title: Joomla Component Vik Booking 1.7 - SQL Injection Date: 2017-02-11 Home : https://extensions.joomla.org/extension/vik-booking/ Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM [email protected] Home : http://persian-team.ir/ Telegram Channel AND Demo:...

Joomla JTAG Calendar 6.2.4 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla Component JTAG Calendar 6.2.4 - SQL Injection Vender Home : https://extensions.joomla.org/extension/jtag-calendar/ Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM Home : http://persian-team.ir/ Tested on:...

Joomla! Component JTAG Calendar 6.2.4 - search SQL Injection

Joomla! Component JTAG Calendar 6.2.4 - search SQL Injection Exploit Title: Joomla Component JTAG Calendar 6.2.4 - SQL Injection Date: 2017-1-28 Vender Home : https://extensions.joomla.org/extension/jtag-calendar/ Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM Home :...

Joomla Store Locator 2.3.1.0 Cross Site Scripting

Exploit Title: Joomla Component Store Locator 2.3.1.0 - Cross-site scripting Date: 2017-1-28 Home : https://extensions.joomla.org/extension/store-locator/ Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM Home : http://persian-team.ir/ Tested on: Windows AND Linux Telegram Channel ...

Joomla! Component JTAG Calendar 6.2.4 - 'search' SQL Injection

Exploit Title: Joomla Component JTAG Calendar 6.2.4 - SQL Injection Date: 2017-1-28 Vender Home : https://extensions.joomla.org/extension/jtag-calendar/ Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM Home : http://persian-team.ir/ Tested on: Windows AND Linux Telegram Channel :...

openWYSIWYG Insert Image 1.4.7 Arbitrary File Upload Vulnerability

openWYSIWYG Insert Image version 1.4.7 suffers from a remote arbitrary unauthenticated file upload vulnerability Exploit Title: openWYSIWYG | Insert Image v1.4.7 / Unauthenticated File Upload Date: 2017-1-15 Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM Home :...

openWYSIWYG Insert Image 1.4.7 Arbitrary File Upload

Exploit Title: openWYSIWYG | Insert Image v1.4.7 / Unauthenticated File Upload Date: 2017-1-15 Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM Home : http://persian-team.ir/ Tested on: Windows AND Linux Telegram Channel : @PersianHackTeam Google Dork :...

TP-LINK TD-W8151N - Denial of Service

TP-LINK TD-W8151N - Denial of Service Exploit Title: TP-LINK TD-W8151N - Denial of Service Date: 2016-12-13 Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM Home : http://persian-team.ir/ Tested on: Windows AND Linux Demo : https://www.youtube.com/watch?v=WrGgHvhiCGg POC : flagFre...

TP-LINK TD-W8151N - Denial of Service

Exploit Title: TP-LINK TD-W8151N - Denial of Service Date: 2016-12-13 Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM Home : http://persian-team.ir/ Tested on: Windows AND Linux Demo : https://www.youtube.com/watch?v=WrGgHvhiCGg POC : flagFresh Parameter Vulnerable POST...

TP-LINK TD-W8151N Denial Of Service

Exploit Title: TP-LINK TD-W8151N - Denial of Service Date: 2016-12-13 Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM Home : http://persian-team.ir/ Tested on: Windows AND Linux Demo : https://www.youtube.com/watch?v=WrGgHvhiCGg POC : flagFresh Parameter Vulnerable POST...

ARG-W4 ADSL Router - Multiple Vulnerabilities

Exploit Title: ARG-W4 ADSL Router - Multiple Vulnerabilities Date: 2016-12-11 Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM Tested on: Windows AND Linux Exploit Demo : http://persian-team.ir/showthread.php?tid=196 1 - Denial of Service !/usr/bin/python import urllib2 import...

ARG-W4 ADSL Router - Multiple Vulnerabilities

ARG-W4 ADSL Router - Multiple Vulnerabilities Exploit Title: ARG-W4 ADSL Router - Multiple Vulnerabilities Date: 2016-12-11 Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM Tested on: Windows AND Linux Exploit Demo : http://persian-team.ir/showthread.php?tid=196 1 - Denial of...

TP-LINK TD-W8951ND - Denial of Service Exploit

Exploit for hardware platform in category dos / poc Exploit Title: TP-LINK TD-W8951ND - Denial of Service Date: 2016-12-07 Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM Tested on: Windows AND Linux Demo Construction : https://youtu.be/7mvrW3mtVE !/usr/bin/python import urllib...

TP-LINK TD-W8951ND Denial Of Service

Exploit Title: TP-LINK TD-W8951ND - Denial of Service Date: 2016-12-07 Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM Tested on: Windows AND Linux Demo Construction : https://youtu.be/7mvrW3mtVE !/usr/bin/python import urllib site=rawinput"Enter IP Address : " if...

TP-LINK TD-W8951ND - Denial of Service

Exploit Title: TP-LINK TD-W8951ND - Denial of Service Date: 2016-12-07 Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM Tested on: Windows AND Linux Demo Construction : https://youtu.be/7mvrW3mtVE !/usr/bin/python import urllib site=rawinput"Enter IP Address : " if...

WordPress KBoard Cross Site Scripting

Exploit Title : WordPress Plugin KBoard - Cross Site Scripting Exploit Author : Persian Hack Team Vendor Homepage : http://www.cosmosfarm.com/products/kboard Category Webapps Tested on Win Version : Before 4.4 Date 2016/09/26 PoC =Cross Site Scripting : Payload : 1" onmouseover=prompt"Persian"...

Zarafe CMS 1.0 Cross Site Request Forgery

Exploit Title : Zarafe CMS 1.0 / CSRF Rest Admin Password Exploit Author : Persian Hack Team Vendor Homepage : http://www.zarrafeh.net/ Category: Webapps Tested on: Win Version: 1.0 Date: 2016/08/27 PoC: Exploit codes: ================ Rest Admin Password The Code for zarafe.html is Zarafe CMS CS...

CMS Elevel 1.0 Cross Site Scripting / SQL Injection

Exploit Title : CMS Elevel 1.0 - SQL Injection / XSS Exploit Author : Persian Hack Team Vendor Homepage : http://www.elevel.it/privacy.php Google Dork : "Web Design by Elevel" inurl:news.php Category: Webapps Tested on: Win Version: 1.0 Date: 2016/06/19 PoC: id Parameter Vulnerable To SQL / XSS...

Joomla BT Media Component (com_bt_media) - SQL Injection

Exploit for php platform in category web applications Exploit Title : Joomla combtmedia - SQL Injection Exploit Author : Persian Hack Team Vendor Homepage : http://extensions.joomla.org/extension/bt-media-gallery Category: Webapps Tested on: Win Version: 1.0 Date: 2016/06/19 PoC: categories0=...