ApPHP MicroBlog 1.0.2 - Persistent Cross-Site Scripting

ApPHP MicroBlog 1.0.2 - Persistent Cross-Site Scripting Exploit Title : ApPHP MicroBlog 1.0.2 - Stored Cross Site Scripting Author : Besim Google Dork : Date : 12/10/2016 Type : webapps Platform : PHP Vendor Homepage : - Software link : http://www.scriptdungeon.com/jump.php?ScriptID=9162...

ApPHP MicroBlog 1.0.2 - Persistent Cross-Site Scripting

Exploit Title : ApPHP MicroBlog 1.0.2 - Stored Cross Site Scripting Author : Besim Google Dork : Date : 12/10/2016 Type : webapps Platform : PHP Vendor Homepage : - Software link : http://www.scriptdungeon.com/jump.php?ScriptID=9162 Description : Vulnerable link :...

HP Client - Automation Command Injection / Remote Code Execution

Exploit for multiple platform in category local exploits Exploit Title: HP Client - Automation Command Injection Date: 10/10/2016 Exploit Author: SlidingWindow , Twitter: @kapilkhot Vendor Homepage: Previosuly HP, now http://www.persistentsys.com/ Version: Tested on version 7.9 but should work on...

Contenido v4.9.11 - (Backend) Multiple XSS Vulnerabilities

Document Title: =============== Contenido v4.9.11 - Backend Multiple XSS Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1928 Release Date: ============= 2016-10-10 Vulnerability Laboratory ID VL-ID: ====================================...

HP Client Automation 7.9 Command Injection

Exploit Title: HP Client - Automation Command Injection Date: 10/10/2016\n Exploit Author: SlidingWindow , Twitter: @kapilkhot Vendor Homepage: Previosuly HP, now http://www.persistentsys.com/ Version: Tested on version 7.9 but should work on 8.1, 9.0, 9.1 too Tested on: Windows 7 and CentOS...

Typesettercms v5.0.1 - (Delete Files) CSRF Vulnerability

Product & Service Introduction: =============================== Typesetter is an open source CMS written in PHP focused on ease of use with True WYSIWYG editing and flat-file storage. Typesetter CMS, A Free and Easy CMS for everyone. Copy of the Vendor Homepage: http://www.typesettercms.com...

Flash Operator Panel 2.31.03 Script Insertion

Document Title: =============== Flash Operator Panel 2.31.03 - CSV Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1908 Release Date: ============= 2016-10-05 Vulnerability Laboratory ID VL-ID: ===================================...

Flash Operator Panel 2.31.03 - CSV Persistent Vulnerability

Document Title: =============== Flash Operator Panel 2.31.03 - CSV Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1908 Release Date: ============= 2016-10-05 Vulnerability Laboratory ID VL-ID: ===================================...

Flash Operator Panel 2.31.03 - CSV Persistent Vulnerability

Document Title: =============== Flash Operator Panel 2.31.03 - CSV Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1908 Release Date: ============= 2016-10-04 Vulnerability Laboratory ID VL-ID: ===================================...

Facebook (Law Enforcement) - Persistent Vulnerability

Document Title: =============== Facebook Law Enforcement - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1767 Release Date: ============= 2016-09-30 Vulnerability Laboratory ID VL-ID: ==================================== 1767...

Abus Security Cams 0101a Cross Site Scripting

Product: Abus Security Cams Vendor:Abus Group Internal reference: - Vulnerability type: Cross Site Scripting Vulnerable version: 0101a and possible other versions affected not tested Vulnerable component: FTP Report confidence: Confirmed Solution status: Not fixed by Vendor, will not patch the...

Fortinet FortiAnalyzer Persistent XSS Vulnerability (FG-IR-16-014)

Fortinet Fortianalyzer is prone to a persistent cross-site scripting XSS vulnerability. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Kajona 4.7 - Cross-Site Scripting / Directory Traversal

Exploit for php platform in category web applications 1. Introduction Affected Product: Kajona 4.7 Fixed in: 5.0 Fixed Version Link: https://www.kajona.de/en/Downloads/downloads.getkajona.html Vendor Website: https://www.kajona.de/ Vulnerability Type: XSS & Directory Traversal Remote Exploitable:...

Oxwall 1.8.0 Build 9900 Cross Site Scripting / Open Redirect

Security Advisory - Curesec Research Team 1. Introduction Affected Product: Oxwall 1.8.0 build 9900 Fixed in: 1.8.2 Fixed Version Link: https://developers.oxwall.com/download Vendor Website: http://www.oxwall.org/ Vulnerability Type: XSS & Open Redirect Remote Exploitable: Yes Reported to vendor:...

Kajona 4.7 Cross Site Scripting / Directory Traversal

Security Advisory - Curesec Research Team 1. Introduction Affected Product: Kajona 4.7 Fixed in: 5.0 Fixed Version Link: https://www.kajona.de/en/Downloads/ downloads.getkajona.html Vendor Website: https://www.kajona.de/ Vulnerability Type: XSS & Directory Traversal Remote Exploitable: Yes Report...

CumulusClips 2.4.1 Code Execution / CSRF / Cross Site Scripting

Exploit Title: CumulusClips Session fixation Google Dork: inurl:/cumulusclips/videos/ Date: 2.09.2016 Exploit Author: kor3k / Aukasz Korczyk Vendor Homepage: http://cumulusclips.org/ Software Link: http://cumulusclips.org/cumulusclips.zip Version: 2.4.1 Tested on: Debian Jessie Description:...

CumulusClips 2.4.1 - Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: CumulusClips Session fixation Google Dork: inurl:/cumulusclips/videos/ Date: 2.09.2016 Exploit Author: kor3k / Łukasz Korczyk Vendor Homepage: http://cumulusclips.org/ Software Link: http://cumulusclips.org/cumulusclips.zip...

CumulusClips 2.4.1 - Multiple Vulnerabilities

Exploit Title: CumulusClips Session fixation Google Dork: inurl:/cumulusclips/videos/ Date: 2.09.2016 Exploit Author: kor3k / Łukasz Korczyk Vendor Homepage: http://cumulusclips.org/ Software Link: http://cumulusclips.org/cumulusclips.zip Version: 2.4.1 Tested on: Debian Jessie Description:...

Windows/x86 - Persistent Reverse Shell TCP (494 Bytes)

/ Title : Windows x86 persistent reverse shell tcp Author : Roziul Hasan Khan Shifat Date : 04-09-2016 Tested on : Windows 7 x86 / / Note : This program must be run as adminstrator for 1st time . otherwise it won't be persistent / / section .text global start start: xor ecx,ecx mov eax,fs:ecx+0x3...

Windows x86 - Persistent Reverse Shell TCP (494 Bytes)

Windows x86 - Persistent Reverse Shell TCP 494 Bytes. Shellcode exploit for Winx86 platform / Title : Windows x86 persistent reverse shell tcp Author : Roziul Hasan Khan Shifat Date : 04-09-2016 Tested on : Windows 7 x86 / / Note : This program must be run as adminstrator for 1st time . otherwise...