Joomla onisQuotes 2.5 Component - SQL Injection

Exploit for php platform in category web applications Exploit Title: Joomla Component onisQuotes 2.5 - SQL Injection Date: 2017-02-11 Home : https://extensions.joomla.org/extensions/extension/news-display/quotes/onisquotes/ Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM...

Joomla Soccer Bet 4.1.5 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla Component Soccer Bet 4.1.5 - SQL Injection Date: 2017-02-11 Home : https://extensions.joomla.org/extensions/extension/sports-a-games/tips-a-betts/soccer-bet/ Exploit Author: Persian Hack Team Discovered by : Mojtaba Mobha...

Joomla onisPetitions 2.5 SQL Injection

Exploit Title: Joomla Component onisPetitions 2.5 - SQL Injection Date: 2017-02-11 Home : https://extensions.joomla.org/extensions/extension/contacts-and-feedback/polls/onispetitions/ Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM [email protected] Home :...

Joomla onisQuotes 2.5 SQL Injection

Exploit Title: Joomla Component onisQuotes 2.5 - SQL Injection Date: 2017-02-11 Home : https://extensions.joomla.org/extensions/extension/news-display/quotes/onisquotes/ Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM [email protected] Home : http://persian-team.ir/ Telegram...

Coursera: XSS Stored

Hi Coursera, This is AhsanKhan, An Ethical Hacker. I Have Found Stored XSS In Your Site : https://translate-coursera.org/ Now I Am Going To Show You. 1.Create An Account In Your Site. https://www.coursera.org 2.And Put This Script in First Name. " 3.Save it : 4.Account Created now Go to this Web...

Joomla! Component onisPetitions 2.5 - 'tag' SQL Injection

Exploit Title: Joomla Component onisPetitions 2.5 - SQL Injection Date: 2017-02-11 Home : https://extensions.joomla.org/extensions/extension/contacts-and-feedback/polls/onispetitions/ Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM [email protected] Home :...

Joomla! Component Vik Booking 1.7 - SQL Injection

Exploit Title: Joomla Component Vik Booking 1.7 - SQL Injection Date: 2017-02-11 Home : https://extensions.joomla.org/extension/vik-booking/ Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM [email protected] Home : http://persian-team.ir/ Telegram Channel AND Demo:...

Joomla! Component onisQuotes 2.5 - 'tag' SQL Injection

Exploit Title: Joomla Component onisQuotes 2.5 - SQL Injection Date: 2017-02-11 Home : https://extensions.joomla.org/extensions/extension/news-display/quotes/onisquotes/ Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM [email protected] Home : http://persian-team.ir/ Telegram...

WordPress: Infrastructure - Photon - SSRF

Description ------------------------ The service Photon located at http://i0.wp.com/ and described at https://code.trac.wordpress.org/browser/photon/ is vulnerable to Http SSRF via. redirect. The redirect can go to any IP including inside of any firewall photon might be inside any port and can ad...

WordPress REST API content injection vulnerability analysis-vulnerability warning-the black bar safety net

Author: Lucifaer 0x00 vulnerability description 1. Vulnerability description In the REST API automatically included in Wordpress4. 7 or more version, the WordPress REST API provides a set of easy-to-use HTTP endpoint, you can use the user in a simple JSON format to access the site's data,...

Informatica: Stored XSS via Discussion Title and Send as Email attribute in [marketplace.informatica.com]

POC === 1. Under "Your Stuff" choose to "Create a Discussion/Ask a question" 2. Choose a space to submit your discussion/question. Any space will do. 3. Title your discussion with the payload " 4. Choose "Post message" to publish. 5. View the message as any user. Under "Actions" choose to "Send a...

Teleopti WFM 7.1.0 Information Disclosure / Access Controls

Advisory Title: Teleopti WFM Multiple Vulnerabilities Date: 2/4/2017 Researcher: Graph-X email: [email protected] Vendor Homepage: http://www.teleopti.com Version: = 7.1.0 CVE: is dead Disclosure Timeline 8/30/2016 Initial contact made to alert Teleopti of the flaws 9/2/2016 Vulnerabilities...

Jenkins-LDAP (CVE-2016-9299) deserialization vulnerability analysis-vulnerability warning-the black bar safety net

Source: gone with the wind's Blog Author: iswin This vulnerability in the last 11 month of official release announcement when I was concerned too, when he was looking for com. sun. jndi. ldap. LdapAttribute this class related to the deserialization was aware of this category inside the...

ntfs-3g (Debian 9) - Local Privilege Escalation

!/bin/bash echo "@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@" echo "@ CVE-2017-0359, PoC by Kristian Erik Hermansen @" echo "@ ntfs-3g local privilege escalation to root @" echo "@ Credits to Google Project Zero @" echo "@ Affects: Debian 9/8/7, Ubuntu, Gentoo, others @" echo "@ Tested:...

ntfs-3g (Debian 9) - Local Privilege Escalation

ntfs-3g Debian 9 - Local Privilege Escalation !/bin/bash echo "@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@" echo "@ CVE-2017-0359, PoC by Kristian Erik Hermansen @" echo "@ ntfs-3g local privilege escalation to root @" echo "@ Credits to Google Project Zero @" echo "@ Affects: Debian 9/8/...

Internet Bug Bounty: Incorrect GC behavior in xxlimited could lead to use-after-free

Issue submitted: http://bugs.python.org/issue29398 xxlimited module exist only in Python3.6 compiled on Linux. Starting program: /usr/bin/python3.6 xlimited.py Thread debugging using libthreaddb enabled Using host libthreaddb library "/usr/lib/libthreaddb.so.1". Program received signal SIGSEGV,...

HackerOne: Subdomain takeover at info.hacker.one

Summary: Hi team,i've been able to takeover subdomain at info.hacker.one, the CNAME entry in the subdomain is pointing to an external page service app.unbounce.com. Actual Dns Entry: F156764 Steps To Reproduce 1 I have claimed the domain and placed a page for PoC validation located under: Go to -...

WordPress Core 4.7.0/4.7.1 - Content Injection

2017 - @leonjza Wordpress 4.7.0/4.7.1 Unauthenticated Content Injection PoC Full bug description: https://blog.sucuri.net/2017/02/content-injection-vulnerability-wordpress-rest-api.html Usage example: List available posts: $ python inject.py http://localhost:8070/ Discovering API Endpoint API liv...

Ghostscript 9.20 - 'Filename' Command Execution

Credits: John Page AKA hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/GHOSTSCRIPT-FILENAME-COMMAND-EXECUTION.txt + ISR: ApparitionSec + Vendor: =============== ghostscript.com Product: ================ Ghostscript 9.20 gs920w32.exe Windows 32...

Microsoft Windows SMB Tree Connect Response denial of service vulnerability

Overview Microsoft Windows contains a memory corruption bug in the handling of SMB traffic, which may allow a remote, unauthenticated attacker to cause a denial of service on a vulnerable system. Description Microsoft Windows fails to properly handle traffic from a malicious server. In particular...