CVE-2017-15209

In Kanboard before 1.0.47, by altering form data, an authenticated user can remove attachments from a private project of another user...

The React application in the most common XSS exploits and Defense-vulnerability warning-the black bar safety net

The author has been firmly React technology stack of the user, and therefore will pay attention to the React application security related topics. The author in my ownReact+Redux+Webpack2scaffolding the third level also uses a lot of server-side rendering/isomorphism straight out of the technology...

WordPress: WordPress core - Denial of Service via Cross Site Request Forgery

Hello, I've discovered a Denial of Service vulnerability in WordPress. My advisory can be found in the attachment in text format. If there are any questions please let me know, I'm happy to help. The vulnerability was discovered during a month long security project to find vulnerabilities in...

Automattic: Persistent Cross-Site Scripting in WooCommerce WordPress plugin

Hello, I've discovered a persistent Cross-Site Scripting vulnerability in the WooCommerce. Yesterday I created a support ticket on the website, but today someone told me about the bug bounty program, so here we go. The vulnerability was discovered during a month long security project to find...

Date & Sex Vor und Rückwärts Auktions System <= 2 - Blind SQL Injection Exploit

No description provided by source. ---------------------------Information------------------------------------------------ +Name : Date & Sex Vor und Rückwärts Auktions System = v2 Blind SQL Injection Exploit +Autor : Easy Laster +Date : 27.03.2010 +Script : Date & Sex Vor und Rückwärts Auktions...

dev4u CMS (Personenseiten) go_target.php SQL Injection

No description provided by source. ----------------------------Information------------------------------------------------ +Name : dev4u CMS Personenseiten gotarget.php SQL Injection +Autor : Easy Laster +Date : 06.03.2010 +Script : dev4u CMS Personenseiten +Download Site :...

SIESTTA 2.0 (LFI/XSS) Multiple Vulnerabilities

No description provided by source. SIESTTA 2.0 LFI/XSS Multiple Vulnerabilities download: http://ramoncastro.es/siesttaold/ Author: Jose Luis Gongora Fernandez 'aka' JosS mail: sys-projectathotmaildotcom site: http://www.hack0wn.com/ team: Spanish Hackers Team - SHT Hack0wn Security Project!! Thi...

Softbiz Classifieds PLUS Multiple SQL Injection Vulnerabilities

No description provided by source. ----------------------------Information------------------------------------------------ +Name : Softbiz Classifieds PLUS SQL Injection gallery.php +Autor : Easy Laster +Date : 25.02.2010 +Script : Softbiz Classifieds PLUS +Price : 99$ +Language : PHP +Discovered...

joelz bulletin board <= 0.9.9rc3 multiple SQL Injection & Exploit

No description provided by source. ----------------------------Information------------------------------------------------ +Name : joelz bulletin board = 0.9.9rc3 multiple SQL Injection & Exploit +Autor : Easy Laster +ICQ : 11-051-551 +Email : [email protected] +Date : 13.04.2010 +Script : joelz...

1024 CMS <= 1.4.4 - Remote Command Execution with RFI (c99) Exploit

No description provided by source. !/usr/bin/perl 1024 CMS = 1.4.4 Remote Command Execution with RFI c99 Exploit download: http://www.trebledesigns.com/1024cms.zip Author: JosS mail: sys-projectathotmaildotcom site: http://www.hack0wn.com/ team: Spanish Hackers Team - SHT Hack0wn Security Project...

ilchClan <= 1.0.5B SQL Injection Vulnerability Exploit

No description provided by source. ----------------------------Information------------------------------------------------ +Name :ilchClan = 1.0.5B SQL Injection Vulnerability Exploit +Autor : Easy Laster +ICQ : 11-051-551 +email : [email protected] +Date : 15.04.2010 +Script : ilchClan = 1.0.5B...

ilchClan <= 1.0.5 (cid) SQL Injection Vulnerability & Exploit

No description provided by source. ----------------------------Information------------------------------------------------ +Name : ilchClan = 1.0.5 SQL Injection Vulnerability & Exploit +Autor : Easy Laster +Date : 05.04.2010 +Script : ilchClan = 1.0.5 +Price : for free +Language : PHP +Discovere...

Joomla JE Job Component SQL injection Vulnerability

No description provided by source. ----------------------------Information------------------------------------------------ +Name : joomla JE Job Component = SQL injection Vulnerability Exploit +Autor : Easy Laster +Date : 30.09.2010 +Script : joomla JE Job Component +Demo :...

Uiga Church Portal index.php SQL Injection

No description provided by source. ----------------------------Information------------------------------------------------ +Name : Uiga Church Portal index.php SQL Injection +Autor : Easy Laster +Date : 03.03.2010 +Script : Uiga Church Portal +Download : http://www.uiga.com/downloads/ucppro.zip...

DynPG CMS 4.1.0 - Multiple Vulnerabilities

No description provided by source. DynPG CMS v4.1.0 Multiple Vulnerability fucking the Web Apps attack edition /\ \ /\ \ /\ /\ \ \ \ \L\ \ \ /'\ /\ \ \ ,\ \ \ \ \ /\ /\ \ /'\ \ , /\ \ /' \ /' \ \ \ /\ \ \ /'\ \ \ /\ \ \ /\ /\ \ \\ \ /\ /\ /\ \L\ \ \ \ \ \ \ \ /\ / \ \ \ /\ \...

mygamingladder MGL Combo System <= 7.5 - SQL Injection

No description provided by source. ----------------------------Information------------------------------------------------ +Name : mygamingladder MGL Combo System = 7.5 SQL injection Vulnerability & SQL injection Exploit +Autor : Easy Laster +Date : 10.04.2010 +Script : mygamingladder MGL Combo...

mygamingladder MGL Combo System <= 7.5 game.php SQL injection Exploit

No description provided by source. ----------------------------Information------------------------------------------------ +Name : mygamingladder MGL Combo System = 7.5 game.php SQL injection Exploit +Autor : Easy Laster +Date : 10.10.2010 +Script : mygamingladder MGL Combo System = 7.5 +Price :...

Softbiz Jobs Multiple SQL Injection Vulnerabilities

No description provided by source. ----------------------------Information------------------------------------------------ +Name : Softbiz Jobs moredetails.php SQL injection +Autor : Easy Laster +Date : 23.02.2010 +Script : Softbiz Jobs +Download : ----- +Demo :http://pricebusterdeals.com/ +Price...

Preisschlacht Multi Liveshop System SQL Injection (seite&aid) index.php

No description provided by source. ----------------------------Information------------------------------------------------ +Name : Preisschlacht Multi Liveshop System SQL Injection seite&aid index.php +Autor : Easy Laster +Date : 17.03.2010 +Script : Preisschlacht Multi Liveshop System +Download ...

PHPKit <= 1.6.1 R2 overview.php SQL injection Vulnerability Exploit

No description provided by source. ----------------------------Information------------------------------------------------ +Name : PHPKit = 1.6.1 R2 overview.php SQL injection Vulnerability Exploit +Autor : Easy Laster +Date : 22.10.2010 +Script : PHPKit 1.6.1 R2 +Price : free +Language : PHP...