258 matches found
covid19expeditionspdt.urlweb.pro Cross Site Scripting vulnerability OBB-1460337
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Web Application and API Protection: From SQL Injection to Magecart
SQL injections were first discovered in 1998, and over 20 years later, they remain an unsolved challenge and an ongoing threat for every web application and API. The Open Web Application Security Project OWASP highlighted injection flaws in its Top 10 lists for both web application security risks...
Comparing Wallarm WAF Module to a Generic WAF
Comparing Wallarm Cloud Based WAF to a Legacy WAF What do you do if you need to protect your website from XSS attacks? You patch it and get a WAF. This is common knowledge and there are plenty of places where you could go to get basic protection for your websites. From a free solution to solution...
WhatsApp 2.17.52 - Memory Corruption Exploit
Exploit for iOS platform in category dos / poc !/usr/bin/env python -- coding: utf-8 -- Found this and more exploits on my open source security project: http://www.exploitpack.com Exploit Author: Juan Sacco at KPN Red Team - http://www.kpn.com Date and time of release: 11 October 2017 Tested on:...
CVE-2017-15209
In Kanboard before 1.0.47, by altering form data, an authenticated user can remove attachments from a private project of another user...
The React application in the most common XSS exploits and Defense-vulnerability warning-the black bar safety net
The author has been firmly React technology stack of the user, and therefore will pay attention to the React application security related topics. The author in my ownReact+Redux+Webpack2scaffolding the third level also uses a lot of server-side rendering/isomorphism straight out of the technology...
WordPress: WordPress core - Denial of Service via Cross Site Request Forgery
Hello, I've discovered a Denial of Service vulnerability in WordPress. My advisory can be found in the attachment in text format. If there are any questions please let me know, I'm happy to help. The vulnerability was discovered during a month long security project to find vulnerabilities in...
Automattic: Persistent Cross-Site Scripting in WooCommerce WordPress plugin
Hello, I've discovered a persistent Cross-Site Scripting vulnerability in the WooCommerce. Yesterday I created a support ticket on the website, but today someone told me about the bug bounty program, so here we go. The vulnerability was discovered during a month long security project to find...
Date & Sex Vor und Rückwärts Auktions System <= 2 - Blind SQL Injection Exploit
No description provided by source. ---------------------------Information------------------------------------------------ +Name : Date & Sex Vor und Rückwärts Auktions System = v2 Blind SQL Injection Exploit +Autor : Easy Laster +Date : 27.03.2010 +Script : Date & Sex Vor und Rückwärts Auktions...
smartplugs 1.3 - SQL Injection showplugs.php
No description provided by source. ----------------------------Information------------------------------------------------ +Name : smartplugs 1.3 SQL Injection showplugs.php +Autor : Easy Laster +Date : 03.03.2010 +Script : smartplugs 1.3 http://www.smart-plugs.com/spv1/ +Download : -------------...
dev4u CMS (Personenseiten) go_target.php SQL Injection
No description provided by source. ----------------------------Information------------------------------------------------ +Name : dev4u CMS Personenseiten gotarget.php SQL Injection +Autor : Easy Laster +Date : 06.03.2010 +Script : dev4u CMS Personenseiten +Download Site :...
DynPG CMS 4.1.0 - Multiple Vulnerabilities
No description provided by source. DynPG CMS v4.1.0 Multiple Vulnerability fucking the Web Apps attack edition /\ \ /\ \ /\ /\ \ \ \ \L\ \ \ /'\ /\ \ \ ,\ \ \ \ \ /\ /\ \ /'\ \ , /\ \ /' \ /' \ \ \ /\ \ \ /'\ \ \ /\ \ \ /\ /\ \ \\ \ /\ /\ /\ \L\ \ \ \ \ \ \ \ /\ / \ \ \ /\ \...
Softbiz Jobs and Recruitment Script (search_result.php) SQL Injection Vulnerability
No description provided by source. ----------------------------Information------------------------------------------------ +Name : Softbiz Jobs & Recruitment Script SQL INJECTION searchresult.php +Autor : Easy Laster +Date : 10.03.2010 +Script : Softbiz Jobs & Recruitment Script +Price : 129$...
dreamlive auktionshaus script news.php - (id) SQL Injection Vulnerability
No description provided by source. ----------------------------Information------------------------------------------------ +Name : dreamlive Auktionshaus script news.php id SQL Injection +Autor : Easy Laster +Date : 12.03.2010 +Script : dreamlive Auktionshaus script +Language :PHP +Discovered by...
Joomla JE Job Component SQL injection Vulnerability
No description provided by source. ----------------------------Information------------------------------------------------ +Name : joomla JE Job Component = SQL injection Vulnerability Exploit +Autor : Easy Laster +Date : 30.09.2010 +Script : joomla JE Job Component +Demo :...
2daybiz Freelance Script SQL Injection Vulnerability Exploit
No description provided by source. ----------------------------Information------------------------------------------------ +Autor : Easy Laster +ICQ : 11-051-551 +Info : http://www.2daybiz.com/freelancescript.html +Discovered by Easy Laster 4004-security-project.com +Security Group...
phppool media Domain Verkaufs und Auktions Portal index.php SQL Injection
No description provided by source. ----------------------------Information------------------------------------------------ +Name : phppool media Domain Verkaufs und Auktions Portal index.php SQL Injection +Autor : Easy Laster +Date : 14.03.2010 +Script : phppool Domain Verkaufs und Auktions Porta...
ilchClan <= 1.0.5 (cid) SQL Injection Vulnerability & Exploit
No description provided by source. ----------------------------Information------------------------------------------------ +Name : ilchClan = 1.0.5 SQL Injection Vulnerability & Exploit +Autor : Easy Laster +Date : 05.04.2010 +Script : ilchClan = 1.0.5 +Price : for free +Language : PHP +Discovere...
Preisschlacht Multi Liveshop System SQL Injection (seite&aid) index.php
No description provided by source. ----------------------------Information------------------------------------------------ +Name : Preisschlacht Multi Liveshop System SQL Injection seite&aid index.php +Autor : Easy Laster +Date : 17.03.2010 +Script : Preisschlacht Multi Liveshop System +Download ...
mygamingladder MGL Combo System <= 7.5 - SQL Injection
No description provided by source. ----------------------------Information------------------------------------------------ +Name : mygamingladder MGL Combo System = 7.5 SQL injection Vulnerability & SQL injection Exploit +Autor : Easy Laster +Date : 10.04.2010 +Script : mygamingladder MGL Combo...