15765 matches found
Joomla JGrid 4.44 SQL Injection Vulnerability
Joomla JGrid component version 4.44 suffers from a remote SQL injection vulnerability. Exploit Title: Joomla Component JGrid 4.44 - SQL Injection Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM Mojtaba Kazemi Vendor Home :...
CVE-2017-4961: BOSH Director Shell Injection Vulnerabilities | Cloud Foundry
Severity High Vendor Cloud Foundry Foundation Versions Affected BOSH Release: 261.x versions prior to 261.3 All 260.x versions Description In certain cases an authenticated Director user can provide a malicious checksum that could allow them to escalate their privileges on the Director VM...
Exponent CMS SQL Injection
SQL Injection vulnerability in Exponent CMS expCommentController.php contentid parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...
Gravitate QA Tracker <= 1.2.1 - Unauthenticated PHP Object Injection
The plugin gravitate-qa-tracker insecurely trusts serialized data submitted over HTTP requests. This opens up the site to a PHP object injection vulnerability potential exploit vector. Attack is exploitable over HTTP requests to sites with the gravitate-qa-tracker Plugin. The original researcher...
Easy File Uploader Remote Shell Upload
Exploit Title: Easy File Uploader - Arbitrary File Upload Date: 27/04/2017 Exploit Author: Daniel Godoy Vendor Homepage: https://codecanyon.net/ Software Link: https://codecanyon.net/item/easy-file-uploader-php-multiple-uploader-with-file-manager/17222287 Tested on: GNU/Linux GREETZ: Rodrigo...
Ghostscript Type Confusion Arbitrary Command Execution
This module exploits a type confusion vulnerability in Ghostscript that can be exploited to obtain arbitrary command execution. This vulnerability affects Ghostscript versions 9.21 and earlier and can be exploited through libraries such as ImageMagick and Pillow. Module Options msf use...
Exponent CMS 2.3.9 LFI
Local file include vulnerability in Exponent CMS page parameter Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...
セキュリティ更新プログラム ガイドに関するフィードバックをお待ちしています
本記事は、 MSRC Team のブログ “ Taking your feedback on the Security Update Guide” 2017 年 4 月 21 日 米国時間公開 を翻訳したものです。 2016 年...
Joomla jDBexport 3.2.10 Cross Site Scripting / Path Disclosure
Exploit Title: Joomla Component jDBexport 3.2.10 - Cross-site scripting / Full Path Disclosure Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM Mojtaba Kazemi Home : https://extensions.joomla.org/extensions/extension/core-enhancements/data-reports/jdbexport/ Home :...
Trend Micro Control Manager File Upload
File upload vulnerability in Trend Micro Control Manager importFile.php Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...
Joomla MyPortfolio 3.0.2 SQL Injection Vulnerability
Joomla MyPortfolio component version 3.0.2 suffers from a remote SQL injection vulnerability. Exploit Title: Joomla Component Myportfolio 3.0.2 - SQL Injection Exploit Author: Persian Hack Team Discovered by : Mojtaba Kazemi Mojtaba MobhaM Home :...
Joomla jDBexport 3.2.10 Cross Site Scripting / Path Disclosure Vulnerabilities
Joomla jDBexport component version 3.2.10 suffers from cross site scripting and path disclosure vulnerabilities Exploit Title: Joomla Component jDBexport 3.2.10 - Cross-site scripting / Full Path Disclosure Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM Mojtaba Kazemi Home :...
Samsung Smart TV Wi-Fi Direction Improper Authentication Vulnerability
Exploit for hardware platform in category remote exploits Samsung Smart TV Wi-Fi Direct Improper Authentication -------------------------------------------------------------------------------- 1. Advisory Information Title: Samsung Smart TV Wi-Fi Direct Improper Authentication Advisory ID:...
Joomla MyPortfolio 3.0.2 SQL Injection
Exploit Title: Joomla Component Myportfolio 3.0.2 - SQL Injection Exploit Author: Persian Hack Team Discovered by : Mojtaba Kazemi Mojtaba MobhaM Home : https://extensions.joomla.org/extensions/extension/directory-a-documentation/portfolio/myportfolio/ Home : http://persian-team.ir/ Telegram...
Trend Micro Control Manager File Disclosure
File disclosure vulnerability in Trend Micro Control Manager download.php Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...
Targeted WPA2-Enterprise Evil Twin Attacks: eaphammer
Targeted WPA2-Enterprise Evil Twin Attacks EAPHammer is a toolkit for performing targeted evil twin attacks against WPA2-Enterprise networks. It is designed to be used in full scope wireless assessments and red team engagements. As such, focus is placed on providing an easy-to-use interface that...
Joomla! Component Myportfolio 3.0.2 - pid SQL Injection
Joomla! Component Myportfolio 3.0.2 - pid SQL Injection Exploit Title: Joomla Component Myportfolio 3.0.2 - SQL Injection Exploit Author: Persian Hack Team Discovered by : Mojtaba Kazemi Mojtaba MobhaM Home :...
Joomla! Component Myportfolio 3.0.2 - 'pid' SQL Injection
Exploit Title: Joomla Component Myportfolio 3.0.2 - SQL Injection Exploit Author: Persian Hack Team Discovered by : Mojtaba Kazemi Mojtaba MobhaM Home : https://extensions.joomla.org/extensions/extension/directory-a-documentation/portfolio/myportfolio/ Home : http://persian-team.ir/ Telegram...
