Flexible Poll 1.2 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Flexible Poll 1.2 - SQL Injection Dork: N/A Date: 23.01.2018 Vendor Homepage: http://ddywpro.com/ Software Link: https://codecanyon.net/item/flexible-poll/4363114 Version: 1.2 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CV...

Professional Local Directory Script 1.0 - SQL Injection

Professional Local Directory Script 1.0 - SQL Injection Exploit Title: Professional Local Directory Script 1.0 - SQL Injection Dork: N/A Date: 23.01.2018 Vendor Homepage: http://www.eihitech.com/ Software Link: http://www.eihitech.com/ Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx6...

Wchat 1.5 SQL Injection

Exploit Title: Wchat - Fully Responsive PHP AJAX Chat Script 1.5 - SQL Injection Dork: N/A Date: 23.01.2018 Vendor Homepage: http://bylancer.com/ Software Link: https://codecanyon.net/item/wchat-fully-responsive-phpajax-chat/18047319 Version: 1.5 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64...

Photography CMS 1.0 - Cross-Site Request Forgery (Add Admin) Vulnerability

Exploit for php platform in category web applications New Admin Username: Password: Confirm Password: Email: $"ekleabi".live'click',function $.ajax type: "POST", url: "http://ronnieswietek.com/cc/clients/resources/ajax/ajaxnewadmin.php", data: username:$".efe username".val,...

RSVP Invitation Online 1.0 - Cross-Site Request Forgery (Update Admin)

RSVP Invitation Online 1.0 - Cross-Site Request Forgery Update Admin...

Zechat 1.5 - SQL Injection

Zechat 1.5 - SQL Injection Exploit Title: Facebook Style Php Ajax Chat - Zechat 1.5 - SQL Injection Dork: N/A Date: 23.01.2018 Vendor Homepage: http://bylancer.com/ Software Link: https://codecanyon.net/item/facebook-style-php-ajax-chat-zechat/16491266 Version: 1.5 Category: Webapps Tested on:...

PHPFreeChat 1.7 - Denial of Service

PHPFreeChat 1.7 - Denial of Service Exploit Title: phpFreeChat 1.7 and earlier - Denial of Service Version: 1.7 and earlier Date: 21/01/2018 Vendor Homepage: http://www.phpfreechat.net Software Link: http://www.phpfreechat.net/download Exploit Author: A. Pakbaz CVE : CVE-2018-5954 1 $pid=pcntlfor...

Mozilla Joins U.S. Attorneys General In Bid to Restore Net Neutrality

Mozilla has joined a coalition of U.S. state attorneys general in battling the Federal Communications Commission’s controversial recent ruling that overturned net neutrality laws. “The internet is a global, public resource,” Mozilla wrote in a blog post. “It relies on the core principle of net...

WordPress read-and-understood plugin cross-site scripting vulnerability (CNVD-2018-01260)

WordPress is the WordPress Software Foundation of a set of PHP language development of the blogging platform, the platform supports PHP and MySQL server set up a personal blog site. read-and-understood plugin is the use of one of the use of the document reading plugin . A cross-site scripting...

WordPress responsive-coming-soon-page plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports PHP and MySQL servers to set up a personal blog site . responsive-coming-soon-page plugin is used in one of the test system maintenance plugin . A cross-site scriptin...

Skybox Platform Cross-Site Scripting Vulnerability

Skybox PlatformAn enterprise-grade network security management platform from US-based Skybox Security. The platform features attack vector analysis, firewall management, vulnerability and threat management, and more. A cross-site scripting vulnerability exists in the title, Comments, or Descripti...

CVE-2018-5662

An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php countertitle parameter...

CVE-2018-5668

An issue was discovered in the read-and-understood plugin 2.1 for WordPress. XSS exists via the wp-admin/options-general.php rnuusernamevalidationtitle parameter...

CVE-2018-5657

An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php countertitleicon parameter...

PT-2018-17067

Name of the Vulnerable Software and Affected Versions: read-and-understood plugin version 2.1 Description: A security issue was found in the read-and-understood plugin for WordPress. This issue allows for cross-site scripting XSS attacks through the rnu username validation title parameter in the...

PT-2018-17056

Name of the Vulnerable Software and Affected Versions responsive-coming-soon-page plugin version 1.1.18 Description A security issue was found in the responsive-coming-soon-page plugin for WordPress. This issue allows for cross-site scripting XSS attacks through the counter title icon parameter i...

CVE-2015-9248: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Skybox Platform before 7.5.201. Stored cross-site scripting vulnerabilities exist in the title, Comments, or Description field to /skyboxview/webskybox/tickets in Change Manager...

Handy Password Buffer Overflow Vulnerability

Handy Password is a set of password management software based on the Winsows platform. A buffer overflow vulnerability exists in Handy Password version 4.9.3. The vulnerability can be exploited by a remote attacker to execute arbitrary code via the long 'Title name' field in the 'mail box' data...

PT-2018-17061

Name of the Vulnerable Software and Affected Versions responsive-coming-soon-page plugin version 1.1.18 Description A security issue was found in the responsive-coming-soon-page plugin for WordPress. This issue allows for cross-site scripting XSS attacks through the counter title parameter in the...

PT-2018-17059

Name of the Vulnerable Software and Affected Versions responsive-coming-soon-page plugin version 1.1.18 Description A security issue exists in the plugin, where cross-site scripting XSS is possible. This occurs via the coming-soon sub title parameter in the "wp-admin/admin.php" endpoint...