1914 matches found
Wordpress WP BackupPlus - Database And Files Backup Download (0day)
Exploit for php platform in category web applications Exploit Title: Wordpress wpbackupplus Database and files Backup download 0-day Google Dork: Index of:"/wp-backup-plus" Date: 19/07/2014 Exploit Author: pSyCh03D Arfaoui Moslem https://www.facebook.com/lulz.sec Vendor Homepage:...
ShopEx Single <= 4.5.1 - Multiple Vulnerabilities
No description provided by source. Exploit Title: ShopEx = Single V4.5.1 Multiple Vulnerabilities Date: 30/01/10 Author: cp77fk4r | empty0pageSHIFT+2gmail.com| www.DigitalWhisper.co.il Software Link: http://www.shopex.cn | http://www.shopex.cn/download/ Version: = Single V4.5.1 Tested on: PHP Cro...
dl_stats Multiple Vulnerabilities
No description provided by source. :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: |:: General Information |:: Advisory/Exploit Title = dlstats Multiple Vulnerabilitie |:: Author = Valentin Hoebel |:: Contact = [email protected] |:: |::...
Openedit <= 5.1294 - Remote Code Execution Exploit
No description provided by source. !/usr/bin/python Openedit = v5.1294 Remote Code Execution Exploit http://net-ninja.net/blog/?p=553 watch http://www.zeitgeistmovie.com/ Explanation: Vuln 1: Admin hash disclosure Vuln 2: Login with the hash Vuln 3: Unprotected file upload mrme@pluto openedit$ su...
IBM OmniFind CSRF Vulnerability
No description provided by source. The forms in the administrator interface are not protected against XSRF. The attacker can do any action in the context of the victim. An example attack scenario could be: The attacker creates a malicious website with a prepared form to add a new user, which will...
WebTitan 4.01 (Build 68) - Multiple Vulnerabilities
No description provided by source. SEC Consult Vulnerability Lab Security Advisory 20140606-0 ======================================================================= title: Multiple critical vulnerabilities product: WebTitan vulnerable version: 4.01 Build 68 fixed version: 4.04 impact: critical...
deluxebb <= 1.3 - Multiple Vulnerabilities
No description provided by source. Author: cp77fk4r | Empty0pagEShift+2gmail.comhttp://gmail.com Vendor: http://www.deluxebb.com Directory Listing http://server/templates/ http://server/images/ http://server/logs/ http://server/wysiwyg/ http://server/docs/ http://server/classes http://server/lang...
nabopoll 1.2 - Remote Unprotected Admin Section Vulnerability
No description provided by source. nabopoll 1.1.2 sensitive file admin without password By : sn0oPy Risk : high site : http://nabocorp.com/ Dork : inurl:nabopoll/ exploit : acces without password to : http://target/nabopoll/admin/configedit.php http://target/nabopoll/admin/templateedit.php...
WebTitan 4.01 (Build 68) - Multiple Vulnerabilities
WebTitan 4.01 Build 68 - Multiple Vulnerabilities SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple critical vulnerabilities product: WebTitan vulnerable version: 4.01 Build 68 fixed version: 4.04 impact: critic...
WebTitan 4.01 (Build 68) - Multiple Vulnerabilities
Exploit for php platform in category web applications title: Multiple critical vulnerabilities product: WebTitan vulnerable version: 4.01 Build 68 fixed version: 4.04 impact: critical homepage: http://www.webtitan.com found: 2014-04-07 by: Robert Giruckas, Mindaugas Liudavicius SEC Consult...
WebTitan 4.01 (Build 68) - Multiple Vulnerabilities
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple critical vulnerabilities product: WebTitan vulnerable version: 4.01 Build 68 fixed version: 4.04 impact: critical homepage: http://www.webtitan.com found:...
Jenkins HP Application Automation Tools Plugin Password Encryption Security Weakness
The remote host is using the Jenkins HP Application Automation tools plugin. Nessus was able to remotely access one or more unprotected files in the Jenkins build system and decrypt the HP Application Lifecycle Management password. These passwords are currently encrypted with a known, hard-coded...
DEBIAN-CVE-2013-4496
Samba 3.x before 3.6.23, 4.0.x before 4.0.16, and 4.1.x before 4.1.6 does not enforce the password-guessing protection mechanism for all interfaces, which makes it easier for remote attackers to obtain access via brute-force ChangePasswordUser2 1 SAMR or 2 RAP attempts...
Kentico CMS 7.0.75 - User Information Disclosure
Exploit for asp platform in category web applications This vulnerability is an unprotected page on the site where you can view all current users and usernames. To find out if a Kentico CMS is vulnerable go to http://site.com/CMSModules/Messaging/CMSPages/PublicMessageUserSelector.aspx assuming th...
Kentico CMS 7.0.75 - User Information Disclosure
Exploit Title: Kentico CMS User Enumeration Bug Google Dork: inurl:/CMSPages/logon.aspx -- enumerates several Kentico CMS sites Date: 02-25-2014 Exploit Author: Charlie Campbell and Lyndon Mendoza Vendor Homepage: http://www.kentico.com/ Software Link:...
Design/Logic Flaw
The web interface in Cisco MediaSense does not properly protect the client-server communication channel, which allows remote attackers to obtain sensitive query string or cookie information via unspecified vectors, aka Bug ID CSCuj23344...
CSRF in gadgets plugin
The affected methods are: AddOrRemoveGadgetSpecAction, doAdd AddOrRemoveGadgetSpecAction, doRemove AddOrRemoveGadgetFeedAction, doAddGadgetFeed AddOrRemoveGadgetFeedAction, doRemoveGadgetFeed WhitelistAdminAction, doAddWhitelistUrl WhitelistAdminAction, doRemoveWhitelistUrl RevokeOAuthTokensActio...
ARRIS 2307 Unprotected Console (HTTP)
The remote ARRIS 2307 Web Console is not protected by a password. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...